| |  Windows 8: Browser öffnet Werbung in Tabs
 Guten Morgen Zusammen,
auf Grund einer unsachgemäßen Behandlung des Laptops einer Bakannten, vermute ich auf diesem Viren o.ä. Schadsoftware. Neben dem Problem, dass der Internet Browser Werbung in neuen Tabs öffnet, ist primär die System-Geschwindigkeit heruntergesetzt.
Hier die logfiles 1. defogger
defogger korrekt ausgeführt und ohne Fehlermeldung beendet. 2. frst-logs a. FRST PHP-Code: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014
Ran by SIK (administrator) on STELLA on 03-06-2014 07:18:05
Running from C:\Users\SIK\Downloads
Platform: Windows 8.1 (Update 1) (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Bandoo Media Inc.) C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrCoordinator.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Bandoo Media Inc.) C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrCoordinator.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Program Files (x86)\LPT\srpts.exe
(GenTechnologies Apps, LLC) C:\ProgramData\MovieMode\up\2.6.78\MovieModeService.exe
() C:\Program Files (x86)\NewPlayer\NewPlayerUpdaterService.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
() C:\Program Files (x86)\LPT\srptm.exe
() C:\Program Files (x86)\NewPlayer\NewPlayerUpdater.exe
() C:\Program Files (x86)\Re-markit Corp\Re-markit158.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
() C:\Program Files (x86)\sizlsearch\updatesizlsearch.exe
() C:\Program Files (x86)\sizlsearch\bin\utilsizlsearch.exe
() C:\Program Files\003\vxlsnyaiet64.exe
(Atheros) C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
() C:\Program Files (x86)\Re-markit Corp\Re-markit_wd.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(GenTechnologies Apps, LLC) C:\ProgramData\MovieMode\up\2.6.78\MovieMode.exe
(GenTechnologies Apps, LLC) C:\ProgramData\MovieMode\up\2.6.78\MovieMode64.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Bandoo Media Inc.) C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrUI.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Smartbar) C:\Users\SIK\AppData\Local\Smartbar\Application\Smartbar.exe
(Updater) C:\ProgramData\Updater\updater.exe
() C:\Users\SIK\AppData\Local\wgwfx.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(WatchDog) C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(WatchDog) C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe
(WatchDog) C:\ProgramData\RHelpers\IeHelper\IeHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\livecomm.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2012-07-31] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-07-31] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2864016 2012-08-11] (ELAN Microelectronics Corp.)
HKLM\...\Run: [BtPreLoad] => C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-07-31] ()
HKLM-x32\...\Run: [BakupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [533056 2012-07-31] (NTI Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [508256 2012-04-23] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [LManager] => [X]
HKLM-x32\...\Run: [ApnTBMon] => "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
HKLM-x32\...\Run: [Registry Helper] => "C:\Program Files (x86)\Registry Helper\RegistryHelper.Exe" /boot
HKLM-x32\...\Run: [Updater] => C:\ProgramData\Updater\Updater.exe [489824 2014-04-25] (Updater)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\Run: [Updater] => C:\ProgramData\Updater\Updater.exe [489824 2014-04-25] (Updater)
HKU\S-1-5-21-3055392138-328629538-331999133-1001\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)
HKU\S-1-5-21-3055392138-328629538-331999133-1002\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1193176 2012-08-28] ()
HKU\S-1-5-21-3055392138-328629538-331999133-1002\...\Run: [Facebook Update] => C:\Users\SIK\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-03-25] (Facebook Inc.)
HKU\S-1-5-21-3055392138-328629538-331999133-1002\...\Run: [Browser Infrastructure Helper] => C:\Users\SIK\AppData\Local\Smartbar\Application\Smartbar.exe [28192 2014-04-29] (Smartbar)
HKU\S-1-5-21-3055392138-328629538-331999133-1002\...\Run: [Updater] => C:\ProgramData\Updater\updater.exe [489824 2014-04-25] (Updater)
HKU\S-1-5-21-3055392138-328629538-331999133-1002\...\Run: [wgwfx] => c:\users\sik\appdata\local\wgwfx.exe [3252224 2014-05-24] ()
HKU\S-1-5-21-3055392138-328629538-331999133-1002\...\Run: [GoogleChromeAutoLaunch_E7ECF109E21F1ECEE9154F39D8F1E150] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032 2014-04-24] (Google Inc.)
HKU\S-1-5-21-3055392138-328629538-331999133-1002\...\MountPoints2: {d93dd848-d2b3-11e3-be8d-083e8e34f30e} - "E:\HTC_Sync_Manager_PC.exe"
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\Program Files (x86)\SupTab\SearchProtect64.dll [96768 2014-03-05] (Skytech Co., Ltd.)
AppInit_DLLs-x32: C:\PROGRA~2\SupTab\SEARCH~1.DLL => C:\Program Files (x86)\SupTab\SearchProtect32.dll [85504 2014-03-05] (Skytech Co., Ltd.)
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
Startup: C:\Users\SIK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
HKLM\...\AppCertDlls: [x86] -> C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll [489984 2014-05-19] () <===== ATTENTION
HKLM\...\AppCertDlls: [x64] -> C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll [664576 2014-05-19] () <===== ATTENTION
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:13828
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04ePnGQO85j2OSh_FMT7NyZeux9vUvCgL7xezn4Vz8tcXYH96fPGOogLCt3-6v3BPI-_RBGi85H_E1CYahnHFZ4fMFaenkc828aMJGbfZHgTMjNpwkC8ySXyce300joA,,&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3319709&octid=EB_ORIGINAL_CTID&ISID=M1B0F146F-B0D9-410D-B3F3-0FF4CA7DC7D5&SearchSource=55&CUI=&UM=5&UP=SP1102DE8A-3E25-48BE-B0E7-A4AF56160420&SSPV=
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1396039055&from=tugs&uid=HitachiXHTS545050A7E380_TEK51A39GE2GASGE2GASX
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04ePnGQO85j2OSh_FMT7NyZeux9vUvCgL7xezn4Vz8tcXYH96fPGOogLCt3-6v3BPI-_RBGi85H_E1CYahnHFZ4fMFaenkc828aMJGbfZHgTMjNpwkC8ySXyce300joA,,&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396039055&from=tugs&uid=HitachiXHTS545050A7E380_TEK51A39GE2GASGE2GASX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1396039055&from=tugs&uid=HitachiXHTS545050A7E380_TEK51A39GE2GASGE2GASX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=cmi_14_13_ch&cd=2XzuyEtN2Y1L1QzutDzztA0Ezz0EtAyE0FtAtD0EtA0A0AtCtN0D0Tzu0SzztCzztN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyCtDyByEtB0C0BtDtGyByD0BzztGyC0C0B0FtGtAyByBzytGtBtCzytCtDtC0AyByC0B0DyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtDzzyDtCyByD0DtG0CtAtAtAtGyE0D0EyDtG0AyCtDtBtGtD0EtAyBzztBtDyEtAyEzzyB2Q&cr=556745332&ir=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1396039055&from=tugs&uid=HitachiXHTS545050A7E380_TEK51A39GE2GASGE2GASX&q={searchTerms}
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396039055&from=tugs&uid=HitachiXHTS545050A7E380_TEK51A39GE2GASGE2GASX&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396039055&from=tugs&uid=HitachiXHTS545050A7E380_TEK51A39GE2GASGE2GASX&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=362&systemid=406&v=a12712-300&apn_uid=5650260003214936&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKLM - {E26FDB55-4F7E-4C0F-877E-CE0A17143D4B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04ePnGQO85j2OSh_FMT7NyZeux9vUvCgL7xezn4Vz8tcXYH96fPGOogLCt3-6v3BPI-_RBGi85H_E1CYahnHFZ4fMFaenkc828aMJGbfZHgTMjNpwkC8ySXyce300jpg,,&q={searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04ePnGQO85j2OSh_FMT7NyZeux9vUvCgL7xezn4Vz8tcXYH96fPGOogLCt3-6v3BPI-_RBGi85H_E1CYahnHFZ4fMFaenkc828aMJGbfZHgTMjNpwkC8ySXyce300jpg,,&q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=362&systemid=406&v=a12712-300&apn_uid=5650260003214936&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04ePnGQO85j2OSh_FMT7NyZeux9vUvCgL7xezn4Vz8tcXYH96fPGOogLCt3-6v3BPI-_RBGi85H_E1CYahnHFZ4fMFaenkc828aMJGbfZHgTMjNpwkC8ySXyce300joA,,&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04ePnGQO85j2OSh_FMT7NyZeux9vUvCgL7xezn4Vz8tcXYH96fPGOogLCt3-6v3BPI-_RBGi85H_E1CYahnHFZ4fMFaenkc828aMJGbfZHgTMjNpwkC8ySXyce300joA,,&q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=362&systemid=406&v=a12712-300&apn_uid=5650260003214936&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
BHO: HQVid8.1 - {11111111-1111-1111-1111-110511311172} - C:\Program Files (x86)\HQVid8.1\HQVid8.1-bho64.dll (High-QualityV9)
BHO: MediaPlayerplus - {11111111-1111-1111-1111-110511421146} - C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho64.dll (Freeven)
BHO: Freeven Pro 1.3 - {11111111-1111-1111-1111-110511421155} - C:\Program Files (x86)\Freeven Pro 1.3\Freeven Pro 1.3-bho64.dll (Freeven)
BHO: SmartbarInternetExplorerBHOEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll" No File
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO-x32: 2rs3 - {10AD2C61-0898-4348-8600-14A342F22AC3} - C:\Program Files (x86)\SupraSavings\2rs3.dll ()
BHO-x32: MediaPlayerplus - {11111111-1111-1111-1111-110511421146} - C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho.dll (Freeven)
BHO-x32: No Name - {26B19FA4-E8A1-4A1B-A163-1A1E46F830DD} - No File
BHO-x32: SmartbarInternetExplorerBHOEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" No File
BHO-x32: Search Deals - {44ed99e2-16a6-4b89-80d6-5b21cf42e78b} - C:\ProgramData\SearchDeals2\IE\common.dll (CloudCanvas, Inc. DBA Injekt)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: mysearchdial Helper Object - {EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} - C:\Program Files (x86)\Mysearchdial\1.8.29.0\bh\mysearchdial.dll No File
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll" No File
Toolbar: HKLM - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" No File
Toolbar: HKLM-x32 - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - mysearchdial Toolbar - {3004627E-F8E9-4E8B-909D-316753CBA923} - C:\Program Files (x86)\Mysearchdial\1.8.29.0\mysearchdialTlbr.dll No File
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll" No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\SIK\AppData\Roaming\Mozilla\Firefox\Profiles\1avvoptb.default
FF NewTab: hxxp://www.trovi.com/?gd=&ctid=CT3319709&octid=EB_ORIGINAL_CTID&ISID=M1B0F146F-B0D9-410D-B3F3-0FF4CA7DC7D5&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP1102DE8A-3E25-48BE-B0E7-A4AF56160420
FF SearchEngineOrder.1: Mysearchdial
FF Homepage: hxxp://start.mysearchdial.com/?f=1&a=cmi_14_13_ch&cd=2XzuyEtN2Y1L1QzutDzztA0Ezz0EtAyE0FtAtD0EtA0A0AtCtN0D0Tzu0SzztCzztN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyCtDyByEtB0C0BtDtGyByD0BzztGyC0C0B0FtGtAyByBzytGtBtCzytCtDtC0AyByC0B0DyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtDzzyDtCyByD0DtG0CtAtAtAtGyE0D0EyDtG0AyCtDtBtGtD0EtAyBzztBtDyEtAyEzzyB2Q&cr=556745332&ir=
FF Keyword.URL: hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=362&systemid=406&v=a12712-300&apn_dtid=BND406&apn_ptnrs=AG6&apn_uid=5650260003214936&o=APN10645&q=
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll ( )
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\SIK\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF user.js: detected! => C:\Users\SIK\AppData\Roaming\Mozilla\Firefox\Profiles\1avvoptb.default\user.js
FF SearchPlugin: C:\Users\SIK\AppData\Roaming\Mozilla\Firefox\Profiles\1avvoptb.default\searchplugins\Ask.xml
FF SearchPlugin: C:\Users\SIK\AppData\Roaming\Mozilla\Firefox\Profiles\1avvoptb.default\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Users\SIK\AppData\Roaming\Mozilla\Firefox\Profiles\1avvoptb.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\Ask.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\webssearches.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: MediaPlayerplus - C:\Users\SIK\AppData\Roaming\Mozilla\Firefox\Profiles\1avvoptb.default\Extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com [2014-06-03]
FF Extension: Freeven Pro 1.3 - C:\Users\SIK\AppData\Roaming\Mozilla\Firefox\Profiles\1avvoptb.default\Extensions\e20dc619-d8c4-48f1-ae07-641cefb43165@3c4d943f-ad97-4f6e-aa94-d9671175a3d0.com [2014-03-28]
FF Extension: HQVid8.1 - C:\Users\SIK\AppData\Roaming\Mozilla\Firefox\Profiles\1avvoptb.default\Extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com [2014-04-02]
FF Extension: mysearchdial.com - C:\Users\SIK\AppData\Roaming\Mozilla\Firefox\Profiles\1avvoptb.default\Extensions\ffxtlbr@mysearchdial.com [2014-03-28]
FF Extension: Quick Start - C:\Users\SIK\AppData\Roaming\Mozilla\Firefox\Profiles\1avvoptb.default\Extensions\quick_start@gmail.com [2014-04-10]
FF Extension: SupraSavings - C:\Users\SIK\AppData\Roaming\Mozilla\Firefox\Profiles\1avvoptb.default\Extensions\SupraSavings@jetpack [2014-05-24]
FF Extension: Shopping Helper Smartbar - C:\Users\SIK\AppData\Roaming\Mozilla\Firefox\Profiles\1avvoptb.default\Extensions\{3330fad4-7dc6-9ec9-bcdc-5611a4504314} [2014-06-03]
FF Extension: Ask New Tabs - C:\Users\SIK\AppData\Roaming\Mozilla\Firefox\Profiles\1avvoptb.default\Extensions\{A159B887-7EA3-B6C7-59EB-D1011D624DC6} [2014-05-24]
FF Extension: MySearchDial - C:\Users\SIK\AppData\Roaming\Mozilla\Firefox\Profiles\1avvoptb.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}.xpi [2014-03-28]
FF Extension: Re-markit - C:\Program Files (x86)\Re-markit Corp\158.xpi [2014-04-02]
FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\SIK\AppData\Roaming\Mozilla\Firefox\Profiles\1avvoptb.default\extensions\quick_start@gmail.com
FF Extension: Quick Start - C:\Users\SIK\AppData\Roaming\Mozilla\Firefox\Profiles\1avvoptb.default\extensions\quick_start@gmail.com [2014-04-10]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF HKCU\...\Firefox\Extensions: [{acc15b07-9e16-4c90-b048-37478d8b07ec}] - C:\Program Files (x86)\Re-markit Corp\158.xpi
FF Extension: Re-markit - C:\Program Files (x86)\Re-markit Corp\158.xpi [2014-04-02]
Chrome:
=======
CHR HomePage: hxxp://www.trovi.com/?gd=&ctid=CT3319709&octid=EB_ORIGINAL_CTID&ISID=M1B0F146F-B0D9-410D-B3F3-0FF4CA7DC7D5&SearchSource=55&CUI=&UM=5&UP=SP1102DE8A-3E25-48BE-B0E7-A4AF56160420&SSPV=
CHR StartupUrls: "hxxp://www.trovi.com/?gd=&ctid=CT3319709&octid=EB_ORIGINAL_CTID&ISID=M1B0F146F-B0D9-410D-B3F3-0FF4CA7DC7D5&SearchSource=55&CUI=&UM=5&UP=SP1102DE8A-3E25-48BE-B0E7-A4AF56160420&SSPV=", "hxxp://www.google.de/"
CHR DefaultSearchKeyword: ask.com
CHR DefaultSearchProvider: Ask.com
CHR DefaultSearchURL: hxxp://dts.search.ask.com/sr?src=crb&gct=ds&appid=362&systemid=406&v=a12712-300&apn_uid=5650260003214936&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
CHR DefaultNewTabURL:
CHR Extension: (Freeven Pro 1.3) - C:\Users\SIK\AppData\Local\Google\Chrome\User Data\Default\Extensions\adbpopomabpienjnifocifondadaogpj [2014-04-13]
CHR Extension: (SupraSavings) - C:\Users\SIK\AppData\Local\Google\Chrome\User Data\Default\Extensions\afjegdojkkoghnbiollpogeeimocanmk [2014-05-24]
CHR Extension: (PriceGong) - C:\Users\SIK\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok [2014-05-25]
CHR Extension: (Adblock Plus) - C:\Users\SIK\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-04-12]
CHR Extension: (HQ-Video-Pro-1.9) - C:\Users\SIK\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm [2014-04-02]
CHR Extension: (MediaPlayerplus) - C:\Users\SIK\AppData\Local\Google\Chrome\User Data\Default\Extensions\majjphhgppkndjjkmhhnbgafooenebhd [2014-03-28]
CHR Extension: (Google Wallet) - C:\Users\SIK\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-24]
CHR Extension: (Quick start) - C:\Users\SIK\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-03-28]
CHR HKLM-x32\...\Chrome\Extension: [aaaaabcbmongicmdegkmmfgdickgnnob] - C:\Users\SIK\AppData\Local\ilividmoviestoolbar181\GC\toolbar.crx [2013-12-11]
CHR HKLM-x32\...\Chrome\Extension: [bkomkajifikmkfnjgphkjcfeepbnojok] - C:\Program Files (x86)\PriceGong\2.6.11\pricegong.crx [2013-03-04]
CHR HKLM-x32\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\SIK\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx [2014-03-28]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [207488 2012-07-31] (Qualcomm Atheros Commnucations)
S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [36392 2014-03-14] (Just Develop It)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2415760 2012-07-27] (Acer Incorporated)
R2 DatamngrCoordinator; C:\Program Files (x86)\Movies Toolbar\Datamngr\DatamngrCoordinator.exe [3544064 2014-05-19] (Bandoo Media Inc.)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [466064 2012-07-30] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [659600 2012-07-31] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-05-10] (WildTangent)
S2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [515584 2014-03-17] (Cherished Technololgy LIMITED)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 LPTSystemUpdater; C:\Program Files (x86)\LPT\srpts.exe [32288 2014-02-09] ()
R2 MovieMode; C:\ProgramData\MovieMode\up\2.6.78\MovieMode.exe [152720 2014-04-19] (GenTechnologies Apps, LLC)
R2 NewPlayerUpdaterService; C:\Program Files (x86)\NewPlayer\NewPlayerUpdaterService.exe [11776 2014-05-05] ()
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-07-31] (NTI Corporation)
R2 Re-markit; C:\Program Files (x86)\Re-markit Corp\Re-markit158.exe [142848 2014-04-02] ()
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2012-08-28] (Dritek System INC.)
R2 Update sizlsearch; C:\Program Files (x86)\sizlsearch\updatesizlsearch.exe [317728 2014-06-03] ()
R2 Util sizlsearch; C:\Program Files (x86)\sizlsearch\bin\utilsizlsearch.exe [317728 2014-06-03] ()
R2 vxlsnyaiet64; C:\Program Files\003\vxlsnyaiet64.exe [706560 2014-05-24] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [496640 2014-03-28] (Cherished Technololgy LIMITED)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe [81536 2012-08-01] (Atheros)
S2 AntiVirWebService; "C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe" [X]
==================== Drivers (Whitelisted) ====================
S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-07-31] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R1 F06DEFF2-5B9C-490D-910F-35D3A91196222; C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\setmgrc1.cfg [36216 2014-05-19] (Bandoo Media Inc.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-03-18] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2012-08-28] (Dritek System Inc.)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-03-18] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-03-18] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2014-03-18] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-04-23] (Microsoft Corporation)
R1 {9d5747ee-0448-4681-8337-1555de75a3b6}w64; C:\Windows\System32\drivers\{9d5747ee-0448-4681-8337-1555de75a3b6}w64.sys [61120 2014-05-22] (StdLib)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-03 07:18 - 2014-06-03 07:19 - 00032225 _____ () C:\Users\SIK\Downloads\FRST.txt
2014-06-03 07:17 - 2014-06-03 07:18 - 00000000 ____D () C:\FRST
2014-06-03 07:17 - 2014-06-03 07:17 - 02068992 _____ (Farbar) C:\Users\SIK\Downloads\FRST64.exe
2014-06-03 07:15 - 2014-06-03 07:15 - 01059840 _____ (Farbar) C:\Users\SIK\Downloads\FRST.exe
2014-06-03 07:13 - 2014-06-03 07:13 - 00000468 _____ () C:\Users\SIK\Downloads\defogger_disable.log
2014-06-03 07:13 - 2014-06-03 07:13 - 00000000 _____ () C:\Users\SIK\defogger_reenable
2014-06-03 07:12 - 2014-06-03 07:13 - 00050477 _____ () C:\Users\SIK\Downloads\Defogger.exe
2014-06-03 07:06 - 2014-01-19 09:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-06-03 07:05 - 2014-06-03 07:05 - 00003914 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{362922DB-75C8-4C13-AB5A-53032A7A90DF}
2014-06-03 07:05 - 2014-06-03 07:05 - 00000000 __SHD () C:\Users\SIK\AppData\Local\EmieUserList
2014-06-03 07:05 - 2014-06-03 07:05 - 00000000 __SHD () C:\Users\SIK\AppData\Local\EmieSiteList
2014-06-03 06:52 - 2014-06-03 06:54 - 39809104 _____ (Google Inc.) C:\Users\SIK\Downloads\ChromeStandaloneSetup_35.0.1916.114.exe
2014-06-03 06:41 - 2014-06-03 06:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-06-03 06:41 - 2014-05-07 15:02 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-06-03 06:41 - 2014-05-07 14:59 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-06-03 06:41 - 2014-05-07 14:59 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-06-03 06:41 - 2014-05-07 14:58 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-06-03 06:40 - 2014-06-03 06:41 - 00005661 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_60-b19.log
2014-06-01 20:45 - 2014-06-01 20:45 - 00003098 _____ () C:\WINDOWS\System32\Tasks\{9CDB75FB-B86B-42E9-8BDF-A92020AE7E4F}
2014-06-01 18:37 - 2014-06-01 18:37 - 01582904 _____ (ESET) C:\Users\SIK\Downloads\eset_smart_security_live_installer_v7.exe
2014-06-01 18:37 - 2014-06-01 18:37 - 01582904 _____ (ESET) C:\Users\SIK\Downloads\eset_smart_security_live_installer_v7 (2).exe
2014-06-01 18:37 - 2014-06-01 18:37 - 01582904 _____ (ESET) C:\Users\SIK\Downloads\eset_smart_security_live_installer_v7 (1).exe
2014-05-31 17:31 - 2014-05-31 17:32 - 00942928 _____ () C:\Users\SIK\Downloads\Player.exe
2014-05-26 15:28 - 2014-05-22 18:14 - 00061120 _____ (StdLib) C:\WINDOWS\system32\Drivers\{9d5747ee-0448-4681-8337-1555de75a3b6}w64.sys
2014-05-24 19:41 - 2014-05-24 19:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightspark 0.5.3-git
2014-05-24 19:41 - 2014-05-24 19:41 - 00000000 ____D () C:\Program Files (x86)\Lightspark 0.5.3-git
2014-05-24 19:40 - 2014-05-31 16:07 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-05-24 19:40 - 2014-05-24 19:40 - 00001985 _____ () C:\Users\SIK\Desktop\Sync Folder.lnk
2014-05-24 19:40 - 2014-05-24 19:40 - 00001103 _____ () C:\Users\SIK\Desktop\MyPC Backup.lnk
2014-05-24 19:40 - 2014-05-24 19:40 - 00000000 ____D () C:\Users\SIK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-05-24 19:40 - 2014-05-24 19:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong
2014-05-24 19:40 - 2014-05-24 19:40 - 00000000 ____D () C:\Program Files (x86)\PriceGong
2014-05-24 19:38 - 2014-05-24 19:40 - 00000000 ____D () C:\temp
2014-05-24 19:38 - 2014-05-24 19:38 - 00000000 ____D () C:\Program Files\suprasavings
2014-05-24 19:38 - 2014-05-24 19:38 - 00000000 ____D () C:\Program Files (x86)\SupraSavings
2014-05-24 19:36 - 2014-05-24 19:38 - 00000000 ____D () C:\Program Files\003
2014-05-24 19:35 - 2014-06-02 11:42 - 00000000 ____D () C:\Program Files (x86)\sizlsearch
2014-05-24 19:33 - 2014-05-24 19:34 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-05-24 19:33 - 2014-05-24 19:33 - 00228136 _____ (Premium Installer ) C:\Users\SIK\Downloads\Player-Chrome.exe
2014-05-24 19:07 - 2014-06-03 07:12 - 00000000 ____D () C:\ProgramData\Datamngr
2014-05-24 16:05 - 2014-06-03 07:19 - 01042542 _____ () C:\Users\SIK\AppData\Local\wgwfx.gss
2014-05-24 16:05 - 2014-06-03 07:17 - 00197632 _____ () C:\Users\SIK\AppData\Local\wgwfx.gdb
2014-05-24 16:05 - 2014-05-24 16:05 - 03252224 _____ () C:\Users\SIK\AppData\Local\wgwfx.exe
2014-05-24 15:59 - 2014-05-01 22:30 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-05-24 15:59 - 2014-05-01 22:30 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-19 14:52 - 2014-04-09 00:46 - 00086688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll
2014-05-19 14:52 - 2014-04-09 00:46 - 00028320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll
2014-05-19 14:52 - 2014-04-08 20:54 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll
2014-05-19 14:52 - 2014-04-08 20:54 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll
2014-05-19 14:52 - 2014-03-24 04:30 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-05-19 14:52 - 2014-03-24 04:30 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-05-19 14:52 - 2014-03-24 04:27 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-05-19 14:52 - 2014-03-13 09:42 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-05-19 14:52 - 2014-03-13 08:51 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2014-05-14 20:22 - 2014-05-14 20:22 - 00000000 ____D () C:\Users\SIK\AppData\Local\com
2014-05-14 20:21 - 2014-05-14 20:21 - 00001129 _____ () C:\Users\Public\Desktop\NewPlayer.lnk
2014-05-14 15:49 - 2014-04-11 12:03 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-05-14 15:49 - 2014-04-11 12:03 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-05-14 15:49 - 2014-04-11 10:25 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2014-05-14 15:49 - 2014-04-11 08:04 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-05-14 15:49 - 2014-04-11 07:53 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-05-14 15:49 - 2014-04-11 07:22 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-05-14 15:49 - 2014-04-11 05:54 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-05-14 15:49 - 2014-04-11 05:36 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-05-14 15:49 - 2014-04-11 05:24 - 13288960 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-05-14 15:49 - 2014-04-11 05:06 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-05-14 15:49 - 2014-04-11 05:05 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-14 15:49 - 2014-04-11 05:05 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-05-14 15:49 - 2014-04-11 05:02 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-14 15:49 - 2014-04-11 05:02 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-05-14 15:49 - 2014-04-11 05:01 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-05-14 15:49 - 2014-04-11 05:00 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-05-14 15:49 - 2014-04-11 04:59 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-05-14 15:49 - 2014-04-11 04:57 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-05-14 15:49 - 2014-04-11 04:56 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-05-14 15:49 - 2014-04-11 04:55 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-05-14 15:49 - 2014-04-11 04:53 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-05-14 15:49 - 2014-04-11 04:52 - 03464192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-05-14 15:49 - 2014-04-11 04:46 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-05-14 15:49 - 2014-04-11 04:36 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-05-14 15:49 - 2014-04-11 04:34 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-05-14 15:49 - 2014-04-11 04:29 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-05-14 15:49 - 2014-04-11 04:25 - 00921088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-05-14 15:48 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-05-14 15:48 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-05-14 15:48 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-05-14 15:48 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-05-14 15:48 - 2014-03-27 09:48 - 18679728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-05-14 15:47 - 2014-03-27 11:12 - 21225584 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-05-12 22:22 - 2014-05-12 22:22 - 00001787 _____ () C:\Users\SIK\Desktop\smoke weed everyday ~ snoop dogg Dr Dre (DUBSTEP remix) - Verknüpfung.lnk
2014-05-12 22:22 - 2014-05-12 22:22 - 00001735 _____ () C:\Users\SIK\Desktop\K.I.Z. - EIN AFFE UND EIN PFERD [FULL HD - HQ] - Verknüpfung.lnk
2014-05-12 22:22 - 2014-05-12 22:22 - 00001712 _____ () C:\Users\SIK\Desktop\Charly Black and J Capri Whine and Kotch(Lyrics) - Verknüpfung.lnk
2014-05-12 22:22 - 2014-05-12 22:22 - 00001678 _____ () C:\Users\SIK\Desktop\Lil Dicky - Ex-Boyfriend (Official Video) - Verknüpfung.lnk
2014-05-12 22:22 - 2014-05-12 22:22 - 00001524 _____ () C:\Users\SIK\Desktop\Miley Cyrus - Stay (Lyrics) - Verknüpfung.lnk
2014-05-12 22:22 - 2014-05-12 22:22 - 00001515 _____ () C:\Users\SIK\Desktop\Prinz Pi - Wunderkind [HD] - Verknüpfung.lnk
2014-05-10 23:52 - 2014-05-10 23:52 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-05-10 23:51 - 2014-05-10 23:51 - 00000000 ____D () C:\Users\SIK\AppData\Roaming\WildTangent
2014-05-10 20:27 - 2014-05-10 20:27 - 00561760 _____ () C:\WINDOWS\Minidump\051014-34687-01.dmp
2014-05-10 20:27 - 2014-05-10 20:27 - 00000000 ____D () C:\WINDOWS\Minidump
2014-05-07 21:09 - 2014-05-07 21:09 - 00994160 _____ () C:\Users\SIK\Downloads\Nicht bestätigt 64061.crdownload
2014-05-06 15:47 - 2014-05-06 15:47 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Browser
2014-05-06 15:46 - 2014-05-06 15:46 - 00000000 ____D () C:\Users\Tristan\AppData\Local\Browser
2014-05-06 15:46 - 2014-05-06 15:46 - 00000000 ____D () C:\Users\SIK\AppData\Local\Browser
2014-05-06 15:44 - 2014-05-06 15:44 - 00000000 ____D () C:\ProgramData\Updater
2014-05-06 15:44 - 2014-05-06 15:44 - 00000000 ____D () C:\ProgramData\SearchDeals2
2014-05-06 15:44 - 2014-05-06 15:44 - 00000000 ____D () C:\ProgramData\RHelpers
2014-05-06 15:44 - 2014-05-06 15:44 - 00000000 ____D () C:\ProgramData\Browser
2014-05-04 11:00 - 2014-05-04 11:00 - 00000000 ____D () C:\Users\SIK\AppData\Roaming\Optimizer Elite Max
2014-05-04 10:54 - 2014-05-04 10:54 - 00000000 ____D () C:\Users\SIK\AppData\Local\LPT
==================== One Month Modified Files and Folders =======
2014-06-03 07:19 - 2014-06-03 07:18 - 00032225 _____ () C:\Users\SIK\Downloads\FRST.txt
2014-06-03 07:19 - 2014-05-24 16:05 - 01042542 _____ () C:\Users\SIK\AppData\Local\wgwfx.gss
2014-06-03 07:19 - 2014-04-23 21:08 - 00000000 ____D () C:\Users\SIK\AppData\Local\Temp
2014-06-03 07:18 - 2014-06-03 07:17 - 00000000 ____D () C:\FRST
2014-06-03 07:17 - 2014-06-03 07:17 - 02068992 _____ (Farbar) C:\Users\SIK\Downloads\FRST64.exe
2014-06-03 07:17 - 2014-05-24 16:05 - 00197632 _____ () C:\Users\SIK\AppData\Local\wgwfx.gdb
2014-06-03 07:15 - 2014-06-03 07:15 - 01059840 _____ (Farbar) C:\Users\SIK\Downloads\FRST.exe
2014-06-03 07:15 - 2014-03-28 23:06 - 00000000 ____D () C:\Users\SIK\AppData\Local\MovieMode
2014-06-03 07:13 - 2014-06-03 07:13 - 00000468 _____ () C:\Users\SIK\Downloads\defogger_disable.log
2014-06-03 07:13 - 2014-06-03 07:13 - 00000000 _____ () C:\Users\SIK\defogger_reenable
2014-06-03 07:13 - 2014-06-03 07:12 - 00050477 _____ () C:\Users\SIK\Downloads\Defogger.exe
2014-06-03 07:13 - 2014-04-23 21:08 - 00000000 ____D () C:\Users\SIK
2014-06-03 07:13 - 2014-04-23 20:57 - 01754629 _____ () C:\WINDOWS\WindowsUpdate.log
2014-06-03 07:12 - 2014-05-24 19:07 - 00000000 ____D () C:\ProgramData\Datamngr
2014-06-03 07:12 - 2014-03-28 22:47 - 00000000 ____D () C:\Program Files (x86)\LPT
2014-06-03 07:12 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-06-03 07:07 - 2013-04-22 18:16 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3055392138-328629538-331999133-1002
2014-06-03 07:06 - 2014-03-24 22:38 - 00001118 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-03 07:05 - 2014-06-03 07:05 - 00003914 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{362922DB-75C8-4C13-AB5A-53032A7A90DF}
2014-06-03 07:05 - 2014-06-03 07:05 - 00000000 __SHD () C:\Users\SIK\AppData\Local\EmieUserList
2014-06-03 07:05 - 2014-06-03 07:05 - 00000000 __SHD () C:\Users\SIK\AppData\Local\EmieSiteList
2014-06-03 07:05 - 2014-03-28 23:04 - 00000298 _____ () C:\WINDOWS\Tasks\MySearchDial.job
2014-06-03 07:04 - 2014-03-24 22:37 - 00001114 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-03 07:03 - 2014-04-23 22:03 - 00000000 ___RD () C:\Users\SIK\OneDrive
2014-06-03 07:02 - 2014-04-02 13:27 - 00001454 _____ () C:\WINDOWS\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-5.job
2014-06-03 07:02 - 2014-04-02 13:27 - 00001372 _____ () C:\WINDOWS\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-1.job
2014-06-03 07:02 - 2014-04-02 13:27 - 00001362 _____ () C:\WINDOWS\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-2.job
2014-06-03 07:02 - 2014-04-02 13:26 - 00002778 _____ () C:\WINDOWS\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-3.job
2014-06-03 07:02 - 2014-04-02 13:26 - 00002372 _____ () C:\WINDOWS\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-4.job
2014-06-03 07:02 - 2014-04-02 13:25 - 00000402 _____ () C:\WINDOWS\Tasks\Re-markit Update.job
2014-06-03 07:02 - 2014-04-02 13:25 - 00000400 _____ () C:\WINDOWS\Tasks\Re-markit_wd.job
2014-06-03 07:02 - 2014-03-28 22:41 - 00001668 _____ () C:\WINDOWS\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-5.job
2014-06-03 07:02 - 2014-03-28 22:41 - 00001512 _____ () C:\WINDOWS\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-2.job
2014-06-03 07:02 - 2014-03-28 22:40 - 00001582 _____ () C:\WINDOWS\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-1.job
2014-06-03 07:02 - 2014-03-28 22:39 - 00002432 _____ () C:\WINDOWS\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-4.job
2014-06-03 07:02 - 2014-03-28 22:39 - 00001612 _____ () C:\WINDOWS\Tasks\bedfe857-1851-4105-9b92-9447f52989ce-5.job
2014-06-03 07:02 - 2014-03-28 22:38 - 00003468 _____ () C:\WINDOWS\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-3.job
2014-06-03 07:02 - 2014-03-28 22:38 - 00002368 _____ () C:\WINDOWS\Tasks\bedfe857-1851-4105-9b92-9447f52989ce-4.job
2014-06-03 07:02 - 2014-03-28 22:38 - 00001526 _____ () C:\WINDOWS\Tasks\bedfe857-1851-4105-9b92-9447f52989ce-1.job
2014-06-03 07:02 - 2014-03-28 22:38 - 00001456 _____ () C:\WINDOWS\Tasks\bedfe857-1851-4105-9b92-9447f52989ce-2.job
2014-06-03 07:02 - 2014-03-28 22:37 - 00003132 _____ () C:\WINDOWS\Tasks\bedfe857-1851-4105-9b92-9447f52989ce-3.job
2014-06-03 07:02 - 2012-08-28 21:10 - 00000868 _____ () C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2014-06-03 07:01 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-06-03 07:00 - 2014-04-23 20:54 - 00053284 _____ () C:\WINDOWS\system32\wpbbin.exe
2014-06-03 07:00 - 2014-03-18 03:50 - 00022294 _____ () C:\WINDOWS\PFRO.log
2014-06-03 07:00 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-06-03 07:00 - 2012-08-28 22:00 - 00000000 ____D () C:\ProgramData\Norton
2014-06-03 07:00 - 2012-07-26 07:26 - 00000226 _____ () C:\WINDOWS\win.ini
2014-06-03 06:54 - 2014-06-03 06:52 - 39809104 _____ (Google Inc.) C:\Users\SIK\Downloads\ChromeStandaloneSetup_35.0.1916.114.exe
2014-06-03 06:49 - 2014-04-23 21:08 - 00000000 ____D () C:\Users\Tristan
2014-06-03 06:49 - 2013-12-29 17:17 - 00001877 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-03 06:46 - 2012-08-07 03:24 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-03 06:43 - 2013-12-29 17:24 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-06-03 06:41 - 2014-06-03 06:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-06-03 06:41 - 2014-06-03 06:40 - 00005661 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_60-b19.log
2014-06-03 06:41 - 2013-12-29 00:51 - 00000000 ____D () C:\ProgramData\Oracle
2014-06-03 06:41 - 2013-12-29 00:51 - 00000000 ____D () C:\Program Files (x86)\Java
2014-06-03 06:34 - 2014-04-23 21:08 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Temp
2014-06-03 06:32 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-06-02 11:47 - 2014-03-25 21:42 - 00000934 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3055392138-328629538-331999133-1002UA.job
2014-06-02 11:42 - 2014-05-24 19:35 - 00000000 ____D () C:\Program Files (x86)\sizlsearch
2014-06-01 20:45 - 2014-06-01 20:45 - 00003098 _____ () C:\WINDOWS\System32\Tasks\{9CDB75FB-B86B-42E9-8BDF-A92020AE7E4F}
2014-06-01 20:25 - 2014-04-02 13:26 - 00000000 ____D () C:\Program Files (x86)\HQVid8.1
2014-06-01 20:25 - 2014-03-28 22:37 - 00000000 ____D () C:\Program Files (x86)\Freeven Pro 1.3
2014-06-01 18:37 - 2014-06-01 18:37 - 01582904 _____ (ESET) C:\Users\SIK\Downloads\eset_smart_security_live_installer_v7.exe
2014-06-01 18:37 - 2014-06-01 18:37 - 01582904 _____ (ESET) C:\Users\SIK\Downloads\eset_smart_security_live_installer_v7 (2).exe
2014-06-01 18:37 - 2014-06-01 18:37 - 01582904 _____ (ESET) C:\Users\SIK\Downloads\eset_smart_security_live_installer_v7 (1).exe
2014-06-01 12:27 - 2014-03-18 12:03 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-06-01 12:27 - 2014-03-18 11:25 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2014-06-01 12:27 - 2014-03-18 11:25 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2014-06-01 12:25 - 2013-08-22 16:46 - 00379489 _____ () C:\WINDOWS\setupact.log
2014-05-31 20:47 - 2014-03-25 21:42 - 00000912 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3055392138-328629538-331999133-1002Core.job
2014-05-31 17:32 - 2014-05-31 17:31 - 00942928 _____ () C:\Users\SIK\Downloads\Player.exe
2014-05-31 16:07 - 2014-05-24 19:40 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-05-31 11:45 - 2012-12-25 07:56 - 00000000 ____D () C:\Users\SIK\AppData\Local\Packages
2014-05-29 14:21 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-05-24 19:41 - 2014-05-24 19:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightspark 0.5.3-git
2014-05-24 19:41 - 2014-05-24 19:41 - 00000000 ____D () C:\Program Files (x86)\Lightspark 0.5.3-git
2014-05-24 19:40 - 2014-05-24 19:40 - 00001985 _____ () C:\Users\SIK\Desktop\Sync Folder.lnk
2014-05-24 19:40 - 2014-05-24 19:40 - 00001103 _____ () C:\Users\SIK\Desktop\MyPC Backup.lnk
2014-05-24 19:40 - 2014-05-24 19:40 - 00000000 ____D () C:\Users\SIK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-05-24 19:40 - 2014-05-24 19:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong
2014-05-24 19:40 - 2014-05-24 19:40 - 00000000 ____D () C:\Program Files (x86)\PriceGong
2014-05-24 19:40 - 2014-05-24 19:38 - 00000000 ____D () C:\temp
2014-05-24 19:40 - 2013-12-27 21:57 - 00000000 ____D () C:\Users\SIK\AppData\Roaming\systweak
2014-05-24 19:40 - 2013-04-22 18:10 - 00000000 ___RD () C:\Users\SIK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-24 19:38 - 2014-05-24 19:38 - 00000000 ____D () C:\Program Files\suprasavings
2014-05-24 19:38 - 2014-05-24 19:38 - 00000000 ____D () C:\Program Files (x86)\SupraSavings
2014-05-24 19:38 - 2014-05-24 19:36 - 00000000 ____D () C:\Program Files\003
2014-05-24 19:34 - 2014-05-24 19:33 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-05-24 19:34 - 2014-03-28 22:36 - 00000000 ____D () C:\Users\SIK\AppData\Local\SearchProtect
2014-05-24 19:33 - 2014-05-24 19:33 - 00228136 _____ (Premium Installer ) C:\Users\SIK\Downloads\Player-Chrome.exe
2014-05-24 16:05 - 2014-05-24 16:05 - 03252224 _____ () C:\Users\SIK\AppData\Local\wgwfx.exe
2014-05-24 15:59 - 2013-04-22 18:10 - 00000000 ___RD () C:\Users\SIK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-24 15:56 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-05-24 15:56 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-24 15:56 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-24 15:56 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-05-24 15:56 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates
2014-05-24 15:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-24 15:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-22 18:14 - 2014-05-26 15:28 - 00061120 _____ (StdLib) C:\WINDOWS\system32\Drivers\{9d5747ee-0448-4681-8337-1555de75a3b6}w64.sys
2014-05-19 15:02 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-05-19 15:01 - 2013-12-28 06:23 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-05-19 14:56 - 2013-04-22 19:11 - 93223848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-05-14 20:22 - 2014-05-14 20:22 - 00000000 ____D () C:\Users\SIK\AppData\Local\com
2014-05-14 20:21 - 2014-05-14 20:21 - 00001129 _____ () C:\Users\Public\Desktop\NewPlayer.lnk
2014-05-14 20:21 - 2014-03-28 22:47 - 00000000 ____D () C:\Program Files (x86)\NewPlayer
2014-05-14 20:17 - 2014-03-28 22:36 - 00000000 _____ () C:\END
2014-05-14 15:44 - 2013-12-29 17:24 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-05-12 22:22 - 2014-05-12 22:22 - 00001787 _____ () C:\Users\SIK\Desktop\smoke weed everyday ~ snoop dogg Dr Dre (DUBSTEP remix) - Verknüpfung.lnk
2014-05-12 22:22 - 2014-05-12 22:22 - 00001735 _____ () C:\Users\SIK\Desktop\K.I.Z. - EIN AFFE UND EIN PFERD [FULL HD - HQ] - Verknüpfung.lnk
2014-05-12 22:22 - 2014-05-12 22:22 - 00001712 _____ () C:\Users\SIK\Desktop\Charly Black and J Capri Whine and Kotch(Lyrics) - Verknüpfung.lnk
2014-05-12 22:22 - 2014-05-12 22:22 - 00001678 _____ () C:\Users\SIK\Desktop\Lil Dicky - Ex-Boyfriend (Official Video) - Verknüpfung.lnk
2014-05-12 22:22 - 2014-05-12 22:22 - 00001524 _____ () C:\Users\SIK\Desktop\Miley Cyrus - Stay (Lyrics) - Verknüpfung.lnk
2014-05-12 22:22 - 2014-05-12 22:22 - 00001515 _____ () C:\Users\SIK\Desktop\Prinz Pi - Wunderkind [HD] - Verknüpfung.lnk
2014-05-12 22:22 - 2013-12-15 12:47 - 00000000 ____D () C:\Users\SIK\MediaEspresso
2014-05-12 22:22 - 2013-07-11 18:41 - 00000000 ____D () C:\Users\SIK\AppData\Roaming\CyberLink
2014-05-11 18:31 - 2014-03-28 22:38 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerplus
2014-05-10 23:52 - 2014-05-10 23:52 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-05-10 23:52 - 2012-08-07 03:44 - 00002502 ____N () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WildTangent Games App - acer.lnk
2014-05-10 23:52 - 2012-08-07 03:44 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-10 23:52 - 2012-08-07 03:44 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-05-10 23:51 - 2014-05-10 23:51 - 00000000 ____D () C:\Users\SIK\AppData\Roaming\WildTangent
2014-05-10 20:27 - 2014-05-10 20:27 - 00561760 _____ () C:\WINDOWS\Minidump\051014-34687-01.dmp
2014-05-10 20:27 - 2014-05-10 20:27 - 00000000 ____D () C:\WINDOWS\Minidump
2014-05-10 20:27 - 2014-02-18 22:18 - 789340132 _____ () C:\WINDOWS\MEMORY.DMP
2014-05-10 20:00 - 2014-03-24 22:38 - 00004090 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-10 20:00 - 2014-03-24 22:38 - 00003854 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-07 21:09 - 2014-05-07 21:09 - 00994160 _____ () C:\Users\SIK\Downloads\Nicht bestätigt 64061.crdownload
2014-05-07 15:02 - 2014-06-03 06:41 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-05-07 14:59 - 2014-06-03 06:41 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-05-07 14:59 - 2014-06-03 06:41 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-05-07 14:58 - 2014-06-03 06:41 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-05-06 15:47 - 2014-05-06 15:47 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Browser
2014-05-06 15:46 - 2014-05-06 15:46 - 00000000 ____D () C:\Users\Tristan\AppData\Local\Browser
2014-05-06 15:46 - 2014-05-06 15:46 - 00000000 ____D () C:\Users\SIK\AppData\Local\Browser
2014-05-06 15:44 - 2014-05-06 15:44 - 00000000 ____D () C:\ProgramData\Updater
2014-05-06 15:44 - 2014-05-06 15:44 - 00000000 ____D () C:\ProgramData\SearchDeals2
2014-05-06 15:44 - 2014-05-06 15:44 - 00000000 ____D () C:\ProgramData\RHelpers
2014-05-06 15:44 - 2014-05-06 15:44 - 00000000 ____D () C:\ProgramData\Browser
2014-05-06 06:40 - 2014-05-14 15:48 - 23544320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-05-06 05:25 - 2014-05-14 15:48 - 17382912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-05-06 05:00 - 2014-05-14 15:48 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-14 15:48 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-05-04 11:13 - 2014-04-02 13:26 - 00000310 _____ () C:\WINDOWS\Tasks\PCHelpers_period.job
2014-05-04 11:00 - 2014-05-04 11:00 - 00000000 ____D () C:\Users\SIK\AppData\Roaming\Optimizer Elite Max
2014-05-04 11:00 - 2014-04-02 13:26 - 00002862 _____ () C:\WINDOWS\System32\Tasks\PCHelpers_period
2014-05-04 10:54 - 2014-05-04 10:54 - 00000000 ____D () C:\Users\SIK\AppData\Local\LPT
2014-05-04 10:54 - 2014-03-28 22:46 - 00000000 ____D () C:\Users\SIK\AppData\Local\Smartbar
Files to move or delete:
====================
C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll
C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll
Some content of TEMP:
====================
C:\Users\SIK\AppData\Local\Temp\avgnt.exe
C:\Users\SIK\AppData\Local\Temp\BackupSetup.exe
C:\Users\SIK\AppData\Local\Temp\dfj7za9a.dll
C:\Users\SIK\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
C:\Users\SIK\AppData\Local\Temp\nscC8EF.exe
C:\Users\SIK\AppData\Local\Temp\nsi3C90.exe
C:\Users\SIK\AppData\Local\Temp\nsj32EA.exe
C:\Users\SIK\AppData\Local\Temp\nsk280C.exe
C:\Users\SIK\AppData\Local\Temp\nsoC072.exe
C:\Users\SIK\AppData\Local\Temp\nswD3AE.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-19 14:56
==================== End Of Log ============================
b. Addition PHP-Code: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-06-2014
Ran by SIK at 2014-06-03 07:20:10
Running from C:\Users\SIK\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
clear.fi SDK - Video 2 (x32 Version: 2.1.1910 - CyberLink Corp.) Hidden
clear.fi SDK- Movie 2 (x32 Version: 2.1.1910 - CyberLink Corp.) Hidden
Acer Backup Manager (HKLM-x32\...\InstallShield_{9DDDF20E-9FD1-4434-A43E-E7889DBC9420}) (Version: 4.0.0.0053 - NTI Corporation)
Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3003 - Acer Incorporated)
Acer Instant Update Service (HKLM\...\{B492663B-604B-4C9D-84A4-B17279167D4C}) (Version: 1.00.3012 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3003 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3006 - Acer Incorporated)
AcerCloud (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.01.3112 - Acer Incorporated)
AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.00.3103 - Acer Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-4300-A758B70C0A03}) (Version: 12.10.3.4691 - APN, LLC)
Backup Manager v4 (x32 Version: 4.0.0.0053 - NTI Corporation) Hidden
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.01.3107 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.01.3107 - Acer Incorporated)
Delicious: Emily's True Love Premium Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden
DMUninstaller (HKLM-x32\...\DMUninstaller) (Version: - ) <==== ATTENTION
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.13 - Dolby Laboratories Inc)
ETDWare PS/2-X64 11.6.4.001_WHQL (HKLM\...\Elantech) (Version: 11.6.4.001 - ELAN Microelectronic Corp.)
Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Freeven Pro 1.3 (HKLM-x32\...\Freeven Pro 1.3) (Version: 1.34.3.28 - Freeven) <==== ATTENTION
Genesis (HKCU\...\wgwfx) (Version: - ) <==== ATTENTION
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
HQVid8.1 (HKLM-x32\...\HQVid8.1) (Version: 1.34.3.28 - High-QualityV9) <==== ATTENTION
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3002 - Acer Incorporated)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36354 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.600 - Oracle)
Java Auto Updater (x32 Version: 2.1.60.19 - Oracle, Inc.) Hidden
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.4 - Acer Inc.)
Lightspark 0.5.3-git (HKLM-x32\...\Lightspark) (Version: 0.5.3-git - Lightspark Team)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3002 - Acer Incorporated)
LPT System Updater Service (x32 Version: 1.0.0.0 - LPT) Hidden <==== ATTENTION
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
MediaPlayerplus (HKLM-x32\...\MediaPlayerplus) (Version: 1.34.3.28 - Freeven) <==== ATTENTION
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Movie Mode (HKLM-x32\...\MovieMode) (Version: 2.6.71 - GenTechnologies Apps, LLC)
Movies Toolbar for Chrome (Dist. by Bandoo Media, Inc.) (HKLM-x32\...\ilividmoviestoolbar181CR) (Version: 1.8.1.0 - IAC Search and Media) <==== ATTENTION
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MyPC Backup (HKLM\...\MyPC Backup) (Version: - JDi Backup Ltd) <==== ATTENTION
Mysearchdial (HKLM-x32\...\mysearchdial) (Version: - Mysearchdial) <==== ATTENTION
MyWinLocker (Version: 4.0.14.35 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.35 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.24 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.24 - Egis Technology Inc.) Hidden
NewPlayer (HKLM-x32\...\NewPlayer) (Version: v2.1.1.8 - ) <==== ATTENTION
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9008 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.9008 - NTI Corporation) Hidden
NVIDIA Grafiktreiber 306.97 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 306.97 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.85.551 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.10.8 (Version: 1.10.8 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.0613 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.0613 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0613 - NVIDIA Corporation)
NVIDIA Systemsteuerung 306.97 (Version: 306.97 - NVIDIA Corporation) Hidden
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.10.8 - NVIDIA Corporation) Hidden
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.01.3102 - Acer)
Optimizer Elite Max (HKLM-x32\...\Optimizer Elite Max_is1) (Version: 2.7.3.594 - Viracure Limited) <==== ATTENTION
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
PriceGong 2.6.11 (HKLM-x32\...\PriceGong) (Version: 2.6.11 - PriceGong) <==== ATTENTION
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.204 - Ihr Firmenname)
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.05 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6690 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.8400.27023 - Realtek Semiconductor Corp.)
Re-markit (HKLM-x32\...\6ce9c7b7-38de-4b91-99f0-066757eea1dc) (Version: - Re-markit Software) <==== ATTENTION
Search Deals (HKLM-x32\...\SearchDeals2) (Version: 2.6.80 - CloudCanvas, Inc. DBA Injekt)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.13.2.14 - Client Connect LTD) <==== ATTENTION
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Shopping Helper Smartbar (HKLM-x32\...\{96F1EBE2-6BF6-44E8-84AC-DB577BAD1DD5}) (Version: 11.49.63.16848 - ReSoft Ltd.) <==== ATTENTION
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
sizlsearch (HKLM\...\sizlsearch) (Version: 2014.05.23.224823 - sizlsearch)
Spielkanäle (HKLM-x32\...\WildTangentGameProvider-acer-main) (Version: 7.1.0.17 - WildTangent, Inc.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.8.4.99.ga249b5f1 - Spotify AB)
suprasavings (HKLM\...\suprasavings) (Version: 2.0.1 - suprasavings) <==== ATTENTION
SupraSavings (x32 Version: 1.0.0.0 - SupraSavings) Hidden <==== ATTENTION
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
VO Package (HKLM-x32\...\VOPackage) (Version: 1.0.0.0 - ) <==== ATTENTION
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.3.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.11.2 - WildTangent) Hidden
WPM17.8.0.3442 (HKLM-x32\...\WPM) (Version: 17.8.0.3442 - Cherished Technololgy LIMITED) <==== ATTENTION
Zuma's Revenge (x32 Version: 2.2.0.98 - WildTangent) Hidden
==================== Restore Points =========================
27-04-2014 15:00:51 Windows Update
03-05-2014 11:33:45 Windows Update
07-05-2014 16:49:08 Windows Update
19-05-2014 12:46:00 Windows Update
03-06-2014 04:39:12 Removed Norton Online Backup
==================== Hosts content: ==========================
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0745D9C3-72E6-4CFF-B8BB-24FE2888D09D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-24] (Google Inc.)
Task: {097C16A0-41B9-49AD-BC12-D7824E244A3E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-05-19] (Microsoft Corporation)
Task: {0AA50A29-DA18-416E-A4D4-05A3CB2C0B77} - System32\Tasks\iuEmailOutlookAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe [2012-07-12] ()
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {14E1EAA3-2A34-406E-8405-6143DFABDB66} - System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-4 => C:\Program Files (x86)\HQVid8.1\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-4.exe <==== ATTENTION
Task: {1BD67691-882D-4EE8-8E1E-A3B220BAA3AC} - System32\Tasks\bedfe857-1851-4105-9b92-9447f52989ce-5 => C:\Program Files (x86)\Freeven Pro 1.3\bedfe857-1851-4105-9b92-9447f52989ce-5.exe <==== ATTENTION
Task: {1DE0CA86-2FC0-42EE-B3E5-675AE49C6571} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {1F7D9D30-F300-41AE-9B26-625CAF1A735B} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3055392138-328629538-331999133-1002UA => C:\Users\SIK\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-03-25] (Facebook Inc.)
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {221F5AC9-F74F-412D-A8C6-ED084EB76777} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2012-07-31] (Acer Incorporated)
Task: {22723D6B-7994-4794-9BC3-0727B1A4EFAF} - System32\Tasks\bedfe857-1851-4105-9b92-9447f52989ce-3 => C:\Program Files (x86)\Freeven Pro 1.3\bedfe857-1851-4105-9b92-9447f52989ce-3.exe <==== ATTENTION
Task: {2524E968-1535-473D-87B2-17A9878D219E} - System32\Tasks\Re-markit_wd => C:\Program Files (x86)\Re-markit Corp\Re-markit_wd.exe [2014-04-02] () <==== ATTENTION
Task: {2559CBD2-D54B-411A-84C9-E2A689E2115A} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)
Task: {260829FA-5E40-4526-AA66-CFE3246F6AF7} - System32\Tasks\bedfe857-1851-4105-9b92-9447f52989ce-2 => C:\Program Files (x86)\Freeven Pro 1.3\bedfe857-1851-4105-9b92-9447f52989ce-2.exe <==== ATTENTION
Task: {26886456-733C-4EFC-86FD-E160ACF32013} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2012-07-11] (Egis Technology Inc.)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {2CBBEBA3-820C-4EFB-8268-611111F0C7F7} - System32\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-2 => C:\Program Files (x86)\MediaPlayerplus\1d58acf1-29e5-4c8e-a536-e04dd320ab01-2.exe <==== ATTENTION
Task: {2E51160F-694D-4E30-BF5F-9185D0464FDA} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {34B0FB63-9101-4618-9FE9-88B4061EB7A8} - System32\Tasks\bedfe857-1851-4105-9b92-9447f52989ce-1 => C:\Program Files (x86)\Freeven Pro 1.3\Freeven Pro 1.3-codedownloader.exe <==== ATTENTION
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {420E6FEB-8EE6-43BC-B450-8866A92E4A93} - System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-3 => C:\Program Files (x86)\HQVid8.1\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-3.exe <==== ATTENTION
Task: {43E3C01E-CADE-4716-8598-2E53AF118292} - System32\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-1 => C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-codedownloader.exe [2014-03-28] (Freeven) <==== ATTENTION
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {54DE7175-B2F3-42A9-A5B3-27EEC6843133} - System32\Tasks\PCHelpers_period => C:\Program Files (x86)\Optimizer Elite Max\Optimizer Elite Max.exe [2014-01-03] () <==== ATTENTION
Task: {58B7E587-7220-4A9E-A224-ADF6ED37EE5D} - System32\Tasks\bedfe857-1851-4105-9b92-9447f52989ce-4 => C:\Program Files (x86)\Freeven Pro 1.3\bedfe857-1851-4105-9b92-9447f52989ce-4.exe <==== ATTENTION
Task: {67AFFA87-C115-4003-B3BD-4F345DC00ED2} - System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-1 => C:\Program Files (x86)\HQVid8.1\HQVid8.1-codedownloader.exe <==== ATTENTION
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {6ECC70C2-BAA3-407A-9BE0-F2AD92FA06E1} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-22] ()
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {78AAFEBD-8F74-4A4B-BAEA-3019EAC4F918} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {7BB1EC61-3140-48A7-9245-3DD56ECC42BA} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {7E16E531-D01A-4E4A-A306-2868C706E91B} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {7E181B96-410A-42F6-B2BC-4F65BF12A5B1} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3055392138-328629538-331999133-1002Core => C:\Users\SIK\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-03-25] (Facebook Inc.)
Task: {7F9A2D2A-E5F9-45B9-B07E-AFA465D2939D} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-07-13] ()
Task: {816D4F66-BACE-4D26-ADD7-934D419B54EF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {925702ED-AE27-4A7A-B4B4-A76780DBCBA9} - System32\Tasks\Re-markit Update => C:\Program Files (x86)\Re-markit Corp\ReMar.exe [2014-04-02] () <==== ATTENTION
Task: {93A11C94-5C0E-45DF-93E1-87D9A7E34428} - System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-2 => C:\Program Files (x86)\HQVid8.1\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-2.exe <==== ATTENTION
Task: {93F2F7EA-9735-47DA-9246-83622B5A2A2C} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2012-07-30] (Acer Incorporated)
Task: {963BBA46-F0B1-4178-9AB0-C14E3563B07E} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A00CAC9D-118B-44EE-83C3-6749638ABC0C} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {A7BD8947-619B-41BA-9DF1-7826256C4E14} - System32\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-3 => C:\Program Files (x86)\MediaPlayerplus\1d58acf1-29e5-4c8e-a536-e04dd320ab01-3.exe [2014-03-28] (Freeven) <==== ATTENTION
Task: {AF1DD467-277D-4E3E-9480-BE7AC3CFAFDE} - System32\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-5 => C:\Program Files (x86)\MediaPlayerplus\1d58acf1-29e5-4c8e-a536-e04dd320ab01-5.exe <==== ATTENTION
Task: {C7F47941-9FF5-4557-AE3B-92250EFC889B} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {CC213057-0733-4D6B-8415-E75797E8CAA9} - System32\Tasks\iuBrowserIEAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe [2012-07-12] ()
Task: {CE0089E6-E6E8-4FA6-B7BE-4F5D91BF4085} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-24] (Google Inc.)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D4F1838F-B2D1-4B45-AEF2-FB800DF0E0ED} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {D50676C4-5066-4EC5-AEE7-2A2114C5A8F1} - System32\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-4 => C:\Program Files (x86)\MediaPlayerplus\1d58acf1-29e5-4c8e-a536-e04dd320ab01-4.exe [2014-03-28] (Freeven) <==== ATTENTION
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {D951367B-F24C-4084-BC52-EE4F81A9FCFC} - System32\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-5 => C:\Program Files (x86)\HQVid8.1\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-5.exe <==== ATTENTION
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {EE4C6D4E-E211-4902-B94C-69B9B3381347} - System32\Tasks\MySearchDial => C:\Users\SIK\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {FDE74F88-E3A0-48E7-8655-7D95198BE4C2} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2012-07-11] (Egis Technology Inc.)
Task: C:\WINDOWS\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-1.job => C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-codedownloader.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-2.job => C:\Program Files (x86)\MediaPlayerplus\1d58acf1-29e5-4c8e-a536-e04dd320ab01-2.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-3.job => C:\Program Files (x86)\MediaPlayerplus\1d58acf1-29e5-4c8e-a536-e04dd320ab01-3.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-4.job => C:\Program Files (x86)\MediaPlayerplus\1d58acf1-29e5-4c8e-a536-e04dd320ab01-4.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-5.job => C:\Program Files (x86)\MediaPlayerplus\1d58acf1-29e5-4c8e-a536-e04dd320ab01-5.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-1.job => C:\Program Files (x86)\HQVid8.1\HQVid8.1-codedownloader.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-2.job => C:\Program Files (x86)\HQVid8.1\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-2.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-3.job => C:\Program Files (x86)\HQVid8.1\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-3.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-4.job => C:\Program Files (x86)\HQVid8.1\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-4.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-5.job => C:\Program Files (x86)\HQVid8.1\49fbdd13-75fe-4e64-ba34-02b3d72df5b2-5.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\bedfe857-1851-4105-9b92-9447f52989ce-1.job => C:\Program Files (x86)\Freeven Pro 1.3\Freeven Pro 1.3-codedownloader.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\bedfe857-1851-4105-9b92-9447f52989ce-2.job => C:\Program Files (x86)\Freeven Pro 1.3\bedfe857-1851-4105-9b92-9447f52989ce-2.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\bedfe857-1851-4105-9b92-9447f52989ce-3.job => C:\Program Files (x86)\Freeven Pro 1.3\bedfe857-1851-4105-9b92-9447f52989ce-3.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\bedfe857-1851-4105-9b92-9447f52989ce-4.job => C:\Program Files (x86)\Freeven Pro 1.3\bedfe857-1851-4105-9b92-9447f52989ce-4.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\bedfe857-1851-4105-9b92-9447f52989ce-5.job => C:\Program Files (x86)\Freeven Pro 1.3\bedfe857-1851-4105-9b92-9447f52989ce-5.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3055392138-328629538-331999133-1002Core.job => C:\Users\SIK\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3055392138-328629538-331999133-1002UA.job => C:\Users\SIK\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\MySearchDial.job => C:\Users\SIK\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\WINDOWS\Tasks\PCHelpers_period.job => C:\Program Files (x86)\Optimizer Elite Max\Optimizer Elite Max.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\Re-markit Update.job => C:\Program Files (x86)\Re-markit Corp\ReMar.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\Re-markit_wd.job => C:\Program Files (x86)\Re-markit Corp\Re-markit_wd.exe <==== ATTENTION
==================== Loaded Modules (whitelisted) =============
2014-03-28 22:58 - 2014-05-19 15:44 - 00664576 _____ () C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll
2013-09-05 02:36 - 2013-09-05 02:36 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2014-02-09 13:41 - 2014-02-09 13:41 - 00032288 _____ () C:\Program Files (x86)\LPT\srpts.exe
2014-05-05 14:07 - 2014-05-05 14:07 - 00011776 _____ () C:\Program Files (x86)\NewPlayer\NewPlayerUpdaterService.exe
2014-02-09 13:41 - 2014-02-09 13:41 - 00013344 _____ () C:\Program Files (x86)\LPT\srptm.exe
2014-03-10 16:39 - 2014-03-10 16:39 - 00082432 _____ () C:\Program Files (x86)\NewPlayer\NewPlayerUpdater.exe
2014-04-02 13:25 - 2014-04-02 13:25 - 00142848 _____ () C:\Program Files (x86)\Re-markit Corp\Re-markit158.exe
2014-05-24 00:48 - 2014-06-03 06:35 - 00317728 _____ () C:\Program Files (x86)\sizlsearch\updatesizlsearch.exe
2014-05-24 21:42 - 2014-06-03 06:38 - 00317728 _____ () C:\Program Files (x86)\sizlsearch\bin\utilsizlsearch.exe
2014-05-24 19:38 - 2014-05-24 19:38 - 00706560 _____ () C:\Program Files\003\vxlsnyaiet64.exe
2012-06-21 18:12 - 2012-06-21 18:12 - 01407568 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll
2014-04-02 13:25 - 2014-04-02 13:25 - 00077312 _____ () C:\Program Files (x86)\Re-markit Corp\Re-markit_wd.exe
2014-04-22 11:57 - 2014-04-22 11:57 - 01357456 _____ () C:\WINDOWS\SYSTEM32\MovieMode.48CA2AEFA22D.2.6.78.dll
2014-01-29 23:02 - 2014-01-29 23:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-07-31 17:45 - 2012-07-31 17:45 - 00384128 _____ () c:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll
2012-07-31 17:40 - 2012-07-31 17:40 - 00020992 _____ () c:\Program Files (x86)\Bluetooth Suite\L10n\de-DE\BtTray.de-DE.dll
2014-05-24 16:05 - 2014-05-24 16:05 - 03252224 _____ () C:\Users\SIK\AppData\Local\wgwfx.exe
2012-07-12 16:01 - 2012-07-12 16:01 - 00025232 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
2012-07-12 16:01 - 2012-07-12 16:01 - 00044176 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
2014-03-28 22:58 - 2014-05-19 15:44 - 00489984 _____ () C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll
2014-03-28 22:58 - 2014-05-19 15:43 - 00020480 _____ () C:\Program Files (x86)\Movies Toolbar\Datamngr\mgrldr.dll
2014-02-09 13:41 - 2014-02-09 13:41 - 00070176 _____ () C:\Program Files (x86)\LPT\srpt.dll
2014-02-09 13:41 - 2014-02-09 13:41 - 00022048 _____ () C:\Program Files (x86)\LPT\srptc.dll
2014-02-09 13:41 - 2014-02-09 13:41 - 00018976 _____ () C:\Program Files (x86)\LPT\Smartbar.Common.dll
2012-07-31 01:04 - 2012-07-31 01:04 - 00465384 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2012-07-31 01:04 - 2012-07-31 01:04 - 00125504 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2012-07-31 01:04 - 2012-07-31 01:04 - 00155712 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\VolumeSnapshot.dll
2012-07-31 01:04 - 2012-07-31 01:04 - 00118336 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\Online.dll
2012-07-31 01:04 - 2012-07-31 01:04 - 01081408 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2012-07-31 01:04 - 2012-07-31 01:04 - 00052288 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OsSettingPort.dll
2012-07-31 01:04 - 2012-07-31 01:04 - 00727616 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OutlookShadow.dll
2014-02-09 13:41 - 2014-02-09 13:41 - 00052256 _____ () C:\Program Files (x86)\LPT\srut.dll
2014-02-09 13:41 - 2014-02-09 13:41 - 00054304 _____ () C:\Program Files (x86)\LPT\sppsm.dll
2014-02-09 13:41 - 2014-02-09 13:41 - 00152608 _____ () C:\Program Files (x86)\LPT\Smartbar.Resources.HistoryAndStatsWrapper.dll
2014-02-09 13:41 - 2014-02-09 13:41 - 00017440 _____ () C:\Program Files (x86)\LPT\Smartbar.Personalization.Common.dll
2014-02-09 13:41 - 2014-02-09 13:41 - 00166432 _____ () C:\Program Files (x86)\LPT\Smartbar.Infrastructure.Utilities.dll
2014-02-09 13:41 - 2014-02-09 13:41 - 00037408 _____ () C:\Program Files (x86)\LPT\srbu.dll
2014-02-09 13:41 - 2014-02-09 13:41 - 00014880 _____ () C:\Program Files (x86)\LPT\srpdm.dll
2014-02-09 13:41 - 2014-02-09 13:41 - 00033824 _____ () C:\Program Files (x86)\LPT\Smartbar.Monetization.Proxy.ProxyService.dll
2014-04-02 13:25 - 2014-04-02 13:25 - 00133120 _____ () C:\Program Files (x86)\Re-markit Corp\Re-markit158.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00047136 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00069152 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\srau.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00165920 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 02336288 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00067104 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\spbl.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00155680 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00014368 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\siem.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00066080 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\sppsm.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00696864 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00014880 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00078880 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00027168 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
2014-04-29 11:18 - 2014-04-29 11:18 - 00057888 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\srut.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00029216 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\srsbs.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00065568 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00054816 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\smti.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00031264 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\srom.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00030752 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\smtu.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00039456 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\smta.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00044064 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\srbu.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00024096 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\sgml.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00061984 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00021880 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\srpdm.dll
2014-04-29 11:16 - 2014-04-29 11:16 - 00043552 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
2014-04-29 11:15 - 2014-04-29 11:15 - 00026656 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00035360 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00193056 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\sgmu.dll
2014-04-29 11:13 - 2014-04-29 11:13 - 00061440 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll
2014-04-29 11:17 - 2014-04-29 11:17 - 00255520 _____ () C:\Users\SIK\AppData\Local\Smartbar\Application\srns.dll
2014-04-28 21:03 - 2014-04-24 02:33 - 00065352 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\chrome_elf.dll
2014-04-28 21:03 - 2014-04-24 02:33 - 00674632 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libglesv2.dll
2014-04-28 21:03 - 2014-04-24 02:33 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libegl.dll
2014-04-28 21:03 - 2014-04-24 02:33 - 04081480 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\pdf.dll
2014-04-28 21:03 - 2014-04-24 02:33 - 00390472 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll
2014-04-28 21:03 - 2014-04-24 02:33 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ffmpegsumo.dll
2014-04-28 21:03 - 2014-04-24 02:33 - 13692232 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\PepperFlash\pepflashplayer.dll
2012-08-28 21:08 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Users\SIK\OneDrive:ms-properties
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/03/2014 07:21:09 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20498 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 6050
Startzeit: 01cf7eeaeb0ccf27
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: ddd77072-eade-11e3-be97-206a8ad57b70
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (06/03/2014 07:08:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20498 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 11b4
Startzeit: 01cf7ee911dc8917
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: 078cbb49-eadd-11e3-be97-206a8ad57b70
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (06/03/2014 07:07:47 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.17037, Zeitstempel: 0x5312c30a
Name des fehlerhaften Moduls: MediaPlayerplus-bho.dll_unloaded, Version: 1.0.0.1, Zeitstempel: 0x53343056
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000513c0
ID des fehlerhaften Prozesses: 0x16e0
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3
Vollständiger Name des fehlerhaften Pakets: IEXPLORE.EXE4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: IEXPLORE.EXE5
Error: (06/03/2014 07:01:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PluginService.exe, Version: 13.27.0.81, Zeitstempel: 0x532696c6
Name des fehlerhaften Moduls: DpInterface32.dll, Version: 3.0.2.3417, Zeitstempel: 0x5315b066
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00098dae
ID des fehlerhaften Prozesses: 0x4dc
Startzeit der fehlerhaften Anwendung: 0xPluginService.exe0
Pfad der fehlerhaften Anwendung: PluginService.exe1
Pfad des fehlerhaften Moduls: PluginService.exe2
Berichtskennung: PluginService.exe3
Vollständiger Name des fehlerhaften Pakets: PluginService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: PluginService.exe5
Error: (06/03/2014 06:59:17 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20498 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 5c3c
Startzeit: 01cf7ee7dc2f69b2
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: cfb8c4b8-eadb-11e3-be96-206a8ad57b70
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (06/03/2014 06:44:17 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20498 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 32dc
Startzeit: 01cf7ee5c3c127e4
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: b74ed20b-ead9-11e3-be96-206a8ad57b70
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (06/03/2014 06:40:36 AM) (Source: MsiInstaller) (EventID: 11500) (User: STELLA)
Description: Produkt: Java 7 Update 60 -- Fehler 1500.Eine andere Installation wird gerade ausgeführt. Sie müssen diese Installation abschließen, bevor mit dieser Installation fortgefahren werden kann.
Error: (06/03/2014 06:37:56 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20498 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 201c
Startzeit: 01cf7ee4dfc3dcc4
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: d3f33233-ead8-11e3-be96-206a8ad57b70
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (06/02/2014 11:50:32 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20498 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 113c
Startzeit: 01cf7e475e67017e
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: 51943234-ea3b-11e3-be96-206a8ad57b70
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (06/02/2014 11:43:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PluginService.exe, Version: 13.27.0.81, Zeitstempel: 0x532696c6
Name des fehlerhaften Moduls: DpInterface32.dll, Version: 3.0.2.3417, Zeitstempel: 0x5315b066
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00098fb9
ID des fehlerhaften Prozesses: 0x4f0
Startzeit der fehlerhaften Anwendung: 0xPluginService.exe0
Pfad der fehlerhaften Anwendung: PluginService.exe1
Pfad des fehlerhaften Moduls: PluginService.exe2
Berichtskennung: PluginService.exe3
Vollständiger Name des fehlerhaften Pakets: PluginService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: PluginService.exe5
System errors:
=============
Error: (06/03/2014 07:02:15 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "IePlugin Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/03/2014 07:02:13 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (06/03/2014 07:02:13 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.
Error: (06/03/2014 07:01:43 AM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Der Dienst "Avira Browser-Schutz" ist von folgendem Dienst abhängig: AntiVirService. Dieser Dienst ist möglicherweise nicht installiert.
Error: (06/03/2014 06:59:56 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet:
%%1062
Error: (06/02/2014 01:20:42 PM) (Source: DCOM) (EventID: 10010) (User: STELLA)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (06/02/2014 01:20:42 PM) (Source: DCOM) (EventID: 10010) (User: STELLA)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (06/02/2014 01:20:42 PM) (Source: DCOM) (EventID: 10010) (User: STELLA)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (06/02/2014 01:20:42 PM) (Source: DCOM) (EventID: 10010) (User: STELLA)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (06/02/2014 01:20:36 PM) (Source: DCOM) (EventID: 10010) (User: STELLA)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Microsoft Office Sessions:
=========================
Error: (06/03/2014 07:21:09 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.20498605001cf7eeaeb0ccf274294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\LiveComm.exeddd77072-eade-11e3-be97-206a8ad57b70microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (06/03/2014 07:08:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.2049811b401cf7ee911dc89174294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\LiveComm.exe078cbb49-eadd-11e3-be97-206a8ad57b70microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (06/03/2014 07:07:47 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE11.0.9600.170375312c30aMediaPlayerplus-bho.dll_unloaded1.0.0.153343056c0000005000513c016e001cf7ee97cc26953C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEMediaPlayerplus-bho.dll003bfe1b-eadd-11e3-be97-206a8ad57b70
Error: (06/03/2014 07:01:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: PluginService.exe13.27.0.81532696c6DpInterface32.dll3.0.2.34175315b066c000000500098dae4dc01cf7ee8d4000a2bC:\ProgramData\IePluginService\PluginService.exeC:\Program Files (x86)\SupTab\DpInterface32.dll26ff0c0a-eadc-11e3-be97-206a8ad57b70
Error: (06/03/2014 06:59:17 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.204985c3c01cf7ee7dc2f69b24294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\LiveComm.execfb8c4b8-eadb-11e3-be96-206a8ad57b70microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (06/03/2014 06:44:17 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.2049832dc01cf7ee5c3c127e44294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\LiveComm.exeb74ed20b-ead9-11e3-be96-206a8ad57b70microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (06/03/2014 06:40:36 AM) (Source: MsiInstaller) (EventID: 11500) (User: STELLA)
Description: Produkt: Java 7 Update 60 -- Fehler 1500.Eine andere Installation wird gerade ausgeführt. Sie müssen diese Installation abschließen, bevor mit dieser Installation fortgefahren werden kann.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (06/03/2014 06:37:56 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.20498201c01cf7ee4dfc3dcc44294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\LiveComm.exed3f33233-ead8-11e3-be96-206a8ad57b70microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (06/02/2014 11:50:32 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.20498113c01cf7e475e67017e4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\LiveComm.exe51943234-ea3b-11e3-be96-206a8ad57b70microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (06/02/2014 11:43:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: PluginService.exe13.27.0.81532696c6DpInterface32.dll3.0.2.34175315b066c000000500098fb94f001cf7e470c050f75C:\ProgramData\IePluginService\PluginService.exeC:\Program Files (x86)\SupTab\DpInterface32.dll6078079b-ea3a-11e3-be96-206a8ad57b70
CodeIntegrity Errors:
===================================
Date: 2014-06-03 07:02:24.686
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2014-06-03 07:02:24.561
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2014-06-03 07:01:03.370
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll that did not meet the Windows signing level requirements.
Date: 2014-06-03 07:01:03.292
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll that did not meet the Windows signing level requirements.
Date: 2014-06-03 06:56:54.057
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2014-06-03 06:56:53.854
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2014-06-02 11:42:57.698
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll that did not meet the Windows signing level requirements.
Date: 2014-06-02 11:42:57.604
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll that did not meet the Windows signing level requirements.
Date: 2014-05-31 20:35:17.042
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll that did not meet the Windows signing level requirements.
Date: 2014-05-31 20:35:16.948
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
Percentage of memory in use: 51%
Total physical RAM: 3889.6 MB
Available physical RAM: 1881.46 MB
Total Pagefile: 7857.6 MB
Available Pagefile: 5129.64 MB
Total Virtual: 131072 MB
Available Virtual: 131071.8 MB
==================== Drives ================================
Drive c: (ACER) (Fixed) (Total:450.84 GB) (Free:405.08 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 8B357DD1)
Partition: GPT Partition Type.
==================== End Of Log ============================
3. GMER
angehängt, da zu groß
Vielen Dank
highflyers
|
03.06.2014, 07:32
Baum-Darstellung