aktuelles Log von MBAM?

Hallo Schrauber,
anbei das entsprechende Protokoll
gefunden wurde folgende Viren:
- PUP.Optional.Sanbreel.A
- PUP.Optional.HomeTab.A,

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 29.07.2014
Suchlauf-Zeit: 18:40:58
Logdatei: MBA_29-07-14.txt
Administrator: Nein

Version: 2.00.2.1012
Malware Datenbank: v2014.07.29.04
Rootkit Datenbank: v2014.07.17.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: chalu_000

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 285499
Verstrichene Zeit: 11 Min, 59 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 2
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{572f484b-455f-44b0-9d6a-da3ad2071365}Gw64.sys, Löschen bei Neustart, [1a2e5055502b7db97a3dd0fc8082f30d], 
PUP.Optional.HomeTab.A, c:\Windows\System32\Tasks\browser updater, Löschen bei Neustart, [c781e4c1b4c71a1c28919b3835cdec14], 

Physische Sektoren: 0
(No malicious items detected)


(end)
         

Poste bitte nochmal ein frisches FRST log, die Reste fixen wir noch raus.

Hallo Schrauber
die Datei ist leider zu groß

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-07-2014
Ran by chalu_000 (administrator) on BODOLA on 30-07-2014 18:49:32
Running from C:\Users\chalu_000\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Condusiv Technologies) C:\Program Files\Condusiv Technologies\IntelliMemory\IntelliMem.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\SAMSUNG\SW Update Service\SWMAgent.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Quick Starter\Quick Starter.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILGE.EXE
(Alexander Miehlke Softwareentwicklung) C:\Program Files (x86)\TraXEx\TraXEx.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17044_x64__8wekyb3d8bbwe\glcnd.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
(Microsoft Corporation) C:\Windows\splwow64.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2917688 2012-10-16] (Synaptics Incorporated)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp 
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [36352 2013-08-07] (Intel Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-05] (IvoSoft)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-13] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-12-23] (DivX, LLC)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-11-15] ()
HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2353880 2013-11-01] (Microsoft Corp.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [122200 2014-07-01] (Garmin Ltd or its subsidiaries)
HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] => rmdir /s /q "\SearchProtect" 
HKU\S-1-5-21-885508780-3488564519-4253053766-1011\...\Run: [Quick Starter] => C:\Program Files (x86)\Samsung\Quick Starter\Quick Starter.exe [2358064 2014-04-29] (Samsung Electronics CO., LTD.)
HKU\S-1-5-21-885508780-3488564519-4253053766-1011\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-885508780-3488564519-4253053766-1011\...\MountPoints2: {82282e80-f638-11e3-becf-c48508d5caf9} - "F:\AutoRun.exe" 
HKU\S-1-5-21-885508780-3488564519-4253053766-1011\...\MountPoints2: {e6a1c99b-fa17-11e3-becf-c48508d5caf9} - "F:\AutoRun.exe" 
AppInit_DLLs-x32: C:\PROGRA~2\Amazon\AMAZON~1\\AMAZON~3.DLL => C:\Program Files (x86)\Amazon\Amazon1ButtonApp\\AmazonExtIE.dll [141120 2014-02-22] (Amazon Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TraXEx 4.0.lnk
ShortcutTarget: TraXEx 4.0.lnk -> C:\Program Files (x86)\TraXEx\TraXEx.exe (Alexander Miehlke Softwareentwicklung)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TraXEx 6.0.lnk
ShortcutTarget: TraXEx 6.0.lnk -> C:\Program Files (x86)\TraXEx\TraXEx.exe (Alexander Miehlke Softwareentwicklung)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2014\mshaktuell.exe ()
ShellIconOverlayIdentifiers: ShareOverlay -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers-x32: ShareOverlay -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://samsung13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung13.msn.com
URLSearchHook: HKLM-x32 - (No Name) - {6dad39c6-f4ac-4984-8e9b-f666269b9eb1} - No File
SearchScopes: HKLM - {4F372D31-F1E2-3862-3002-058E235F0208} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM - {C0B8E795-7C41-4B83-B445-D943D1949BA0} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=tugumsd&cd=2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0DyD0C0A0FyCtD0AtByEtN0D0Tzu0CyCyDzztN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu2Z2Y1N2Y1H1B1Q&cr=1025090899&ir=
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Adblock IE -> {667BEE43-20BD-4CE3-94AC-E63E04D4B191} -> C:\Program Files\MGTEK\Adblock IE\adblockie.dll (MGTEK)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Adblock Plus)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Adblock IE -> {667BEE43-20BD-4CE3-94AC-E63E04D4B191} -> C:\Program Files (x86)\MGTEK\Adblock IE\adblockie.dll (MGTEK)
BHO-x32: No Name -> {6dad39c6-f4ac-4984-8e9b-f666269b9eb1} ->  No File
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
BHO-x32: ChromeFrame BHO -> {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} -> C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\chalu_000\AppData\Roaming\Mozilla\Firefox\Profiles\meqldi59.default
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF DefaultSearchEngine: WEB.DE Suche
FF SelectedSearchEngine: WEB.DE Suche
FF Homepage: hxxp://go.web.de/tb/mff_startpage
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WEB.DE MailCheck - C:\Users\chalu_000\AppData\Roaming\Mozilla\Firefox\Profiles\meqldi59.default\Extensions\toolbar@web.de [2014-07-13]
FF Extension: DownloadHelper - C:\Users\chalu_000\AppData\Roaming\Mozilla\Firefox\Profiles\meqldi59.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-07-13]
FF Extension: Adblock Plus - C:\Users\chalu_000\AppData\Roaming\Mozilla\Firefox\Profiles\meqldi59.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-13]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址顧問 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2013-10-19]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: 虛擬鍵盤 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2013-10-19]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: 惡意網站攔截器 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2013-10-19]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2013-10-19]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2013-10-19]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-19] (Kaspersky Lab ZAO)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173272 2013-11-01] (Microsoft Corp.)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593152 2014-01-29] (Samsung Electronics CO., LTD.)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)
R2 ftpsvc; C:\Windows\system32\inetsrv\ftpsvc.dll [372224 2014-07-13] (Microsoft Corporation)
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [437080 2014-07-01] (Garmin Ltd or its subsidiaries)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-16] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)
R2 IntelliMemory; C:\Program Files\Condusiv Technologies\IntelliMemory\IntelliMem.exe [55120 2012-11-01] (Condusiv Technologies)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-07-20] (IObit)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2013-11-20] ()
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3020632 2014-04-04] (Samsung Electronics CO., LTD.)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-07-13] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [546304 2014-07-13] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3674864 2013-11-20] (Intel® Corporation)
S2 Util webporpoise; "C:\Program Files (x86)\webporpoise\bin\utilwebporpoise.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-09-05] (Motorola Solutions, Inc.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-09-25] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-09-25] (Windows (R) Win 7 DDK provider)
R1 intmfs; C:\Windows\System32\DRIVERS\intmfs.sys [28496 2012-11-01] (Condusiv Technologies)
R0 intmsd; C:\Windows\System32\DRIVERS\intmsd.sys [104272 2012-11-01] (Condusiv Technologies)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-11-07] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2013-12-19] (Kaspersky Lab)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-03-25] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625760 2014-03-25] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2013-10-19] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2014-02-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-10-19] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [65120 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178272 2013-12-19] (Kaspersky Lab ZAO)
R3 ManyCam; C:\Windows\system32\DRIVERS\mcvidrv.sys [52128 2013-11-27] (Visicom Media Inc.)
R3 mcaudrv_simple; C:\Windows\system32\drivers\mcaudrv_x64.sys [35232 2013-12-06] (Visicom Media Inc.)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3346912 2013-10-31] (Intel Corporation)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
R1 RrNetCapFilterDriver; C:\Windows\system32\DRIVERS\RrNetCapFilterDriver.sys [24744 2014-04-14] (Audials AG)
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2012-09-24] (Windows (R) 2003 DDK 3790 provider)
S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
S3 intaud_WaveExtensible; \SystemRoot\system32\drivers\intelaud.sys [X]
S3 iwdbus; \SystemRoot\System32\drivers\iwdbus.sys [X]
S3 SBIOSIO; \??\C:\Users\Bodo\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys [X]
S3 usb3Hub; \SystemRoot\System32\drivers\usb3Hub.sys [X]
S3 XHCIPort; \SystemRoot\System32\drivers\XHCIPort.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-29 21:02 - 2014-07-29 21:06 - 00001442 _____ () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Windows herunterladen.lnk
2014-07-29 21:02 - 2014-07-29 21:06 - 00001440 _____ () C:\Users\chalu_000\Desktop\Windows herunterladen.lnk
2014-07-29 21:02 - 2014-07-29 21:06 - 00000000 __RHD () C:\ESD
2014-07-29 20:55 - 2014-07-29 20:55 - 00001212 _____ () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\S Agent.lnk
2014-07-29 20:48 - 2014-07-29 20:48 - 05487040 _____ (Microsoft Corporation) C:\Users\chalu_000\Desktop\Windows8-Setup.exe
2014-07-29 20:35 - 2014-07-29 20:35 - 00826192 _____ (Chip Digital GmbH) C:\Users\chalu_000\Desktop\Windows 8 1 Setup Tool - CHIP-Installer.exe
2014-07-29 20:32 - 2014-07-29 20:32 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Abelssoft
2014-07-29 20:32 - 2014-07-29 20:32 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Abelssoft
2014-07-29 20:32 - 2014-07-29 20:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Abelssoft
2014-07-29 20:32 - 2014-07-29 20:32 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-07-29 20:32 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\WINDOWS\SysWOW64\dhRichClient3.dll
2014-07-29 20:32 - 2011-03-25 20:42 - 00338432 _____ () C:\WINDOWS\SysWOW64\sqlite36_engine.dll
2014-07-29 20:30 - 2014-07-29 20:30 - 00826192 _____ (Chip Digital GmbH) C:\Users\chalu_000\Desktop\Windows 8 Setup Tool - CHIP-Installer.exe
2014-07-29 19:35 - 2014-07-29 19:35 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mozilla
2014-07-29 19:35 - 2014-07-29 19:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Mozilla
2014-07-29 19:31 - 2014-07-29 19:32 - 01365525 _____ () C:\Users\chalu_000\Desktop\adwcleaner_3.301.exe
2014-07-29 19:28 - 2014-07-29 19:28 - 00000000 ____D () C:\Users\Administrator\AppData\Local\MGTEK
2014-07-29 19:25 - 2014-07-29 19:25 - 00003954 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{EF249B68-6C62-43E6-AC43-6907B82D4364}
2014-07-29 19:25 - 2014-07-29 19:25 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieUserList
2014-07-29 19:25 - 2014-07-29 19:25 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieSiteList
2014-07-29 19:04 - 2014-07-29 19:04 - 00001415 _____ () C:\Users\chalu_000\Desktop\MBA_29-07-14.txt
2014-07-29 18:54 - 2014-07-29 18:54 - 00001384 _____ () C:\Users\chalu_000\Desktop\Malwarebytes_29-07-14.txt
2014-07-27 16:36 - 2014-07-27 16:36 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-27 15:52 - 2014-07-27 16:15 - 04986882 _____ () C:\Users\Administrator\Desktop\Rkill.txt
2014-07-27 15:51 - 2014-07-27 15:51 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\IObit
2014-07-27 15:49 - 2014-07-27 15:39 - 00002741 _____ () C:\Users\chalu_000\Desktop\AdwCleaner[S14].txt
2014-07-26 21:32 - 2014-07-26 21:32 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-BODOLA-Microsoft-Windows-8.1-(64-bit).dat
2014-07-26 21:32 - 2014-07-26 21:32 - 00000000 ____D () C:\RegBackup
2014-07-26 20:36 - 2014-07-26 20:52 - 00002175 _____ () C:\Users\Administrator\Desktop\Tweaking.com - Windows Repair (All in One).lnk
2014-07-26 20:36 - 2014-07-26 20:36 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2014-07-26 20:35 - 2014-07-26 20:35 - 09518328 _____ () C:\Users\chalu_000\Desktop\tweaking.com_windows_repair_aio_setup.exe
2014-07-26 20:35 - 2014-07-26 20:35 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com
2014-07-26 10:53 - 2014-07-27 08:30 - 00036098 _____ () C:\Users\chalu_000\Desktop\Addition.txt
2014-07-26 10:51 - 2014-07-30 18:50 - 00026605 _____ () C:\Users\chalu_000\Desktop\FRST.txt
2014-07-26 10:50 - 2014-07-26 10:50 - 00000888 _____ () C:\Users\Administrator\Desktop\checkup.txt
2014-07-26 00:13 - 2014-07-26 00:13 - 00854390 _____ () C:\Users\chalu_000\Desktop\SecurityCheck.exe
2014-07-25 21:03 - 2014-07-25 21:03 - 02347384 _____ (ESET) C:\Users\chalu_000\Desktop\esetsmartinstaller_deu.exe
2014-07-25 20:53 - 2014-07-25 20:53 - 00000797 _____ () C:\WINDOWS\setupact.log
2014-07-25 20:53 - 2014-07-25 20:53 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-07-25 20:44 - 2014-07-28 22:04 - 00003057 _____ () C:\Users\chalu_000\Desktop\FSS.txt
2014-07-25 20:42 - 2014-07-25 20:42 - 00415232 _____ (Farbar) C:\Users\chalu_000\Desktop\FSS.exe
2014-07-24 18:49 - 2014-07-24 18:50 - 05562147 _____ (Swearware) C:\Users\chalu_000\Desktop\ComboFix.exe
2014-07-24 06:16 - 2014-07-24 06:16 - 00001904 _____ () C:\Users\Public\Desktop\Garmin Express.lnk
2014-07-24 06:16 - 2014-07-24 06:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-07-23 22:10 - 2014-07-10 06:16 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-07-23 22:10 - 2014-07-10 06:03 - 04756992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-07-23 22:10 - 2014-07-10 05:33 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-07-23 19:02 - 2014-07-23 19:01 - 00000622 _____ () C:\Users\chalu_000\Desktop\JRT.txt
2014-07-23 19:01 - 2014-07-29 19:39 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\ClassicShell
2014-07-23 19:00 - 2014-07-23 19:00 - 00001212 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\S Agent.lnk
2014-07-23 18:58 - 2014-07-23 18:58 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Intel Corporation
2014-07-23 18:57 - 2014-07-23 18:57 - 00002374 _____ () C:\Users\Administrator\Desktop\Sicherer Zahlungsverkehr.lnk
2014-07-23 18:57 - 2014-07-23 18:57 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Synaptics
2014-07-23 18:57 - 2014-07-23 18:57 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\ProductData
2014-07-23 18:56 - 2014-07-23 18:56 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Intel
2014-07-23 18:10 - 2014-07-26 23:10 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Packages
2014-07-23 18:10 - 2014-07-23 18:10 - 00001450 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-23 18:10 - 2014-07-23 18:10 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe
2014-07-23 18:05 - 2014-07-23 18:05 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-07-23 18:04 - 2014-07-23 18:04 - 01016261 _____ (Thisisu) C:\Users\chalu_000\Desktop\JRT.exe
2014-07-23 17:38 - 2014-07-23 18:10 - 00000000 ____D () C:\Users\Administrator
2014-07-23 17:38 - 2014-07-23 17:38 - 00000020 ___SH () C:\Users\Administrator\ntuser.ini
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Vorlagen
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Startmenü
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Netzwerkumgebung
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Lokale Einstellungen
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Eigene Dateien
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Druckumgebung
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Musik
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Bilder
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Verlauf
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Anwendungsdaten
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Anwendungsdaten
2014-07-23 17:38 - 2014-07-11 20:14 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-23 17:38 - 2014-06-12 08:01 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Garmin
2014-07-23 17:38 - 2014-05-15 23:50 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-23 17:38 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-07-23 17:38 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-07-23 17:38 - 2013-11-28 22:23 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Microsoft Help
2014-07-23 17:38 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-23 17:38 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-22 18:37 - 2014-07-22 18:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-20 19:46 - 2014-07-30 18:46 - 00000933 _____ () C:\WINDOWS\Tasks\EPSON XP-215 217 Series Update {3DA0DC70-36AC-4C0C-AAF8-C5D7026B1C94}.job
2014-07-20 19:46 - 2014-07-30 18:46 - 00000747 _____ () C:\WINDOWS\Tasks\EPSON XP-215 217 Series Invitation {3DA0DC70-36AC-4C0C-AAF8-C5D7026B1C94}.job
2014-07-20 19:46 - 2014-07-20 19:46 - 00003964 _____ () C:\WINDOWS\System32\Tasks\EPSON XP-215 217 Series Update {3DA0DC70-36AC-4C0C-AAF8-C5D7026B1C94}
2014-07-20 19:46 - 2014-07-20 19:46 - 00003778 _____ () C:\WINDOWS\System32\Tasks\EPSON XP-215 217 Series Invitation {3DA0DC70-36AC-4C0C-AAF8-C5D7026B1C94}
2014-07-20 19:46 - 2011-03-15 03:03 - 00083968 _____ (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\E_ID4BLGE.DLL
2014-07-20 19:46 - 2007-04-10 01:06 - 00010752 _____ (SEIKO EPSON CORP.) C:\WINDOWS\system32\E_GCINST.DLL
2014-07-20 19:42 - 2014-07-20 19:42 - 00000000 __SHD () C:\Users\Bodo\AppData\Local\EmieUserList
2014-07-20 19:42 - 2014-07-20 19:42 - 00000000 __SHD () C:\Users\Bodo\AppData\Local\EmieSiteList
2014-07-20 19:34 - 2013-09-12 05:22 - 00179712 _____ (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\E_ILMBLGE.DLL
2014-07-20 18:38 - 2014-07-20 18:38 - 00312088 _____ () C:\WINDOWS\Minidump\072014-28015-01.dmp
2014-07-20 17:52 - 2014-07-30 18:49 - 00000000 ____D () C:\FRST
2014-07-20 17:48 - 2014-07-26 00:15 - 02093568 _____ (Farbar) C:\Users\chalu_000\Desktop\FRST64.exe
2014-07-20 17:28 - 2014-07-20 17:28 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\IObit
2014-07-20 16:52 - 2014-07-20 16:52 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\ProductData
2014-07-20 16:51 - 2014-07-29 18:57 - 00000000 ____D () C:\ProgramData\ProductData
2014-07-20 16:51 - 2014-07-27 15:51 - 00000000 ____D () C:\ProgramData\IObit
2014-07-20 16:51 - 2014-07-20 16:51 - 00002388 _____ () C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_Administrator
2014-07-20 16:51 - 2014-07-20 16:51 - 00001268 _____ () C:\Users\Bodo\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2014-07-20 16:51 - 2014-07-20 16:51 - 00001244 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk
2014-07-20 16:51 - 2014-07-20 16:51 - 00000290 _____ () C:\WINDOWS\Tasks\Uninstaller_SkipUac_Administrator.job
2014-07-20 16:51 - 2014-07-20 16:51 - 00000000 ____D () C:\Users\Bodo\AppData\Roaming\IObit
2014-07-20 16:51 - 2014-07-20 16:51 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-07-20 16:37 - 2014-07-20 16:54 - 00074626 _____ () C:\Users\Bodo\Desktop\Rkill.txt
2014-07-20 16:37 - 2014-07-20 16:37 - 01062136 _____ (Bleeping Computer, LLC) C:\Users\chalu_000\Desktop\WiNIOgOn64.exe
2014-07-20 16:09 - 2014-07-20 16:09 - 00309048 _____ () C:\WINDOWS\Minidump\072014-24890-01.dmp
2014-07-20 15:38 - 2014-07-20 15:39 - 00316856 _____ () C:\WINDOWS\Minidump\072014-34437-01.dmp
2014-07-20 14:23 - 2014-07-20 14:23 - 00302520 _____ () C:\WINDOWS\Minidump\072014-29359-01.dmp
2014-07-20 14:07 - 2014-07-20 18:38 - 981652488 _____ () C:\WINDOWS\MEMORY.DMP
2014-07-20 14:07 - 2014-07-20 14:08 - 00313032 _____ () C:\WINDOWS\Minidump\072014-49281-01.dmp
2014-07-20 14:01 - 2014-07-20 14:01 - 00000000 ____D () C:\Program Files\EpsonNet
2014-07-20 14:01 - 2012-11-12 20:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\ensppui.dll
2014-07-20 14:01 - 2012-11-12 20:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\enppui.dll
2014-07-20 14:01 - 2012-11-12 15:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\ensppmon.dll
2014-07-20 14:01 - 2012-11-12 15:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\enppmon.dll
2014-07-20 14:01 - 2012-10-22 17:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\enspres.dll
2014-07-20 14:01 - 2012-10-22 17:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\enpres.dll
2014-07-20 14:00 - 2014-07-20 19:46 - 00000946 _____ () C:\Users\Public\Desktop\EPSON Scan.lnk
2014-07-20 14:00 - 2012-07-24 00:00 - 00466432 _____ (Seiko Epson Corporation) C:\WINDOWS\system32\esxw2ud.dll
2014-07-20 14:00 - 2012-05-17 00:00 - 00144560 _____ (Seiko Epson Corporation) C:\WINDOWS\system32\escsvc64.exe
2014-07-20 13:52 - 2014-07-20 13:52 - 06486416 _____ (SEIKO EPSON CORPORATION) C:\Users\chalu_000\Desktop\epson377970eu.EXE
2014-07-20 13:06 - 2014-07-20 13:06 - 00001795 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-07-20 13:06 - 2014-07-20 13:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-20 13:05 - 2014-07-20 13:06 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-07-20 13:05 - 2014-07-20 13:06 - 00000000 ____D () C:\Program Files\iTunes
2014-07-20 13:05 - 2014-07-20 13:06 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-07-20 13:05 - 2014-07-20 13:05 - 00000000 ____D () C:\Program Files\iPod
2014-07-20 13:04 - 2014-07-20 13:04 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-07-20 13:03 - 2014-04-25 17:44 - 00110264 _____ (pdfforge GmbH) C:\WINDOWS\system32\pdfcmon.dll
2014-07-20 13:01 - 2014-07-20 13:01 - 27843432 _____ (pdfforge ) C:\Users\Bodo\Downloads\PDFCreator-1_7_3_setup.exe
2014-07-20 13:00 - 2014-07-30 18:42 - 01755163 _____ () C:\WINDOWS\WindowsUpdate.log
2014-07-20 13:00 - 2014-07-20 13:00 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Apple
2014-07-20 12:53 - 2014-07-29 20:52 - 00385808 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-07-20 12:53 - 2014-07-29 20:06 - 00011586 _____ () C:\WINDOWS\PFRO.log
2014-07-20 12:26 - 2014-07-20 12:26 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\PDF24
2014-07-14 19:54 - 2014-07-14 19:54 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\HpUpdate
2014-07-13 14:01 - 2014-07-13 14:05 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Deployment
2014-07-13 14:01 - 2014-07-13 14:01 - 00000346 _____ () C:\Users\chalu_000\Desktop\Zattoo Live TV.appref-ms
2014-07-13 14:01 - 2014-07-13 14:01 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Zattoo
2014-07-13 14:01 - 2014-07-13 14:01 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zattoo Europa AG
2014-07-13 14:01 - 2014-07-13 14:01 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Apps\2.0
2014-07-13 13:48 - 2014-07-13 13:48 - 00488160 _____ () C:\Users\chalu_000\Zattoo-5.0.1.exe
2014-07-13 13:39 - 2014-07-13 13:39 - 00961360 _____ (Chip Digital GmbH) C:\Users\chalu_000\Zattoo - CHIP-Installer.exe
2014-07-13 13:31 - 2014-07-13 13:31 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\DivX
2014-07-13 13:26 - 2014-07-13 13:26 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\ManyCam
2014-07-13 13:26 - 2014-07-13 13:26 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\ManyCam
2014-07-13 08:06 - 2014-07-13 08:06 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IIS
2014-07-13 08:06 - 2014-07-13 08:06 - 00000000 ____D () C:\WINDOWS\SysWOW64\BestPractices
2014-07-13 08:06 - 2014-07-13 08:06 - 00000000 ____D () C:\WINDOWS\system32\BestPractices
2014-07-13 08:06 - 2014-07-13 08:06 - 00000000 ____D () C:\inetpub
2014-07-12 20:11 - 2014-07-29 20:59 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Samsung
2014-07-12 20:01 - 2014-07-12 20:01 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\vlc
2014-07-12 20:01 - 2014-07-12 20:01 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\RapidSolution
2014-07-12 20:01 - 2014-07-12 20:01 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\CrashRpt
2014-07-12 18:26 - 2014-07-12 18:26 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Macromedia
2014-07-12 18:26 - 2014-07-12 18:26 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Macromedia
2014-07-12 18:24 - 2014-07-12 18:25 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Mozilla
2014-07-12 18:24 - 2014-07-12 18:24 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Mozilla
2014-07-12 18:24 - 2014-07-12 18:24 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\MGTEK
2014-07-12 18:20 - 2014-07-30 17:21 - 00003938 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{8CABC2B5-F422-4AD2-9B66-682C978BD0F0}
2014-07-12 18:20 - 2014-07-12 18:20 - 00000000 __SHD () C:\Users\chalu_000\AppData\Local\EmieUserList
2014-07-12 18:20 - 2014-07-12 18:20 - 00000000 __SHD () C:\Users\chalu_000\AppData\Local\EmieSiteList
2014-07-12 18:20 - 2014-07-12 18:20 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Adobe
2014-07-12 18:19 - 2014-07-12 18:19 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Epson
2014-07-12 18:19 - 2014-07-12 18:19 - 00000000 _____ () C:\Users\chalu_000\Sti_Trace.log
2014-07-12 18:15 - 2014-07-12 18:15 - 01348263 _____ () C:\Users\Bodo\Downloads\adwcleaner_3.215(1).exe
2014-07-12 18:13 - 2014-07-12 18:13 - 00000000 ____D () C:\ProgramData\UDL
2014-07-12 18:07 - 2014-07-12 18:07 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2014-07-12 17:52 - 2014-07-12 17:52 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Intel_Corporation
2014-07-12 17:46 - 2014-07-30 06:13 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\ClassicShell
2014-07-12 17:46 - 2014-07-12 17:46 - 00000000 _____ () C:\Users\chalu_000\agent.log
2014-07-12 17:43 - 2014-07-30 17:18 - 00000000 ___RD () C:\Users\chalu_000\OneDrive
2014-07-12 17:40 - 2014-07-30 18:13 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-885508780-3488564519-4253053766-1011
2014-07-12 17:37 - 2014-07-12 17:37 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Intel Corporation
2014-07-12 17:36 - 2014-07-12 17:36 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Synaptics
2014-07-12 17:35 - 2014-07-12 17:35 - 00002374 _____ () C:\Users\chalu_000\Desktop\Sicherer Zahlungsverkehr.lnk
2014-07-12 17:31 - 2014-07-13 18:05 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Packages
2014-07-12 17:31 - 2014-07-12 18:20 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Adobe
2014-07-12 17:31 - 2014-07-12 17:31 - 00001450 _____ () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-12 17:31 - 2014-07-12 17:31 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\VirtualStore
2014-07-12 17:30 - 2014-07-20 19:16 - 00000000 ____D () C:\Users\chalu_000
2014-07-12 17:30 - 2014-07-12 17:30 - 00000020 ___SH () C:\Users\chalu_000\ntuser.ini
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\Vorlagen
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\Startmenü
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\Netzwerkumgebung
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\Lokale Einstellungen
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\Eigene Dateien
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\Druckumgebung
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\AppData\Local\Verlauf
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\AppData\Local\Anwendungsdaten
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\Anwendungsdaten
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Intel
2014-07-12 17:30 - 2014-07-11 20:14 - 00000000 ___RD () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-12 17:30 - 2014-06-12 08:01 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Garmin
2014-07-12 17:30 - 2014-05-15 23:50 - 00000000 ___RD () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-12 17:30 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-07-12 17:30 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-07-12 17:30 - 2013-11-28 22:23 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Microsoft Help
2014-07-12 17:30 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-12 17:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-12 17:22 - 2014-06-05 16:13 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-07-12 17:22 - 2014-06-05 15:14 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-07-12 17:22 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-07-12 17:22 - 2014-05-31 12:07 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-07-12 17:22 - 2014-05-31 12:07 - 00440664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-07-12 17:22 - 2014-05-31 12:07 - 00419672 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-07-12 17:22 - 2014-05-31 12:07 - 00089944 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-07-12 17:22 - 2014-05-31 12:07 - 00027480 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-07-12 17:22 - 2014-05-31 08:30 - 00037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-07-12 17:22 - 2014-05-31 08:27 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-07-12 17:22 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-07-12 17:22 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-07-12 17:22 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-07-12 17:22 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-07-12 17:22 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-07-12 17:22 - 2014-05-27 17:53 - 02518360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-07-12 17:22 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-07-12 17:22 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-07-12 17:22 - 2014-05-17 06:59 - 16871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-07-12 17:22 - 2014-05-17 06:13 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-07-12 17:22 - 2014-05-13 09:01 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-07-12 17:22 - 2014-05-13 07:07 - 02844160 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-07-12 17:22 - 2014-05-13 06:41 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-07-12 17:22 - 2014-05-13 06:26 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-07-12 17:22 - 2014-05-13 05:59 - 01035264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-07-12 17:22 - 2014-05-13 05:31 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-07-12 17:22 - 2014-05-03 13:29 - 01726224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-07-12 17:22 - 2014-05-03 11:20 - 01473080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-07-12 17:22 - 2014-05-03 07:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-07-12 17:22 - 2014-05-03 07:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2014-07-12 17:22 - 2014-05-03 07:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2014-07-12 17:22 - 2014-05-03 07:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll
2014-07-12 17:22 - 2014-05-03 06:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
2014-07-12 17:22 - 2014-05-03 06:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2014-07-12 17:22 - 2014-05-03 06:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll
2014-07-12 17:22 - 2014-05-03 05:30 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-07-12 17:22 - 2014-05-03 05:27 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-07-12 17:22 - 2014-05-03 01:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat
2014-07-12 17:22 - 2014-05-01 07:44 - 01025536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-07-12 17:22 - 2014-04-30 08:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
2014-07-12 17:22 - 2014-04-30 08:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-07-12 17:22 - 2014-04-30 08:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2014-07-12 17:22 - 2014-04-30 08:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2014-07-12 17:22 - 2014-04-30 07:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-07-12 17:22 - 2014-04-30 06:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-07-12 17:22 - 2014-04-30 06:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2014-07-12 17:22 - 2014-04-30 06:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2014-07-12 17:22 - 2014-04-30 06:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2014-07-12 17:22 - 2014-04-30 06:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2014-07-12 17:22 - 2014-04-30 06:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-07-12 17:22 - 2014-04-30 05:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-07-12 17:22 - 2014-04-30 05:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2014-07-12 17:22 - 2014-04-30 05:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2014-07-12 17:22 - 2014-04-30 05:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2014-07-12 17:22 - 2014-04-30 05:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2014-07-12 17:22 - 2014-04-30 05:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2014-07-12 17:22 - 2014-04-29 00:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-07-12 17:22 - 2014-04-27 00:03 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-07-12 17:22 - 2014-04-26 22:14 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-07-12 17:22 - 2014-04-26 18:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-07-12 17:22 - 2014-04-14 11:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-07-12 17:22 - 2014-04-14 10:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-07-12 17:22 - 2014-04-14 07:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-07-12 17:22 - 2014-04-09 08:11 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2014-07-12 17:22 - 2014-04-09 07:20 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2014-07-12 17:19 - 2014-07-12 17:19 - 01348263 _____ () C:\Users\Bodo\Downloads\adwcleaner_3.215.exe
2014-07-12 15:46 - 2014-07-12 15:46 - 03570024 _____ () C:\Users\Bodo\Downloads\EpsonConnect1_2_0.exe
2014-07-12 14:50 - 2014-07-12 14:51 - 00000000 ____D () C:\Users\Bodo\Downloads\hotfix
2014-07-12 14:49 - 2012-11-30 10:09 - 00194952 _____ () C:\Users\Bodo\Downloads\Windows8-RT-KB2789962-x64.msu
2014-07-12 14:48 - 2014-07-12 14:48 - 00319792 _____ () C:\Users\Bodo\Downloads\456121_intl_x64_zip.exe
2014-07-12 14:15 - 2014-07-20 18:38 - 00000000 ____D () C:\WINDOWS\Minidump
2014-07-12 13:57 - 2014-07-20 19:47 - 00001278 _____ () C:\Users\Public\Desktop\Epson-Handbücher.lnk
2014-07-12 13:57 - 2014-07-20 19:47 - 00000123 _____ () C:\Users\Public\Desktop\Epson Connect Site.url
2014-07-12 13:57 - 2014-07-20 14:07 - 00000000 ____D () C:\Program Files (x86)\EPSON Software
2014-07-12 13:57 - 2014-07-20 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2014-07-12 13:57 - 2014-07-20 14:00 - 00000000 ____D () C:\Program Files (x86)\epson
2014-07-12 13:57 - 2014-07-20 13:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2014-07-12 13:54 - 2014-07-20 13:44 - 00000000 ____D () C:\ProgramData\Epson
2014-07-12 13:14 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2014-07-12 13:12 - 2014-07-12 13:12 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-07-12 12:55 - 2014-07-01 00:45 - 00688128 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-07-12 12:55 - 2014-06-28 09:48 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-07-12 12:55 - 2014-06-28 09:07 - 00385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-07-12 07:28 - 2014-06-26 22:55 - 00703968 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-07-12 07:28 - 2014-06-26 22:55 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-11 20:00 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-07-11 20:00 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-07-11 20:00 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-07-11 20:00 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-07-11 20:00 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-07-11 20:00 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-07-11 20:00 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-07-11 20:00 - 2014-06-19 01:46 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-07-11 20:00 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-07-11 20:00 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-07-11 20:00 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-07-11 20:00 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-07-11 20:00 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-07-11 20:00 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-07-11 20:00 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-07-11 20:00 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-07-11 20:00 - 2014-06-19 00:57 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-07-11 20:00 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-07-11 20:00 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-07-11 20:00 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-07-11 20:00 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-07-11 20:00 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-07-11 20:00 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-07-11 20:00 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-07-11 20:00 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-07-11 20:00 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-07-11 20:00 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-07-11 20:00 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-07-11 20:00 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-07-11 20:00 - 2014-06-06 16:20 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-07-11 20:00 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-07-11 20:00 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-07-11 20:00 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-07-11 20:00 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-07-11 20:00 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-07-11 20:00 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-07-11 20:00 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-07-11 19:58 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-07-11 19:58 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-07-11 19:58 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-07-11 19:58 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-07-11 19:58 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-07-11 19:58 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-07-11 19:58 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-11 19:58 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-07-11 19:58 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-07-11 19:58 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-11 19:58 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-07-11 19:58 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-07-11 19:58 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-07-11 19:58 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-07-11 19:58 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-07-11 19:58 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-07-11 19:58 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-07-11 17:29 - 2014-07-11 17:29 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-07-03 23:40 - 2014-07-03 23:40 - 00000017 _____ () C:\Users\Bodo\AppData\Local\resmon.resmoncfg

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-30 18:50 - 2014-07-26 10:51 - 00026605 _____ () C:\Users\chalu_000\Desktop\FRST.txt
2014-07-30 18:49 - 2014-07-20 17:52 - 00000000 ____D () C:\FRST
2014-07-30 18:46 - 2014-07-20 19:46 - 00000933 _____ () C:\WINDOWS\Tasks\EPSON XP-215 217 Series Update {3DA0DC70-36AC-4C0C-AAF8-C5D7026B1C94}.job
2014-07-30 18:46 - 2014-07-20 19:46 - 00000747 _____ () C:\WINDOWS\Tasks\EPSON XP-215 217 Series Invitation {3DA0DC70-36AC-4C0C-AAF8-C5D7026B1C94}.job
2014-07-30 18:42 - 2014-07-20 13:00 - 01755163 _____ () C:\WINDOWS\WindowsUpdate.log
2014-07-30 18:37 - 2013-10-19 16:44 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-07-30 18:37 - 2012-09-10 10:37 - 00000360 _____ () C:\WINDOWS\Tasks\Xerox PhotoCafe Communicator.job
2014-07-30 18:18 - 2013-10-24 19:40 - 00001130 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-885508780-3488564519-4253053766-1002UA.job
2014-07-30 18:18 - 2013-10-24 19:40 - 00001078 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-885508780-3488564519-4253053766-1002Core.job
2014-07-30 18:13 - 2014-07-12 17:40 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-885508780-3488564519-4253053766-1011
2014-07-30 18:04 - 2013-10-19 20:31 - 00001120 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-30 18:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-07-30 17:39 - 2013-10-19 17:16 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-07-30 17:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-07-30 17:21 - 2014-07-12 18:20 - 00003938 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{8CABC2B5-F422-4AD2-9B66-682C978BD0F0}
2014-07-30 17:21 - 2012-09-10 10:44 - 00000000 ____D () C:\ProgramData\WinClon
2014-07-30 17:18 - 2014-07-12 17:43 - 00000000 ___RD () C:\Users\chalu_000\OneDrive
2014-07-30 17:18 - 2013-10-19 20:31 - 00001116 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-30 17:17 - 2014-01-12 14:44 - 00000472 ____H () C:\WINDOWS\Tasks\GS.Enabler-S-926685765.job
2014-07-30 06:13 - 2014-07-12 17:46 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\ClassicShell
2014-07-29 22:47 - 2014-05-01 19:54 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-07-29 22:45 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-07-29 22:45 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports
2014-07-29 21:06 - 2014-07-29 21:02 - 00001442 _____ () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Windows herunterladen.lnk
2014-07-29 21:06 - 2014-07-29 21:02 - 00001440 _____ () C:\Users\chalu_000\Desktop\Windows herunterladen.lnk
2014-07-29 21:06 - 2014-07-29 21:02 - 00000000 __RHD () C:\ESD
2014-07-29 20:59 - 2014-07-12 20:11 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Samsung
2014-07-29 20:55 - 2014-07-29 20:55 - 00001212 _____ () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\S Agent.lnk
2014-07-29 20:52 - 2014-07-20 12:53 - 00385808 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-07-29 20:48 - 2014-07-29 20:48 - 05487040 _____ (Microsoft Corporation) C:\Users\chalu_000\Desktop\Windows8-Setup.exe
2014-07-29 20:35 - 2014-07-29 20:35 - 00826192 _____ (Chip Digital GmbH) C:\Users\chalu_000\Desktop\Windows 8 1 Setup Tool - CHIP-Installer.exe
2014-07-29 20:32 - 2014-07-29 20:32 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Abelssoft
2014-07-29 20:32 - 2014-07-29 20:32 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Abelssoft
2014-07-29 20:32 - 2014-07-29 20:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Abelssoft
2014-07-29 20:32 - 2014-07-29 20:32 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-07-29 20:30 - 2014-07-29 20:30 - 00826192 _____ (Chip Digital GmbH) C:\Users\chalu_000\Desktop\Windows 8 Setup Tool - CHIP-Installer.exe
2014-07-29 20:06 - 2014-07-20 12:53 - 00011586 _____ () C:\WINDOWS\PFRO.log
2014-07-29 20:06 - 2013-10-24 20:52 - 00000000 ____D () C:\AdwCleaner
2014-07-29 20:06 - 2013-08-22 15:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-07-29 19:46 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2014-07-29 19:41 - 2014-04-16 19:20 - 00000000 ____D () C:\Users\Bodo\AppData\Roaming\ClassicShell
2014-07-29 19:40 - 2014-04-16 18:28 - 00000000 __RDO () C:\Users\Bodo\OneDrive
2014-07-29 19:39 - 2014-07-23 19:01 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\ClassicShell
2014-07-29 19:35 - 2014-07-29 19:35 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mozilla
2014-07-29 19:35 - 2014-07-29 19:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Mozilla
2014-07-29 19:35 - 2013-09-30 06:14 - 01860582 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-29 19:35 - 2013-09-30 05:56 - 00787512 _____ () C:\WINDOWS\system32\perfh007.dat
2014-07-29 19:35 - 2013-09-30 05:56 - 00164904 _____ () C:\WINDOWS\system32\perfc007.dat
2014-07-29 19:32 - 2014-07-29 19:31 - 01365525 _____ () C:\Users\chalu_000\Desktop\adwcleaner_3.301.exe
2014-07-29 19:28 - 2014-07-29 19:28 - 00000000 ____D () C:\Users\Administrator\AppData\Local\MGTEK
2014-07-29 19:25 - 2014-07-29 19:25 - 00003954 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{EF249B68-6C62-43E6-AC43-6907B82D4364}
2014-07-29 19:25 - 2014-07-29 19:25 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieUserList
2014-07-29 19:25 - 2014-07-29 19:25 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieSiteList
2014-07-29 19:04 - 2014-07-29 19:04 - 00001415 _____ () C:\Users\chalu_000\Desktop\MBA_29-07-14.txt
2014-07-29 18:57 - 2014-07-20 16:51 - 00000000 ____D () C:\ProgramData\ProductData
2014-07-29 18:54 - 2014-07-29 18:54 - 00001384 _____ () C:\Users\chalu_000\Desktop\Malwarebytes_29-07-14.txt
2014-07-28 22:04 - 2014-07-25 20:44 - 00003057 _____ () C:\Users\chalu_000\Desktop\FSS.txt
2014-07-27 16:36 - 2014-07-27 16:36 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-27 16:15 - 2014-07-27 15:52 - 04986882 _____ () C:\Users\Administrator\Desktop\Rkill.txt
2014-07-27 15:51 - 2014-07-27 15:51 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\IObit
2014-07-27 15:51 - 2014-07-20 16:51 - 00000000 ____D () C:\ProgramData\IObit
2014-07-27 15:39 - 2014-07-27 15:49 - 00002741 _____ () C:\Users\chalu_000\Desktop\AdwCleaner[S14].txt
2014-07-27 08:30 - 2014-07-26 10:53 - 00036098 _____ () C:\Users\chalu_000\Desktop\Addition.txt
2014-07-26 23:32 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-07-26 23:10 - 2014-07-23 18:10 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Packages
2014-07-26 23:05 - 2012-07-26 07:26 - 00000163 _____ () C:\WINDOWS\win.ini
2014-07-26 21:32 - 2014-07-26 21:32 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-BODOLA-Microsoft-Windows-8.1-(64-bit).dat
2014-07-26 21:32 - 2014-07-26 21:32 - 00000000 ____D () C:\RegBackup
2014-07-26 20:52 - 2014-07-26 20:36 - 00002175 _____ () C:\Users\Administrator\Desktop\Tweaking.com - Windows Repair (All in One).lnk
2014-07-26 20:36 - 2014-07-26 20:36 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2014-07-26 20:35 - 2014-07-26 20:35 - 09518328 _____ () C:\Users\chalu_000\Desktop\tweaking.com_windows_repair_aio_setup.exe
2014-07-26 20:35 - 2014-07-26 20:35 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com
2014-07-26 10:50 - 2014-07-26 10:50 - 00000888 _____ () C:\Users\Administrator\Desktop\checkup.txt
2014-07-26 00:15 - 2014-07-20 17:48 - 02093568 _____ (Farbar) C:\Users\chalu_000\Desktop\FRST64.exe
2014-07-26 00:13 - 2014-07-26 00:13 - 00854390 _____ () C:\Users\chalu_000\Desktop\SecurityCheck.exe
2014-07-25 21:03 - 2014-07-25 21:03 - 02347384 _____ (ESET) C:\Users\chalu_000\Desktop\esetsmartinstaller_deu.exe
2014-07-25 20:53 - 2014-07-25 20:53 - 00000797 _____ () C:\WINDOWS\setupact.log
2014-07-25 20:53 - 2014-07-25 20:53 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-07-25 20:42 - 2014-07-25 20:42 - 00415232 _____ (Farbar) C:\Users\chalu_000\Desktop\FSS.exe
2014-07-25 19:55 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-07-25 06:08 - 2014-04-16 18:38 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-25 06:08 - 2014-04-16 18:38 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 20:53 - 2014-04-16 18:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-24 18:50 - 2014-07-24 18:49 - 05562147 _____ (Swearware) C:\Users\chalu_000\Desktop\ComboFix.exe
2014-07-24 06:16 - 2014-07-24 06:16 - 00001904 _____ () C:\Users\Public\Desktop\Garmin Express.lnk
2014-07-24 06:16 - 2014-07-24 06:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-07-24 06:16 - 2014-02-22 20:32 - 00000000 ____D () C:\ProgramData\Garmin
2014-07-24 06:16 - 2014-02-22 20:32 - 00000000 ____D () C:\Program Files (x86)\Garmin
2014-07-24 06:16 - 2013-10-19 14:43 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-24 06:15 - 2014-05-17 10:52 - 00003556 _____ () C:\WINDOWS\System32\Tasks\GarminUpdaterTask
2014-07-23 19:01 - 2014-07-23 19:02 - 00000622 _____ () C:\Users\chalu_000\Desktop\JRT.txt
2014-07-23 19:00 - 2014-07-23 19:00 - 00001212 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\S Agent.lnk
2014-07-23 18:58 - 2014-07-23 18:58 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Intel Corporation
2014-07-23 18:57 - 2014-07-23 18:57 - 00002374 _____ () C:\Users\Administrator\Desktop\Sicherer Zahlungsverkehr.lnk
2014-07-23 18:57 - 2014-07-23 18:57 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Synaptics
2014-07-23 18:57 - 2014-07-23 18:57 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\ProductData
2014-07-23 18:57 - 2013-10-19 11:53 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-07-23 18:56 - 2014-07-23 18:56 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Intel
2014-07-23 18:10 - 2014-07-23 18:10 - 00001450 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-23 18:10 - 2014-07-23 18:10 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe
2014-07-23 18:10 - 2014-07-23 17:38 - 00000000 ____D () C:\Users\Administrator
2014-07-23 18:05 - 2014-07-23 18:05 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-07-23 18:04 - 2014-07-23 18:04 - 01016261 _____ (Thisisu) C:\Users\chalu_000\Desktop\JRT.exe
2014-07-23 17:38 - 2014-07-23 17:38 - 00000020 ___SH () C:\Users\Administrator\ntuser.ini
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Vorlagen
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Startmenü
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Netzwerkumgebung
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Lokale Einstellungen
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Eigene Dateien
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Druckumgebung
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Musik
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Bilder
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Verlauf
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Anwendungsdaten
2014-07-23 17:38 - 2014-07-23 17:38 - 00000000 _SHDL () C:\Users\Administrator\Anwendungsdaten
2014-07-23 06:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-07-22 22:43 - 2013-10-19 15:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-22 18:37 - 2014-07-22 18:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-20 19:47 - 2014-07-12 13:57 - 00001278 _____ () C:\Users\Public\Desktop\Epson-Handbücher.lnk
2014-07-20 19:47 - 2014-07-12 13:57 - 00000123 _____ () C:\Users\Public\Desktop\Epson Connect Site.url
2014-07-20 19:46 - 2014-07-20 19:46 - 00003964 _____ () C:\WINDOWS\System32\Tasks\EPSON XP-215 217 Series Update {3DA0DC70-36AC-4C0C-AAF8-C5D7026B1C94}
2014-07-20 19:46 - 2014-07-20 19:46 - 00003778 _____ () C:\WINDOWS\System32\Tasks\EPSON XP-215 217 Series Invitation {3DA0DC70-36AC-4C0C-AAF8-C5D7026B1C94}
2014-07-20 19:46 - 2014-07-20 14:00 - 00000946 _____ () C:\Users\Public\Desktop\EPSON Scan.lnk
2014-07-20 19:42 - 2014-07-20 19:42 - 00000000 __SHD () C:\Users\Bodo\AppData\Local\EmieUserList
2014-07-20 19:42 - 2014-07-20 19:42 - 00000000 __SHD () C:\Users\Bodo\AppData\Local\EmieSiteList
2014-07-20 19:42 - 2013-11-30 01:34 - 00003918 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A3E89E47-F1BE-431F-A05D-C67A60EECC2F}
2014-07-20 19:29 - 2013-11-28 22:18 - 00000000 ____D () C:\Users\Bodo
2014-07-20 19:16 - 2014-07-12 17:30 - 00000000 ____D () C:\Users\chalu_000
2014-07-20 18:38 - 2014-07-20 18:38 - 00312088 _____ () C:\WINDOWS\Minidump\072014-28015-01.dmp
2014-07-20 18:38 - 2014-07-20 14:07 - 981652488 _____ () C:\WINDOWS\MEMORY.DMP
2014-07-20 18:38 - 2014-07-12 14:15 - 00000000 ____D () C:\WINDOWS\Minidump
2014-07-20 17:28 - 2014-07-20 17:28 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\IObit
2014-07-20 16:54 - 2014-07-20 16:37 - 00074626 _____ () C:\Users\Bodo\Desktop\Rkill.txt
2014-07-20 16:52 - 2014-07-20 16:52 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\ProductData
2014-07-20 16:51 - 2014-07-20 16:51 - 00002388 _____ () C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_Administrator
2014-07-20 16:51 - 2014-07-20 16:51 - 00001268 _____ () C:\Users\Bodo\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2014-07-20 16:51 - 2014-07-20 16:51 - 00001244 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk
2014-07-20 16:51 - 2014-07-20 16:51 - 00000290 _____ () C:\WINDOWS\Tasks\Uninstaller_SkipUac_Administrator.job
2014-07-20 16:51 - 2014-07-20 16:51 - 00000000 ____D () C:\Users\Bodo\AppData\Roaming\IObit
2014-07-20 16:51 - 2014-07-20 16:51 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-07-20 16:37 - 2014-07-20 16:37 - 01062136 _____ (Bleeping Computer, LLC) C:\Users\chalu_000\Desktop\WiNIOgOn64.exe
2014-07-20 16:09 - 2014-07-20 16:09 - 00309048 _____ () C:\WINDOWS\Minidump\072014-24890-01.dmp
2014-07-20 15:39 - 2014-07-20 15:38 - 00316856 _____ () C:\WINDOWS\Minidump\072014-34437-01.dmp
2014-07-20 14:23 - 2014-07-20 14:23 - 00302520 _____ () C:\WINDOWS\Minidump\072014-29359-01.dmp
2014-07-20 14:08 - 2014-07-20 14:07 - 00313032 _____ () C:\WINDOWS\Minidump\072014-49281-01.dmp
2014-07-20 14:07 - 2014-07-12 13:57 - 00000000 ____D () C:\Program Files (x86)\EPSON Software
2014-07-20 14:01 - 2014-07-20 14:01 - 00000000 ____D () C:\Program Files\EpsonNet
2014-07-20 14:01 - 2012-09-10 10:23 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-20 14:00 - 2014-07-12 13:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2014-07-20 14:00 - 2014-07-12 13:57 - 00000000 ____D () C:\Program Files (x86)\epson
2014-07-20 13:52 - 2014-07-20 13:52 - 06486416 _____ (SEIKO EPSON CORPORATION) C:\Users\chalu_000\Desktop\epson377970eu.EXE
2014-07-20 13:44 - 2014-07-12 13:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2014-07-20 13:44 - 2014-07-12 13:54 - 00000000 ____D () C:\ProgramData\Epson
2014-07-20 13:06 - 2014-07-20 13:06 - 00001795 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-07-20 13:06 - 2014-07-20 13:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-20 13:06 - 2014-07-20 13:05 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-07-20 13:06 - 2014-07-20 13:05 - 00000000 ____D () C:\Program Files\iTunes
2014-07-20 13:06 - 2014-07-20 13:05 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-07-20 13:05 - 2014-07-20 13:05 - 00000000 ____D () C:\Program Files\iPod
2014-07-20 13:04 - 2014-07-20 13:04 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-07-20 13:04 - 2014-03-23 18:13 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-07-20 13:03 - 2014-03-23 18:13 - 00001043 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-07-20 13:03 - 2014-03-23 18:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-07-20 13:01 - 2014-07-20 13:01 - 27843432 _____ (pdfforge ) C:\Users\Bodo\Downloads\PDFCreator-1_7_3_setup.exe
2014-07-20 13:00 - 2014-07-20 13:00 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Apple
2014-07-20 12:26 - 2014-07-20 12:26 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\PDF24
2014-07-14 19:54 - 2014-07-14 19:54 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\HpUpdate
2014-07-13 18:05 - 2014-07-12 17:31 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Packages
2014-07-13 14:05 - 2014-07-13 14:01 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Deployment
2014-07-13 14:01 - 2014-07-13 14:01 - 00000346 _____ () C:\Users\chalu_000\Desktop\Zattoo Live TV.appref-ms
2014-07-13 14:01 - 2014-07-13 14:01 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Zattoo
2014-07-13 14:01 - 2014-07-13 14:01 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zattoo Europa AG
2014-07-13 14:01 - 2014-07-13 14:01 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Apps\2.0
2014-07-13 13:57 - 2013-10-19 16:44 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-07-13 13:48 - 2014-07-13 13:48 - 00488160 _____ () C:\Users\chalu_000\Zattoo-5.0.1.exe
2014-07-13 13:39 - 2014-07-13 13:39 - 00961360 _____ (Chip Digital GmbH) C:\Users\chalu_000\Zattoo - CHIP-Installer.exe
2014-07-13 13:31 - 2014-07-13 13:31 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\DivX
2014-07-13 13:26 - 2014-07-13 13:26 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\ManyCam
2014-07-13 13:26 - 2014-07-13 13:26 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\ManyCam
2014-07-13 08:06 - 2014-07-13 08:06 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IIS
2014-07-13 08:06 - 2014-07-13 08:06 - 00000000 ____D () C:\WINDOWS\SysWOW64\BestPractices
2014-07-13 08:06 - 2014-07-13 08:06 - 00000000 ____D () C:\WINDOWS\system32\BestPractices
2014-07-13 08:06 - 2014-07-13 08:06 - 00000000 ____D () C:\inetpub
2014-07-13 08:06 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\inetsrv
2014-07-13 08:06 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\inetsrv
2014-07-13 08:05 - 2014-06-11 16:31 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2014-07-13 08:05 - 2014-06-11 16:31 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2014-07-13 08:05 - 2014-06-11 16:31 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2014-07-13 08:05 - 2014-06-11 16:31 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2014-07-13 08:05 - 2014-06-11 16:31 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2014-07-13 08:05 - 2014-06-11 16:31 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2014-07-13 08:05 - 2014-06-11 16:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2014-07-13 08:05 - 2014-06-11 16:31 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2014-07-13 08:05 - 2014-06-11 16:31 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2014-07-13 08:05 - 2014-06-11 16:31 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2014-07-13 08:05 - 2014-06-11 16:31 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2014-07-13 08:05 - 2014-06-11 16:31 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2014-07-12 20:20 - 2013-10-19 21:15 - 00015757 _____ () C:\ProgramData\hpzinstall.log
2014-07-12 20:19 - 2013-10-19 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-07-12 20:18 - 2013-10-19 21:16 - 00000000 ____D () C:\Program Files (x86)\HP
2014-07-12 20:18 - 2013-10-19 21:15 - 00000000 ____D () C:\ProgramData\HP
2014-07-12 20:01 - 2014-07-12 20:01 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\vlc
2014-07-12 20:01 - 2014-07-12 20:01 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\RapidSolution
2014-07-12 20:01 - 2014-07-12 20:01 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\CrashRpt
2014-07-12 18:26 - 2014-07-12 18:26 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Macromedia
2014-07-12 18:26 - 2014-07-12 18:26 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Macromedia
2014-07-12 18:25 - 2014-07-12 18:24 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Mozilla
2014-07-12 18:24 - 2014-07-12 18:24 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Mozilla
2014-07-12 18:24 - 2014-07-12 18:24 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\MGTEK
2014-07-12 18:20 - 2014-07-12 18:20 - 00000000 __SHD () C:\Users\chalu_000\AppData\Local\EmieUserList
2014-07-12 18:20 - 2014-07-12 18:20 - 00000000 __SHD () C:\Users\chalu_000\AppData\Local\EmieSiteList
2014-07-12 18:20 - 2014-07-12 18:20 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Adobe
2014-07-12 18:20 - 2014-07-12 17:31 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Adobe
2014-07-12 18:19 - 2014-07-12 18:19 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Epson
2014-07-12 18:19 - 2014-07-12 18:19 - 00000000 _____ () C:\Users\chalu_000\Sti_Trace.log
2014-07-12 18:15 - 2014-07-12 18:15 - 01348263 _____ () C:\Users\Bodo\Downloads\adwcleaner_3.215(1).exe
2014-07-12 18:13 - 2014-07-12 18:13 - 00000000 ____D () C:\ProgramData\UDL
2014-07-12 18:07 - 2014-07-12 18:07 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2014-07-12 17:52 - 2014-07-12 17:52 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\Intel_Corporation
2014-07-12 17:46 - 2014-07-12 17:46 - 00000000 _____ () C:\Users\chalu_000\agent.log
2014-07-12 17:37 - 2014-07-12 17:37 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Intel Corporation
2014-07-12 17:36 - 2014-07-12 17:36 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Synaptics
2014-07-12 17:35 - 2014-07-12 17:35 - 00002374 _____ () C:\Users\chalu_000\Desktop\Sicherer Zahlungsverkehr.lnk
2014-07-12 17:31 - 2014-07-12 17:31 - 00001450 _____ () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-12 17:31 - 2014-07-12 17:31 - 00000000 ____D () C:\Users\chalu_000\AppData\Local\VirtualStore
2014-07-12 17:30 - 2014-07-12 17:30 - 00000020 ___SH () C:\Users\chalu_000\ntuser.ini
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\Vorlagen
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\Startmenü
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\Netzwerkumgebung
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\Lokale Einstellungen
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\Eigene Dateien
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\Druckumgebung
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\AppData\Local\Verlauf
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\AppData\Local\Anwendungsdaten
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 _SHDL () C:\Users\chalu_000\Anwendungsdaten
2014-07-12 17:30 - 2014-07-12 17:30 - 00000000 ____D () C:\Users\chalu_000\AppData\Roaming\Intel
2014-07-12 17:24 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-07-12 17:24 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-07-12 17:24 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-07-12 17:21 - 2014-04-16 17:14 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-07-12 17:19 - 2014-07-12 17:19 - 01348263 _____ () C:\Users\Bodo\Downloads\adwcleaner_3.215.exe
2014-07-12 17:19 - 2014-06-11 16:33 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-07-12 16:26 - 2013-10-19 11:58 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-885508780-3488564519-4253053766-1002
2014-07-12 16:25 - 2013-10-24 19:41 - 00002405 _____ () C:\Users\Bodo\Desktop\Google Chrome.lnk
2014-07-12 15:46 - 2014-07-12 15:46 - 03570024 _____ () C:\Users\Bodo\Downloads\EpsonConnect1_2_0.exe
2014-07-12 15:23 - 2013-10-24 17:19 - 00001962 _____ () C:\Users\Public\Desktop\SW Update.lnk
2014-07-12 15:23 - 2012-09-10 10:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-07-12 14:51 - 2014-07-12 14:50 - 00000000 ____D () C:\Users\Bodo\Downloads\hotfix
2014-07-12 14:48 - 2014-07-12 14:48 - 00319792 _____ () C:\Users\Bodo\Downloads\456121_intl_x64_zip.exe
2014-07-12 14:48 - 2013-10-19 11:50 - 00000000 ____D () C:\Users\Bodo\AppData\Local\VirtualStore
2014-07-12 13:17 - 2013-10-21 22:16 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-07-12 13:14 - 2013-10-25 06:54 - 96441528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-07-12 13:14 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-07-12 13:12 - 2014-07-12 13:12 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-07-11 20:14 - 2014-07-23 17:38 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-11 20:14 - 2014-07-12 17:30 - 00000000 ___RD () C:\Users\chalu_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-11 20:14 - 2013-09-30 05:59 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-11 20:14 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-07-11 20:14 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-11 20:14 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-11 20:14 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-07-11 17:29 - 2014-07-11 17:29 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-07-10 06:16 - 2014-07-23 22:10 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-07-10 06:03 - 2014-07-23 22:10 - 04756992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-07-10 05:33 - 2014-07-23 22:10 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-07-07 19:34 - 2014-02-19 00:10 - 00000000 ____D () C:\Users\Bodo\AppData\Roaming\vlc
2014-07-07 19:25 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\registration
2014-07-07 19:24 - 2013-10-19 15:43 - 00000000 ____D () C:\Users\Bodo\AppData\Local\Mozilla
2014-07-03 23:40 - 2014-07-03 23:40 - 00000017 _____ () C:\Users\Bodo\AppData\Local\resmon.resmoncfg
2014-07-01 00:45 - 2014-07-12 12:55 - 00688128 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll

Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\Users\chalu_000\Zattoo - CHIP-Installer.exe
C:\Users\chalu_000\Zattoo-5.0.1.exe
C:\Users\EasySurvey\EasySurvey.exe


Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\Quarantine.exe
C:\Users\Bodo\AppData\Local\Temp\GUR24D6.exe
C:\Users\Bodo\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-29 23:02

==================== End Of Log ============================
         

--- --- ---

anbei Teil 2

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-07-2014
Ran by chalu_000 at 2014-07-30 18:50:56
Running from C:\Users\chalu_000\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adblock IE 2.3 (HKLM\...\{58161756-037B-42CD-B575-AF804A2F0F47}) (Version: 2.3.1756 - MGTEK)
Adblock Plus for IE (32-bit and 64-bit) (HKLM\...\{C23EE7CE-C1A3-4F94-A8F0-9E0AC9C6DE6E}) (Version: 1.1 - Eyeo GmbH)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Amazon 1Button App (x32 Version: 1.0.6 - Amazon) Hidden
ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Apple Application Support (HKLM-x32\...\{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}) (Version: 3.0.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)
Audials (HKLM-x32\...\{DA6EBFC9-8869-4B61-8D38-2668A395C5B0}) (Version: 11.0.54400.0 - Audials AG)
Bing-Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.347.0 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Classic Shell (HKLM\...\{023F92C9-AB10-4C54-BF09-C550AEC37917}) (Version: 4.0.6 - IvoSoft)
Elevated Installer (x32 Version: 3.2.9.0 - Garmin Ltd or its subsidiaries) Hidden
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON XP-215 217 Series Printer Uninstall (HKLM\...\EPSON XP-215 217 Series) (Version:  - SEIKO EPSON Corporation)
Epson-Handbücher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.0.0.0 - SEIKO EPSON CORPORATION)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Garmin Express (HKLM-x32\...\{aece03a3-686f-4b3c-9931-9dafb71829b7}) (Version: 3.2.9.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 3.2.9.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 3.2.9.0 - Garmin Ltd or its subsidiaries) Hidden
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Help Desk (HKLM\...\{AEC9D273-E162-4614-83F1-722B8C74B185}) (Version: 1.0.96 - Samsung Electronics CO., LTD.)
Intel(R) PRO/Wireless Driver (Version: 16.07.0000.0730 - Intel Corporation) Hidden
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 16.6.0.0128 - Intel Corporation) Hidden
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.8.0.1016 - Intel Corporation) Hidden
Intel® PROSet/Wireless WiFi Software (Version: 16.7.0.0297 - Intel Corporation) Hidden
Intel® Trusted Connect Service Client (Version: 1.31.8.1 - Intel Corporation) Hidden
IntelliMemory (HKLM\...\{E93403C5-8A91-4940-89DB-EED69DA6E82E}) (Version: 1.0.30.0 - Condusiv Technologies)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 3.3.8.2663 - IObit)
iTunes (HKLM\...\{33E28B58-7BA0-47B7-AA01-9225ABA2B8A9}) (Version: 11.3.0.54 - Apple Inc.)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710F4C1C-CC18-4C49-8CBF-51240C89A1A2}) (Version:  - )
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden
NVIDIA Grafiktreiber 327.68 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.68 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.141.953 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.14.17 (Version: 1.14.17 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Systemsteuerung 327.68 (Version: 327.68 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Quick Starter (HKLM\...\{EC36E2BC-86F7-44C9-84B2-93930F0FBDBF}) (Version: 1.0.2 - Samsung Electronics CO., LTD.)
Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.0.12.10 - Samsung Electronics CO., LTD.)
S Agent (Version: 1.1.47 - Samsung Electronics CO., LTD.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14055.3 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.14055.3 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
Settings (HKLM-x32\...\{8CB5C357-12E5-41B1-A024-D57D4E6F32D9}) (Version: 2.0.1 - Samsung Electronics CO., LTD.)
Software Updater (HKLM-x32\...\{C09D747A-BD47-42A9-915E-CEB6B1BB7C11}) (Version: 4.2.7 - SEIKO EPSON CORPORATION)
Support Center (HKLM\...\{AB0DEFBB-1A16-47B5-86D2-39F0A2B24AE4}) (Version: 2.1.1210 - Samsung Electronics CO., LTD.)
Support Center FAQ (x32 Version: 1.0.14 - Samsung Electronics CO., LTD.) Hidden
SW Update (HKLM-x32\...\{D2B5F1E3-EA56-4D84-A453-A213B32974CB}) (Version: 2.1.25 - Samsung Electronics CO., LTD.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.14.2 - Synaptics Incorporated)
Tweaking.com - Windows Repair (All in One) (HKLM-x32\...\Tweaking.com - Windows Repair (All in One)) (Version: 2.8.3 - Tweaking.com)
Windows Driver Package - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass  (07/27/2012 20.57.1.735) (HKLM\...\9F04C462DAB591BDCCE784F77E4D4F1736010B92) (Version: 07/27/2012 20.57.1.735 - Samsung Electronics Co. Ltd.)
Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Zattoo Live TV (HKCU\...\6d7aa3e3bf931c56) (Version: 1.0.0.44 - Zattoo Europa AG)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

12-07-2014 18:28:03 Windows Modules Installer
20-07-2014 11:40:40 Removed Epson Connect Printer Setup
24-07-2014 04:13:53 Garmin Express

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2014-07-26 23:06 - 00000855 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {006425DB-5B51-4B6C-B8AA-A1E4CFB6BFAC} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {03199A00-7820-4A48-8223-98BF4B54FCBD} - \LyricsSay-16-enabler No Task File <==== ATTENTION
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {0FB5E383-E7A3-44D6-AB08-3C8B1E28A63B} - \SuperLyrics-16-updater No Task File <==== ATTENTION
Task: {0FEC8C22-EB47-4E13-B62B-8F0183C8BF4B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-885508780-3488564519-4253053766-1002Core => C:\Users\Bodo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-10-24] (Google Inc.)
Task: {1AEA6B3A-4D06-4531-91AC-3DF1AACE4019} - \LyricsSay-16-updater No Task File <==== ATTENTION
Task: {1DDF39B9-7542-4576-A5D1-6D3E9AA12DEE} - \DealPlyUpdate No Task File <==== ATTENTION
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {265A54A5-EE3E-4BE5-8F9B-9C89167CCDD8} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-885508780-3488564519-4253053766-1002UA => C:\Users\Bodo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-10-24] (Google Inc.)
Task: {29FC5DE7-7152-4711-BD33-4E54B23A485D} - \BackgroundContainer Startup Task No Task File <==== ATTENTION
Task: {2BE7AFB0-F39C-42EA-A361-C6D6A77BBDB4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {32C84E47-237F-4951-88D7-17D11ED1F03F} - \LyricsSay-16-chromeinstaller No Task File <==== ATTENTION
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {42B64C91-20D7-4A1F-BA88-837CFC0993A8} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-07-20] (IObit)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {49ECFB78-3464-42B5-A113-8713D9065A27} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-19] (Google Inc.)
Task: {511F60F0-AA64-4730-9938-2151632EFB97} - \Plus-HD-3.8-codedownloader No Task File <==== ATTENTION
Task: {5AAD02D0-BCAE-4D2F-86B2-B41FEEEDCFC2} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation)
Task: {6285A475-CFE7-4411-B607-B32370C9534A} - \Plus-HD-3.8-updater No Task File <==== ATTENTION
Task: {653CC1D7-4638-4DA1-B3AF-74C5188BA9AB} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2014-01-29] (Samsung Electronics CO., LTD.)
Task: {687D19A4-FCFA-429A-9794-34325E00C363} - \DealPly No Task File <==== ATTENTION
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6B2725A6-F626-416D-A4C5-3853AF804B06} - \LyricsSay-16-firefoxinstaller No Task File <==== ATTENTION
Task: {6D8CB9D3-B420-4347-8C0E-972036339A1A} - \SuperLyrics-16-enabler No Task File <==== ATTENTION
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {6E95863C-874F-4DC7-8328-5737E5D19515} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2014-03-19] (Samsung Electronics CO., LTD.)
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {743D1D12-2DC1-478F-AFB4-DBED4D122C55} - System32\Tasks\EPSON XP-215 217 Series Update {3DA0DC70-36AC-4C0C-AAF8-C5D7026B1C94} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {7A87875B-CBEE-4986-9E4C-05EBD9B37C2E} - \d8196673-3ed8-4a48-a051-70eb7ce8fdf0-2 No Task File <==== ATTENTION
Task: {8325AD8F-FF1A-4616-B617-D738AFEFB313} - \d8196673-3ed8-4a48-a051-70eb7ce8fdf0-3 No Task File <==== ATTENTION
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8AEF9D29-F702-465E-BF39-29C551BE30FF} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9495029F-BB49-4089-87C0-FF66734C1C3C} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {9892AEC1-E056-450C-AF9E-D1588355490D} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation)
Task: {98E32370-9469-4A6E-8724-CB47D7457060} - \d8196673-3ed8-4a48-a051-70eb7ce8fdf0-1 No Task File <==== ATTENTION
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A063F511-9675-436F-B483-4920ADFAA13E} - System32\Tasks\EPSON XP-215 217 Series Invitation {3DA0DC70-36AC-4C0C-AAF8-C5D7026B1C94} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {A2397A80-085E-4A4F-BFAB-7C5A3983DF41} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {A29F379A-C877-45C1-8CDB-BEBE5D16A1B1} - \GS.Enabler-S-926685765 No Task File <==== ATTENTION
Task: {AB7A0BA9-ACCC-48DC-A458-4EB1865A4E01} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {AE2531E5-E6D5-4ED8-81FB-EA0F7FF0EAA0} - \LyricsSay-16-codedownloader No Task File <==== ATTENTION
Task: {BA80C40D-8AF8-48B0-9C51-384B98B3BF96} - \ProtectedSearch\Protected Search No Task File <==== ATTENTION
Task: {BCA9EA7D-2D28-4E07-B845-5949E042FCB8} - \Re-markit Update No Task File <==== ATTENTION
Task: {BCFBE945-7857-436D-BCCF-BAF0621B1B90} - \Plus-HD-3.8-enabler No Task File <==== ATTENTION
Task: {C11E1C09-62F6-45C3-B03D-E08BD45CCA77} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D1748FE1-6362-4253-8679-BDDA62E04F48} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-19] (Google Inc.)
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DCBF1AF5-8F07-41AC-846B-ADFD42D186B5} - \Browser Updater\Browser Updater No Task File <==== ATTENTION
Task: {DE5D0EB2-5962-4889-A1E9-8690421008B6} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {E01B37C4-DC66-4891-8ADA-0345717C29C3} - \d8196673-3ed8-4a48-a051-70eb7ce8fdf0-4 No Task File <==== ATTENTION
Task: {E2F64592-3402-41A7-837D-8CEA54C8FA01} - System32\Tasks\Xerox PhotoCafe Communicator => C:\ProgramData\Xerox PhotoCafe\MessageCheck.exe [2011-10-26] ()
Task: {E370A746-D5B2-4991-A749-E76724EA1540} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [2014-03-21] (SEC)
Task: {E6906670-3FBE-4A79-96DC-FAF5CCD9CC69} - \MySearchDial No Task File <==== ATTENTION
Task: {E69A9069-CA2F-4AF4-89E0-A80950C7C058} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {E80AAB2A-6C66-430D-8929-3BD35162472F} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-13] (Adobe Systems Incorporated)
Task: {E8F4C848-A4FC-472A-83FC-FAED01752288} - \SuperLyrics-16-codedownloader No Task File <==== ATTENTION
Task: {F13FA59F-DD97-4449-97FB-1CCAE1833DCF} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-07-12] (Microsoft Corporation)
Task: {F1A2055F-4195-4BCC-99B0-785D4534FD2E} - \LaunchApp No Task File <==== ATTENTION
Task: {F24ED9CE-BE08-4A05-9B0F-DB79214B1CD2} - \Re-markit_wd No Task File <==== ATTENTION
Task: {F98DD335-8F0C-43FE-9124-B80B657BB66A} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express Self Updater\ExpressSelfUpdater.exe [2014-07-01] ()
Task: {FA9C1462-853C-4475-BBC2-BF87C340D79B} - \d8196673-3ed8-4a48-a051-70eb7ce8fdf0-5 No Task File <==== ATTENTION
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\EPSON XP-215 217 Series Invitation {3DA0DC70-36AC-4C0C-AAF8-C5D7026B1C94}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-215 217 Series Update {3DA0DC70-36AC-4C0C-AAF8-C5D7026B1C94}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-885508780-3488564519-4253053766-1002Core.job => C:\Users\Bodo\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-885508780-3488564519-4253053766-1002UA.job => C:\Users\Bodo\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GS.Enabler-S-926685765.job => c:\programdata\softwarehouse\gs.enabler\GS.Enabler.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Administrator.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: C:\WINDOWS\Tasks\Xerox PhotoCafe Communicator.job => C:\ProgramData\Xerox PhotoCafe\MessageCheck.exe

==================== Loaded Modules (whitelisted) =============

2014-02-19 00:21 - 2013-11-11 05:27 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00084800 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
2013-10-04 00:42 - 2013-10-04 00:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-11-15 02:48 - 2013-11-15 02:48 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2014-03-19 11:41 - 2014-03-19 11:41 - 00088624 _____ () C:\Program Files\Samsung\S Agent\ToastX64.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll
2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll
2013-11-30 01:20 - 2013-09-16 13:20 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00027968 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdWrapper.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 01141056 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmd.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00109888 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsBase.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00056440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\HookDllPS2.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00025920 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00109888 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00059712 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00102720 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll
2013-11-04 18:54 - 2011-01-31 09:45 - 00559244 _____ () C:\Program Files (x86)\TraXEx\sqlite3.dll
2013-11-15 02:49 - 2013-11-15 02:49 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2014-07-22 18:37 - 2014-07-22 18:37 - 03800688 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:AD022376
AlternateDataStreams: C:\Users\Bodo\OneDrive:ms-properties
AlternateDataStreams: C:\Users\Bodo\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\chalu_000\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: AudialsNotifier => C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe
MSCONFIG\startupreg: CLMLServer_For_P2G8 => "C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
MSCONFIG\startupreg: CLVirtualDrive => "C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
MSCONFIG\startupreg: Google Update => "C:\Users\Bodo\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: ManyCam => "C:/Program Files (x86)/ManyCam/ManyCam.exe" --silent
MSCONFIG\startupreg: OMESupervisor => C:\Users\Bodo\AppData\Local\omesuperv.exe
MSCONFIG\startupreg: RemoteControl10 => "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
HKLM\...\StartupApproved\StartupFolder: => "WISO Mein Steuer-Sparbuch heute.lnk"
HKLM\...\StartupApproved\Run32: => "Adobe Reader Speed Launcher"
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKLM\...\StartupApproved\Run32: => "CLVirtualDrive"
HKLM\...\StartupApproved\Run32: => "KiesTrayAgent"
HKLM\...\StartupApproved\Run32: => "BingDesktop"
HKLM\...\StartupApproved\Run32: => "iTunesHelper"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/30/2014 06:14:03 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 12375

Error: (07/30/2014 06:14:03 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 12375

Error: (07/30/2014 06:14:03 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/29/2014 10:17:39 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm mbam.exe, Version 1.0.0.532 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 19e4

Startzeit: 01cfab69d2971471

Endzeit: 5

Anwendungspfad: C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe

Berichts-ID: 5bd6ad6d-175d-11e4-befb-c48508d5caf9

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (07/29/2014 07:42:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 13625

Error: (07/29/2014 07:42:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 13625

Error: (07/29/2014 07:42:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/29/2014 07:37:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: EasySettingsCmdServer.exe, Version: 0.0.0.0, Zeitstempel: 0x52e75292
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.30319.460, Zeitstempel: 0x4db13576
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008cb95
ID des fehlerhaften Prozesses: 0x212c
Startzeit der fehlerhaften Anwendung: 0xEasySettingsCmdServer.exe0
Pfad der fehlerhaften Anwendung: EasySettingsCmdServer.exe1
Pfad des fehlerhaften Moduls: EasySettingsCmdServer.exe2
Berichtskennung: EasySettingsCmdServer.exe3
Vollständiger Name des fehlerhaften Pakets: EasySettingsCmdServer.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: EasySettingsCmdServer.exe5

Error: (07/29/2014 07:29:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.17126, Zeitstempel: 0x53882e30
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.17114, Zeitstempel: 0x53648f36
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0001ec81
ID des fehlerhaften Prozesses: 0x1c54
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3
Vollständiger Name des fehlerhaften Pakets: IEXPLORE.EXE4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: IEXPLORE.EXE5

Error: (07/29/2014 05:29:54 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005


System errors:
=============
Error: (07/29/2014 10:45:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Defender-Dienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%577

Error: (07/29/2014 10:45:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Util webporpoise" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/29/2014 08:53:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Defender-Dienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%577

Error: (07/29/2014 08:53:20 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Util webporpoise" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/29/2014 08:07:52 PM) (Source: DCOM) (EventID: 10016) (User: BODOLA)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}BodoLachalu_000S-1-5-21-885508780-3488564519-4253053766-1011LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (07/29/2014 08:07:51 PM) (Source: DCOM) (EventID: 10016) (User: BODOLA)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}BodoLachalu_000S-1-5-21-885508780-3488564519-4253053766-1011LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (07/29/2014 08:07:51 PM) (Source: DCOM) (EventID: 10016) (User: BODOLA)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}BodoLachalu_000S-1-5-21-885508780-3488564519-4253053766-1011LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (07/29/2014 08:07:51 PM) (Source: DCOM) (EventID: 10016) (User: BODOLA)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}BodoLachalu_000S-1-5-21-885508780-3488564519-4253053766-1011LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (07/29/2014 08:07:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Defender-Dienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%577

Error: (07/29/2014 08:07:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Util webporpoise" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-07-29 22:45:51.168
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-07-29 20:53:34.426
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-07-29 20:07:39.810
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-07-29 18:58:05.183
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-07-27 16:03:08.936
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-07-27 15:43:11.985
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-07-27 14:30:07.915
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2014-07-26 23:47:58.924
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info =========================== 

Percentage of memory in use: 42%
Total physical RAM: 8079.37 MB
Available physical RAM: 4675.21 MB
Total Pagefile: 16271.38 MB
Available Pagefile: 12088.4 MB
Total Virtual: 131072 MB
Available Virtual: 131071.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:904.12 GB) (Free:829.4 GB) NTFS
Drive d: (LW D Daten) (Fixed) (Total:931.51 GB) (Free:829.99 GB) NTFS
Drive f: (HiLink) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: D6ABA6F2)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 932 GB) (Disk ID: 92CDA70E)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 30.07.2014
Suchlauf-Zeit: 18:52:37
Logdatei: MBA_30-07-14.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.07.30.05
Rootkit Datenbank: v2014.07.17.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: chalu_000

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 427286
Verstrichene Zeit: 24 Min, 21 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)
         

Ich habe das System noch einmal mit Malwarebytes überprüft
Gestern Abend habe ich alles in Quarantäne geschickt und heute noch einmal überprüft.
Ergebnis kein Befund.
Ich werde Morgen noch einmal nachsehen
Viele Grüße Otto

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] => rmdir /s /q "\SearchProtect" 
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
S2 Util webporpoise; "C:\Program Files (x86)\webporpoise\bin\utilwebporpoise.exe" [X]
Task: {03199A00-7820-4A48-8223-98BF4B54FCBD} - \LyricsSay-16-enabler No Task File <==== ATTENTION
Task: {1AEA6B3A-4D06-4531-91AC-3DF1AACE4019} - \LyricsSay-16-updater No Task File <==== ATTENTION
Task: {1DDF39B9-7542-4576-A5D1-6D3E9AA12DEE} - \DealPlyUpdate No Task File <==== ATTENTION
Task: {29FC5DE7-7152-4711-BD33-4E54B23A485D} - \BackgroundContainer Startup Task No Task File <==== ATTENTION
Task: {32C84E47-237F-4951-88D7-17D11ED1F03F} - \LyricsSay-16-chromeinstaller No Task File <==== ATTENTION
Task: {511F60F0-AA64-4730-9938-2151632EFB97} - \Plus-HD-3.8-codedownloader No Task File <==== ATTENTION
Task: {6285A475-CFE7-4411-B607-B32370C9534A} - \Plus-HD-3.8-updater No Task File <==== ATTENTION
Task: {687D19A4-FCFA-429A-9794-34325E00C363} - \DealPly No Task File <==== ATTENTION
Task: {6B2725A6-F626-416D-A4C5-3853AF804B06} - \LyricsSay-16-firefoxinstaller No Task File <==== ATTENTION
Task: {6D8CB9D3-B420-4347-8C0E-972036339A1A} - \SuperLyrics-16-enabler No Task File <==== ATTENTION
Task: {9495029F-BB49-4089-87C0-FF66734C1C3C} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {A29F379A-C877-45C1-8CDB-BEBE5D16A1B1} - \GS.Enabler-S-926685765 No Task File <==== ATTENTION
Task: {AE2531E5-E6D5-4ED8-81FB-EA0F7FF0EAA0} - \LyricsSay-16-codedownloader No Task File <==== ATTENTION
Task: {BA80C40D-8AF8-48B0-9C51-384B98B3BF96} - \ProtectedSearch\Protected Search No Task File <==== ATTENTION
Task: {BCA9EA7D-2D28-4E07-B845-5949E042FCB8} - \Re-markit Update No Task File <==== ATTENTION
Task: {BCFBE945-7857-436D-BCCF-BAF0621B1B90} - \Plus-HD-3.8-enabler No Task File <==== ATTENTION
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Fertig

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Hallo Schrauber,
anbei die Fixlogdatei
Ich hoffe ich bin nun die Viren los.

HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] => rmdir /s /q "\SearchProtect" 
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
S2 Util webporpoise; "C:\Program Files (x86)\webporpoise\bin\utilwebporpoise.exe" [X]
Task: {03199A00-7820-4A48-8223-98BF4B54FCBD} - \LyricsSay-16-enabler No Task File <==== ATTENTION
Task: {1AEA6B3A-4D06-4531-91AC-3DF1AACE4019} - \LyricsSay-16-updater No Task File <==== ATTENTION
Task: {1DDF39B9-7542-4576-A5D1-6D3E9AA12DEE} - \DealPlyUpdate No Task File <==== ATTENTION
Task: {29FC5DE7-7152-4711-BD33-4E54B23A485D} - \BackgroundContainer Startup Task No Task File <==== ATTENTION
Task: {32C84E47-237F-4951-88D7-17D11ED1F03F} - \LyricsSay-16-chromeinstaller No Task File <==== ATTENTION
Task: {511F60F0-AA64-4730-9938-2151632EFB97} - \Plus-HD-3.8-codedownloader No Task File <==== ATTENTION
Task: {6285A475-CFE7-4411-B607-B32370C9534A} - \Plus-HD-3.8-updater No Task File <==== ATTENTION
Task: {687D19A4-FCFA-429A-9794-34325E00C363} - \DealPly No Task File <==== ATTENTION
Task: {6B2725A6-F626-416D-A4C5-3853AF804B06} - \LyricsSay-16-firefoxinstaller No Task File <==== ATTENTION
Task: {6D8CB9D3-B420-4347-8C0E-972036339A1A} - \SuperLyrics-16-enabler No Task File <==== ATTENTION
Task: {9495029F-BB49-4089-87C0-FF66734C1C3C} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {A29F379A-C877-45C1-8CDB-BEBE5D16A1B1} - \GS.Enabler-S-926685765 No Task File <==== ATTENTION
Task: {AE2531E5-E6D5-4ED8-81FB-EA0F7FF0EAA0} - \LyricsSay-16-codedownloader No Task File <==== ATTENTION
Task: {BA80C40D-8AF8-48B0-9C51-384B98B3BF96} - \ProtectedSearch\Protected Search No Task File <==== ATTENTION
Task: {BCA9EA7D-2D28-4E07-B845-5949E042FCB8} - \Re-markit Update No Task File <==== ATTENTION
Task: {BCFBE945-7857-436D-BCCF-BAF0621B1B90} - \Plus-HD-3.8-enabler No Task File <==== ATTENTION
         

log-Datei

Ich möchte mich für deine Unterstützung /Bemühungen bedanken.
Ich werde die weiteren Punkte noch abarbeiten und mich dann noch einmal bei dir melden
Viele Grüße Otto

Gern Geschehen

Hallo Schrauber,
alles erledigt, es wurden keine Viren mehr gefunden, dass System ist nun sauber.
Ich möchte mich für die Unterstützung bei dir bedanken.
Du hast mir sehr kompetent bei Meinen Problem geholfen. Es gab keine lange Wartezeiten, die Reaktionszeit war immer innerhalb eines Tages. Die Anweisungen/Erklärungen waren für mich verständlich und gut umzusetzen.
Noch einmal Besten DANK Otto II

Bitte