klappt nicht=werbetabs sind immernoch da, dass mein ich^^

in FRST Ordner oder dort wo der Ordner ist?

Also ich mein jetzt, wo man die Fixlist hinspeichern muss. Bin mir nciht sicher wo :/

Dort wo auch die FRST.exe ist...

Wenn ich FRST.exe suche und auf Deteipfad gehe komme ich zu C:\Users\x\Downloads\FRST-OlderVersion, da ist das auch drin aber wenn ich das kopiere und einfüge, werden keine Suchergebnisse gefunden, also dort wo ich die Fixlist speichern will (also bei speichern unter...). Trotzdem darein speichern?

Running from C:\Users\x\Downloads
         

Da hin speichern....

Und die x in der Fixlist ersetzen!

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-07-2014
Ran by x at 2014-07-20 19:06:50 Run:1
Running from C:\Users\x\Downloads\FRST-OlderVersion
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-502528181-1662014970-3787557195-1000\...\Run: [framei] => C:\Users\x\AppData\Local\ContextFree\framei.exe [567808 2014-07-01] ()
HKU\S-1-5-21-502528181-1662014970-3787557195-1000\...\Run: [nvcmd] => C:\Users\x\AppData\Local\ContextFree\nvcmd.exe [596480 2014-07-01] ()
HKU\S-1-5-21-502528181-1662014970-3787557195-1000\...\Run: [cntcmd] => C:\Users\x\AppData\Local\ContextFree\cntcmd.exe [596480 2014-07-01] ()
C:\Users\x\AppData\Local\ContextFree
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - 5227BC756C9C4846B662717223CAAA2B URL = hxxp://www2.delta-search.com/?q={searchTerms}&affID=120519&babsrc=SP_ss&mntrId=CE6D801F0261BECF
SearchScopes: HKCU - {91E874D2-2485-4568-A158-DE3A7DDDBD6C} URL = hxxp://mystart.incredibar.com/mb128/?search={searchTerms}&loc=IB_DS&a=6R8MUZEyUP&i=26
SearchScopes: HKCU - {B04C0A20-77A1-4ACA-8EF7-0062F948BDA9} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^DE&apn_uid=AB70BD67-A2BC-4C8A-ABE6-8C554792795A&apn_sauid=51AB3559-E783-469E-BF1A-E1307528585D
AlternateDataStreams: C:\Users\x\Anwendungsdaten:NT
AlternateDataStreams: C:\Users\x\Downloads\avira_de_avsu.exe:BDU
AlternateDataStreams: C:\Users\x\Downloads\CreativeCloudSet-Up.exe:BDU
AlternateDataStreams: C:\Users\x\Downloads\CurseClientSetup_Co25.exe:BDU
AlternateDataStreams: C:\Users\x\Downloads\KiesSetup.exe:BDU
AlternateDataStreams: C:\Users\x\Downloads\LogMeIn Hamachi - CHIP-Downloader.exe:BDU
AlternateDataStreams: C:\Users\x\Downloads\OriginThinSetup.exe:BDU
AlternateDataStreams: C:\Users\x\Downloads\Setup (1).exe:BDU
AlternateDataStreams: C:\Users\x\Downloads\Setup (2).exe:BDU
AlternateDataStreams: C:\Users\x\Downloads\StrifeClientWindows-0.0.1.12.exe:BDU
AlternateDataStreams: C:\Users\x\Downloads\TCPOptimizer_v203.exe:BDU
AlternateDataStreams: C:\Users\x\Downloads\TERASetup.exe:BDU
AlternateDataStreams: C:\Users\x\Downloads\WMSU35924.exe:BDU
AlternateDataStreams: C:\Users\x\AppData\Roaming:NT
Reboot:
*****************

'HKLM\SOFTWARE\Policies\Google' => Key deleted successfully.
HKU\S-1-5-21-502528181-1662014970-3787557195-1000\Software\Microsoft\Windows\CurrentVersion\Run\\framei => value deleted successfully.
HKU\S-1-5-21-502528181-1662014970-3787557195-1000\Software\Microsoft\Windows\CurrentVersion\Run\\nvcmd => value deleted successfully.
HKU\S-1-5-21-502528181-1662014970-3787557195-1000\Software\Microsoft\Windows\CurrentVersion\Run\\cntcmd => value deleted successfully.
C:\Users\x\AppData\Local\ContextFree => Moved successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\5227BC756C9C4846B662717223CAAA2B' => Key deleted successfully.
'HKCR\CLSID\5227BC756C9C4846B662717223CAAA2B'=> Key not found.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{91E874D2-2485-4568-A158-DE3A7DDDBD6C}' => Key deleted successfully.
'HKCR\CLSID\{91E874D2-2485-4568-A158-DE3A7DDDBD6C}'=> Key not found.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B04C0A20-77A1-4ACA-8EF7-0062F948BDA9}' => Key deleted successfully.
'HKCR\CLSID\{B04C0A20-77A1-4ACA-8EF7-0062F948BDA9}'=> Key not found.
"C:\Users\x\Anwendungsdaten" => ":NT" ADS not found.
C:\Users\x\Downloads\avira_de_avsu.exe => ":BDU" ADS removed successfully.
C:\Users\x\Downloads\CreativeCloudSet-Up.exe => ":BDU" ADS removed successfully.
C:\Users\x\Downloads\CurseClientSetup_Co25.exe => ":BDU" ADS removed successfully.
C:\Users\x\Downloads\KiesSetup.exe => ":BDU" ADS removed successfully.
C:\Users\x\Downloads\LogMeIn Hamachi - CHIP-Downloader.exe => ":BDU" ADS removed successfully.
C:\Users\x\Downloads\OriginThinSetup.exe => ":BDU" ADS removed successfully.
C:\Users\x\Downloads\Setup (1).exe => ":BDU" ADS removed successfully.
C:\Users\x\Downloads\Setup (2).exe => ":BDU" ADS removed successfully.
C:\Users\x\Downloads\StrifeClientWindows-0.0.1.12.exe => ":BDU" ADS removed successfully.
C:\Users\x\Downloads\TCPOptimizer_v203.exe => ":BDU" ADS removed successfully.
C:\Users\x\Downloads\TERASetup.exe => ":BDU" ADS removed successfully.
C:\Users\x\Downloads\WMSU35924.exe => ":BDU" ADS removed successfully.
C:\Users\x\AppData\Roaming => ":NT" ADS removed successfully.


The system needed a reboot. 

==== End of Fixlog ====
         

FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-07-2014
Ran by x (administrator) on KISAKES-PC on 20-07-2014 19:17:21
Running from C:\Users\x\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Logitech, Inc.) C:\Program Files\Common Files\logishrd\KHAL3\KHALMNPR.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Realtek) C:\Program Files (x86)\Edimax\PCIe Wireless LAN\RtlService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Edimax\PCIe Wireless LAN\RtWLan.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira) C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup_ultimateprotectionsuite.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Akamai Technologies, Inc.) C:\Users\x\AppData\Local\Akamai\netsession_win.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Akamai Technologies, Inc.) C:\Users\x\AppData\Local\Akamai\netsession_win.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Aeria Games & Entertainment) C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2726728 2010-03-25] (CANON INC.)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310064 2014-05-28] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Aeria Ignite] => C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)
HKU\.DEFAULT\...\Run: [AviraSpeedup] => C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup_ultimateprotectionsuite.exe [5079040 2014-04-02] (Avira)
HKU\S-1-5-21-502528181-1662014970-3787557195-1000\...\Run: [Akamai NetSession Interface] => C:\Users\x\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
HKU\S-1-5-21-502528181-1662014970-3787557195-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1753280 2014-07-16] (Valve Corporation)
HKU\S-1-5-21-502528181-1662014970-3787557195-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3595608 2014-06-26] (Electronic Arts)
HKU\S-1-5-21-502528181-1662014970-3787557195-1000\...\Run: [KiesPDLR.exe] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843568 2014-05-28] (Samsung)
HKU\S-1-5-21-502528181-1662014970-3787557195-1000\...\Run: [GoogleChromeAutoLaunch_0DD987A1035D7802942B4006FF646164] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-07-15] (Google Inc.)
Startup: C:\Users\x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk
ShortcutTarget: Curse.lnk -> C:\Users\x\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x211BD6A6A0C5CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:newtab
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{5EB40362-046A-4BE5-ACD0-5991EC01342A}: [NameServer]8.8.8.8

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.10.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npnxgameEU.dll (Nexon)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-02-01]
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2013-02-25]

Chrome: 
=======
CHR HomePage: hxxp://google.de/
CHR StartupUrls: "hxxp://google.de/"
CHR Extension: (Google Drive) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-17]
CHR Extension: (YouTube) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-17]
CHR Extension: (Google-Suche) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-17]
CHR Extension: (Avira Browser Safety) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-07-17]
CHR Extension: (AdBlock) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-07-17]
CHR Extension: (Google Wallet) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-17]
CHR Extension: (Google Mail) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-17]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5268336 2014-03-25] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-06-05] ()
R2 RealtekSE; C:\Program Files (x86)\Edimax\PCIe Wireless LAN\RtlService.exe [36864 2010-04-16] (Realtek) [File not signed]

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 lvsels64; C:\Windows\System32\DRIVERS\lvsels64.sys [68064 2010-07-27] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-20] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [40712 2012-11-15] (Anchorfree Inc.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\1.3\temp\FairplayKD.sys [X]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [X]
S3 X6va012; \??\C:\Windows\SysWOW64\Drivers\X6va012 [X]
S3 X6va013; \??\C:\Windows\SysWOW64\Drivers\X6va013 [X]
S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [X]
S3 X6va017; \??\C:\Windows\SysWOW64\Drivers\X6va017 [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-20 12:35 - 2014-07-20 12:35 - 02347384 _____ (ESET) C:\Users\x\Downloads\esetsmartinstaller_deu (1).exe
2014-07-20 05:30 - 2014-07-20 19:06 - 00000000 ____D () C:\Users\x\Downloads\FRST-OlderVersion
2014-07-19 23:02 - 2014-07-19 23:02 - 02347384 _____ (ESET) C:\Users\x\Downloads\esetsmartinstaller_deu.exe
2014-07-19 21:30 - 2014-07-19 21:30 - 00019651 _____ () C:\ComboFix.txt
2014-07-19 21:20 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-07-19 21:20 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-07-19 21:20 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-07-19 21:20 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-07-19 21:20 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-07-19 21:20 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-07-19 21:20 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-07-19 21:20 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-07-19 21:19 - 2014-07-19 21:30 - 00000000 ____D () C:\Windows\erdnt
2014-07-19 21:19 - 2014-07-19 21:30 - 00000000 ____D () C:\Qoobox
2014-07-19 21:19 - 2014-07-19 21:19 - 05221938 ____R (Swearware) C:\Users\x\Downloads\ComboFix.exe
2014-07-19 18:03 - 2014-07-19 18:03 - 00078622 _____ () C:\Users\x\Desktop\HitmanPro_20140719_1802.log
2014-07-19 17:05 - 2014-07-19 17:05 - 01354223 _____ () C:\Users\x\Downloads\adwcleaner_3.216.exe
2014-07-19 15:07 - 2014-07-19 18:03 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-07-19 15:06 - 2014-07-19 15:06 - 11188736 _____ (SurfRight B.V.) C:\Users\x\Downloads\HitmanPro_x64.exe
2014-07-17 22:12 - 2014-07-17 22:12 - 00002247 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-17 22:12 - 2014-07-17 22:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-17 22:01 - 2014-07-17 22:12 - 00000000 ____D () C:\Users\x\Desktop\Lesezeichen
2014-07-17 18:54 - 2014-07-17 18:54 - 00001131 _____ () C:\Users\x\Desktop\Rappelz.lnk
2014-07-17 18:51 - 2014-07-17 18:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webzen
2014-07-17 18:45 - 2014-07-17 18:45 - 00000000 ____D () C:\Program Files (x86)\Webzen
2014-07-17 18:22 - 2014-07-17 18:37 - 00000000 ____D () C:\download
2014-07-17 18:22 - 2014-07-17 18:22 - 00000000 ____D () C:\ProgramData\WEBZEN
2014-07-17 18:21 - 2014-07-17 18:22 - 05760976 _____ () C:\Users\x\Downloads\Rappelz_de_Downloader.exe
2014-07-16 15:04 - 2014-07-16 15:04 - 00000000 ____D () C:\ProgramData\Riot Games
2014-07-11 21:49 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-11 21:48 - 2014-07-20 14:43 - 00048628 _____ () C:\Users\x\Downloads\Addition.txt
2014-07-11 21:48 - 2014-07-19 17:52 - 00000000 ____D () C:\AdwCleaner
2014-07-11 21:48 - 2014-07-11 21:48 - 01348263 _____ () C:\Users\x\Downloads\adwcleaner_3.215.exe
2014-07-11 21:47 - 2014-07-20 19:17 - 00016733 _____ () C:\Users\x\Downloads\FRST.txt
2014-07-11 21:47 - 2014-07-20 19:17 - 00000000 ____D () C:\FRST
2014-07-11 21:46 - 2014-07-20 05:30 - 02089984 _____ (Farbar) C:\Users\x\Downloads\FRST64.exe
2014-07-11 21:18 - 2014-07-11 21:18 - 00961360 _____ (Chip Digital GmbH) C:\Users\x\Downloads\Internet Explorer 11 64 Bit - CHIP-Installer.exe
2014-07-11 21:17 - 2014-07-11 21:21 - 00002758 _____ () C:\Windows\IE11_main.log
2014-07-11 20:17 - 2014-07-20 19:10 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-11 20:16 - 2014-07-11 20:16 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-11 20:16 - 2014-07-11 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-07-11 20:16 - 2014-07-11 20:16 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-07-11 20:16 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-11 20:16 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-11 20:16 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-11 20:15 - 2014-07-11 20:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\x\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-10 14:27 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-10 14:27 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-10 14:27 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-10 14:27 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-10 14:27 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-10 14:27 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-10 14:27 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-10 14:27 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-10 14:27 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-10 14:27 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-10 14:27 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-10 14:27 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-10 14:27 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-10 14:27 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-10 14:27 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-10 14:27 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-10 14:27 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-10 14:27 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-10 14:27 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-10 14:27 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-10 14:27 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-10 14:27 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-10 14:26 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-10 14:26 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-10 14:26 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-10 14:26 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-10 14:26 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-10 14:26 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-10 14:26 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-10 14:26 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-10 14:26 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-10 14:26 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-10 14:26 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-10 14:26 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-10 14:26 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-10 14:26 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-10 14:26 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-10 14:26 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-10 14:26 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-10 14:26 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-10 14:26 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-10 14:26 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-10 14:26 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-10 14:26 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-10 14:26 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-10 14:26 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-10 14:26 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-10 14:26 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-10 14:26 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-10 14:26 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-10 14:26 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-10 14:26 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-10 14:26 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-10 14:26 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-10 14:26 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-10 14:26 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-10 14:26 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-10 14:26 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-10 14:26 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-10 14:26 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-10 14:26 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-10 14:26 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-10 14:26 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-10 14:26 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-10 14:26 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-10 14:26 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-10 14:26 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-10 14:26 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-10 14:26 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-10 14:26 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-10 14:26 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-10 14:26 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-10 14:26 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-10 14:26 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-10 14:26 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-10 14:26 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-10 14:26 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-10 14:26 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-10 14:26 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-10 14:26 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-10 14:26 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-09 18:48 - 2014-07-09 18:48 - 00378075 _____ () C:\Users\x\Downloads\MacKeeper.2.10.3.pkg
2014-07-09 18:48 - 2014-07-09 18:48 - 00000000 ____D () C:\ProgramData\Mozilla
2014-07-09 16:12 - 2014-07-09 16:15 - 00000000 ____D () C:\Users\x\AppData\Local\Genesis_07091412
2014-07-09 16:02 - 2014-07-09 16:12 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-07-08 18:39 - 2014-07-08 18:40 - 13084896 _____ (Microsoft Corporation) C:\Users\x\Downloads\Silverlight_x64.exe
2014-07-08 17:52 - 2014-07-08 17:55 - 00000000 ____D () C:\Program Files (x86)\OneFloorApp
2014-07-07 17:03 - 2014-07-07 17:03 - 00291120 _____ () C:\Windows\Minidump\070714-14866-01.dmp
2014-07-07 16:34 - 2014-07-07 16:34 - 00000000 __SHD () C:\Users\x\AppData\Local\EmieUserList
2014-07-07 16:34 - 2014-07-07 16:34 - 00000000 __SHD () C:\Users\x\AppData\Local\EmieSiteList
2014-07-06 17:59 - 2014-07-06 17:59 - 00001735 _____ () C:\Users\x\Desktop\AuraKingdom-DE.lnk
2014-07-06 15:30 - 2014-07-06 15:30 - 00000000 ____D () C:\Users\x\AppData\Local\Aeria Games
2014-07-06 15:29 - 2014-07-06 18:00 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-07-06 15:29 - 2014-07-06 17:59 - 00000000 ____D () C:\Users\x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-07-06 15:29 - 2014-07-06 15:29 - 00001678 _____ () C:\Users\x\Desktop\Aura Kingdom.lnk
2014-07-06 15:29 - 2014-07-06 15:29 - 00000000 ____D () C:\ProgramData\Aeria Games
2014-07-06 15:23 - 2014-07-06 17:54 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2014-07-06 15:23 - 2014-07-06 15:23 - 00002028 _____ () C:\Users\Public\Desktop\Aeria Ignite.lnk
2014-07-06 15:23 - 2014-07-06 15:23 - 00000000 ____D () C:\Users\x\AppData\Roaming\Aeria Games & Entertainment
2014-07-06 15:23 - 2014-07-06 15:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-07-06 15:23 - 2014-07-06 15:23 - 00000000 ____D () C:\Program Files (x86)\Aeria Games
2014-07-06 14:12 - 2014-07-06 17:54 - 00000000 ____D () C:\AeriaGames
2014-07-06 14:12 - 2014-07-06 14:12 - 00581656 _____ (Aeria Games & Entertainment) C:\Users\x\Downloads\aurakingdom_us_downloader.exe
2014-07-05 15:29 - 2014-07-05 15:29 - 08685071 _____ () C:\Users\x\Downloads\MeetYourDEMiZE World v6 (1).zip
2014-07-05 15:29 - 2014-07-05 15:29 - 08685071 _____ () C:\Users\x\Desktop\MeetYourDEMiZE World v6 (1).zip
2014-07-03 23:23 - 2014-07-03 23:23 - 00000000 ____D () C:\Users\x\AppData\Local\Macromedia
2014-07-03 23:22 - 2014-07-20 19:16 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-03 23:22 - 2014-07-09 15:16 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-03 23:22 - 2014-07-09 15:16 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-03 23:22 - 2014-07-09 15:16 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-03 23:07 - 2014-07-03 23:09 - 27167987 _____ () C:\Users\x\Downloads\torbrowser-install-3.6.2_en-US.exe
2014-07-03 23:07 - 2014-07-03 23:07 - 00000000 ____D () C:\Users\x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tor
2014-07-03 23:06 - 2014-07-03 23:06 - 01881962 _____ () C:\Users\x\Downloads\tor-0.2.4.22-win32 (2).exe
2014-07-03 23:04 - 2014-07-03 23:07 - 00000000 ____D () C:\Users\x\AppData\Roaming\Tor
2014-07-03 23:04 - 2014-07-03 23:04 - 01881962 _____ () C:\Users\x\Downloads\tor-0.2.4.22-win32.exe
2014-07-03 23:04 - 2014-07-03 23:04 - 01881962 _____ () C:\Users\x\Downloads\tor-0.2.4.22-win32 (1).exe
2014-07-03 20:01 - 2014-07-03 20:01 - 03928526 _____ () C:\Users\x\Downloads\MeetYourDEMiZE World v2.zip
2014-07-03 19:53 - 2014-07-03 19:53 - 00291256 _____ () C:\Windows\Minidump\070314-18236-01.dmp
2014-07-02 19:18 - 2014-07-02 19:18 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2014-07-02 19:18 - 2014-07-02 19:18 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_MijXfilt_01009.Wdf
2014-07-02 19:10 - 2014-07-02 19:10 - 00000923 _____ () C:\Users\Public\Desktop\DS3 Tool.lnk
2014-07-02 19:10 - 2014-07-02 19:10 - 00000000 ____D () C:\Users\x\AppData\Roaming\MotioninJoy
2014-07-02 19:10 - 2014-07-02 19:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MotioninJoy
2014-07-02 19:10 - 2014-07-02 19:10 - 00000000 ____D () C:\Program Files\MotioninJoy
2014-07-02 19:10 - 2012-05-12 12:31 - 00121416 _____ (MotioninJoy) C:\Windows\system32\Drivers\MijXfilt.sys
2014-07-02 19:10 - 2011-12-07 19:42 - 00328712 _____ (Logitech Inc.) C:\Windows\system32\MijFrc.dll
2014-07-02 19:10 - 2011-12-07 19:42 - 00074960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xusb21.sys
2014-07-02 19:09 - 2014-07-02 19:09 - 04117346 _____ () C:\Users\x\Downloads\MotioninJoy_071001_signed.zip
2014-07-02 19:09 - 2014-07-02 19:09 - 00961360 _____ (Chip Digital GmbH) C:\Users\x\Downloads\MotioninJoy - CHIP-Installer (1).exe
2014-07-02 19:07 - 2014-07-02 19:07 - 00961360 _____ (Chip Digital GmbH) C:\Users\x\Downloads\MotioninJoy - CHIP-Installer.exe
2014-07-02 18:22 - 2014-07-05 00:14 - 00000000 ____D () C:\Users\x\Documents\FIFA 14
2014-07-02 18:22 - 2014-07-02 18:22 - 00001246 _____ () C:\Users\Public\Desktop\FIFA 14.lnk
2014-07-02 18:22 - 2014-07-02 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 14
2014-07-01 16:22 - 2014-07-01 16:21 - 02412640 _____ () C:\Users\x\Desktop\1.2.2_YouJellyVGs_Terraria_All_Item_Map.zip
2014-07-01 16:21 - 2014-07-01 16:21 - 02412640 _____ () C:\Users\x\Downloads\1.2.2_YouJellyVGs_Terraria_All_Item_Map.zip
2014-07-01 16:09 - 2014-07-01 16:09 - 08685071 _____ () C:\Users\x\Downloads\MeetYourDEMiZE World v6.zip
2014-06-30 19:57 - 2014-06-30 19:57 - 01545337 _____ () C:\Users\x\Downloads\Terraria_1.2_All_Items_and_NPCs (1).zip
2014-06-30 19:57 - 2014-06-30 19:57 - 01545337 _____ () C:\Users\x\Desktop\Terraria_1.2_All_Items_and_NPCs (1).zip
2014-06-30 19:56 - 2014-06-30 19:56 - 01545337 _____ () C:\Users\x\Downloads\Terraria_1.2_All_Items_and_NPCs.zip
2014-06-27 20:27 - 2014-06-27 20:27 - 00000219 _____ () C:\Users\x\Desktop\Counter-Strike Global Offensive.url
2014-06-24 17:11 - 2014-06-24 17:12 - 00000000 ____D () C:\Users\x\Desktop\Handyimperium
2014-06-24 16:53 - 2014-06-24 17:05 - 492481815 _____ () C:\Users\x\Downloads\Bloatware_v2.1.zip
2014-06-24 16:53 - 2014-06-24 16:56 - 106395803 _____ () C:\Users\x\Downloads\GoogleApps_v1.4.zip
2014-06-24 16:45 - 2014-06-24 17:11 - 1757573645 _____ () C:\Users\x\Downloads\Imperium_v5.1.zip
2014-06-23 19:57 - 2014-06-23 19:59 - 00000000 ____D () C:\Users\x\Desktop\Neuer Ordner (2)
2014-06-23 19:55 - 2014-06-23 19:55 - 08028207 _____ () C:\Users\x\Downloads\CWM_6.0.4.7_Touch_GT-I9505.tar
2014-06-23 19:19 - 2014-03-19 03:27 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2014-06-23 19:19 - 2014-03-19 03:27 - 00109056 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2014-06-23 16:38 - 2014-06-23 16:38 - 00000000 ____D () C:\Users\x\workspace
2014-06-23 15:03 - 2014-06-23 15:03 - 00000000 ____D () C:\Program Files\SAMSUNG
2014-06-23 14:42 - 2014-06-23 14:42 - 00000000 ____D () C:\AndroidSDK
2014-06-23 14:41 - 2014-06-23 14:41 - 24139484 _____ () C:\Users\x\Downloads\Samsung Galaxy S4 Drivers2.zip
2014-06-23 13:18 - 2014-06-23 13:19 - 35844368 _____ () C:\Users\x\Downloads\adb-tools.zip
2014-06-23 12:50 - 2014-06-23 12:56 - 535287324 _____ () C:\Users\x\Downloads\adt-bundle-windows-x86_64-20140321.zip
2014-06-22 11:59 - 2014-06-22 11:59 - 00001189 _____ () C:\Users\Public\Desktop\Peggle.lnk
2014-06-22 11:59 - 2014-06-22 11:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Peggle

==================== One Month Modified Files and Folders =======

2014-07-20 19:17 - 2014-07-11 21:47 - 00016733 _____ () C:\Users\x\Downloads\FRST.txt
2014-07-20 19:17 - 2014-07-11 21:47 - 00000000 ____D () C:\FRST
2014-07-20 19:16 - 2014-07-03 23:22 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-20 19:16 - 2009-07-14 06:45 - 00021264 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-20 19:16 - 2009-07-14 06:45 - 00021264 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-20 19:14 - 2012-11-18 17:44 - 00000000 ____D () C:\Users\x\AppData\Roaming\Skype
2014-07-20 19:14 - 2011-04-12 09:43 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2014-07-20 19:14 - 2011-04-12 09:43 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2014-07-20 19:14 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-20 19:12 - 2012-11-07 20:37 - 01266069 _____ () C:\Windows\WindowsUpdate.log
2014-07-20 19:10 - 2014-07-11 20:17 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-20 19:10 - 2014-03-29 15:58 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-07-20 19:09 - 2013-03-01 21:21 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-20 19:08 - 2014-05-02 07:26 - 00025854 _____ () C:\Windows\setupact.log
2014-07-20 19:08 - 2013-11-07 22:04 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-20 19:08 - 2012-11-18 17:20 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-20 19:08 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-20 19:07 - 2014-05-18 14:25 - 00282756 _____ () C:\Windows\PFRO.log
2014-07-20 19:06 - 2014-07-20 05:30 - 00000000 ____D () C:\Users\x\Downloads\FRST-OlderVersion
2014-07-20 18:43 - 2013-11-07 22:04 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-20 14:43 - 2014-07-11 21:48 - 00048628 _____ () C:\Users\x\Downloads\Addition.txt
2014-07-20 12:35 - 2014-07-20 12:35 - 02347384 _____ (ESET) C:\Users\x\Downloads\esetsmartinstaller_deu (1).exe
2014-07-20 11:56 - 2014-03-29 15:58 - 00000000 ____D () C:\ProgramData\Origin
2014-07-20 05:30 - 2014-07-11 21:46 - 02089984 _____ (Farbar) C:\Users\x\Downloads\FRST64.exe
2014-07-19 23:02 - 2014-07-19 23:02 - 02347384 _____ (ESET) C:\Users\x\Downloads\esetsmartinstaller_deu.exe
2014-07-19 21:30 - 2014-07-19 21:30 - 00019651 _____ () C:\ComboFix.txt
2014-07-19 21:30 - 2014-07-19 21:19 - 00000000 ____D () C:\Windows\erdnt
2014-07-19 21:30 - 2014-07-19 21:19 - 00000000 ____D () C:\Qoobox
2014-07-19 21:30 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-07-19 21:27 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-07-19 21:19 - 2014-07-19 21:19 - 05221938 ____R (Swearware) C:\Users\x\Downloads\ComboFix.exe
2014-07-19 21:18 - 2014-04-02 19:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-19 18:03 - 2014-07-19 18:03 - 00078622 _____ () C:\Users\x\Desktop\HitmanPro_20140719_1802.log
2014-07-19 18:03 - 2014-07-19 15:07 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-07-19 17:52 - 2014-07-11 21:48 - 00000000 ____D () C:\AdwCleaner
2014-07-19 17:05 - 2014-07-19 17:05 - 01354223 _____ () C:\Users\x\Downloads\adwcleaner_3.216.exe
2014-07-19 15:06 - 2014-07-19 15:06 - 11188736 _____ (SurfRight B.V.) C:\Users\x\Downloads\HitmanPro_x64.exe
2014-07-18 18:12 - 2013-12-11 18:38 - 00000000 ____D () C:\Users\x\AppData\Local\Battle.net
2014-07-18 16:51 - 2013-12-11 18:41 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-07-18 16:51 - 2013-04-06 18:49 - 00000000 ____D () C:\Program Files (x86)\Diablo III
2014-07-18 16:49 - 2013-12-11 18:38 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-07-17 23:26 - 2013-11-19 22:33 - 00000000 ____D () C:\Program Files (x86)\osu!
2014-07-17 22:12 - 2014-07-17 22:12 - 00002247 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-17 22:12 - 2014-07-17 22:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-17 22:12 - 2014-07-17 22:01 - 00000000 ____D () C:\Users\x\Desktop\Lesezeichen
2014-07-17 22:12 - 2013-11-07 22:04 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-17 22:12 - 2012-11-18 17:26 - 00000000 ____D () C:\Users\x\AppData\Local\Google
2014-07-17 18:54 - 2014-07-17 18:54 - 00001131 _____ () C:\Users\x\Desktop\Rappelz.lnk
2014-07-17 18:51 - 2014-07-17 18:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webzen
2014-07-17 18:45 - 2014-07-17 18:45 - 00000000 ____D () C:\Program Files (x86)\Webzen
2014-07-17 18:37 - 2014-07-17 18:22 - 00000000 ____D () C:\download
2014-07-17 18:22 - 2014-07-17 18:22 - 00000000 ____D () C:\ProgramData\WEBZEN
2014-07-17 18:22 - 2014-07-17 18:21 - 05760976 _____ () C:\Users\x\Downloads\Rappelz_de_Downloader.exe
2014-07-16 15:04 - 2014-07-16 15:04 - 00000000 ____D () C:\ProgramData\Riot Games
2014-07-15 12:37 - 2014-04-02 19:04 - 00001137 _____ () C:\Users\x\Desktop\Avira.lnk
2014-07-15 12:37 - 2014-04-02 19:04 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-15 12:37 - 2014-03-15 13:23 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-12 23:29 - 2013-08-01 17:54 - 00000000 ____D () C:\Users\x\AppData\Roaming\.minecraft
2014-07-12 12:21 - 2012-11-30 17:47 - 00000000 ____D () C:\Users\x\AppData\Roaming\TS3Client
2014-07-12 02:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-07-11 21:50 - 2012-11-25 14:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-11 21:50 - 2012-11-07 20:37 - 00000000 ____D () C:\Users\x
2014-07-11 21:48 - 2014-07-11 21:48 - 01348263 _____ () C:\Users\x\Downloads\adwcleaner_3.215.exe
2014-07-11 21:21 - 2014-07-11 21:17 - 00002758 _____ () C:\Windows\IE11_main.log
2014-07-11 21:18 - 2014-07-11 21:18 - 00961360 _____ (Chip Digital GmbH) C:\Users\x\Downloads\Internet Explorer 11 64 Bit - CHIP-Installer.exe
2014-07-11 20:36 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\addins
2014-07-11 20:35 - 2013-02-25 22:13 - 00000000 ____D () C:\Program Files (x86)\Amazon
2014-07-11 20:16 - 2014-07-11 20:16 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-11 20:16 - 2014-07-11 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-07-11 20:16 - 2014-07-11 20:16 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-07-11 20:16 - 2012-12-07 12:11 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-11 20:15 - 2014-07-11 20:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\x\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-11 20:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-11 09:58 - 2009-07-14 06:45 - 00294712 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-11 09:56 - 2014-05-06 22:58 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-11 09:56 - 2011-04-12 09:55 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-11 09:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-11 09:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-11 01:10 - 2013-08-23 03:01 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-11 01:09 - 2013-01-11 00:16 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-10 14:26 - 2014-04-03 12:46 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-09 18:48 - 2014-07-09 18:48 - 00378075 _____ () C:\Users\x\Downloads\MacKeeper.2.10.3.pkg
2014-07-09 18:48 - 2014-07-09 18:48 - 00000000 ____D () C:\ProgramData\Mozilla
2014-07-09 16:15 - 2014-07-09 16:12 - 00000000 ____D () C:\Users\x\AppData\Local\Genesis_07091412
2014-07-09 16:12 - 2014-07-09 16:02 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-07-09 15:16 - 2014-07-03 23:22 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-09 15:16 - 2014-07-03 23:22 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-09 15:16 - 2014-07-03 23:22 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-08 18:40 - 2014-07-08 18:39 - 13084896 _____ (Microsoft Corporation) C:\Users\x\Downloads\Silverlight_x64.exe
2014-07-08 17:55 - 2014-07-08 17:52 - 00000000 ____D () C:\Program Files (x86)\OneFloorApp
2014-07-07 17:03 - 2014-07-07 17:03 - 00291120 _____ () C:\Windows\Minidump\070714-14866-01.dmp
2014-07-07 17:03 - 2014-05-20 18:15 - 559983192 _____ () C:\Windows\MEMORY.DMP
2014-07-07 17:03 - 2012-11-30 19:23 - 00000000 ____D () C:\Windows\Minidump
2014-07-07 16:34 - 2014-07-07 16:34 - 00000000 __SHD () C:\Users\x\AppData\Local\EmieUserList
2014-07-07 16:34 - 2014-07-07 16:34 - 00000000 __SHD () C:\Users\x\AppData\Local\EmieSiteList
2014-07-06 18:00 - 2014-07-06 15:29 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-07-06 18:00 - 2013-07-14 15:44 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-07-06 17:59 - 2014-07-06 17:59 - 00001735 _____ () C:\Users\x\Desktop\AuraKingdom-DE.lnk
2014-07-06 17:59 - 2014-07-06 15:29 - 00000000 ____D () C:\Users\x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-07-06 17:54 - 2014-07-06 15:23 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2014-07-06 17:54 - 2014-07-06 14:12 - 00000000 ____D () C:\AeriaGames
2014-07-06 15:30 - 2014-07-06 15:30 - 00000000 ____D () C:\Users\x\AppData\Local\Aeria Games
2014-07-06 15:29 - 2014-07-06 15:29 - 00001678 _____ () C:\Users\x\Desktop\Aura Kingdom.lnk
2014-07-06 15:29 - 2014-07-06 15:29 - 00000000 ____D () C:\ProgramData\Aeria Games
2014-07-06 15:23 - 2014-07-06 15:23 - 00002028 _____ () C:\Users\Public\Desktop\Aeria Ignite.lnk
2014-07-06 15:23 - 2014-07-06 15:23 - 00000000 ____D () C:\Users\x\AppData\Roaming\Aeria Games & Entertainment
2014-07-06 15:23 - 2014-07-06 15:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-07-06 15:23 - 2014-07-06 15:23 - 00000000 ____D () C:\Program Files (x86)\Aeria Games
2014-07-06 14:12 - 2014-07-06 14:12 - 00581656 _____ (Aeria Games & Entertainment) C:\Users\x\Downloads\aurakingdom_us_downloader.exe
2014-07-06 01:00 - 2014-06-07 16:29 - 00000000 ____D () C:\Users\x\Desktop\Neuer Ordner
2014-07-05 15:29 - 2014-07-05 15:29 - 08685071 _____ () C:\Users\x\Downloads\MeetYourDEMiZE World v6 (1).zip
2014-07-05 15:29 - 2014-07-05 15:29 - 08685071 _____ () C:\Users\x\Desktop\MeetYourDEMiZE World v6 (1).zip
2014-07-05 00:14 - 2014-07-02 18:22 - 00000000 ____D () C:\Users\x\Documents\FIFA 14
2014-07-03 23:23 - 2014-07-03 23:23 - 00000000 ____D () C:\Users\x\AppData\Local\Macromedia
2014-07-03 23:09 - 2014-07-03 23:07 - 27167987 _____ () C:\Users\x\Downloads\torbrowser-install-3.6.2_en-US.exe
2014-07-03 23:07 - 2014-07-03 23:07 - 00000000 ____D () C:\Users\x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tor
2014-07-03 23:07 - 2014-07-03 23:04 - 00000000 ____D () C:\Users\x\AppData\Roaming\Tor
2014-07-03 23:06 - 2014-07-03 23:06 - 01881962 _____ () C:\Users\x\Downloads\tor-0.2.4.22-win32 (2).exe
2014-07-03 23:04 - 2014-07-03 23:04 - 01881962 _____ () C:\Users\x\Downloads\tor-0.2.4.22-win32.exe
2014-07-03 23:04 - 2014-07-03 23:04 - 01881962 _____ () C:\Users\x\Downloads\tor-0.2.4.22-win32 (1).exe
2014-07-03 20:01 - 2014-07-03 20:01 - 03928526 _____ () C:\Users\x\Downloads\MeetYourDEMiZE World v2.zip
2014-07-03 19:53 - 2014-07-03 19:53 - 00291256 _____ () C:\Windows\Minidump\070314-18236-01.dmp
2014-07-02 19:18 - 2014-07-02 19:18 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2014-07-02 19:18 - 2014-07-02 19:18 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_MijXfilt_01009.Wdf
2014-07-02 19:10 - 2014-07-02 19:10 - 00000923 _____ () C:\Users\Public\Desktop\DS3 Tool.lnk
2014-07-02 19:10 - 2014-07-02 19:10 - 00000000 ____D () C:\Users\x\AppData\Roaming\MotioninJoy
2014-07-02 19:10 - 2014-07-02 19:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MotioninJoy
2014-07-02 19:10 - 2014-07-02 19:10 - 00000000 ____D () C:\Program Files\MotioninJoy
2014-07-02 19:09 - 2014-07-02 19:09 - 04117346 _____ () C:\Users\x\Downloads\MotioninJoy_071001_signed.zip
2014-07-02 19:09 - 2014-07-02 19:09 - 00961360 _____ (Chip Digital GmbH) C:\Users\x\Downloads\MotioninJoy - CHIP-Installer (1).exe
2014-07-02 19:07 - 2014-07-02 19:07 - 00961360 _____ (Chip Digital GmbH) C:\Users\x\Downloads\MotioninJoy - CHIP-Installer.exe
2014-07-02 18:22 - 2014-07-02 18:22 - 00001246 _____ () C:\Users\Public\Desktop\FIFA 14.lnk
2014-07-02 18:22 - 2014-07-02 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 14
2014-07-02 18:22 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-07-02 18:21 - 2014-05-29 15:12 - 00074036 _____ () C:\Windows\DirectX.log
2014-07-02 17:16 - 2014-03-29 16:01 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-07-01 16:21 - 2014-07-01 16:22 - 02412640 _____ () C:\Users\x\Desktop\1.2.2_YouJellyVGs_Terraria_All_Item_Map.zip
2014-07-01 16:21 - 2014-07-01 16:21 - 02412640 _____ () C:\Users\x\Downloads\1.2.2_YouJellyVGs_Terraria_All_Item_Map.zip
2014-07-01 16:09 - 2014-07-01 16:09 - 08685071 _____ () C:\Users\x\Downloads\MeetYourDEMiZE World v6.zip
2014-06-30 19:57 - 2014-06-30 19:57 - 01545337 _____ () C:\Users\x\Downloads\Terraria_1.2_All_Items_and_NPCs (1).zip
2014-06-30 19:57 - 2014-06-30 19:57 - 01545337 _____ () C:\Users\x\Desktop\Terraria_1.2_All_Items_and_NPCs (1).zip
2014-06-30 19:56 - 2014-06-30 19:56 - 01545337 _____ () C:\Users\x\Downloads\Terraria_1.2_All_Items_and_NPCs.zip
2014-06-30 04:09 - 2014-07-10 14:27 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-30 04:04 - 2014-07-10 14:27 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-27 20:27 - 2014-06-27 20:27 - 00000219 _____ () C:\Users\x\Desktop\Counter-Strike Global Offensive.url
2014-06-27 20:27 - 2013-03-01 21:47 - 00000000 ____D () C:\Users\x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-06-26 16:54 - 2013-10-09 19:45 - 00000000 ____D () C:\Users\x\AppData\Roaming\.technic
2014-06-26 15:42 - 2013-10-09 19:45 - 02346942 _____ () C:\Users\x\Desktop\TechnicLauncher.exe
2014-06-24 17:12 - 2014-06-24 17:11 - 00000000 ____D () C:\Users\x\Desktop\Handyimperium
2014-06-24 17:11 - 2014-06-24 16:45 - 1757573645 _____ () C:\Users\x\Downloads\Imperium_v5.1.zip
2014-06-24 17:05 - 2014-06-24 16:53 - 492481815 _____ () C:\Users\x\Downloads\Bloatware_v2.1.zip
2014-06-24 16:56 - 2014-06-24 16:53 - 106395803 _____ () C:\Users\x\Downloads\GoogleApps_v1.4.zip
2014-06-24 14:55 - 2014-04-02 19:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-23 19:59 - 2014-06-23 19:57 - 00000000 ____D () C:\Users\x\Desktop\Neuer Ordner (2)
2014-06-23 19:55 - 2014-06-23 19:55 - 08028207 _____ () C:\Users\x\Downloads\CWM_6.0.4.7_Touch_GT-I9505.tar
2014-06-23 16:38 - 2014-06-23 16:38 - 00000000 ____D () C:\Users\x\workspace
2014-06-23 16:38 - 2013-12-28 20:08 - 00000000 ____D () C:\Users\x\.android
2014-06-23 15:04 - 2014-05-05 16:04 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-06-23 15:03 - 2014-06-23 15:03 - 00000000 ____D () C:\Program Files\SAMSUNG
2014-06-23 14:42 - 2014-06-23 14:42 - 00000000 ____D () C:\AndroidSDK
2014-06-23 14:41 - 2014-06-23 14:41 - 24139484 _____ () C:\Users\x\Downloads\Samsung Galaxy S4 Drivers2.zip
2014-06-23 14:40 - 2012-11-18 18:56 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-06-23 13:19 - 2014-06-23 13:18 - 35844368 _____ () C:\Users\x\Downloads\adb-tools.zip
2014-06-23 12:56 - 2014-06-23 12:50 - 535287324 _____ () C:\Users\x\Downloads\adt-bundle-windows-x86_64-20140321.zip
2014-06-22 12:01 - 2014-05-29 15:13 - 00000000 ____D () C:\ProgramData\PopCap Games
2014-06-22 11:59 - 2014-06-22 11:59 - 00001189 _____ () C:\Users\Public\Desktop\Peggle.lnk
2014-06-22 11:59 - 2014-06-22 11:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Peggle
2014-06-21 23:38 - 2013-11-07 22:04 - 00004096 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-21 23:38 - 2013-11-07 22:04 - 00003844 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-21 21:12 - 2014-06-07 18:14 - 00000000 ____D () C:\Users\x\Desktop\Huso-Liste
2014-06-20 22:14 - 2014-07-10 14:26 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-20 21:39 - 2014-07-10 14:26 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

Some content of TEMP:
====================
C:\Users\x\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-19 19:41

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-07-2014
Ran by x at 2014-07-20 19:17:54
Running from C:\Users\x\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Action Replay PowerSaves 3DS Version 1.18 (HKLM-x32\...\{CD24B06F-0A4D-410A-AEF2-DFE6A28AB4C0}_is1) (Version: 1.18 - Datel Design & Development)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Aeria Ignite (HKLM-x32\...\Aeria Ignite 1.13.3296) (Version: 1.13.3296 - Aeria Games & Entertainment)
Aeria Ignite (HKLM-x32\...\Aeria Ignite) (Version: 1.13.3296 - Aeria Games & Entertainment)
Aeria Ignite (x32 Version: 1.13.3296 - Aeria Games & Entertainment) Hidden
Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc)
ANNO 1503 (HKLM-x32\...\{EBBB1DEF-8878-4CB8-BC0D-1196B30E7527}) (Version:  - )
Anno 1701 (HKLM-x32\...\{A2433A63-5F5D-40E5-B529-9123C2B3E734}) (Version: 1.02 - Sunflowers)
Aura Kingdom (HKLM-x32\...\Aura Kingdom) (Version:  - )
AuraKingdom-DE (HKLM-x32\...\AuraKingdom-DE) (Version:  - )
Avira (HKLM-x32\...\{142be4a8-895b-4ed9-b1ff-11c76357e3df}) (Version: 1.1.17.31000 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.17.31000 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.5.464 - Avira)
Avira System Speedup (HKLM-x32\...\AviraSpeedup) (Version: 1.3.1.9930 - Avira System Speedup)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - )
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
BlackShot (HKLM-x32\...\BlackShot) (Version:  - )
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.3.5.0 - Canon Inc.)
Canon MG5100 series Benutzerregistrierung (HKLM-x32\...\Canon MG5100 series Benutzerregistrierung) (Version:  - )
Canon MG5100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5100_series) (Version:  - )
Canon MP Navigator EX 4.0 (HKLM-x32\...\MP Navigator EX 4.0) (Version:  - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )
Castle Crashers Demo (HKLM-x32\...\Steam App 207100) (Version:  - The Behemoth)
CCleaner (HKLM\...\CCleaner) (Version: 4.00 - Piriform)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
ContextFree (HKCU\...\ContextFree) (Version:  - )
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Cube World version 0.0.1 (HKLM-x32\...\{D692A0E0-1BBB-4E9C-826E-4254EE330830}_is1) (Version: 0.0.1 - Picroma)
Curse (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dead Space (HKLM-x32\...\{025A585C-0C66-413D-80D2-4C05CB699771}) (Version: 1.0.0.222 - Electronic Arts)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Dragon's Prophet (HKLM-x32\...\{C31556D7-F2B9-4787-B223-F7A035067E89}_is1) (Version: 1.0.1087.5 - Infernum Productions AG)
Edimax Wireless LAN Driver and Utility (HKLM-x32\...\{556BEFE2-30FF-4113-98F4-01234396DF2B}) (Version: 1.00.0184 - Edimax Technology Co.)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.0.20140212 - Landesfinanzdirektion Thüringen)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Fences (HKLM-x32\...\Fences) (Version:  - Stardock Corporation)
Fences (Version: 1.0 - Stardock Corporation) Hidden
FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.7 - Electronic Arts)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Free YouTube Download version 3.2.39.604 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.39.604 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.0.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.0.128 - DVDVideoSoft Ltd.)
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
GrandChase version v1405235 (HKLM-x32\...\{4727AFE5-6B05-4D9C-B2CC-B805E6D0610A}_is1) (Version: v1405235 - KOGGAMES)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Java 7 Update 10 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417010FF}) (Version: 7.0.100 - Oracle)
Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
Java SE Development Kit 7 Update 10 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170100}) (Version: 1.7.0.100 - Oracle)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden
Logitech Gaming Software 8.51 (HKLM\...\Logitech Gaming Software) (Version: 8.51.5 - Logitech Inc.)
Logitech SetPoint 6.61 (HKLM\...\sp6) (Version: 6.61.15 - Logitech)
Logitech-Webkamera-Treiber (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.0 - Logitech Inc.)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MTA:SA v1.3 (HKLM-x32\...\MTA:SA 1.3) (Version: v1.3 - Multi Theft Auto)
NVIDIA 3D Vision Controller-Treiber 310.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 310.70 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Grafiktreiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.108.688 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 311.06 (Version: 311.06 - NVIDIA Corporation) Hidden
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
osu! (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284C}) (Version: 0.0.0.0 - peppy)
Path of Exile (HKLM-x32\...\{90A4562F-D4A1-4B65-906D-41F236CF6902}) (Version: 0.10.7.24265 - Grinding Gear Games)
Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)
Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Rappelz (HKLM-x32\...\{90877318-0BD0-4BDE-BFC0-C4BB12DAC86A}_is1) (Version: Rappelz - gPotato.eu)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.)
S4 League_EU (HKLM-x32\...\{CD097216-1F2D-4743-B9AA-A382BB9A65B8}) (Version: 1.00.0000 - )
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.2.14014_7 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.2.14014_7 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14055.3 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.14055.3 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.40.0 - SAMSUNG Electronics Co., Ltd.)
Skype Click to Call (HKLM-x32\...\{BB285C9F-C821-4770-8970-56C4AB52C87E}) (Version: 7.2.15747.10003 - Microsoft Corporation)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.00.0000 - Electronic Arts)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Strife (HKLM-x32\...\strife) (Version: 0.0.1 - S2 Games)
TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
Terraria (HKLM-x32\...\Steam App 105600) (Version:  - )
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.275 - TuneUp Software) Hidden
Vindictus EU (HKLM-x32\...\Vindictus EU) (Version:  - )
Warframe (HKLM-x32\...\{49A5AEA6-92E1-46A8-8371-114F1CE2C2A6}) (Version: 1.0.0 - Digital Extremes)
Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
XZONE REACTOR Application (HKLM-x32\...\{18A28285-5D69-4562-ACC3-157E3455CA01}_is1) (Version:  - )
YGOPro DevPro Version 1.9.8 r9 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.8 r9 - YGOPro DevPro Online)

==================== Restore Points  =========================

19-07-2014 16:03:25 Prüfpunkt von HitmanPro
20-07-2014 17:00:11 Windows-Sicherung

==================== Hosts content: ==========================

2009-07-14 04:34 - 2014-07-19 21:24 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {00336CEF-017D-4397-823B-B972F230A222} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-07] (Google Inc.)
Task: {11E6E623-FF6C-4CD0-ADF1-6832FF8E08E2} - System32\Tasks\{73AE56D6-A829-48EA-85A7-302F1F0C7FC0} => C:\Program Files (x86)\Dragon's Prophet\launcher.exe [2013-11-05] ()
Task: {18E68AAF-9B43-4860-86C3-A8079ACD77B1} - System32\Tasks\AviraSpeedup => C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup_ultimateprotectionsuite.exe [2014-04-02] (Avira)
Task: {1D752CF7-63E3-4190-A22D-F65343390AB0} - System32\Tasks\{958AD2D4-5345-4DE0-BA5D-4DD030A687BA} => C:\Program Files (x86)\Dragon's Prophet\launcher.exe [2013-11-05] ()
Task: {5328DB62-F2BC-42F9-9FEB-7A17A407C1E5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-07] (Google Inc.)
Task: {57B4BE41-2161-4C48-9ADE-03965592DB1A} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {80D04152-E58C-4CCA-BBE7-B7F353D8A6F8} - System32\Tasks\{5B206451-509F-4528-B7DB-31404E8DF3C2} => C:\Program Files (x86)\eFusion\Dragon Nest Europe\DNLauncher.exe
Task: {A58A17E6-4C5A-4D89-85D3-99F64BBC32E0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-03-25] (Piriform Ltd)
Task: {A83A0C46-EEC8-4599-AB8B-BF6D5B132372} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: {AEB1652A-A370-4B88-A76D-6CBE04C5888C} - \AppCloudUpdater No Task File <==== ATTENTION
Task: {E72996F8-AE06-4BD5-98A8-0171FCD31F39} - System32\Tasks\Games\UpdateCheck_S-1-5-21-502528181-1662014970-3787557195-1000
Task: {F66E19BB-2A48-403B-94C8-4DB9A48BE940} - \fsupdate No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-11-18 17:19 - 2013-01-18 17:00 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-06-05 13:27 - 2014-06-05 13:27 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2012-11-18 23:07 - 2009-12-09 22:20 - 00126976 _____ () C:\Program Files (x86)\Edimax\PCIe Wireless LAN\EnumDevLib.dll
2014-05-23 14:19 - 2014-07-12 02:53 - 01116672 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll
2014-04-24 06:32 - 2014-07-12 02:53 - 00438784 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll
2014-05-23 14:19 - 2014-07-12 02:53 - 00399360 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll
2014-01-09 15:28 - 2014-07-12 02:53 - 00331264 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2013-07-01 08:20 - 2014-06-27 00:40 - 00764416 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-05-23 14:19 - 2014-07-16 04:28 - 02139328 _____ () C:\Program Files (x86)\Steam\video.dll
2014-05-23 14:19 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll
2013-02-25 08:39 - 2014-07-16 04:28 - 01116864 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-02-19 12:48 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-03-29 15:59 - 2014-06-26 14:25 - 00962560 _____ () C:\Program Files (x86)\Origin\platforms\qwindows.dll
2014-03-29 15:59 - 2014-06-26 14:25 - 00024064 _____ () C:\Program Files (x86)\Origin\imageformats\qgif.dll
2014-03-29 15:59 - 2014-06-26 14:25 - 00025088 _____ () C:\Program Files (x86)\Origin\imageformats\qico.dll
2014-03-29 15:59 - 2014-06-26 14:25 - 00217088 _____ () C:\Program Files (x86)\Origin\imageformats\qjpeg.dll
2014-03-29 15:59 - 2014-06-26 14:25 - 00261632 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll
2014-03-29 15:59 - 2014-06-26 14:25 - 00019968 _____ () C:\Program Files (x86)\Origin\imageformats\qtga.dll
2014-03-29 15:59 - 2014-06-26 14:25 - 00302592 _____ () C:\Program Files (x86)\Origin\imageformats\qtiff.dll
2014-03-29 15:59 - 2014-06-26 14:25 - 00018944 _____ () C:\Program Files (x86)\Origin\imageformats\qwbmp.dll
2014-07-20 11:55 - 2014-07-07 13:53 - 00049744 _____ () C:\Users\x\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-07-17 22:12 - 2014-07-15 11:24 - 00718664 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll
2014-07-17 22:12 - 2014-07-15 11:24 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll
2014-07-17 22:12 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll
2014-07-17 22:12 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll
2014-07-17 22:12 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/20/2014 07:10:12 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.ComponentModel.Composition.CompositionException
Stapel:
   bei System.ComponentModel.Composition.Hosting.CompositionServices.GetExportedValueFromComposedPart(System.ComponentModel.Composition.Hosting.ImportEngine, System.ComponentModel.Composition.Primitives.ComposablePart, System.ComponentModel.Composition.Primitives.ExportDefinition)
   bei System.ComponentModel.Composition.Hosting.CatalogExportProvider.GetExportedValue(CatalogPart, System.ComponentModel.Composition.Primitives.ExportDefinition, Boolean)
   bei System.ComponentModel.Composition.Hosting.CatalogExportProvider+CatalogExport.GetExportedValueCore()
   bei System.ComponentModel.Composition.Primitives.Export.get_Value()
   bei System.ComponentModel.Composition.ExportServices.GetCastedExportedValue[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.ComponentModel.Composition.Primitives.Export)
   bei System.ComponentModel.Composition.Hosting.ExportProvider.GetExportedValuesCore[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.String)
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/20/2014 07:09:56 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.ComponentModel.Composition.CompositionException
Stapel:
   bei System.ComponentModel.Composition.Hosting.CompositionServices.GetExportedValueFromComposedPart(System.ComponentModel.Composition.Hosting.ImportEngine, System.ComponentModel.Composition.Primitives.ComposablePart, System.ComponentModel.Composition.Primitives.ExportDefinition)
   bei System.ComponentModel.Composition.Hosting.CatalogExportProvider.GetExportedValue(CatalogPart, System.ComponentModel.Composition.Primitives.ExportDefinition, Boolean)
   bei System.ComponentModel.Composition.Hosting.CatalogExportProvider+CatalogExport.GetExportedValueCore()
   bei System.ComponentModel.Composition.Primitives.Export.get_Value()
   bei System.ComponentModel.Composition.ExportServices.GetCastedExportedValue[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.ComponentModel.Composition.Primitives.Export)
   bei System.ComponentModel.Composition.Hosting.ExportProvider.GetExportedValuesCore[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.String)
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/20/2014 07:09:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/20/2014 07:08:29 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.ComponentModel.Composition.CompositionException
Stapel:
   bei System.ComponentModel.Composition.Hosting.CompositionServices.GetExportedValueFromComposedPart(System.ComponentModel.Composition.Hosting.ImportEngine, System.ComponentModel.Composition.Primitives.ComposablePart, System.ComponentModel.Composition.Primitives.ExportDefinition)
   bei System.ComponentModel.Composition.Hosting.CatalogExportProvider.GetExportedValue(CatalogPart, System.ComponentModel.Composition.Primitives.ExportDefinition, Boolean)
   bei System.ComponentModel.Composition.Hosting.CatalogExportProvider+CatalogExport.GetExportedValueCore()
   bei System.ComponentModel.Composition.Primitives.Export.get_Value()
   bei System.ComponentModel.Composition.ExportServices.GetCastedExportedValue[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.ComponentModel.Composition.Primitives.Export)
   bei System.ComponentModel.Composition.Hosting.ExportProvider.GetExportedValuesCore[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.String)
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/20/2014 04:54:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: League of Legends.exe, Version: 4.12.0.356, Zeitstempel: 0x53c09e62
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x5b40a5b1
ID des fehlerhaften Prozesses: 0x1650
Startzeit der fehlerhaften Anwendung: 0xLeague of Legends.exe0
Pfad der fehlerhaften Anwendung: League of Legends.exe1
Pfad des fehlerhaften Moduls: League of Legends.exe2
Berichtskennung: League of Legends.exe3

Error: (07/20/2014 00:38:36 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (07/20/2014 00:38:34 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (07/20/2014 11:54:35 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/20/2014 04:36:53 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (07/19/2014 11:05:18 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (07/20/2014 07:11:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (07/20/2014 07:11:25 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (07/20/2014 07:10:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (07/20/2014 07:09:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/20/2014 07:09:26 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/20/2014 11:56:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (07/20/2014 11:56:37 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (07/20/2014 11:53:29 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.

Error: (07/19/2014 09:28:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (07/19/2014 09:28:46 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).


Microsoft Office Sessions:
=========================
Error: (07/20/2014 07:10:12 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.ComponentModel.Composition.CompositionException
Stapel:
   bei System.ComponentModel.Composition.Hosting.CompositionServices.GetExportedValueFromComposedPart(System.ComponentModel.Composition.Hosting.ImportEngine, System.ComponentModel.Composition.Primitives.ComposablePart, System.ComponentModel.Composition.Primitives.ExportDefinition)
   bei System.ComponentModel.Composition.Hosting.CatalogExportProvider.GetExportedValue(CatalogPart, System.ComponentModel.Composition.Primitives.ExportDefinition, Boolean)
   bei System.ComponentModel.Composition.Hosting.CatalogExportProvider+CatalogExport.GetExportedValueCore()
   bei System.ComponentModel.Composition.Primitives.Export.get_Value()
   bei System.ComponentModel.Composition.ExportServices.GetCastedExportedValue[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.ComponentModel.Composition.Primitives.Export)
   bei System.ComponentModel.Composition.Hosting.ExportProvider.GetExportedValuesCore[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.String)
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/20/2014 07:09:56 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.ComponentModel.Composition.CompositionException
Stapel:
   bei System.ComponentModel.Composition.Hosting.CompositionServices.GetExportedValueFromComposedPart(System.ComponentModel.Composition.Hosting.ImportEngine, System.ComponentModel.Composition.Primitives.ComposablePart, System.ComponentModel.Composition.Primitives.ExportDefinition)
   bei System.ComponentModel.Composition.Hosting.CatalogExportProvider.GetExportedValue(CatalogPart, System.ComponentModel.Composition.Primitives.ExportDefinition, Boolean)
   bei System.ComponentModel.Composition.Hosting.CatalogExportProvider+CatalogExport.GetExportedValueCore()
   bei System.ComponentModel.Composition.Primitives.Export.get_Value()
   bei System.ComponentModel.Composition.ExportServices.GetCastedExportedValue[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.ComponentModel.Composition.Primitives.Export)
   bei System.ComponentModel.Composition.Hosting.ExportProvider.GetExportedValuesCore[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.String)
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/20/2014 07:09:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/20/2014 07:08:29 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.ComponentModel.Composition.CompositionException
Stapel:
   bei System.ComponentModel.Composition.Hosting.CompositionServices.GetExportedValueFromComposedPart(System.ComponentModel.Composition.Hosting.ImportEngine, System.ComponentModel.Composition.Primitives.ComposablePart, System.ComponentModel.Composition.Primitives.ExportDefinition)
   bei System.ComponentModel.Composition.Hosting.CatalogExportProvider.GetExportedValue(CatalogPart, System.ComponentModel.Composition.Primitives.ExportDefinition, Boolean)
   bei System.ComponentModel.Composition.Hosting.CatalogExportProvider+CatalogExport.GetExportedValueCore()
   bei System.ComponentModel.Composition.Primitives.Export.get_Value()
   bei System.ComponentModel.Composition.ExportServices.GetCastedExportedValue[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.ComponentModel.Composition.Primitives.Export)
   bei System.ComponentModel.Composition.Hosting.ExportProvider.GetExportedValuesCore[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.String)
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/20/2014 04:54:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: League of Legends.exe4.12.0.35653c09e62unknown0.0.0.000000000c00000055b40a5b1165001cfa426e32d1923C:\Riot Games\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.48\deploy\League of Legends.exeunknownceaf12d5-101d-11e4-bacd-bc5ff432d39d

Error: (07/20/2014 00:38:36 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\x\Downloads\esetsmartinstaller_deu (1).exe

Error: (07/20/2014 00:38:34 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\x\Downloads\esetsmartinstaller_deu (1).exe

Error: (07/20/2014 11:54:35 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/20/2014 04:36:53 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (07/19/2014 11:05:18 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe


CodeIntegrity Errors:
===================================
  Date: 2014-07-19 21:24:34.588
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-07-19 21:24:34.545
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 32%
Total physical RAM: 8157.21 MB
Available physical RAM: 5489.38 MB
Total Pagefile: 16312.59 MB
Available Pagefile: 13163.58 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:680.12 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: EA97BED2)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

https://support.google.com/chrome/answer/3296214?hl=de

Chrome zurücksetzen...

Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?

Ich glaub nicht, dass es was bringt habs schonma gemacht gehabt, dass hat ja nichts mit den Einstellung zu tun, da sich die Werbetaps random öffnen, aber ich machs trotzdem, mal gucken.

Und?

naja bis jetzt nichts mit Werbetaps o0, aber ich war jetzt auch nicht viel im Browser ich sag morgen nochmal bescheid hab aber gute Aussichten, obwohl ich nicht weis warum Browsereinstellungen zurücksetzen was bringt, weil ichs schonma gemacht hatte o0

Bis jetzt immernoch nichts. Wieso sollte das was mit den Browsereinstellungen zu tun haben, da ich die schonma zurückgesetzt hab und die Werbetaps random geöffnet wurden o0

Zitat von Kisake01

naja bis jetzt nichts mit Werbetaps o0, aber ich war jetzt auch nicht viel im Browser ich sag morgen nochmal bescheid hab aber gute Aussichten, obwohl ich nicht weis warum Browsereinstellungen zurücksetzen was bringt, weil ichs schonma gemacht hatte o0

Bis jetzt immernoch nichts. Wieso sollte das was mit den Browsereinstellungen zu tun haben, da ich die schonma zurückgesetzt hab und die Werbetaps random geöffnet wurden o0

Tja, habe ja nicht nur das angewiesen oder?^^


Java installieren.

Die beiden anderen Versionen (7/10 u. 7/25 anschließend deinstallieren)


Cleanup:


Falls Combofix verwendet wurde:
Combofix-Deinstallation.

• Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  
• Drücke bitte die + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
• Klicke auf OK.
  Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
• Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Ja! Dann lade Dir bitte DelFix herunter.

• Schließe alle offenen Programme.
• Starte die delfix.exe mit einem Doppelklick.
• Setze vor jede Funktion ein Häkchen.
• Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

>>clean<<
Wir haben es geschafft!
Die Logs sehen für mich im Moment sauber aus.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen.
Es bleibt mir nur noch, Dir unbeschwertes und sicheres Surfen zu wünschen und dass wir uns hier so bald nicht wiedersehen.

Wie kann ich mich in Zukunft besser schützen?

Tipps, Dos & Don'ts

Updates & Software

• Beim Betriebsystem Windows die automatischen Updates aktivieren.
  
  Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:
• Browser
• Java
• Flash-Player & PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.

Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.



Firewall, Antivirus & Co.

• Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.
  
• Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank. (Updatefunktion aktivieren!)
  Meine Empfehlungen:
  Kaspersky Antivirus
  Emsisoft Anti-Malware
  avast Free Antivirus
• Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.
  
  Optional:
• NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
  
  

Cracks, Downloads & Co.


Neben unbemerkten Drive-by Installationen wird Malware aber auch oft mehr oder weniger aktiv vom Benutzer selbst installiert.
Der Besuch dubioser Websites kann bereits Risiken bergen. Auch wenn der Virenscanner im Moment darin keine Bedrohung erkennt, muss das nichts bedeuten.
Illegale Cracks, Keygens und Serials sind ein ausgesprochen einfacher und beliebter Weg um Malware zu verbreiten.
Bei Dateien aus Peer-to-Peer- und Filesharingprogrammen oder von Filehostern kann man nie sicher sein, ob auch wirklich drin ist, was drauf steht. (Trojanisches Pferd^^)

• Auch virustotal.com ist Dein Freund! Lade dubiose oder unbekannte Dateien hoch, bevor Du diese startest oder installierst.

Oft wird auch versucht, den Benutzer mit mehr oder weniger trickreichen Methoden zu verleiten, eine für ihn verhängnisvolle Handlung selbst auszuführen (Überbegriff Social Engineering).

• Surfe daher mit Vorsicht und klicke mit Verstand.
• Sei skeptisch bei unerwarteten E-Mails, insbesondere wenn sie Anhänge enthalten. Auch wenn sie auf den ersten Blick authentisch wirken, persönliche Daten von Dir enthalten oder vermeintlich von einem bekannten Absender stammen: Lieber nochmals in Ruhe überdenken oder nachfragen, anstatt einfach mal Links oder ausführbare Anhänge öffnen oder irgendwo Deine Daten eingeben.
• Auch in sozialen Netzwerken oder über Instant Messaging Systeme können schädliche Links oder Dateien die Runde machen. Erhältst Du von einem Deiner Freunde eine Nachricht, die merkwürdig ist oder so sensationell interessant, dass man einfach draufklicken muss, dann hat bei ihm/ihr wahrscheinlich Neugier über Verstand gesiegt und Du solltest nicht denselben Fehler machen.

Nervige Adware (Werbung) und unnötige Toolbars werden auch meist durch den Benutzer selbst mitinstalliert.

• Lade Software in erster Priorität immer direkt vom Hersteller herunter. Viele Softwareportale (z.B. Softonic) packen noch unnützes Zeug mit in die Installation. Alternativ dazu wähle ein sauberes Portal wie Filepony oder heise.
• Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
• Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwarecleaner .
  

Abschließend noch ein paar grundsätzliche Bemerkungen:

• Erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
• Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.