Speedial-Virus/Computer bestmöglich sichern

Jester · 18.05.2014, 17:03

Liebe Community,

dies ist mein erster Beitrag hier im Forum. Vor ein paar Tagen habe ich mir aus Versehen die Speedial-Toolbar mitinstalliert. Diese war dann leider nicht mehr ohne weiteres zu entfernen.
Ich habe selbst nach einer Lösung gesucht und bin dabei auf eure Ratschläge gestoßen:

http://www.trojaner-board.de/148600-...entfernen.html

Ich habe dann aber auf einer anderen Seite deren Ratschläge befolgt und ausgeführt:

Anleitung: Lightning Speeddial Browser-Virus Entfernen - TechFrage

So weit so gut: Speedial wurde entfernt und alles ist wieder beim alten. Nur habe ich mittlerweile ein bisschen Panik bekommen, wie es um die Sicherheit meines Pc's steht. Vorallem weil ESET online scan unter anderem mehr Probleme gefunden hat, als nur Speedial.

Da ich selbst kein Profi in Sachen Computerwissen bin und mich hiermit überfordert bin, bitte ich euch um Hilfe mich zu unterstützen. Ich würde gerne wissen, ob mein Pc wirklich Virenfrei ist und wenn nicht, welche Programme etc. ich brauche, um ihn wieder sicher zu machen. Ich selbst bin gerne bereit mir einen guten Virenschutz zu kaufen, wenn er denn hilft. Derzeit benutze ich nur den Avast free antivirus.

Ich kenne mich mit den logs nicht sonderlich gut aus, aber hoffe es klappt mit dem Posten.

Hier die Logfile von eset online scan:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=64caf69c114e864ab2990296b3eb1818
# engine=18291
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2014-05-16 04:34:51
# local_time=2014-05-16 06:34:51 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 77 71120 14694797 0 0
# compatibility_mode=5893 16776574 100 94 25756841 151887941 0 0
# scanned=249937
# found=18
# cleaned=16
# scan_time=1245
sh=2C6BDB07BBA01186B59DBF1BA107BD27C2D9E00D ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{AD63AF0A-B786-4A96-A87D-FFA476808DFC}\Custom.dll"
sh=99A57D649019AF1F37573BEDD9C5C7BA77684122 ft=0 fh=0000000000000000 vn="JS/Agent.NJV Trojaner" ac=I fn="C:\Users\All Users\TmForever\Cache\A99B7581A8E3A419AE8BFB5F2DAEAAFB_Skins%5cStadium%5cMod%5cPlayTimeFAB.zip"
sh=8992F72873D09212597E582A16F8D9BC60E6A22A ft=1 fh=e21391a34e842ffc vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\DVDVideoSoft\TB\ConduitInstaller.exe.vir"
sh=3AEF532A0211CE7869F0EB51E940D9E0C7CAE321 ft=1 fh=c7560653d3ee2314 vn="Variante von Win32/Adware.Yontoo.B Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll.vir"
sh=16068B8977B4DC562AE782D91BC009472667E331 ft=1 fh=c3b5a87b7d152749 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Daniel\AppData\Local\Temp\OCS\ocs_v71a.exe.vir"
sh=1ED0FFE9C5F698435676AE6AA7DEE53DF76179A1 ft=1 fh=6800aff9bed7d6d7 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Daniel\AppData\Local\Temp\OCS\ocs_v71b.exe.vir"
sh=2C6BDB07BBA01186B59DBF1BA107BD27C2D9E00D ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\ProgramData\InstallMate\{AD63AF0A-B786-4A96-A87D-FFA476808DFC}\Custom.dll"
sh=99A57D649019AF1F37573BEDD9C5C7BA77684122 ft=0 fh=0000000000000000 vn="JS/Agent.NJV Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\ProgramData\TmForever\Cache\A99B7581A8E3A419AE8BFB5F2DAEAAFB_Skins%5cStadium%5cMod%5cPlayTimeFAB.zip"
sh=83BB986E40DDC0574137E703AE46360EFD58AEC8 ft=1 fh=4eacabcddf74ac25 vn="Variante von Win32/LoadMoney.JU evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Daniel\AppData\Local\PMB Files\Upgrade41270\PMB_update.exe"
sh=180C8ED7C81E3AE7B0507B26C927EA93584B017C ft=1 fh=b0b83453fcc7b480 vn="Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Daniel\Downloads\ccsetup327.exe"
sh=60C77FF66F63F585FCE95C78FF44B513E2AAB9F9 ft=1 fh=17494879e4339ab3 vn="Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Daniel\Downloads\ccsetup400.exe"
sh=640F4DDCAF5F5CF6FE4374C3A1880FBF8619D383 ft=1 fh=1633d003f32e96b5 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Daniel\Downloads\Firefox - CHIP-Downloader (1).exe"
sh=F8CE3C847A8AD1FE07CFB24268342BEDF4CA8345 ft=1 fh=053b0f170dc213e5 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Daniel\Downloads\Firefox - CHIP-Downloader.exe"
sh=2634013E5A944FB4F0C4944D5445F11029F5EB9D ft=1 fh=bde2ae12525aa14d vn="Win32/Adware.1ClickDownload.AA Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Daniel\Downloads\Sex,_Stars_.exe"
sh=EE37812AE26FC56ED0FF4B9D3460D26C8910C450 ft=1 fh=208c1d4f281da584 vn="Win32/OpenCandy potenziell unsichere Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Daniel\Downloads\soldat15 (1).exe"
sh=E8CD33623287C08C7CC3662A042E45522654BB30 ft=1 fh=7cd3b160b0dbd4bd vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="E:\FreeYouTubeToMP3Converter37.exe"
sh=5D0ECDA2B585D3143C743890780892A2D856183E ft=1 fh=4f149f7b487a8809 vn="Win32/Adware.1ClickDownload.AM Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="E:\seikon_no_qwaser.exe"
sh=81002D9535692AF2CB3B2E419F3E2305A7B3DA66 ft=1 fh=c71c0011fb4f0a5e vn="Win32/OpenCandy potenziell unsichere Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="E:\Benutzer\Daniel\Games\Soldat\OpenCandy\OCSetupHlp.dll"

Hier noch der Scan von Malbytes anti malware:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 16.05.2014
Scan Time: 07:41:10
Logfile: log.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.05.16.05
Rootkit Database: v2014.03.27.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Daniel

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 299066
Time Elapsed: 5 min, 18 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 2
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\updatewebget.exe, 2496, Delete-on-Reboot, [e0351939067545f1285210671fe2d22e]
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\bin\utilwebget.exe, 2616, Delete-on-Reboot, [4cc991c1017a1e18aad08aed7b8628d8]

Modules: 0
(No malicious items detected)

Registry Keys: 20
PUP.Optional.Webget.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update webget, Quarantined, [e0351939067545f1285210671fe2d22e],
PUP.Optional.Webget.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util webget, Quarantined, [4cc991c1017a1e18aad08aed7b8628d8],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, Quarantined, [bd5883cf1f5cb77fc88cb4a9867cb848],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, Quarantined, [bd5883cf1f5cb77fc88cb4a9867cb848],
PUP.Optional.Webget.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{dc264a72-fa75-4948-b881-ea8eff8e5dd2}, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{0a4aa078-e14f-4459-901a-d5f6acb22dd6}, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{F88A773B-C7D6-4097-AD99-144D59C291E1}, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F88A773B-C7D6-4097-AD99-144D59C291E1}, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{0a4aa078-e14f-4459-901a-d5f6acb22dd6}, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{DC264A72-FA75-4948-B881-EA8EFF8E5DD2}, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, HKLM\SOFTWARE\WOW6432NODE\webget, Quarantined, [9580b1a1accfd660a778fa8bc042b24e],
PUP.Optional.Speedial.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLCORE\Speedial, Quarantined, [b65fcf836f0cfc3a81dfbac94ab8649c],
PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-2026012139-1669881485-4226200435-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, Quarantined, [9f76afa3c5b6a49217405c56c340c13f],
PUP.Optional.Speedial.A, HKU\S-1-5-21-2026012139-1669881485-4226200435-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\speedial, Quarantined, [6da8cc86750656e084e04b38d1318b75],
PUP.Optional.Webget.A, HKU\S-1-5-21-2026012139-1669881485-4226200435-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\webget, Quarantined, [9c79d87a4536d4623de1a0e5e919e41c],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2026012139-1669881485-4226200435-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, Quarantined, [41d49ab85d1eeb4bbc2eb0ea8f7305fb],
PUP.Optional.Speedial.A, HKU\S-1-5-21-2026012139-1669881485-4226200435-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\Speedial, Quarantined, [f421054dc2b97eb8f071b2d1dc26ee12],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2026012139-1669881485-4226200435-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, Quarantined, [db3a88ca611a7eb830ce0aa620e38d73],
PUP.Optional.Softonic.A, HKU\S-1-5-21-2026012139-1669881485-4226200435-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, Quarantined, [ef2685cde9924fe73047ddac808204fc],
PUP.Optional.Speedial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Speedial, Quarantined, [e3328dc5d0ab979faf9dea94d52d6f91],

Registry Values: 1
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2026012139-1669881485-4226200435-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 1V2X1Q1R1M1F, Quarantined, [db3a88ca611a7eb830ce0aa620e38d73]

Registry Data: 3
PUP.Optional.Speedial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://speedial.com/?f=1&a=spd_ir_14_20_ff&cd=2XzuyEtN2Y1L1QzuzytDtB0BtAyEtA0D0DzztDtDzztD0EtDtN0D0Tzu0SzzyCyCtN1L2XzutBtFtBtDtFtCtAtFtCtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V 1N2Y1L1Qzu2SyE0D0F0CtB0F0DtCtGtA0AyE0AtGzy0D0E0EtG0BzyyC0DtGyDzyyE0Bzz0B0F0FtByDyDtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyCyEyE0E0EtDtBtG0EyEyDtAtGtCtBtA0DtG0B tDtByDtGyE0Dzy0C0BtC0AtD0CzyyD0C2Q&cr=434814153&ir=, Good: (www.google.com), Bad: (hxxp://speedial.com/?f=1&a=spd_ir_14_20_ff&cd=2XzuyEtN2Y1L1QzuzytDtB0BtAyEtA0D0DzztDtDzztD0EtDtN0D0Tzu0SzzyCyCtN1L2XzutBtFtBtDtFtCtAtFtCtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V 1N2Y1L1Qzu2SyE0D0F0CtB0F0DtCtGtA0AyE0AtGzy0D0E0EtG0BzyyC0DtGyDzyyE0Bzz0B0F0FtByDyDtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyCyEyE0E0EtDtBtG0EyEyDtAtGtCtBtA0DtG0B tDtByDtGyE0Dzy0C0BtC0AtD0CzyyD0C2Q&cr=434814153&ir=),Replaced,[d1443f130774092d663bef507094ba46]
PUP.Optional.Speedial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://speedial.com/?f=1&a=spd_ir_14_20_ff&cd=2XzuyEtN2Y1L1QzuzytDtB0BtAyEtA0D0DzztDtDzztD0EtDtN0D0Tzu0SzzyCyCtN1L2XzutBtFtBtDtFtCtAtFtCtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V 1N2Y1L1Qzu2SyE0D0F0CtB0F0DtCtGtA0AyE0AtGzy0D0E0EtG0BzyyC0DtGyDzyyE0Bzz0B0F0FtByDyDtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyCyEyE0E0EtDtBtG0EyEyDtAtGtCtBtA0DtG0B tDtByDtGyE0Dzy0C0BtC0AtD0CzyyD0C2Q&cr=434814153&ir=, Good: (www.google.com), Bad: (hxxp://speedial.com/?f=1&a=spd_ir_14_20_ff&cd=2XzuyEtN2Y1L1QzuzytDtB0BtAyEtA0D0DzztDtDzztD0EtDtN0D0Tzu0SzzyCyCtN1L2XzutBtFtBtDtFtCtAtFtCtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V 1N2Y1L1Qzu2SyE0D0F0CtB0F0DtCtGtA0AyE0AtGzy0D0E0EtG0BzyyC0DtGyDzyyE0Bzz0B0F0FtByDyDtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyCyEyE0E0EtDtBtG0EyEyDtAtGtCtBtA0DtG0B tDtByDtGyE0Dzy0C0BtC0AtD0CzyyD0C2Q&cr=434814153&ir=),Replaced,[fc1911414635ee485a473b0435cfd22e]
PUP.Optional.Speedial.A, HKU\S-1-5-21-2026012139-1669881485-4226200435-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://speedial.com/?f=1&a=spd_ir_14_20_ff&cd=2XzuyEtN2Y1L1QzuzytDtB0BtAyEtA0D0DzztDtDzztD0EtDtN0D0Tzu0SzzyCyCtN1L2XzutBtFtBtDtFtCtAtFtCtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V 1N2Y1L1Qzu2SyE0D0F0CtB0F0DtCtGtA0AyE0AtGzy0D0E0EtG0BzyyC0DtGyDzyyE0Bzz0B0F0FtByDyDtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyCyEyE0E0EtDtBtG0EyEyDtAtGtCtBtA0DtG0B tDtByDtGyE0Dzy0C0BtC0AtD0CzyyD0C2Q&cr=434814153&ir=, Good: (www.google.com), Bad: (hxxp://speedial.com/?f=1&a=spd_ir_14_20_ff&cd=2XzuyEtN2Y1L1QzuzytDtB0BtAyEtA0D0DzztDtDzztD0EtDtN0D0Tzu0SzzyCyCtN1L2XzutBtFtBtDtFtCtAtFtCtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V 1N2Y1L1Qzu2SyE0D0F0CtB0F0DtCtGtA0AyE0AtGzy0D0E0EtG0BzyyC0DtGyDzyyE0Bzz0B0F0FtByDyDtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyCyEyE0E0EtDtBtG0EyEyDtAtGtCtBtA0DtG0B tDtByDtGyE0Dzy0C0BtC0AtD0CzyyD0C2Q&cr=434814153&ir=),Replaced,[db3ad28082f9bb7b079b7cc3986c7e82]

Folders: 9
PUP.Optional.Webget.A, C:\Program Files (x86)\webget, Delete-on-Reboot, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\bin, Delete-on-Reboot, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\bin\plugins, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Speedial.A, C:\Program Files (x86)\Speedial, Quarantined, [e3328dc5d0ab979faf9dea94d52d6f91],
PUP.Optional.Speedial.A, C:\Program Files (x86)\Speedial\1.8.29.15, Quarantined, [e3328dc5d0ab979faf9dea94d52d6f91],
PUP.Optional.Speedial.A, C:\Program Files (x86)\Speedial\1.8.29.15\bh, Quarantined, [e3328dc5d0ab979faf9dea94d52d6f91],
PUP.Optional.Speedial.A, C:\Users\Daniel\AppData\Roaming\Speedial, Quarantined, [7b9aea685a21191ddb74542a30d2d12f],
PUP.Optional.Speedial.A, C:\Users\Daniel\AppData\Roaming\Speedial\icons_2.20.13.1, Quarantined, [7b9aea685a21191ddb74542a30d2d12f],
PUP.Optional.Speedial.A, C:\Users\Daniel\AppData\Roaming\Speedial\UpdateProc, Quarantined, [7b9aea685a21191ddb74542a30d2d12f],

Files: 30
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\updatewebget.exe, Delete-on-Reboot, [e0351939067545f1285210671fe2d22e],
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\bin\utilwebget.exe, Delete-on-Reboot, [4cc991c1017a1e18aad08aed7b8628d8],
PUP.Optional.InstallCore, C:\$Recycle.Bin\S-1-5-21-2026012139-1669881485-4226200435-1000\$RFPIUMT.exe, Quarantined, [af6666ec5229cd69af6c3d0158ac619f],
PUP.Optional.InstalleRex, C:\Users\Daniel\Downloads\Pokemon_ Weisse Edition.exe, Quarantined, [aa6b183ae79489adcf2378030cf5a759],
PUP.Optional.Softonic.A, C:\Users\Daniel\Downloads\SoftonicDownloader_fuer_stronghold-2.exe, Quarantined, [3dd8ee64d0ab082ed2a63ae5ab5601ff],
PUP.BundleInstaller.DW, C:\Users\Daniel\Downloads\francesca_le_its-the-perfect-size-for-your-pussy.exe, Quarantined, [878e4a08b5c65cda916ee221d0318878],
PUP.Optional.Bandoo, C:\Users\Daniel\Downloads\iLividSetup-r515-n-bc.exe, Quarantined, [dc39f0624e2d52e450c92cddb54cf20e],
PUP.Optional.Webget.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\q0oexglw.default\extensions\{9edd0ea8-2819-47c2-8320-b007d5996f8a}.xpi, Quarantined, [3bda50028fec72c4d8a5a0e47b87857b],
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\webget.ico, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\0, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\7za.exe, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\updatewebget.InstallState, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\webgetBHO.dll, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\bin\sqlite3.dll, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\bin\utilwebget.InstallState, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\bin\plugins\webget.Bromon.dll, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\bin\plugins\webget.BrowserAdapterS.dll, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\bin\plugins\webget.CompatibilityChecker.dll, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\bin\plugins\webget.FFUpdate.dll, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\bin\plugins\webget.IEUpdate.dll, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Webget.A, C:\Program Files (x86)\webget\bin\plugins\webget.PurBrowseG.dll, Quarantined, [fd1899b95922999d9d80f78ecd35748c],
PUP.Optional.Speedial.A, C:\Program Files (x86)\Speedial\1.8.29.15\FavIcon.ico, Quarantined, [e3328dc5d0ab979faf9dea94d52d6f91],
PUP.Optional.Speedial.A, C:\Program Files (x86)\Speedial\1.8.29.15\Sqlite3.dll, Quarantined, [e3328dc5d0ab979faf9dea94d52d6f91],
PUP.Optional.Speedial.A, C:\Program Files (x86)\Speedial\1.8.29.15\uninst.dat, Quarantined, [e3328dc5d0ab979faf9dea94d52d6f91],
PUP.Optional.Speedial.A, C:\Program Files (x86)\Speedial\1.8.29.15\uninstall.exe, Quarantined, [e3328dc5d0ab979faf9dea94d52d6f91],
PUP.Optional.Speedial.A, C:\Users\Daniel\AppData\Roaming\Speedial\UpdateProc\config.dat, Quarantined, [7b9aea685a21191ddb74542a30d2d12f],
PUP.Optional.Speedial.A, C:\Users\Daniel\AppData\Roaming\Speedial\UpdateProc\info.dat, Quarantined, [7b9aea685a21191ddb74542a30d2d12f],
PUP.Optional.Speedial.A, C:\Users\Daniel\AppData\Roaming\Speedial\UpdateProc\STTL.DAT, Quarantined, [7b9aea685a21191ddb74542a30d2d12f],
PUP.Optional.Speedial.A, C:\Users\Daniel\AppData\Roaming\Speedial\UpdateProc\TTL.DAT, Quarantined, [7b9aea685a21191ddb74542a30d2d12f],
PUP.Optional.Speedial.A, C:\Users\Daniel\AppData\Roaming\Speedial\UpdateProc\UpdateTask.exe, Quarantined, [7b9aea685a21191ddb74542a30d2d12f],

Physical Sectors: 0
(No malicious items detected)

(end)

Ich hoffe jemand kann den logs etwas entnehmen. Ich wäre froh, wenn mir jemand sagen könnte welche Programme ich brauche, um die Sicherheit meines Pc gewährleisten zu können, bzw. welche Schritte ich nun unternehmen sollte?Ist mein Gratis-Virenschutz ausreichend, oder sollte ich doch lieber zu Kaspersky, BitDefender oder Eset greifen?

Ps: Ich nutze derzeit Firefox und habe mir der Sicherheit wegen NoScript installiert. Sollte ich noch andere Add-ons in Erwägung ziehen?

Ich hoffe ich habe bei meinem ersten Thema nicht alles falschgemacht und es euch nicht unnötig erschwert mir weiterzuhelfen.

Liebe Grüße, Daniel

schrauber · 18.05.2014, 18:20

hi,

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Jester · 18.05.2014, 19:15

FRST

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by Daniel (administrator) on DANIEL-PC on 18-05-2014 20:04:47
Running from C:\Users\Daniel\Downloads
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Oki Data Corporation) C:\Program Files\Okidata\Common\Extend3\portmgrsrv.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
() C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Valve Corporation) E:\Steam\Steam.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Spotify Ltd) C:\Users\Daniel\AppData\Roaming\Spotify\spotify.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
() C:\Program Files\Okidata\OKI LPR Utility\okilpr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Apple Inc.) E:\Program Files (x86)\iTunesHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Curse, Inc) C:\Users\Daniel\AppData\Roaming\Curse Client\Bin\Curse.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
() C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyHelper.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12445288 2012-01-16] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM-x32\...\Run: [STCAgent] => C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe [771968 2011-08-29] (Splashtop Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-27] (Intel Corporation)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] => E:\Program Files (x86)\iTunesHelper.exe [152392 2013-09-17] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-04-22] (AVAST Software)
HKLM-x32\...\Run: [RoccatKoneXTD] => C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE [552960 2013-07-30] (ROCCAT GmbH)
HKLM-x32\...\Run: [ZyngaGamesAgent] => "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"
HKLM-x32\...\RunOnce: [EasyTuneVI] - C:\Program Files (x86)\GIGABYTE\ET6\ETCall.exe [40960 2012-02-01] ()
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-07-16] (Microsoft Corporation)
HKU\S-1-5-21-2026012139-1669881485-4226200435-1000\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-12-23] ()
HKU\S-1-5-21-2026012139-1669881485-4226200435-1000\...\Run: [Steam] => E:\Steam\Steam.exe [1825984 2014-04-24] (Valve Corporation)
HKU\S-1-5-21-2026012139-1669881485-4226200435-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2012-02-14] (AMD)
HKU\S-1-5-21-2026012139-1669881485-4226200435-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-2026012139-1669881485-4226200435-1000\...\Run: [Spotify] => C:\Users\Daniel\AppData\Roaming\Spotify\Spotify.exe [6170168 2014-05-17] (Spotify Ltd)
HKU\S-1-5-21-2026012139-1669881485-4226200435-1000\...\MountPoints2: {4330cfc8-4b77-11e2-84cb-806e6f6e6963} - D:\Run.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OKI LPR-Dienstprogramm.lnk
ShortcutTarget: OKI LPR-Dienstprogramm.lnk -> C:\Program Files\Okidata\OKI LPR Utility\okilpr.exe ()
Startup: C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk
ShortcutTarget: Curse.lnk -> C:\Users\Daniel\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)
Startup: C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Samsung SSD Magician.lnk
ShortcutTarget: Samsung SSD Magician.lnk -> C:\Program Files (x86)\Samsung SSD Magician\Samsung SSD Magician.exe (Samsung Electronics.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFC9F8D972A71CF01
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\rjwiuegg.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - E:\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - E:\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - E:\Program Files (x86)\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: NoScript - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\rjwiuegg.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-05-16]
FF Extension: Adblock Plus - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\rjwiuegg.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-16]
FF HKLM-x32\...\Firefox\Extensions: [{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}] - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}
FF Extension: Splashtop Connect Companion - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1} [2012-12-21]
FF HKLM-x32\...\Firefox\Extensions: [{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}] - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}
FF Extension: Splashtop Connect - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0} [2012-12-21]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-02-06]

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Google Docs) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-22]
CHR Extension: (Google Drive) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-22]
CHR Extension: (YouTube) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-22]
CHR Extension: (Last updated at $time$ on $date$) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-03-15]
CHR Extension: (Google Search) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-22]
CHR Extension: (avast! Online Security) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-02-23]
CHR Extension: (Skype Click to Call) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-09-22]
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2014-01-12]
CHR Extension: (Google Wallet) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-22]
CHR Extension: (Gmail) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-22]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-09-22]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-04-22]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]

==================== Services (Whitelisted) =================

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-22] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2153792 2014-05-16] (IObit)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 OpLclSrv; C:\Program Files\Okidata\Common\Extend3\portmgrsrv.exe [169472 2011-04-11] (Oki Data Corporation)
S2 avast! Firewall; "C:\Program Files\AVAST Software\Avast\afwServ.exe" [X]

==================== Drivers (Whitelisted) ====================

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-04-22] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-22] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-22] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-22] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-15] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-15] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-04-22] ()
R3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2014-05-18] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-18] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
S1 aswKbd; \??\C:\Windows\system32\drivers\aswKbd.sys [X]
S1 aswTdi; \??\C:\Windows\system32\drivers\aswTdi.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-18 20:04 - 2014-05-18 20:04 - 00020032 _____ () C:\Users\Daniel\Downloads\FRST.txt
2014-05-18 19:35 - 2014-05-18 20:04 - 00000000 ____D () C:\FRST
2014-05-18 19:34 - 2014-05-18 19:35 - 02067456 _____ (Farbar) C:\Users\Daniel\Downloads\FRST64.exe
2014-05-18 15:02 - 2014-05-18 15:02 - 00000004 _____ () C:\Windows\SysWOW64\GVTunner.ref
2014-05-17 18:04 - 2014-05-17 21:45 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Curse Client
2014-05-17 18:04 - 2014-05-17 18:04 - 00001040 _____ () C:\Users\Daniel\Desktop\Curse.lnk
2014-05-17 18:04 - 2014-05-17 18:04 - 00001026 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse.lnk
2014-05-17 18:04 - 2014-05-17 18:04 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2014-05-17 15:58 - 2014-05-18 19:57 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Spotify
2014-05-17 15:58 - 2014-05-17 21:43 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Spotify
2014-05-17 15:58 - 2014-05-17 15:58 - 00001815 _____ () C:\Users\Daniel\Desktop\Spotify.lnk
2014-05-17 15:58 - 2014-05-17 15:58 - 00001801 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-05-17 15:57 - 2014-05-17 15:57 - 00126112 _____ (Spotify Ltd) C:\Users\Daniel\Downloads\SpotifySetup.exe
2014-05-17 01:27 - 2014-05-17 01:34 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-17 01:27 - 2014-05-17 01:27 - 00000970 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-05-17 01:25 - 2014-05-17 01:25 - 01141680 _____ () C:\Users\Daniel\Downloads\SteamSetup.exe
2014-05-16 23:16 - 2014-05-16 23:16 - 41337928 _____ (Curse) C:\Users\Daniel\Downloads\CurseClientSetup.exe
2014-05-16 22:34 - 2014-05-16 22:34 - 00001081 _____ () C:\Users\Daniel\Desktop\Brain Workshop.lnk
2014-05-16 22:34 - 2014-05-16 22:34 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Brain Workshop
2014-05-16 22:34 - 2014-05-16 22:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brain Workshop
2014-05-16 22:34 - 2014-05-16 22:34 - 00000000 ____D () C:\Program Files (x86)\Brain Workshop
2014-05-16 22:33 - 2014-05-16 22:34 - 10825715 _____ (Paul Hoskinson & Jonathan Toomim ) C:\Users\Daniel\Downloads\brainworkshop-4.8.4-win32-setup.exe
2014-05-16 19:18 - 2014-05-16 19:18 - 00001166 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-16 19:18 - 2014-05-16 19:18 - 00001154 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-16 19:18 - 2014-05-16 19:18 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Mozilla
2014-05-16 19:18 - 2014-05-16 19:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-16 19:18 - 2014-05-16 19:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-16 19:17 - 2014-05-16 19:17 - 00283144 _____ (Mozilla) C:\Users\Daniel\Downloads\Firefox Setup Stub 29.0.1.exe
2014-05-16 18:12 - 2014-05-16 18:12 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-16 18:11 - 2014-05-16 18:11 - 02347384 _____ (ESET) C:\Users\Daniel\Downloads\esetsmartinstaller_deu.exe
2014-05-16 18:07 - 2014-05-16 18:07 - 02800104 _____ (AVAST Software) C:\Users\Daniel\Downloads\avast-browser-cleanup.exe
2014-05-16 18:04 - 2014-05-16 18:04 - 00000645 _____ () C:\Users\Daniel\Desktop\JRT.txt
2014-05-16 17:53 - 2014-05-16 17:53 - 01016261 _____ (Thisisu) C:\Users\Daniel\Downloads\JRT.exe
2014-05-16 17:47 - 2014-05-16 17:47 - 01325827 _____ () C:\Users\Daniel\Downloads\adwcleaner_3.208.exe
2014-05-16 17:39 - 2014-05-18 17:54 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-16 17:39 - 2014-05-16 17:39 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-16 17:39 - 2014-05-16 17:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-16 17:39 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-16 17:39 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-16 17:39 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-16 17:26 - 2014-05-16 18:11 - 00002352 _____ () C:\Users\Daniel\Desktop\Rkill.txt
2014-05-16 17:25 - 2014-05-16 17:25 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\Daniel\Downloads\rkill.exe
2014-05-16 17:17 - 2014-05-16 17:17 - 00001080 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-05-16 17:17 - 2014-05-16 17:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\VS Revo Group
2014-05-16 17:17 - 2014-05-16 17:17 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-05-16 17:17 - 2014-05-16 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-05-16 17:17 - 2014-05-16 17:17 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-05-16 17:17 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2014-05-16 08:56 - 2014-05-16 08:56 - 00004132 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-05-16 08:48 - 2014-05-16 08:48 - 00000000 ____D () C:\Windows\ERUNT
2014-05-16 08:47 - 2014-05-16 08:47 - 01016261 _____ (Thisisu) C:\Users\Daniel\Downloads\JRT_6.1.4.exe
2014-05-16 08:30 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-16 08:29 - 2014-05-16 17:49 - 00000000 ____D () C:\AdwCleaner
2014-05-16 08:29 - 2014-05-16 08:29 - 01325827 _____ () C:\Users\Daniel\Downloads\adwcleaner08.exe
2014-05-16 08:14 - 2014-05-16 08:14 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieUserList
2014-05-16 08:14 - 2014-05-16 08:14 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieSiteList
2014-05-16 08:11 - 2014-05-16 08:11 - 00008619 _____ () C:\Users\Daniel\AppData\Local\CleanupUninstall.txt
2014-05-16 08:11 - 2014-05-16 08:11 - 00000000 ____D () C:\ProgramData\Razer
2014-05-16 08:00 - 2014-05-16 17:35 - 00000000 ____D () C:\ProgramData\IObit
2014-05-16 08:00 - 2014-05-16 17:35 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-05-16 08:00 - 2014-05-16 08:00 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\ProductData
2014-05-16 08:00 - 2014-05-16 08:00 - 00000000 ____D () C:\ProgramData\ProductData
2014-05-16 07:59 - 2014-05-16 07:59 - 12569408 _____ (IObit) C:\Users\Daniel\Downloads\iobituninstaller_3.2.0.128.exe
2014-05-16 07:50 - 2014-05-16 07:50 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Daniel\Downloads\mbam-setup-2.0.1.1004 (1).exe
2014-05-16 07:35 - 2014-05-18 18:36 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-16 07:35 - 2014-05-16 07:35 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-15 17:55 - 2014-05-15 17:55 - 00000045 _____ () C:\Users\Daniel\AppData\Roaming\WB.CFG
2014-05-15 16:55 - 2014-05-18 19:55 - 00000296 _____ () C:\Windows\Tasks\Speedial.job
2014-05-15 16:55 - 2014-05-15 16:55 - 00003240 _____ () C:\Windows\System32\Tasks\Speedial
2014-05-15 16:02 - 2014-05-15 16:02 - 00000000 ____D () C:\ProgramData\AllaboutApp
2014-05-15 16:01 - 2014-05-15 16:02 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-15 01:19 - 2014-05-17 18:04 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Curse
2014-05-14 18:03 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-14 18:03 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-14 18:03 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-14 18:03 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-14 18:03 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-14 18:03 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 14:48 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 14:48 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 14:48 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 14:48 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 14:48 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 14:48 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 14:48 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 14:48 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 14:48 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 14:48 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 14:48 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 14:48 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 14:48 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 14:48 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 14:48 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 14:48 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 14:48 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 14:48 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 14:48 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 14:48 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 14:48 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 14:48 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 14:48 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 14:48 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 14:48 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 14:48 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 14:48 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 14:48 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 14:48 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 14:48 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 14:48 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 14:48 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 14:48 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-06 19:12 - 2014-05-14 19:18 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 19:12 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-06 19:12 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-06 19:12 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-06 19:12 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-06 19:12 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-06 19:12 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-06 19:12 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-06 19:12 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-06 19:12 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-06 19:12 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-06 19:12 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-06 19:12 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-06 19:12 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-06 19:12 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-06 19:12 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-06 19:12 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-06 19:12 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-06 19:12 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-06 19:12 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-06 19:12 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-06 19:12 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-06 19:12 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-06 19:12 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-06 19:12 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-06 19:12 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-06 19:12 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-06 19:12 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-06 19:12 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-06 19:12 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-06 19:12 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-06 19:12 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-06 19:12 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-06 19:12 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-06 19:12 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-06 19:12 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-06 19:12 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-06 19:12 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-06 19:12 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-06 19:12 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-06 19:12 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-06 19:12 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-06 19:12 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-06 19:12 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-06 19:12 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-22 12:07 - 2014-04-22 12:07 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-22 12:07 - 2014-04-22 12:07 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys

==================== One Month Modified Files and Folders =======

2014-05-18 20:04 - 2014-05-18 20:04 - 00020032 _____ () C:\Users\Daniel\Downloads\FRST.txt
2014-05-18 20:04 - 2014-05-18 19:35 - 00000000 ____D () C:\FRST
2014-05-18 20:04 - 2012-12-25 05:25 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Skype
2014-05-18 20:02 - 2013-03-12 04:23 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-18 19:57 - 2014-05-17 15:58 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Spotify
2014-05-18 19:55 - 2014-05-15 16:55 - 00000296 _____ () C:\Windows\Tasks\Speedial.job
2014-05-18 19:35 - 2014-05-18 19:34 - 02067456 _____ (Farbar) C:\Users\Daniel\Downloads\FRST64.exe
2014-05-18 19:31 - 2012-12-25 04:01 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-18 18:36 - 2014-05-16 07:35 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-18 17:54 - 2014-05-16 17:39 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-18 15:34 - 2012-12-23 17:32 - 00000000 ____D () C:\Users\Daniel\AppData\Local\PMB Files
2014-05-18 15:08 - 2009-07-14 06:45 - 00013728 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-18 15:08 - 2009-07-14 06:45 - 00013728 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-18 15:07 - 2009-07-14 19:58 - 00711778 _____ () C:\Windows\system32\perfh007.dat
2014-05-18 15:07 - 2009-07-14 19:58 - 00154974 _____ () C:\Windows\system32\perfc007.dat
2014-05-18 15:07 - 2009-07-14 07:13 - 01649420 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-18 15:05 - 2013-12-21 15:00 - 01175191 _____ () C:\Windows\WindowsUpdate.log
2014-05-18 15:04 - 2013-02-06 00:26 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-05-18 15:02 - 2014-05-18 15:02 - 00000004 _____ () C:\Windows\SysWOW64\GVTunner.ref
2014-05-18 15:02 - 2012-12-25 04:01 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-18 15:02 - 2012-12-21 22:06 - 00030528 _____ () C:\Windows\GVTDrv64.sys
2014-05-18 15:02 - 2012-12-21 16:47 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-05-18 15:01 - 2014-01-23 13:45 - 00019448 _____ () C:\Windows\setupact.log
2014-05-18 15:01 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-18 03:24 - 2014-01-28 02:45 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Battle.net
2014-05-18 00:49 - 2013-01-02 18:36 - 00000000 ____D () C:\Users\Daniel\Documents\StarCraft II
2014-05-17 23:19 - 2014-01-28 02:55 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-05-17 21:45 - 2014-05-17 18:04 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Curse Client
2014-05-17 21:43 - 2014-05-17 15:58 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Spotify
2014-05-17 18:04 - 2014-05-17 18:04 - 00001040 _____ () C:\Users\Daniel\Desktop\Curse.lnk
2014-05-17 18:04 - 2014-05-17 18:04 - 00001026 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse.lnk
2014-05-17 18:04 - 2014-05-17 18:04 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2014-05-17 18:04 - 2014-05-15 01:19 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Curse
2014-05-17 18:04 - 2012-12-21 17:18 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-17 15:58 - 2014-05-17 15:58 - 00001815 _____ () C:\Users\Daniel\Desktop\Spotify.lnk
2014-05-17 15:58 - 2014-05-17 15:58 - 00001801 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-05-17 15:57 - 2014-05-17 15:57 - 00126112 _____ (Spotify Ltd) C:\Users\Daniel\Downloads\SpotifySetup.exe
2014-05-17 01:38 - 2014-01-28 02:45 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-05-17 01:34 - 2014-05-17 01:27 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-17 01:27 - 2014-05-17 01:27 - 00000970 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-05-17 01:27 - 2012-12-26 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-05-17 01:25 - 2014-05-17 01:25 - 01141680 _____ () C:\Users\Daniel\Downloads\SteamSetup.exe
2014-05-16 23:16 - 2014-05-16 23:16 - 41337928 _____ (Curse) C:\Users\Daniel\Downloads\CurseClientSetup.exe
2014-05-16 22:34 - 2014-05-16 22:34 - 00001081 _____ () C:\Users\Daniel\Desktop\Brain Workshop.lnk
2014-05-16 22:34 - 2014-05-16 22:34 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Brain Workshop
2014-05-16 22:34 - 2014-05-16 22:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brain Workshop
2014-05-16 22:34 - 2014-05-16 22:34 - 00000000 ____D () C:\Program Files (x86)\Brain Workshop
2014-05-16 22:34 - 2014-05-16 22:33 - 10825715 _____ (Paul Hoskinson & Jonathan Toomim ) C:\Users\Daniel\Downloads\brainworkshop-4.8.4-win32-setup.exe
2014-05-16 21:42 - 2014-02-23 00:14 - 00189926 _____ () C:\Windows\PFRO.log
2014-05-16 19:18 - 2014-05-16 19:18 - 00001166 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-16 19:18 - 2014-05-16 19:18 - 00001154 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-16 19:18 - 2014-05-16 19:18 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Mozilla
2014-05-16 19:18 - 2014-05-16 19:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-16 19:18 - 2014-05-16 19:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-16 19:17 - 2014-05-16 19:17 - 00283144 _____ (Mozilla) C:\Users\Daniel\Downloads\Firefox Setup Stub 29.0.1.exe
2014-05-16 19:14 - 2013-08-24 20:56 - 00000000 ____D () C:\Users\Daniel\Desktop\Bilder
2014-05-16 19:14 - 2012-12-21 17:18 - 00000000 ____D () C:\Users\Daniel
2014-05-16 19:11 - 2012-12-21 17:39 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-16 18:47 - 2012-12-21 17:18 - 00001384 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-16 18:12 - 2014-05-16 18:12 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-16 18:11 - 2014-05-16 18:11 - 02347384 _____ (ESET) C:\Users\Daniel\Downloads\esetsmartinstaller_deu.exe
2014-05-16 18:11 - 2014-05-16 17:26 - 00002352 _____ () C:\Users\Daniel\Desktop\Rkill.txt
2014-05-16 18:07 - 2014-05-16 18:07 - 02800104 _____ (AVAST Software) C:\Users\Daniel\Downloads\avast-browser-cleanup.exe
2014-05-16 18:04 - 2014-05-16 18:04 - 00000645 _____ () C:\Users\Daniel\Desktop\JRT.txt
2014-05-16 17:53 - 2014-05-16 17:53 - 01016261 _____ (Thisisu) C:\Users\Daniel\Downloads\JRT.exe
2014-05-16 17:49 - 2014-05-16 08:29 - 00000000 ____D () C:\AdwCleaner
2014-05-16 17:47 - 2014-05-16 17:47 - 01325827 _____ () C:\Users\Daniel\Downloads\adwcleaner_3.208.exe
2014-05-16 17:39 - 2014-05-16 17:39 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-16 17:39 - 2014-05-16 17:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-16 17:35 - 2014-05-16 08:00 - 00000000 ____D () C:\ProgramData\IObit
2014-05-16 17:35 - 2014-05-16 08:00 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-05-16 17:30 - 2013-01-14 18:13 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\uTorrent
2014-05-16 17:30 - 2012-12-23 23:08 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Turbine
2014-05-16 17:25 - 2014-05-16 17:25 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\Daniel\Downloads\rkill.exe
2014-05-16 17:22 - 2013-01-24 16:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-16 17:17 - 2014-05-16 17:17 - 00001080 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-05-16 17:17 - 2014-05-16 17:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\VS Revo Group
2014-05-16 17:17 - 2014-05-16 17:17 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-05-16 17:17 - 2014-05-16 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-05-16 17:17 - 2014-05-16 17:17 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-05-16 08:56 - 2014-05-16 08:56 - 00004132 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-05-16 08:48 - 2014-05-16 08:48 - 00000000 ____D () C:\Windows\ERUNT
2014-05-16 08:47 - 2014-05-16 08:47 - 01016261 _____ (Thisisu) C:\Users\Daniel\Downloads\JRT_6.1.4.exe
2014-05-16 08:33 - 2009-07-14 06:45 - 00417024 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-16 08:29 - 2014-05-16 08:29 - 01325827 _____ () C:\Users\Daniel\Downloads\adwcleaner08.exe
2014-05-16 08:14 - 2014-05-16 08:14 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieUserList
2014-05-16 08:14 - 2014-05-16 08:14 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieSiteList
2014-05-16 08:14 - 2012-12-25 04:01 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-16 08:13 - 2012-12-21 16:49 - 00109296 _____ () C:\Users\Daniel\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-16 08:11 - 2014-05-16 08:11 - 00008619 _____ () C:\Users\Daniel\AppData\Local\CleanupUninstall.txt
2014-05-16 08:11 - 2014-05-16 08:11 - 00000000 ____D () C:\ProgramData\Razer
2014-05-16 08:11 - 2012-12-31 17:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Razer
2014-05-16 08:10 - 2013-01-09 18:34 - 00000000 ____D () C:\ProgramData\Hi-Rez Studios
2014-05-16 08:09 - 2013-08-26 16:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Opera Software
2014-05-16 08:08 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-16 08:04 - 2012-12-23 22:52 - 00000000 ____D () C:\Program Files (x86)\Turbine
2014-05-16 08:04 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-16 08:00 - 2014-05-16 08:00 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\ProductData
2014-05-16 08:00 - 2014-05-16 08:00 - 00000000 ____D () C:\ProgramData\ProductData
2014-05-16 07:59 - 2014-05-16 07:59 - 12569408 _____ (IObit) C:\Users\Daniel\Downloads\iobituninstaller_3.2.0.128.exe
2014-05-16 07:50 - 2014-05-16 07:50 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Daniel\Downloads\mbam-setup-2.0.1.1004 (1).exe
2014-05-16 07:41 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-05-16 07:35 - 2014-05-16 07:35 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-15 22:49 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-05-15 17:55 - 2014-05-15 17:55 - 00000045 _____ () C:\Users\Daniel\AppData\Roaming\WB.CFG
2014-05-15 16:55 - 2014-05-15 16:55 - 00003240 _____ () C:\Windows\System32\Tasks\Speedial
2014-05-15 16:02 - 2014-05-15 16:02 - 00000000 ____D () C:\ProgramData\AllaboutApp
2014-05-15 16:02 - 2014-05-15 16:01 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-15 14:33 - 2013-12-17 23:39 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-05-15 14:33 - 2013-02-06 00:26 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-05-15 14:33 - 2013-02-06 00:26 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-05-14 21:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-14 19:25 - 2012-12-21 17:18 - 00000000 ___RD () C:\Users\Daniel\Virtual Machines
2014-05-14 19:25 - 2012-12-21 17:18 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-14 19:18 - 2014-05-06 19:12 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-14 19:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-14 18:03 - 2013-07-22 15:38 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-14 18:02 - 2013-01-02 18:48 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 01:02 - 2013-03-12 04:23 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 01:02 - 2013-03-12 04:23 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 01:02 - 2013-01-09 18:37 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-09 20:34 - 2012-12-23 17:32 - 00000000 ____D () C:\ProgramData\PMB Files
2014-05-09 08:26 - 2012-12-25 04:01 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-09 08:26 - 2012-12-25 04:01 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-09 08:14 - 2014-05-14 14:48 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-14 14:48 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-06 06:40 - 2014-05-14 18:03 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-14 18:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-14 18:03 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-14 18:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-14 18:03 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-14 18:03 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-04-22 12:07 - 2014-04-22 12:07 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-22 12:07 - 2014-04-22 12:07 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-04-22 12:07 - 2013-12-17 23:39 - 00001969 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-04-22 12:07 - 2013-03-11 16:38 - 00208416 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-04-22 12:07 - 2013-03-11 16:38 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-04-22 12:07 - 2013-02-06 00:26 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1400157187704
2014-04-22 12:07 - 2013-02-06 00:26 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1400157187704
2014-04-22 12:07 - 2013-02-06 00:26 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-04-22 12:07 - 2013-02-06 00:26 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-04-22 12:07 - 2013-02-06 00:26 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-04-20 04:03 - 2012-12-25 05:25 - 00000000 ___RD () C:\Program Files (x86)\Skype

Some content of TEMP:
====================
C:\Users\Daniel\AppData\Local\Temp\i4jdel0.exe
C:\Users\Daniel\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Daniel\AppData\Local\Temp\Quarantine.exe
C:\Users\Daniel\AppData\Local\Temp\Uninstaller-5876.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2014-05-14 14:48] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-09 12:39

==================== End Of Log ============================

--- --- ---

--- --- ---

Addition:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-05-2014
Ran by Daniel at 2014-05-18 20:05:06
Running from C:\Users\Daniel\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.24 - GIGABYTE)
Adobe Reader 8.1.2 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A81200000003}) (Version: 8.1.2 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 12.5.100.21219 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden
AMD AVIVO64 Codecs (Version: 12.3.103.20214 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{5E03A267-415E-5383-FA8F-3CE4145663B9}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.71219.1540 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Application Profiles (HKLM-x32\...\{A231A6F2-2C80-6203-ED35-2CFB96B25A38}) (Version: 2.0.4719.35969 - Advanced Micro Devices, Inc.)
ARMA 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)
ARMA 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
ARMA 2: Operation Arrowhead Beta (HKLM-x32\...\Steam App 219540) (Version:  - )
ASUS VGA Driver (x32 Version: 3.0.0.1 - Ihr Firmenname) Hidden
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.4.4 - Atheros Communications Inc.)
AutoGreen B12.0206.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE)
AutoGreen B12.0206.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2018 - Avast Software)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version:  - )
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Brain Workshop 4.8.4 (HKLM-x32\...\Brain Workshop_is1) (Version: 4.8.4 - Paul Hoskinson & Jonathan Toomim)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2012.1219.1521.27485 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.00 - Piriform)
Curse (HKLM-x32\...\{1F2611FB-6F69-4AA8-BECD-243BD8CB45F3}) (Version: 6.0.0.0 - Curse)
DayZ Commander (HKLM-x32\...\{4C047BD9-6E24-4728-9C46-0AE4814997CF}) (Version: 0.9.115 - Dotjosh Studios)
Easy Tune 6 B12.0525.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B12.0525.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
EVEREST Ultimate Edition v5.50 (HKLM-x32\...\EVEREST Ultimate Edition_is1) (Version: 5.50 - Lavalys, Inc.)
Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 4.14.0 - Futuremark Corporation)
GeoGebra 4.4 (HKLM-x32\...\GeoGebra 4.4) (Version: 4.3.31.0 - International GeoGebra Institute)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
HydraVision (x32 Version: 4.2.230.0 - Advanced Micro Devices, Inc.) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.225 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)
iTunes (HKLM\...\{F73A118B-8271-47E2-8790-0C636B2539C5}) (Version: 11.1.0.126 - Apple Inc.)
Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)
Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden
Logitech Gaming Software 8.51 (HKLM\...\Logitech Gaming Software) (Version: 8.51.5 - Logitech Inc.)
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Metro 2033 (HKLM-x32\...\Steam App 43110) (Version:  - THQ)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
NVIDIA PhysX (HKLM-x32\...\{54194F60-988C-4D03-B922-C2B00EFDA39A}) (Version: 9.10.0222 - NVIDIA Corporation)
OKI Alert Info (HKLM-x32\...\{9427081E-AC7E-49D4-964F-E2E27C7175BF}) (Version: 1.3.0 - Okidata)
OKI Color Correct Utility (HKLM-x32\...\{5D729200-F340-4A74-A1E9-32387CDC63EF}) (Version: 2.17.1 - Okidata)
OKI Color Swatch-Dienstprogramm (HKLM-x32\...\{A344F95E-E51A-450C-8F84-C940BF61903E}) (Version: 2.1.11 - Okidata)
OKI Configuration Tool (HKLM-x32\...\{0F55DD09-15EC-4F5D-B517-94852884AEF5}) (Version: 1.6.0 - Okidata)
OKI Device Setting (HKLM-x32\...\{D4E9C626-14A8-4AEB-92F3-BE65EC4CFAEF}) (Version: 1.6.0 - Okidata)
OKI LPR-Dienstprogramm (HKLM-x32\...\{465914BD-324C-4442-A9F6-E9347AB38EB8}) (Version: 5.0.5 - Okidata)
OKI Network Extension (HKLM-x32\...\{38ADB9A6-798C-11D6-A855-00105A80791C}) (Version: 1.00.000 - Okidata)
OKI Network Setting (HKLM-x32\...\{099DE9EF-2781-4A72-BD0F-53AAC78A93B2}) (Version: 1.0.2 - Okidata)
OKI Storage Manager (HKLM-x32\...\{C7BCF2EA-4AE1-4AF0-9EAB-2252015C4DF2}) (Version: 1.0.2 - Okidata)
OKI User Setting (HKLM-x32\...\{C8244493-32A4-4275-8145-D16FFE1D8E36}) (Version: 1.4.0 - Okidata)
ON_OFF Charge B11.1102.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6519 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6554 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 3.0.8 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.0.8 - VS Revo Group, Ltd.)
ROCCAT Kone XTD Mouse Driver (HKLM-x32\...\{7133137D-DF48-4522-AD88-13C82B7D0A63}) (Version:  - Roccat GmbH)
Samsung SSD Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 3.1 - Samsung Electronics)
Skype Click to Call (HKLM-x32\...\{BB285C9F-C821-4770-8970-56C4AB52C87E}) (Version: 7.2.15747.10003 - Microsoft Corporation)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Splashtop Connect for Firefox (HKLM-x32\...\{EF25F71D-F3E8-42A3-8B5A-DBF83C4B942F}) (Version: 2.0.5.2 - Splashtop Inc.)
Splashtop Connect for IE (HKLM-x32\...\{E2B086BD-75A9-45D1-A675-151624B259A1}) (Version: 2.0.5.1 - Splashtop Inc.)
Splashtop Software Updater (HKLM-x32\...\Splashtop Software Updater) (Version: 1.5.6.14 - Splashtop Inc.)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH)
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.22298 - TeamViewer)
WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)

==================== Restore Points  =========================

16-05-2014 15:35:55 Revo Uninstaller Pro's restore point - Adobe Flash Player 13 Plugin
16-05-2014 15:36:17 Revo Uninstaller Pro's restore point - Adobe Flash Player 13 ActiveX
16-05-2014 16:53:13 Revo Uninstaller Pro's restore point - Mozilla Firefox 29.0.1 (x86 de)
16-05-2014 17:10:52 Revo Uninstaller Pro's restore point - 3DMark 11
16-05-2014 17:11:07 Entfernt 3DMark 11
18-05-2014 17:00:17 Windows-Sicherung

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {02F2CB17-0DDF-4C5C-A168-71440A19FDC2} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-22] (AVAST Software)
Task: {1B1AE9DF-1982-4B21-BC76-FAB34FB0B090} - System32\Tasks\Google Updater and Installer => C:\Users\Daniel\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {5650AF86-F19B-4A64-96B4-530EBCEB6391} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-03-25] (Piriform Ltd)
Task: {5CA07F6F-E0DE-4522-BCBD-99F3C590ACFC} - System32\Tasks\FRAPS => E:\Daniel\fraps.exe
Task: {923120F7-C235-4592-BAFC-760BE0B73CEA} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {B2DE6D66-6F89-4DB7-87D1-33E975B19D6A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {B4C2C1FE-BD80-4CD6-B058-FFCEEF72DB83} - System32\Tasks\Speedial => C:\Users\Daniel\AppData\Roaming\Speedial\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {C167029B-6C49-421D-8BBD-FCB3F8BEAAFB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-25] (Google Inc.)
Task: {C2A2B170-B3EA-4DE8-8ED4-CB97ADE327AE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-25] (Google Inc.)
Task: {C466A6A3-E1E4-4EBD-BDD1-7C1FD6123DF0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {D18E2984-A024-46AC-BE2C-4281F11A3A74} - System32\Tasks\{50F3AD04-6C29-4FF4-AF84-95DD842F6F5B} => E:\Benutzer\Daniel\Downloads\PlaywithSix\Play withSIX.exe
Task: {F0EA7F16-1737-4F6E-9387-F81FE1078D75} - System32\Tasks\Microsoft\Windows\Media Center\Extender\Update media permissions for Mcx1-DANIEL-PC => C:\Windows\ehome\McxTask.exe [2009-07-14] (Microsoft Corporation)
Task: {FF89868C-0F12-4604-9A35-ABC43DE2C76A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Speedial.job => C:\Users\Daniel\AppData\Roaming\Speedial\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2010-01-30 03:40 - 2010-01-30 03:40 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2012-01-13 15:04 - 2012-01-13 15:04 - 00219760 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe
2013-09-22 18:36 - 2011-10-20 18:20 - 00260144 _____ () C:\Program Files\Okidata\OKI LPR Utility\okilpr.exe
2014-05-17 15:58 - 2014-05-17 21:43 - 00598072 _____ () C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
2013-06-12 18:11 - 2013-09-12 11:03 - 01294336 _____ () C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
2014-05-18 01:43 - 2014-05-18 01:43 - 02253312 _____ () C:\Program Files\AVAST Software\Avast\defs\14051701\algo.dll
2014-05-18 19:04 - 2014-05-18 19:04 - 02253312 _____ () C:\Program Files\AVAST Software\Avast\defs\14051801\algo.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2010-01-30 03:41 - 2010-01-30 03:41 - 04254560 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-05-25 17:37 - 2012-05-25 17:37 - 02826311 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Normal.dll
2012-05-25 18:45 - 2012-05-25 18:45 - 00618563 _____ () C:\Program Files (x86)\GIGABYTE\ET6\work.dll
2012-05-22 20:12 - 2012-05-22 20:12 - 01331266 _____ () C:\Program Files (x86)\GIGABYTE\ET6\SF.dll
2008-05-07 16:22 - 2008-05-07 16:22 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\CIAMIB.dll
2012-04-18 11:18 - 2012-04-18 11:18 - 01482820 _____ () C:\Program Files (x86)\GIGABYTE\ET6\OCK.dll
2011-09-14 18:12 - 2011-09-14 18:12 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\ycc.dll
2012-05-08 16:01 - 2012-05-08 16:01 - 00069632 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GPTT.dll
2010-06-24 16:50 - 2010-06-24 16:50 - 00094208 _____ () C:\Program Files (x86)\GIGABYTE\ET6\IccLibDll.dll
2011-03-01 20:00 - 2011-03-01 20:00 - 00126976 _____ () C:\Program Files (x86)\GIGABYTE\ET6\StabilityLib.dll
2011-10-18 10:26 - 2011-10-18 10:26 - 00024576 _____ () C:\Program Files (x86)\GIGABYTE\ET6\STT.dll
2012-03-01 10:14 - 2012-03-01 10:14 - 01335362 _____ () C:\Program Files (x86)\GIGABYTE\ET6\HM.dll
2012-05-07 22:45 - 2012-05-07 22:45 - 01429589 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GVTunner.dll
2003-02-14 15:11 - 2003-02-14 15:11 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Sound.dll
2010-06-10 16:52 - 2010-06-10 16:52 - 00110592 _____ () C:\Program Files (x86)\GIGABYTE\ET6\AMD8.dll
2010-03-12 06:40 - 2010-03-12 06:40 - 04449632 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Platform.dll
2010-03-12 06:40 - 2010-03-12 06:40 - 00423256 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Device.dll
2012-04-02 16:36 - 2012-04-02 16:36 - 00294912 _____ () C:\Program Files (x86)\GIGABYTE\ET6\MFCCPU.DLL
2014-01-09 22:21 - 2014-04-22 00:55 - 00340480 _____ () E:\Steam\libavresample-1.dll
2014-04-23 19:32 - 2014-04-22 00:55 - 00471552 _____ () E:\Steam\libavutil-53.dll
2013-05-06 17:05 - 2014-04-01 00:09 - 00754688 _____ () E:\Steam\SDL2.dll
2012-12-26 17:09 - 2014-04-24 00:01 - 01092288 _____ () E:\Steam\bin\chromehtml.DLL
2012-12-26 17:09 - 2014-03-03 21:15 - 20626624 _____ () E:\Steam\bin\libcef.dll
2012-12-26 17:09 - 2013-06-15 01:49 - 01100800 _____ () E:\Steam\bin\avcodec-53.dll
2012-12-26 17:09 - 2013-06-15 01:49 - 00124416 _____ () E:\Steam\bin\avutil-51.dll
2012-12-26 17:09 - 2013-06-15 01:49 - 00192000 _____ () E:\Steam\bin\avformat-53.dll
2014-05-17 15:58 - 2014-05-17 21:43 - 36966968 _____ () C:\Users\Daniel\AppData\Roaming\Spotify\Data\libcef.dll
2013-11-27 17:41 - 2013-11-27 17:41 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-11-28 13:57 - 2012-06-17 12:20 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\hiddriver.dll
2014-05-17 15:58 - 2014-05-17 21:43 - 00886840 _____ () C:\Users\Daniel\AppData\Roaming\Spotify\Data\libglesv2.dll
2014-05-17 15:58 - 2014-05-17 21:43 - 00108600 _____ () C:\Users\Daniel\AppData\Roaming\Spotify\Data\libegl.dll
2013-12-13 08:12 - 2013-12-13 08:12 - 00307712 _____ () C:\Users\Daniel\AppData\Roaming\Curse Client\Bin\opus.dll
2014-03-10 13:55 - 2014-03-10 13:55 - 00343040 _____ () C:\Users\Daniel\AppData\Roaming\Curse Client\Bin\WebRTC_CSharpWrapper.dll
2014-02-17 17:55 - 2014-02-17 17:55 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\00a0b4a9df6e4abf30ae2af3624a77ce\IsdiInterop.ni.dll
2012-12-21 17:41 - 2012-02-01 17:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-12-21 17:40 - 2011-12-16 11:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-05-16 19:18 - 2014-05-07 04:27 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-05-14 01:02 - 2014-05-14 01:02 - 16361136 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: avast! Network Shield Support
Description: avast! Network Shield Support
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: aswTdi
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: avast! Firewall NDIS Filter Miniport
Description: avast! Firewall NDIS Filter Miniport
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: ALWIL Software
Service: aswNdis
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/18/2014 05:27:28 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/18/2014 05:03:59 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/18/2014 06:03:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GUI.exe, Version: 1.0.0.1, Zeitstempel: 0x4f0fc8d2
Name des fehlerhaften Moduls: HM.dll, Version: 1.0.0.1, Zeitstempel: 0x4f4ecd84
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000067d3
ID des fehlerhaften Prozesses: 0xf00
Startzeit der fehlerhaften Anwendung: 0xGUI.exe0
Pfad der fehlerhaften Anwendung: GUI.exe1
Pfad des fehlerhaften Moduls: GUI.exe2
Berichtskennung: GUI.exe3

Error: (05/17/2014 03:41:06 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/16/2014 07:12:32 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/16/2014 06:55:19 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/16/2014 06:53:13 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {9a7e8760-2576-4004-a9eb-c720c4afddc1}

Error: (05/16/2014 06:12:01 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/16/2014 06:12:01 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/16/2014 06:11:55 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (05/18/2014 03:01:32 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
aswKbd
aswTdi

Error: (05/18/2014 03:01:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "avast! Firewall" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (05/17/2014 09:40:53 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
aswKbd
aswTdi

Error: (05/17/2014 09:40:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "avast! Firewall" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (05/17/2014 02:41:33 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
aswKbd
aswTdi

Error: (05/17/2014 02:41:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "avast! Firewall" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (05/17/2014 01:28:50 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/17/2014 01:28:50 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (05/16/2014 09:42:55 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
aswKbd
aswTdi

Error: (05/16/2014 09:42:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "avast! Firewall" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================
Error: (05/18/2014 05:27:28 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (05/18/2014 05:03:59 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (05/18/2014 06:03:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: GUI.exe1.0.0.14f0fc8d2HM.dll1.0.0.14f4ecd84c0000005000067d3f0001cf72082f77160aC:\Program Files (x86)\GIGABYTE\ET6\GUI.exeC:\Program Files (x86)\GIGABYTE\ET6\HM.dll5c466fa8-de41-11e3-9b03-902b343dd800

Error: (05/17/2014 03:41:06 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (05/16/2014 07:12:32 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Daniel\Downloads\esetsmartinstaller_deu.exe

Error: (05/16/2014 06:55:19 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Daniel\Downloads\esetsmartinstaller_deu.exe

Error: (05/16/2014 06:53:13 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {9a7e8760-2576-4004-a9eb-c720c4afddc1}

Error: (05/16/2014 06:12:01 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Daniel\Downloads\esetsmartinstaller_deu.exe

Error: (05/16/2014 06:12:01 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Daniel\Downloads\esetsmartinstaller_deu.exe

Error: (05/16/2014 06:11:55 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Daniel\Downloads\esetsmartinstaller_deu.exe


==================== Memory info =========================== 

Percentage of memory in use: 38%
Total physical RAM: 8154.3 MB
Available physical RAM: 4979.97 MB
Total Pagefile: 16306.78 MB
Available Pagefile: 12393.48 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (SSD) (Fixed) (Total:119.14 GB) (Free:58.79 GB) NTFS
Drive e: (HDD) (Fixed) (Total:465.63 GB) (Free:347.94 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: 7CFEA6E6)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 466 GB) (Disk ID: 0BF00783)

Partition: GPT Partition Type.

==================== End Of Log ============================

schrauber · 19.05.2014, 12:07

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Jester · 19.05.2014, 22:16

Code:

ATTFilter

# AdwCleaner v3.210 - Bericht erstellt am 19/05/2014 um 22:53:49
# Aktualisiert 19/05/2014 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzername : Daniel - DANIEL-PC
# Gestartet von : C:\Users\Daniel\Downloads\adwcleaner_3.210.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Windows\System32\Tasks\Speedial
Datei Gefunden : C:\Windows\Tasks\Speedial.job

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Mozilla Firefox v29.0.1 (de)

[ Datei : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\rjwiuegg.default\prefs.js ]


-\\ Google Chrome v

*************************

AdwCleaner[R0].txt - [5460 octets] - [16/05/2014 08:30:13]
AdwCleaner[R1].txt - [1029 octets] - [16/05/2014 17:48:51]
AdwCleaner[R2].txt - [919 octets] - [19/05/2014 22:53:49]
AdwCleaner[S0].txt - [5424 octets] - [16/05/2014 08:32:10]
AdwCleaner[S1].txt - [1091 octets] - [16/05/2014 17:49:30]

########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [1098 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 7 Ultimate x64
Ran by Daniel on 19.05.2014 at 23:07:12,23
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values




~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"



~~~ FireFox

Emptied folder: C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\rjwiuegg.default\minidumps [1 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19.05.2014 at 23:09:57,38
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by Daniel (administrator) on DANIEL-PC on 19-05-2014 23:15:59
Running from C:\Users\Daniel\Downloads
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Oki Data Corporation) C:\Program Files\Okidata\Common\Extend3\portmgrsrv.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
() C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Spotify Ltd) C:\Users\Daniel\AppData\Roaming\Spotify\spotify.exe
(Spotify Ltd) C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
() C:\Program Files\Okidata\OKI LPR Utility\okilpr.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Apple Inc.) E:\Program Files (x86)\iTunesHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Valve Corporation) E:\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12445288 2012-01-16] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM-x32\...\Run: [STCAgent] => C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe [771968 2011-08-29] (Splashtop Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-27] (Intel Corporation)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] => E:\Program Files (x86)\iTunesHelper.exe [152392 2013-09-17] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-04-22] (AVAST Software)
HKLM-x32\...\Run: [RoccatKoneXTD] => C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE [552960 2013-07-30] (ROCCAT GmbH)
HKLM-x32\...\Run: [ZyngaGamesAgent] => "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"
HKLM-x32\...\RunOnce: [EasyTuneVI] - C:\Program Files (x86)\GIGABYTE\ET6\ETCall.exe [40960 2012-02-01] ()
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-07-16] (Microsoft Corporation)
HKU\S-1-5-21-2026012139-1669881485-4226200435-1000\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-12-23] ()
HKU\S-1-5-21-2026012139-1669881485-4226200435-1000\...\Run: [Steam] => E:\Steam\Steam.exe [1825984 2014-04-24] (Valve Corporation)
HKU\S-1-5-21-2026012139-1669881485-4226200435-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2012-02-14] (AMD)
HKU\S-1-5-21-2026012139-1669881485-4226200435-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-2026012139-1669881485-4226200435-1000\...\Run: [Spotify] => C:\Users\Daniel\AppData\Roaming\Spotify\Spotify.exe [6170168 2014-05-17] (Spotify Ltd)
HKU\S-1-5-21-2026012139-1669881485-4226200435-1000\...\Run: [Spotify Web Helper] => C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-17] (Spotify Ltd)
HKU\S-1-5-21-2026012139-1669881485-4226200435-1000\...\MountPoints2: {4330cfc8-4b77-11e2-84cb-806e6f6e6963} - D:\Run.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OKI LPR-Dienstprogramm.lnk
ShortcutTarget: OKI LPR-Dienstprogramm.lnk -> C:\Program Files\Okidata\OKI LPR Utility\okilpr.exe ()
Startup: C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk
ShortcutTarget: Curse.lnk -> C:\Users\Daniel\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)
Startup: C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Samsung SSD Magician.lnk
ShortcutTarget: Samsung SSD Magician.lnk -> C:\Program Files (x86)\Samsung SSD Magician\Samsung SSD Magician.exe (Samsung Electronics.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFC9F8D972A71CF01
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\rjwiuegg.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - E:\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - E:\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - E:\Program Files (x86)\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: NoScript - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\rjwiuegg.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-05-16]
FF Extension: Adblock Plus - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\rjwiuegg.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-16]
FF HKLM-x32\...\Firefox\Extensions: [{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}] - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}
FF Extension: Splashtop Connect Companion - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1} [2012-12-21]
FF HKLM-x32\...\Firefox\Extensions: [{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}] - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}
FF Extension: Splashtop Connect - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0} [2012-12-21]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-02-06]

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Google Docs) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-22]
CHR Extension: (Google Drive) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-22]
CHR Extension: (YouTube) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-22]
CHR Extension: (Last updated at $time$ on $date$) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-03-15]
CHR Extension: (Google Search) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-22]
CHR Extension: (avast! Online Security) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-02-23]
CHR Extension: (Skype Click to Call) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-09-22]
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2014-01-12]
CHR Extension: (Google Wallet) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-22]
CHR Extension: (Gmail) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-22]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-09-22]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-04-22]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]

==================== Services (Whitelisted) =================

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-22] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2153792 2014-05-16] (IObit)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 OpLclSrv; C:\Program Files\Okidata\Common\Extend3\portmgrsrv.exe [169472 2011-04-11] (Oki Data Corporation)
S2 avast! Firewall; "C:\Program Files\AVAST Software\Avast\afwServ.exe" [X]

==================== Drivers (Whitelisted) ====================

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-04-22] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-22] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-22] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-22] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-15] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-15] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-04-22] ()
R3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2014-05-19] ()
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 LGSUsbFilt; C:\Windows\System32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-19] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
S1 aswKbd; \??\C:\Windows\system32\drivers\aswKbd.sys [X]
S1 aswTdi; \??\C:\Windows\system32\drivers\aswTdi.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-19 23:15 - 2014-05-19 23:15 - 00019892 _____ () C:\Users\Daniel\Downloads\FRST.txt
2014-05-19 23:09 - 2014-05-19 23:09 - 00000849 _____ () C:\Users\Daniel\Desktop\JRT.txt
2014-05-19 23:04 - 2014-05-19 23:04 - 01016261 _____ (Thisisu) C:\Users\Daniel\Downloads\JRT(1).exe
2014-05-19 22:51 - 2014-05-19 22:51 - 01326389 _____ () C:\Users\Daniel\Downloads\adwcleaner_3.210.exe
2014-05-19 19:22 - 2014-05-19 23:07 - 00000004 _____ () C:\Windows\SysWOW64\GVTunner.ref
2014-05-19 13:16 - 2014-05-19 13:16 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2014-05-19 13:16 - 2014-05-19 13:16 - 00000776 _____ () C:\Windows\LkmdfCoInst.log
2014-05-18 20:05 - 2014-05-18 20:05 - 00042610 _____ () C:\Users\Daniel\Desktop\Addition.txt
2014-05-18 20:04 - 2014-05-18 20:05 - 00054308 _____ () C:\Users\Daniel\Desktop\FRST.txt
2014-05-18 19:35 - 2014-05-19 23:15 - 00000000 ____D () C:\FRST
2014-05-18 19:34 - 2014-05-18 19:35 - 02067456 _____ (Farbar) C:\Users\Daniel\Downloads\FRST64.exe
2014-05-17 18:04 - 2014-05-17 21:45 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Curse Client
2014-05-17 18:04 - 2014-05-17 18:04 - 00001040 _____ () C:\Users\Daniel\Desktop\Curse.lnk
2014-05-17 18:04 - 2014-05-17 18:04 - 00001026 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse.lnk
2014-05-17 15:58 - 2014-05-19 23:13 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Spotify
2014-05-17 15:58 - 2014-05-19 19:24 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Spotify
2014-05-17 15:58 - 2014-05-17 15:58 - 00001815 _____ () C:\Users\Daniel\Desktop\Spotify.lnk
2014-05-17 15:58 - 2014-05-17 15:58 - 00001801 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-05-17 15:57 - 2014-05-17 15:57 - 00126112 _____ (Spotify Ltd) C:\Users\Daniel\Downloads\SpotifySetup.exe
2014-05-17 01:27 - 2014-05-17 01:34 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-17 01:27 - 2014-05-17 01:27 - 00000970 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-05-17 01:25 - 2014-05-17 01:25 - 01141680 _____ () C:\Users\Daniel\Downloads\SteamSetup.exe
2014-05-16 23:16 - 2014-05-16 23:16 - 41337928 _____ (Curse) C:\Users\Daniel\Downloads\CurseClientSetup.exe
2014-05-16 22:34 - 2014-05-16 22:34 - 00001081 _____ () C:\Users\Daniel\Desktop\Brain Workshop.lnk
2014-05-16 22:34 - 2014-05-16 22:34 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Brain Workshop
2014-05-16 22:34 - 2014-05-16 22:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brain Workshop
2014-05-16 22:34 - 2014-05-16 22:34 - 00000000 ____D () C:\Program Files (x86)\Brain Workshop
2014-05-16 22:33 - 2014-05-16 22:34 - 10825715 _____ (Paul Hoskinson & Jonathan Toomim ) C:\Users\Daniel\Downloads\brainworkshop-4.8.4-win32-setup.exe
2014-05-16 19:18 - 2014-05-16 19:18 - 00001166 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-16 19:18 - 2014-05-16 19:18 - 00001154 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-16 19:18 - 2014-05-16 19:18 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Mozilla
2014-05-16 19:18 - 2014-05-16 19:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-16 19:18 - 2014-05-16 19:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-16 19:17 - 2014-05-16 19:17 - 00283144 _____ (Mozilla) C:\Users\Daniel\Downloads\Firefox Setup Stub 29.0.1.exe
2014-05-16 18:12 - 2014-05-16 18:12 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-16 18:11 - 2014-05-16 18:11 - 02347384 _____ (ESET) C:\Users\Daniel\Downloads\esetsmartinstaller_deu.exe
2014-05-16 18:07 - 2014-05-16 18:07 - 02800104 _____ (AVAST Software) C:\Users\Daniel\Downloads\avast-browser-cleanup.exe
2014-05-16 17:53 - 2014-05-16 17:53 - 01016261 _____ (Thisisu) C:\Users\Daniel\Downloads\JRT.exe
2014-05-16 17:47 - 2014-05-16 17:47 - 01325827 _____ () C:\Users\Daniel\Downloads\adwcleaner_3.208.exe
2014-05-16 17:39 - 2014-05-18 17:54 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-16 17:39 - 2014-05-16 17:39 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-16 17:39 - 2014-05-16 17:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-16 17:39 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-16 17:39 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-16 17:39 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-16 17:26 - 2014-05-16 18:11 - 00002352 _____ () C:\Users\Daniel\Desktop\Rkill.txt
2014-05-16 17:25 - 2014-05-16 17:25 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\Daniel\Downloads\rkill.exe
2014-05-16 17:17 - 2014-05-16 17:17 - 00001080 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-05-16 17:17 - 2014-05-16 17:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\VS Revo Group
2014-05-16 17:17 - 2014-05-16 17:17 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-05-16 17:17 - 2014-05-16 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-05-16 17:17 - 2014-05-16 17:17 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-05-16 17:17 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2014-05-16 08:56 - 2014-05-16 08:56 - 00004132 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-05-16 08:48 - 2014-05-16 08:48 - 00000000 ____D () C:\Windows\ERUNT
2014-05-16 08:47 - 2014-05-16 08:47 - 01016261 _____ (Thisisu) C:\Users\Daniel\Downloads\JRT_6.1.4.exe
2014-05-16 08:30 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-16 08:29 - 2014-05-19 22:54 - 00000000 ____D () C:\AdwCleaner
2014-05-16 08:29 - 2014-05-16 08:29 - 01325827 _____ () C:\Users\Daniel\Downloads\adwcleaner08.exe
2014-05-16 08:14 - 2014-05-16 08:14 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieUserList
2014-05-16 08:14 - 2014-05-16 08:14 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieSiteList
2014-05-16 08:11 - 2014-05-16 08:11 - 00008619 _____ () C:\Users\Daniel\AppData\Local\CleanupUninstall.txt
2014-05-16 08:11 - 2014-05-16 08:11 - 00000000 ____D () C:\ProgramData\Razer
2014-05-16 08:00 - 2014-05-16 17:35 - 00000000 ____D () C:\ProgramData\IObit
2014-05-16 08:00 - 2014-05-16 17:35 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-05-16 08:00 - 2014-05-16 08:00 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\ProductData
2014-05-16 08:00 - 2014-05-16 08:00 - 00000000 ____D () C:\ProgramData\ProductData
2014-05-16 07:59 - 2014-05-16 07:59 - 12569408 _____ (IObit) C:\Users\Daniel\Downloads\iobituninstaller_3.2.0.128.exe
2014-05-16 07:50 - 2014-05-16 07:50 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Daniel\Downloads\mbam-setup-2.0.1.1004 (1).exe
2014-05-16 07:35 - 2014-05-19 23:06 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-16 07:35 - 2014-05-16 07:35 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-15 17:55 - 2014-05-15 17:55 - 00000045 _____ () C:\Users\Daniel\AppData\Roaming\WB.CFG
2014-05-15 16:02 - 2014-05-15 16:02 - 00000000 ____D () C:\ProgramData\AllaboutApp
2014-05-15 16:01 - 2014-05-15 16:02 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-15 01:19 - 2014-05-17 18:04 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Curse
2014-05-14 18:03 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-14 18:03 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-14 18:03 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-14 18:03 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-14 18:03 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-14 18:03 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 14:48 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 14:48 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 14:48 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 14:48 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 14:48 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 14:48 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 14:48 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 14:48 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 14:48 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 14:48 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 14:48 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 14:48 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 14:48 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 14:48 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 14:48 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 14:48 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 14:48 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 14:48 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 14:48 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 14:48 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 14:48 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 14:48 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 14:48 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 14:48 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 14:48 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 14:48 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 14:48 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 14:48 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 14:48 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 14:48 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 14:48 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 14:48 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 14:48 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 14:48 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-06 19:12 - 2014-05-14 19:18 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 19:12 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-06 19:12 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-06 19:12 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-06 19:12 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-06 19:12 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-06 19:12 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-06 19:12 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-06 19:12 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-06 19:12 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-06 19:12 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-06 19:12 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-06 19:12 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-06 19:12 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-06 19:12 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-06 19:12 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-06 19:12 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-06 19:12 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-06 19:12 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-06 19:12 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-06 19:12 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-06 19:12 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-06 19:12 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-06 19:12 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-06 19:12 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-06 19:12 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-06 19:12 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-06 19:12 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-06 19:12 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-06 19:12 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-06 19:12 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-06 19:12 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-06 19:12 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-06 19:12 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-06 19:12 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-06 19:12 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-06 19:12 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-06 19:12 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-06 19:12 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-06 19:12 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-06 19:12 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-06 19:12 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-06 19:12 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-06 19:12 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-06 19:12 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-22 12:07 - 2014-04-22 12:07 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-22 12:07 - 2014-04-22 12:07 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys

==================== One Month Modified Files and Folders =======

2014-05-19 23:16 - 2014-05-19 23:15 - 00019892 _____ () C:\Users\Daniel\Downloads\FRST.txt
2014-05-19 23:15 - 2014-05-18 19:35 - 00000000 ____D () C:\FRST
2014-05-19 23:15 - 2012-12-23 17:32 - 00000000 ____D () C:\Users\Daniel\AppData\Local\PMB Files
2014-05-19 23:13 - 2014-05-17 15:58 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Spotify
2014-05-19 23:13 - 2009-07-14 19:58 - 00711778 _____ () C:\Windows\system32\perfh007.dat
2014-05-19 23:13 - 2009-07-14 19:58 - 00154974 _____ () C:\Windows\system32\perfc007.dat
2014-05-19 23:13 - 2009-07-14 07:13 - 01649420 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-19 23:13 - 2009-07-14 06:45 - 00013728 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-19 23:13 - 2009-07-14 06:45 - 00013728 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-19 23:09 - 2014-05-19 23:09 - 00000849 _____ () C:\Users\Daniel\Desktop\JRT.txt
2014-05-19 23:09 - 2012-12-25 05:25 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Skype
2014-05-19 23:07 - 2014-05-19 19:22 - 00000004 _____ () C:\Windows\SysWOW64\GVTunner.ref
2014-05-19 23:07 - 2012-12-25 04:01 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-19 23:07 - 2012-12-21 22:06 - 00030528 _____ () C:\Windows\GVTDrv64.sys
2014-05-19 23:06 - 2014-05-16 07:35 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-19 23:06 - 2014-01-23 13:45 - 00020042 _____ () C:\Windows\setupact.log
2014-05-19 23:06 - 2013-12-21 15:00 - 01246502 _____ () C:\Windows\WindowsUpdate.log
2014-05-19 23:06 - 2012-12-21 16:47 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-05-19 23:06 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-19 23:04 - 2014-05-19 23:04 - 01016261 _____ (Thisisu) C:\Users\Daniel\Downloads\JRT(1).exe
2014-05-19 23:02 - 2013-03-12 04:23 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-19 22:55 - 2014-02-23 00:14 - 00190236 _____ () C:\Windows\PFRO.log
2014-05-19 22:54 - 2014-05-16 08:29 - 00000000 ____D () C:\AdwCleaner
2014-05-19 22:51 - 2014-05-19 22:51 - 01326389 _____ () C:\Users\Daniel\Downloads\adwcleaner_3.210.exe
2014-05-19 22:50 - 2012-12-23 17:32 - 00000000 ____D () C:\ProgramData\PMB Files
2014-05-19 19:31 - 2012-12-25 04:01 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-19 19:24 - 2014-05-17 15:58 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Spotify
2014-05-19 13:16 - 2014-05-19 13:16 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2014-05-19 13:16 - 2014-05-19 13:16 - 00000776 _____ () C:\Windows\LkmdfCoInst.log
2014-05-18 20:05 - 2014-05-18 20:05 - 00042610 _____ () C:\Users\Daniel\Desktop\Addition.txt
2014-05-18 20:05 - 2014-05-18 20:04 - 00054308 _____ () C:\Users\Daniel\Desktop\FRST.txt
2014-05-18 19:35 - 2014-05-18 19:34 - 02067456 _____ (Farbar) C:\Users\Daniel\Downloads\FRST64.exe
2014-05-18 17:54 - 2014-05-16 17:39 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-18 15:04 - 2013-02-06 00:26 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-05-18 03:24 - 2014-01-28 02:45 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Battle.net
2014-05-18 00:49 - 2013-01-02 18:36 - 00000000 ____D () C:\Users\Daniel\Documents\StarCraft II
2014-05-17 23:19 - 2014-01-28 02:55 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-05-17 21:45 - 2014-05-17 18:04 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Curse Client
2014-05-17 18:04 - 2014-05-17 18:04 - 00001040 _____ () C:\Users\Daniel\Desktop\Curse.lnk
2014-05-17 18:04 - 2014-05-17 18:04 - 00001026 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse.lnk
2014-05-17 18:04 - 2014-05-15 01:19 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Curse
2014-05-17 18:04 - 2012-12-21 17:18 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-17 15:58 - 2014-05-17 15:58 - 00001815 _____ () C:\Users\Daniel\Desktop\Spotify.lnk
2014-05-17 15:58 - 2014-05-17 15:58 - 00001801 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-05-17 15:57 - 2014-05-17 15:57 - 00126112 _____ (Spotify Ltd) C:\Users\Daniel\Downloads\SpotifySetup.exe
2014-05-17 01:38 - 2014-01-28 02:45 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-05-17 01:34 - 2014-05-17 01:27 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-17 01:27 - 2014-05-17 01:27 - 00000970 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-05-17 01:27 - 2012-12-26 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-05-17 01:25 - 2014-05-17 01:25 - 01141680 _____ () C:\Users\Daniel\Downloads\SteamSetup.exe
2014-05-16 23:16 - 2014-05-16 23:16 - 41337928 _____ (Curse) C:\Users\Daniel\Downloads\CurseClientSetup.exe
2014-05-16 22:34 - 2014-05-16 22:34 - 00001081 _____ () C:\Users\Daniel\Desktop\Brain Workshop.lnk
2014-05-16 22:34 - 2014-05-16 22:34 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Brain Workshop
2014-05-16 22:34 - 2014-05-16 22:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brain Workshop
2014-05-16 22:34 - 2014-05-16 22:34 - 00000000 ____D () C:\Program Files (x86)\Brain Workshop
2014-05-16 22:34 - 2014-05-16 22:33 - 10825715 _____ (Paul Hoskinson & Jonathan Toomim ) C:\Users\Daniel\Downloads\brainworkshop-4.8.4-win32-setup.exe
2014-05-16 19:18 - 2014-05-16 19:18 - 00001166 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-16 19:18 - 2014-05-16 19:18 - 00001154 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-16 19:18 - 2014-05-16 19:18 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Mozilla
2014-05-16 19:18 - 2014-05-16 19:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-16 19:18 - 2014-05-16 19:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-16 19:17 - 2014-05-16 19:17 - 00283144 _____ (Mozilla) C:\Users\Daniel\Downloads\Firefox Setup Stub 29.0.1.exe
2014-05-16 19:14 - 2013-08-24 20:56 - 00000000 ____D () C:\Users\Daniel\Desktop\Bilder
2014-05-16 19:14 - 2012-12-21 17:18 - 00000000 ____D () C:\Users\Daniel
2014-05-16 19:11 - 2012-12-21 17:39 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-16 18:47 - 2012-12-21 17:18 - 00001384 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-16 18:12 - 2014-05-16 18:12 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-16 18:11 - 2014-05-16 18:11 - 02347384 _____ (ESET) C:\Users\Daniel\Downloads\esetsmartinstaller_deu.exe
2014-05-16 18:11 - 2014-05-16 17:26 - 00002352 _____ () C:\Users\Daniel\Desktop\Rkill.txt
2014-05-16 18:07 - 2014-05-16 18:07 - 02800104 _____ (AVAST Software) C:\Users\Daniel\Downloads\avast-browser-cleanup.exe
2014-05-16 17:53 - 2014-05-16 17:53 - 01016261 _____ (Thisisu) C:\Users\Daniel\Downloads\JRT.exe
2014-05-16 17:47 - 2014-05-16 17:47 - 01325827 _____ () C:\Users\Daniel\Downloads\adwcleaner_3.208.exe
2014-05-16 17:39 - 2014-05-16 17:39 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-16 17:39 - 2014-05-16 17:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-16 17:35 - 2014-05-16 08:00 - 00000000 ____D () C:\ProgramData\IObit
2014-05-16 17:35 - 2014-05-16 08:00 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-05-16 17:30 - 2013-01-14 18:13 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\uTorrent
2014-05-16 17:30 - 2012-12-23 23:08 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Turbine
2014-05-16 17:25 - 2014-05-16 17:25 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\Daniel\Downloads\rkill.exe
2014-05-16 17:22 - 2013-01-24 16:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-16 17:17 - 2014-05-16 17:17 - 00001080 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-05-16 17:17 - 2014-05-16 17:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\VS Revo Group
2014-05-16 17:17 - 2014-05-16 17:17 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-05-16 17:17 - 2014-05-16 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-05-16 17:17 - 2014-05-16 17:17 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-05-16 08:56 - 2014-05-16 08:56 - 00004132 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-05-16 08:48 - 2014-05-16 08:48 - 00000000 ____D () C:\Windows\ERUNT
2014-05-16 08:47 - 2014-05-16 08:47 - 01016261 _____ (Thisisu) C:\Users\Daniel\Downloads\JRT_6.1.4.exe
2014-05-16 08:33 - 2009-07-14 06:45 - 00417024 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-16 08:29 - 2014-05-16 08:29 - 01325827 _____ () C:\Users\Daniel\Downloads\adwcleaner08.exe
2014-05-16 08:14 - 2014-05-16 08:14 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieUserList
2014-05-16 08:14 - 2014-05-16 08:14 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieSiteList
2014-05-16 08:14 - 2012-12-25 04:01 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-16 08:13 - 2012-12-21 16:49 - 00109296 _____ () C:\Users\Daniel\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-16 08:11 - 2014-05-16 08:11 - 00008619 _____ () C:\Users\Daniel\AppData\Local\CleanupUninstall.txt
2014-05-16 08:11 - 2014-05-16 08:11 - 00000000 ____D () C:\ProgramData\Razer
2014-05-16 08:11 - 2012-12-31 17:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Razer
2014-05-16 08:10 - 2013-01-09 18:34 - 00000000 ____D () C:\ProgramData\Hi-Rez Studios
2014-05-16 08:09 - 2013-08-26 16:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Opera Software
2014-05-16 08:08 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-16 08:04 - 2012-12-23 22:52 - 00000000 ____D () C:\Program Files (x86)\Turbine
2014-05-16 08:04 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-16 08:00 - 2014-05-16 08:00 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\ProductData
2014-05-16 08:00 - 2014-05-16 08:00 - 00000000 ____D () C:\ProgramData\ProductData
2014-05-16 07:59 - 2014-05-16 07:59 - 12569408 _____ (IObit) C:\Users\Daniel\Downloads\iobituninstaller_3.2.0.128.exe
2014-05-16 07:50 - 2014-05-16 07:50 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Daniel\Downloads\mbam-setup-2.0.1.1004 (1).exe
2014-05-16 07:41 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-05-16 07:35 - 2014-05-16 07:35 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-15 22:49 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-05-15 17:55 - 2014-05-15 17:55 - 00000045 _____ () C:\Users\Daniel\AppData\Roaming\WB.CFG
2014-05-15 16:02 - 2014-05-15 16:02 - 00000000 ____D () C:\ProgramData\AllaboutApp
2014-05-15 16:02 - 2014-05-15 16:01 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-15 14:33 - 2013-12-17 23:39 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-05-15 14:33 - 2013-02-06 00:26 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-05-15 14:33 - 2013-02-06 00:26 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-05-14 21:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-14 19:25 - 2012-12-21 17:18 - 00000000 ___RD () C:\Users\Daniel\Virtual Machines
2014-05-14 19:25 - 2012-12-21 17:18 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-14 19:18 - 2014-05-06 19:12 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-14 19:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-14 18:03 - 2013-07-22 15:38 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-14 18:02 - 2013-01-02 18:48 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 01:02 - 2013-03-12 04:23 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 01:02 - 2013-03-12 04:23 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 01:02 - 2013-01-09 18:37 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-09 08:26 - 2012-12-25 04:01 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-09 08:26 - 2012-12-25 04:01 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-09 08:14 - 2014-05-14 14:48 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-14 14:48 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-06 06:40 - 2014-05-14 18:03 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-14 18:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-14 18:03 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-14 18:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-14 18:03 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-14 18:03 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-04-22 12:07 - 2014-04-22 12:07 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-22 12:07 - 2014-04-22 12:07 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-04-22 12:07 - 2013-12-17 23:39 - 00001969 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-04-22 12:07 - 2013-03-11 16:38 - 00208416 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-04-22 12:07 - 2013-03-11 16:38 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-04-22 12:07 - 2013-02-06 00:26 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1400157187704
2014-04-22 12:07 - 2013-02-06 00:26 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1400157187704
2014-04-22 12:07 - 2013-02-06 00:26 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-04-22 12:07 - 2013-02-06 00:26 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-04-22 12:07 - 2013-02-06 00:26 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-04-20 04:03 - 2012-12-25 05:25 - 00000000 ___RD () C:\Program Files (x86)\Skype

Some content of TEMP:
====================
C:\Users\Daniel\AppData\Local\Temp\i4jdel0.exe
C:\Users\Daniel\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Daniel\AppData\Local\Temp\Quarantine.exe
C:\Users\Daniel\AppData\Local\Temp\Uninstaller-5876.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2014-05-14 14:48] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-19 07:55

==================== End Of Log ============================

--- --- ---

schrauber · 20.05.2014, 12:36

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Speedial-Virus/Computer bestmöglich sichern

Plagegeister aller Art und deren Bekämpfung: Speedial-Virus/Computer bestmöglich sichern