http://98uj8.de/s3brsn5ba66mgfzeinrum#noad öfnet sich hintereinander

Bona · 01.08.2014, 11:25

Hallo zusammen,

ich habe mich hier heute registriert, weil ich höchstwahrscheinlich einen Trojaner habe, den ich mit dieser Handlungsweise noch nie gesehen habe. Es war letzte Nacht, kurz bevor ich den Rechner ausmachen wollte, gegen 3:15Uhr müsste das gewesen sein, öffnete die Seite hxxp://98uj8.de/s3brsn5ba66mgfzeinrum#noad auch so um die 50 mal, direkt hintereinander im halben Sekunde-Takt. Jetzt weiß ich nicht mehr, ob ich Firefox schon aus hatte und dieser wieder automatisch aufging, oder es noch auf war. Völlig überrascht klickte ich im Unterbewusstsein auch nochmal auf Firefox (auf Taskleiste) und da ging es weiter, bis ich beide schnell schloss. Nachdem ich alle Register geschlossen hatte, machte ich den FF aus und wieder an. Bis jetzt, wo ich schreibe, wiederholte sich dass Ereignis zum Glück nicht. Hatte nach dem Vorfall nach dem Problem gegoogelt und fand hier auf dem Trojaner-Board einige Fälle mit genau dem gleichen Problem. Ich habe mir die Regeln durchgelesen, was zu tun ist und höre nun bei Regel 2 auf, damit das Problem sachte angegangen werden kann.

Erstmal zum PC:

-Win 7 Ultimate -Firefox 31.0 -avast! 2014.9.0.2016.140801-0

Bereits ausgeführt: Defogger vom Desktop aus gestartet!
auf disabled gestellt, ohne] Neustart-Aufforderung, es wurden keine Hinweise, Ergebnise, etc. automatisch angezeigt, daraufhin die defogger disable auf den Desktop bekommen:

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 11:49 on 01/08/2014 (Thorsten)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...

-=E.O.F=-

Ich habe absichtlich noch keinen Antivirenscan durchgeführt und defogger disabled gelassen, habe in letzter Zeit keine Cracks, unseriösen Seiten besucht, Keygens oder sonst irgendwas heruntergeladen und warte nun auf weitere Anweisungen!

Ich hoffe, ihr könnt mir helfen!

Gruß
Bona

M-K-D-B · 01.08.2014, 11:28

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.

Bitte beachte folgende Hinweise:

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo.
Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!

Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Bona · 01.08.2014, 12:01

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-07-2014 02
Ran by Thorsten (administrator) on THORSTEN-C01 on 01-08-2014 12:57:03
Running from C:\Users\Thorsten\Desktop
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\LBTWiz.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone Pure Mouse\KonePureMonitor.exe
(Xfire Inc.) H:\Verzeichnis Software\Xfire\Xfire.exe
() H:\Verzeichnis Software\Xfire\xfire64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() C:\Program Files\Cyberlink\Shared files\RichVideo64.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(O&O Software GmbH) F:\Softwareprogramme\O&O DiskImage Professional\oodiag.exe
(Microsoft Corporation) C:\Windows\System32\vdsldr.exe
() H:\Verzeichnis Software\Xfire\xfire64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\LogiAppBroker.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [WrtMon.exe] => C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [26448 2008-05-24] (NewSoft Technology Corporation)
HKLM\...\Run: [Bluetooth Connection Assistant] => LBTWIZ.EXE -silent
HKLM\...\Run: [OODITRAY.EXE] => F:\Softwareprogramme\O&O DiskImage Professional\ooditray.exe [4986672 2013-09-09] (O&O Software GmbH)
HKLM\...\Run: [OODefragTray] => C:\Program Files\OO Software\Defrag\oodtray.exe
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3854640 2014-03-28] (AVAST Software)
HKLM-x32\...\Run: [RoccatKonePure] => C:\Program Files (x86)\ROCCAT\Kone Pure Mouse\KonePureMonitor.EXE [561152 2013-10-22] (ROCCAT GmbH)
HKLM-x32\...\RunOnce: [AvgUninstallURL] => cmd.exe /c start hxxp://www.avg.com/ww.special-uninstallation-feedback-app?lic=OABNAEUASAAtAFIARgA3AFIARgAtAE0AUgA4AEoATwAtAEUAVwBPAFYAQQAtAFUAVgBLAE0AUQAtAEYARQBNAEIAUgA"&"inst=NwA2AC0ANAA1ADIAMAA5ADcAOQA4ADYANQAtAEQARABUACsAMAAtAFMAVAA5ADAAQQBQAFAAKwAxAC0AUABMACsAOQAtAE4AMQBEACsAMQAtAEkATABUACsANgAtAEMASQBEADgAOABJAEIAKwA1AC0AQwBJAEQAOAA4AFQAKwAxAC0AQwBJAEQAOAA4AFQAVAArADEALQBEADMAOAAxAEwAKwA1AA"&"prod=54"&"ver=9.0.914
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\.DEFAULT\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [122200 2014-07-01] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-381864347-1611218167-1957032609-1000\...\Run: [iLivid] => "C:\Users\Thorsten\AppData\Local\iLivid\iLivid.exe" -autorun
HKU\S-1-5-21-381864347-1611218167-1957032609-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
HKU\S-1-5-21-381864347-1611218167-1957032609-1000\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [122200 2014-07-01] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-381864347-1611218167-1957032609-1000\...\MountPoints2: N - N:\setup.exe
HKU\S-1-5-21-381864347-1611218167-1957032609-1000\...\MountPoints2: O - O:\LaunchU3.exe -a
HKU\S-1-5-21-381864347-1611218167-1957032609-1000\...\MountPoints2: P - P:\LaunchU3.exe -a
HKU\S-1-5-21-381864347-1611218167-1957032609-1000\...\MountPoints2: Q - Q:\LaunchU3.exe -a
HKU\S-1-5-21-381864347-1611218167-1957032609-1000\...\MountPoints2: {1cbe909b-52b1-11e2-b9e5-00248c0e4862} - O:\LaunchU3.exe -a
HKU\S-1-5-21-381864347-1611218167-1957032609-1000\...\MountPoints2: {2ba98dc4-48b4-11e3-a052-005056c00008} - N:\setup.exe
HKU\S-1-5-21-381864347-1611218167-1957032609-1000\...\MountPoints2: {2c1a1a0d-d0fc-11e2-af5a-005056c00008} - "O:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-381864347-1611218167-1957032609-1000\...\MountPoints2: {6f5fb5ed-5401-11e2-90f4-00248c0e4862} - N:\Startme.exe
HKU\S-1-5-21-381864347-1611218167-1957032609-1000\...\MountPoints2: {b7dba291-97a3-11e2-9945-005056c00008} - N:\setup.exe
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
AppInit_DLLs-x32: C:\PROGRA~2\SupTab\SEARCH~1.DLL => "C:\PROGRA~2\SupTab\SEARCH~1.DLL" File Not Found
Startup: C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
Startup: C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk
ShortcutTarget: Xfire.lnk -> H:\Verzeichnis Software\Xfire\Xfire.exe (Xfire Inc.)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: OODIIcon -> {14A94384-BBED-47ed-86C0-6BF63FD892D0} => F:\Softwareprogramme\O&O DiskImage Professional\oodishi.dll (O&O Software GmbH)
BootExecute: autocheck autochk * autocheck turegopt

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dvd_14_15_ff&cd=2XzuyEtN2Y1L1QzuyDyE0EyC0F0Czz0F0BtBzztC0ByD0D0AtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAtAtBzz0DyEzz0AtGtD0ByC0FtG0EtC0ByDtGyBzy0E0CtGtA0E0DzztC0AyBtD0F0E0B0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByCtD0AzztB0EyDtGtDzy0C0EtGyC0C0D0EtGyC0B0A0CtGtD0B0DzyzzzytD0CtByEzy0C2Q&cr=973505277&ir=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1396192922&from=cor&uid=SAMSUNGXHD321KJ_S0MQJ1QP419058&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dvd_14_15_ff&cd=2XzuyEtN2Y1L1QzuyDyE0EyC0F0Czz0F0BtBzztC0ByD0D0AtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAtAtBzz0DyEzz0AtGtD0ByC0FtG0EtC0ByDtGyBzy0E0CtGtA0E0DzztC0AyBtD0F0E0B0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByCtD0AzztB0EyDtGtDzy0C0EtGyC0C0D0EtGyC0B0A0CtGtD0B0DzyzzzytD0CtByEzy0C2Q&cr=973505277&ir=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1396192922&from=cor&uid=SAMSUNGXHD321KJ_S0MQJ1QP419058&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1396192922&from=cor&uid=SAMSUNGXHD321KJ_S0MQJ1QP419058&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dvd_14_15_ff&cd=2XzuyEtN2Y1L1QzuyDyE0EyC0F0Czz0F0BtBzztC0ByD0D0AtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAtAtBzz0DyEzz0AtGtD0ByC0FtG0EtC0ByDtGyBzy0E0CtGtA0E0DzztC0AyBtD0F0E0B0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByCtD0AzztB0EyDtGtDzy0C0EtGyC0C0D0EtGyC0B0A0CtGtD0B0DzyzzzytD0CtByEzy0C2Q&cr=973505277&ir=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1396192922&from=cor&uid=SAMSUNGXHD321KJ_S0MQJ1QP419058&q={searchTerms}
URLSearchHook: HKLM-x32 - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
URLSearchHook: HKCU - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1396192922&from=cor&uid=SAMSUNGXHD321KJ_S0MQJ1QP419058&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1396192922&from=cor&uid=SAMSUNGXHD321KJ_S0MQJ1QP419058&q={searchTerms}
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dvd_14_15_ff&cd=2XzuyEtN2Y1L1QzuyDyE0EyC0F0Czz0F0BtBzztC0ByD0D0AtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAtAtBzz0DyEzz0AtGtD0ByC0FtG0EtC0ByDtGyBzy0E0CtGtA0E0DzztC0AyBtD0F0E0B0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByCtD0AzztB0EyDtGtDzy0C0EtGyC0C0D0EtGyC0B0A0CtGtD0B0DzyzzzytD0CtByEzy0C2Q&cr=973505277&ir=
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1396192922&from=cor&uid=SAMSUNGXHD321KJ_S0MQJ1QP419058&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1396192922&from=cor&uid=SAMSUNGXHD321KJ_S0MQJ1QP419058&q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dvd_14_15_ff&cd=2XzuyEtN2Y1L1QzuyDyE0EyC0F0Czz0F0BtBzztC0ByD0D0AtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAtAtBzz0DyEzz0AtGtD0ByC0FtG0EtC0ByDtGyBzy0E0CtGtA0E0DzztC0AyBtD0F0E0B0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByCtD0AzztB0EyDtGtDzy0C0EtGyC0C0D0EtGyC0B0A0CtGtD0B0DzyzzzytD0CtByEzy0C2Q&cr=973505277&ir=
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Mega Browse -> {157ce350-1a6e-4c52-bb0e-9c1d630ca9e4} -> C:\Program Files (x86)\Mega Browse\MegaBrowsebho.dll (Mega Browse)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Hosts: 127.0.0.1 secure.tune-up.com
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\1a3stb06.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @playstation.com/PsndlCheck,version=1.00 - C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: sony.com/MediaGoDetector - C:\Program Files (x86)\Sony\Media Go\npMediaGoDetector.dll (Sony Network Entertainment International LLC)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\sweet-page.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Garmin Communicator - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\1a3stb06.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2014-06-28]
FF Extension: Adblock Plus - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\1a3stb06.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-28]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]
FF HKLM\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-05-07]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-07-30]
FF HKLM-x32\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-03-16]
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [ckciodbhcaimldadddmcboacaigjffbh] - C:\ProgramData\SaveByclick\ckciodbhcaimldadddmcboacaigjffbh.crx []

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-03-28] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [437080 2014-07-01] (Garmin Ltd or its subsidiaries)
R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)
R2 OO DiskImage; F:\Softwareprogramme\O&O DiskImage Professional\oodiag.exe [6258480 2013-09-09] (O&O Software GmbH)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 RichVideo64; C:\Program Files\Cyberlink\Shared files\RichVideo64.exe [390672 2012-12-21] ()
S3 TunngleService; G:\Verzeichnis Software\Tunngle\TnglCtrl.exe [759192 2013-09-03] (Tunngle.net GmbH) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-03-28] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-03-28] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-03-28] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-03-28] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-03-28] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-03-28] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-03-28] ()
S3 athr; C:\Windows\System32\DRIVERS\athrx.sys [2374656 2011-02-08] (Atheros Communications, Inc.) [File not signed]
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-11-09] (Disc Soft Ltd)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R0 oem-drv64; C:\Windows\System32\DRIVERS\oem-drv64.sys [42496 2014-08-01] (secr9tos) [File not signed]
R0 oodisr; C:\Windows\System32\DRIVERS\oodisr.sys [116936 2013-09-09] (O&O Software GmbH)
R0 oodisrh; C:\Windows\System32\DRIVERS\oodisrh.sys [41160 2013-09-09] (O&O Software GmbH)
R0 oodivd; C:\Windows\System32\DRIVERS\oodivd.sys [255688 2013-09-09] (O&O Software GmbH)
R0 oodivdh; C:\Windows\System32\DRIVERS\oodivdh.sys [44744 2013-09-09] (O&O Software GmbH)
S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)
S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)
S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)
S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)
S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R2 WinRing0_1_2_0; C:\Users\Thorsten\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries23.gadget\WinRing0x64.sys [14544 2013-12-01] (OpenLibSys.org)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-01 12:57 - 2014-08-01 12:57 - 00023920 _____ () C:\Users\Thorsten\Desktop\FRST.txt
2014-08-01 12:57 - 2014-08-01 12:57 - 00000000 ____D () C:\FRST
2014-08-01 11:48 - 2014-08-01 12:51 - 00000478 _____ () C:\Users\Thorsten\Desktop\defogger_disable.log
2014-08-01 11:48 - 2014-08-01 11:48 - 00000168 _____ () C:\Users\Thorsten\defogger_reenable
2014-08-01 11:47 - 2014-08-01 11:47 - 00050477 _____ () C:\Users\Thorsten\Desktop\Defogger.exe
2014-08-01 11:12 - 2014-08-01 11:12 - 02094080 _____ (Farbar) C:\Users\Thorsten\Desktop\FRST64.exe
2014-07-30 21:15 - 2014-07-30 21:21 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Notepad++
2014-07-30 21:15 - 2014-07-30 21:15 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-07-30 21:15 - 2014-07-30 21:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-07-30 21:15 - 2014-07-30 21:15 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-07-30 19:09 - 2014-07-30 19:09 - 00000340 _____ () C:\Windows\LkmdfCoInst.log
2014-07-30 19:08 - 2014-07-30 19:09 - 00009889 _____ () C:\Windows\LDPINST.LOG
2014-07-30 01:40 - 2014-07-30 01:40 - 00018587 _____ () C:\Windows\DirectX.log
2014-07-30 01:21 - 2014-07-30 01:21 - 00000214 _____ () C:\Users\Thorsten\Desktop\Sleeping Dogs.url
2014-07-30 01:21 - 2014-07-30 01:21 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-26 01:54 - 2014-07-26 01:54 - 00292360 _____ () C:\Windows\Minidump\072614-19890-01.dmp
2014-07-25 16:31 - 2014-07-25 16:31 - 00001239 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-07-24 06:39 - 2014-07-24 06:39 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Garmin
2014-07-24 06:39 - 2014-07-24 06:39 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Garmin
2014-07-22 17:26 - 2014-07-22 17:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-21 16:51 - 2014-07-21 16:51 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-21 16:46 - 2014-07-21 16:51 - 00004238 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-01 12:57 - 2014-08-01 12:57 - 00023920 _____ () C:\Users\Thorsten\Desktop\FRST.txt
2014-08-01 12:57 - 2014-08-01 12:57 - 00000000 ____D () C:\FRST
2014-08-01 12:53 - 2014-02-08 15:22 - 00000288 _____ () C:\Windows\Tasks\FF Watcher {3CF34533-1BF9-4F27-AE11-7C21B338FB02}.job
2014-08-01 12:51 - 2014-08-01 11:48 - 00000478 _____ () C:\Users\Thorsten\Desktop\defogger_disable.log
2014-08-01 12:17 - 2013-10-13 16:28 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-01 12:05 - 2012-12-30 22:18 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-01 11:48 - 2014-08-01 11:48 - 00000168 _____ () C:\Users\Thorsten\defogger_reenable
2014-08-01 11:48 - 2012-12-30 19:16 - 00000000 ____D () C:\Users\Thorsten
2014-08-01 11:47 - 2014-08-01 11:47 - 00050477 _____ () C:\Users\Thorsten\Desktop\Defogger.exe
2014-08-01 11:12 - 2014-08-01 11:12 - 02094080 _____ (Farbar) C:\Users\Thorsten\Desktop\FRST64.exe
2014-08-01 10:53 - 2009-07-14 06:45 - 00026080 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-01 10:53 - 2009-07-14 06:45 - 00026080 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-01 10:49 - 2012-12-30 19:12 - 01238714 _____ () C:\Windows\WindowsUpdate.log
2014-08-01 10:46 - 2014-06-23 00:40 - 00010954 _____ () C:\Windows\setupact.log
2014-08-01 10:45 - 2013-10-13 16:28 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-01 10:45 - 2012-12-31 00:38 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-01 10:45 - 2012-12-30 19:16 - 00042496 _____ (secr9tos) C:\Windows\system32\Drivers\oem-drv64.sys
2014-08-01 10:45 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-01 03:24 - 2012-12-30 21:28 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Skype
2014-08-01 00:33 - 2013-01-10 02:00 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Xfire
2014-08-01 00:14 - 2014-03-16 02:55 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-07-31 18:29 - 2012-12-30 21:28 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-31 15:01 - 2010-11-21 08:50 - 05485124 _____ () C:\Windows\system32\perfh007.dat
2014-07-31 15:01 - 2010-11-21 08:50 - 01635894 _____ () C:\Windows\system32\perfc007.dat
2014-07-31 15:01 - 2009-07-14 07:13 - 00006208 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-30 21:21 - 2014-07-30 21:15 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Notepad++
2014-07-30 21:15 - 2014-07-30 21:15 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-07-30 21:15 - 2014-07-30 21:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-07-30 21:15 - 2014-07-30 21:15 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-07-30 19:09 - 2014-07-30 19:09 - 00000340 _____ () C:\Windows\LkmdfCoInst.log
2014-07-30 19:09 - 2014-07-30 19:08 - 00009889 _____ () C:\Windows\LDPINST.LOG
2014-07-30 19:09 - 2012-12-30 22:37 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2014-07-30 19:09 - 2012-12-30 22:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2014-07-30 19:09 - 2012-12-30 22:36 - 00000000 ____D () C:\Program Files\Common Files\LogiShrd
2014-07-30 19:08 - 2012-12-30 22:37 - 00000000 ____D () C:\ProgramData\Logishrd
2014-07-30 01:40 - 2014-07-30 01:40 - 00018587 _____ () C:\Windows\DirectX.log
2014-07-30 01:21 - 2014-07-30 01:21 - 00000214 _____ () C:\Users\Thorsten\Desktop\Sleeping Dogs.url
2014-07-30 01:21 - 2014-07-30 01:21 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-26 01:54 - 2014-07-26 01:54 - 00292360 _____ () C:\Windows\Minidump\072614-19890-01.dmp
2014-07-26 01:54 - 2013-08-11 01:37 - 00000000 ____D () C:\Windows\Minidump
2014-07-25 23:30 - 2014-06-26 01:12 - 00001836 _____ () C:\Windows\PFRO.log
2014-07-25 16:31 - 2014-07-25 16:31 - 00001239 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-07-25 16:31 - 2013-12-07 03:07 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-07-25 16:31 - 2013-06-30 00:27 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\DVDVideoSoft
2014-07-25 16:31 - 2013-06-30 00:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-07-24 16:13 - 2013-01-10 02:00 - 00000000 ____D () C:\ProgramData\Xfire
2014-07-24 06:39 - 2014-07-24 06:39 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Garmin
2014-07-24 06:39 - 2014-07-24 06:39 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Garmin
2014-07-24 06:39 - 2013-12-07 00:21 - 00000000 ____D () C:\ProgramData\Garmin
2014-07-24 06:39 - 2013-04-11 19:27 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-24 06:39 - 2012-12-31 02:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-07-24 06:38 - 2014-06-28 19:38 - 00003552 _____ () C:\Windows\System32\Tasks\GarminUpdaterTask
2014-07-24 06:38 - 2012-12-31 02:23 - 00000000 ____D () C:\Program Files (x86)\Garmin
2014-07-23 16:12 - 2013-08-29 19:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-22 17:26 - 2014-07-22 17:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-21 16:51 - 2014-07-21 16:51 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-21 16:51 - 2014-07-21 16:46 - 00004238 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-21 16:46 - 2013-08-21 18:23 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-14 09:37 - 2012-12-30 22:18 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-14 09:37 - 2012-12-30 22:18 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-14 09:37 - 2012-12-30 21:38 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.5712.dll


Some content of TEMP:
====================
C:\Users\Thorsten\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\Thorsten\AppData\Local\Temp\tmd_34012623.exe
C:\Users\Thorsten\AppData\Local\Temp\tmd_34019899.exe
C:\Users\Thorsten\AppData\Local\Temp\tmpAF93.exe
C:\Users\Thorsten\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


nointegritychecks: ==> Integrity Checks is disabled <===== ATTENTION!


LastRegBack: 2014-07-30 12:45

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-07-2014 02
Ran by Thorsten at 2014-08-01 12:57:44
Running from C:\Users\Thorsten\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Abloadtool (HKLM-x32\...\Abloadtool) (Version:  - Tim Demkowsky)
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Age of Empire 2 HD Edition GERMAN (c) Microsoft version 1 (HKLM-x32\...\QWdlIG9mIEVtcGlyZSAyIEhEIEVkaXRpb24=_is1) (Version: 1 - )
Alter Ego DE (HKLM-x32\...\Alter Ego DE_is1) (Version:  - Future Games)
ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Ashampoo Burning Studio 2013 v.11.0.5 (HKLM-x32\...\{91B33C97-0FBA-74AE-E802-D782F5C8AA89}_is1) (Version: 11.0.5 - Ashampoo GmbH & Co. KG)
Assassin's Creed 4 Black Flag Jackdaw Edition MULTI-2 1.06 (HKLM-x32\...\Assassin's Creed 4 Black Flag Jackdaw Edition MULTI-2 1.06) (Version:  - )
avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2016 - Avast Software)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
BioShock Infinite (HKLM-x32\...\BioShock Infinite_is1) (Version:  - )
Brothers - A Tale of Two Sons (HKLM-x32\...\Brothers - A Tale of Two Sons_is1) (Version:  - 505 Games)
CastleStorm (HKLM-x32\...\Steam App 241410) (Version:  - Zen Studios)
Castlevania: Lords of Shadow - Ultimate Edition (HKLM-x32\...\Castlevania: Lords of Shadow - Ultimate Edition_is1) (Version:  - Konami Digital Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)
ClearProg 1.6.1 Beta 6 (HKLM-x32\...\ClearProg) (Version: 1.6.1 Beta 6 - Sven Hoffman)
Command & Conquer(TM) Generäle (HKLM-x32\...\InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}) (Version: 0.50.0000 - Electronic Arts)
Command & Conquer(TM) Generäle (x32 Version: 0.50.0000 - Electronic Arts) Hidden
Curse Client (HKCU\...\101a9f93b8f0bb6f) (Version: 5.1.1.792 - Curse)
CyberLink PowerDirector 11 (HKLM-x32\...\InstallShield_{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.3026 - CyberLink Corp.)
CyberLink PowerDirector 11 (Version: 11.0.0.3026 - Ihr Firmenname) Hidden
CyberLink WaveEditor 2 (HKLM-x32\...\InstallShield_{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}) (Version: 2.0.3206 - CyberLink Corp.)
CyberLink WaveEditor 2 (x32 Version: 2.0.3206 - CyberLink Corp.) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Dead Island (HKLM-x32\...\Steam App 91310) (Version:  - Techland)
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.50.56 - Electronic Arts)
Die Sims™ 3 70er, 80er & 90er Accessoires (HKLM-x32\...\{E1868CAE-E3B9-4099-8C18-AA8944D336FD}) (Version: 17.0.77 - Electronic Arts)
Die Sims™ 3 Design-Garten-Accessoires (HKLM-x32\...\{117B6BF6-82C3-420C-B284-9247C8568E53}) (Version: 7.3.2 - Electronic Arts)
Die Sims™ 3 Diesel Accessoires (HKLM-x32\...\{1C9B6173-6DC9-4EEE-9EFC-6BA115CFBE43}) (Version: 14.0.48 - Electronic Arts)
Die Sims™ 3 Einfach tierisch (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
Die Sims™ 3 Gib Gas-Accessoires (HKLM-x32\...\{ED436EA8-4145-4703-AE5D-4D09DD24AF5A}) (Version: 5.8.1 - Electronic Arts)
Die Sims™ 3 Jahreszeiten (HKLM-x32\...\{3DE92282-CB49-434F-81BF-94E5B380E889}) (Version: 16.0.136 - Electronic Arts)
Die Sims™ 3 Katy Perry Süße Welt (HKLM-x32\...\{9B2506E3-9A3F-45B5-96BF-509CAD584650}) (Version: 13.0.62 - Electronic Arts)
Die Sims™ 3 Late Night (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.5.1 - Electronic Arts)
Die Sims™ 3 Lebensfreude (HKLM-x32\...\{E6B88BD6-E4B2-4701-A648-B6DAC6E491CC}) (Version: 8.0.152 - Electronic Arts)
Die Sims™ 3 Luxus-Accessoires (HKLM-x32\...\{71828142-5A24-4BD0-97E7-976DA08CE6CF}) (Version: 3.13.1 - Electronic Arts)
Die Sims™ 3 Reiseabenteuer (HKLM-x32\...\{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}) (Version: 2.17.2 - Electronic Arts)
Die Sims™ 3 Showtime (HKLM-x32\...\{3BBFD444-5FAB-49F6-98B1-A1954E831399}) (Version: 12.0.273 - Electronic Arts)
Die Sims™ 3 Stadt-Accessoires (HKLM-x32\...\{7B11296A-F894-449C-8DF6-6AAAA7D4D118}) (Version: 9.0.73 - Electronic Arts)
Die Sims™ 3 Supernatural (HKLM-x32\...\{B37DAFA5-717D-41F8-BDFB-3A4B68C0B3A1}) (Version: 15.0.135 - Electronic Arts)
Die Sims™ 3 Traumkarrieren (HKLM-x32\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.10.1 - Electronic Arts)
Die Sims™ 3 Traumsuite-Accessoires (HKLM-x32\...\{08A25478-C5DD-4EA7-B168-3D687CA987FF}) (Version: 11.0.84 - Electronic Arts)
Die Sims™ 3 Wildes Studentenleben (HKLM-x32\...\{F26DE8EF-F2CF-40DC-8CDA-CC0D82D11B36}) (Version: 18.0.126 - Electronic Arts)
Dream Pinball 3D (HKLM-x32\...\Dream Pinball 3D) (Version: 1.1.0.0 - TopWare Interactive)
EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)
Elevated Installer (x32 Version: 3.2.9.0 - Garmin Ltd or its subsidiaries) Hidden
Emergency 4 Deluxe (HKLM-x32\...\{EDA12670-56B5-4459-BA21-D010F0E3EBA1}) (Version: 1.03.001 - )
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.2.5 - SCS Software)
Franzis 3D-Eisenbahnplaner 2013 (HKLM-x32\...\Franzis 3D-Eisenbahnplaner 2013_is1) (Version: 13.03 - Franzis)
Free M4a to MP3 Converter 8.1 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)
Free Studio version 2014 (HKLM-x32\...\Free Studio_is1) (Version: 6.3.6.716 - DVDVideoSoft Ltd.)
Free Video to Flash Converter version 5.0.29.925 (HKLM-x32\...\Free Video to Flash Converter_is1) (Version: 5.0.29.925 - DVDVideoSoft Ltd.)
Free YouTube Download version 3.2.41.623 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.41.623 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.41.623 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.41.623 - DVDVideoSoft Ltd.)
Garmin BaseCamp (HKLM-x32\...\{EFCB4F04-04AD-4B17-999E-E7B54F9817A9}) (Version: 4.2.1 - Garmin Ltd or its subsidiaries)
Garmin City Navigator Europe NT 2014.10 Update (HKLM-x32\...\{5AFFBD70-E969-41D6-80F6-CD85C0F0A0F0}) (Version: 17.10.0.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{aece03a3-686f-4b3c-9931-9dafb71829b7}) (Version: 3.2.9.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 3.2.9.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 3.2.9.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Garmin WebUpdater (HKLM-x32\...\{AE1EC58E-B2AC-4959-A4C2-C38202A25239}) (Version: 2.5.6 - Garmin Ltd or its subsidiaries)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
GPSBabel 1.4.4 (HKLM-x32\...\{1B8FE958-A304-4902-BF7A-4E2F0F5B7017}_is1) (Version:  - GPSBabel)
GRID 2 (c) Codemasters version 1 (HKLM-x32\...\R1JJRDI=_is1) (Version: 1 - )
Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of Might & Magic V: Hammers of Fate (HKLM-x32\...\{66FF4C48-0083-4E60-8556-B883AB200091}) (Version:  - )
Heroes of Might and Magic V - Tribes of the East (HKLM-x32\...\{66FF4C48-0083-4E60-8556-B883AB200092}) (Version:  - )
Heroes of Might and Magic V (HKLM-x32\...\{20071984-5EB1-4881-8EDB-082532ACEC6D}) (Version:  - )
Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
LEGO® Der Herr der Ringe™ (HKLM-x32\...\{C6F20FA7-342A-47A9-A3C8-EB36CABE6419}) (Version: 1.0.0.0 - Warner Bros. Interactive Entertainment)
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech)
MAGIX Foto & Grafik Designer 7 SE (HKLM-x32\...\MAGIX_{305A1AC7-0B5C-457D-9B6F-2A889766E3A0}) (Version: 7.1.2.26041 - MAGIX AG)
MAGIX Foto & Grafik Designer 7 SE (Version: 7.1.2.26041 - MAGIX AG) Hidden
Media Go (HKLM-x32\...\{F66C4A41-C3A8-4523-AB6C-BAA1DB38305C}) (Version: 2.7.357 - Sony)
Media Go Network Downloader (HKLM-x32\...\{73FA7631-3015-4EEC-A002-09488C47A07C}) (Version: 1.5.19.0 - Sony)
Media Go Video Playback Engine 2.4.112.12050 (HKLM-x32\...\{7C5AEEE1-6D7C-8922-4548-7BF9096077EC}) (Version: 2.4.112.12050 - Sony)
Mega Browse (HKLM\...\Mega Browse) (Version: 2014.03.18.232436 - Mega Browse) <==== ATTENTION
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Train Simulator (HKLM-x32\...\Train Simulator 1.0) (Version:  - )
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mirror's Edge™ (HKLM-x32\...\{AEDBD563-24BB-4EE3-8366-A654DAC2D988}) (Version: 1.0.1.0 - Electronic Arts)
Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
Mozilla Thunderbird 24.6.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla)
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSVCRT Redists (x32 Version: 1.0 - Sony Creative Software Inc.) Hidden
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Neverwinter (HKLM-x32\...\Steam App 109600) (Version:  - Cryptic Studios)
Newblue Art Effects for PowerDirector (HKLM\...\NewBlue Art Effects for PowerDirector) (Version: 2.0 - NewBlue)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.46.0 - Black Tree Gaming)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.8 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 11.10.13 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation)
O&O DiskImage Professional (HKLM\...\{56F8EF3C-D9A0-4728-95D5-DC05A72931F5}) (Version: 7.81.6 - O&O Software GmbH)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 9.3.1.4482 - Electronic Arts, Inc.)
PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.0 - pdfforge)
PlayStation(R)Network Downloader (HKLM-x32\...\{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}) (Version: 2.07.00849 - Sony Computer Entertainment Inc.)
PlayStation(R)Store (HKLM-x32\...\{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}) (Version: 4.18.0.15698 - Sony Computer Entertainment Inc.)
PowerDirector (Version: 11.0 - Ihr Firmenname) Hidden
ProTrain 20 Dortmund - Hannover 1.0 (HKLM-x32\...\ProTrain 20 Dortmund - Hannover 1.0) (Version: 1.0 - BlueSky Interactive)
ProTrain 7 - Frankfurt-Nürnberg 1.0 (HKLM-x32\...\ProTrain 7 - Frankfurt-Nürnberg 1.0) (Version: 1.0 - Blue Sky Interactive)
Remove on Reboot Shell Extension (HKLM-x32\...\Remove on Reboot Shell Extension_is1) (Version:  - BJB, Inc.)
Risen (HKLM-x32\...\Steam App 40300) (Version:  - Piranha – Bytes )
Risen 2 - Dark Waters (HKLM-x32\...\Steam App 40390) (Version:  - Piranha Bytes)
ROCCAT Kone Pure Mouse Driver (HKLM-x32\...\{4905245D-56E7-4176-BE68-962728B803D6}) (Version:  - Roccat GmbH)
Sacred 2 Gold (HKLM-x32\...\Steam App 225640) (Version:  - Ascaron)
Sacred Citadel (HKLM-x32\...\Steam App 207930) (Version:  - Southend)
Saints Row 2 (HKLM-x32\...\Steam App 9480) (Version:  - Volition)
Saints Row IV (HKLM-x32\...\U2FpbnRzUm93SVY=_is1) (Version: 1 - )
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version:  - Volition)
Scribblenauts Unlimited (HKLM-x32\...\Steam App 218680) (Version:  - 5th Cell Media)
SeaTools for Windows (HKLM-x32\...\{98613C99-1399-416C-A07C-1EE1C585D872}) (Version: 1.2.0.7 - Seagate Technology)
SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden
Silent Hunter 4 Wolves of the Pacific (HKLM-x32\...\{0D005F09-A5F4-473B-A901-5735C6AF5628}) (Version: 1.04.0000 - Ubisoft)
SimCity Version 10.0.0.0 (HKLM-x32\...\SimCity_is1) (Version: 10.0.0.0 - Maxis)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Sleeping Dogs™ (HKLM-x32\...\Steam App 202170) (Version:  - United Front Games)
SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.)
SmartSound Quicktracks 5 (x32 Version: 5.1.8 - SmartSound Software Inc.) Hidden
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.26297 - TeamViewer)
TERA (HKLM-x32\...\{A2S166A0-F031-4E27-A057-C69733219434}_is1) (Version: 18.10.03 - Gameforge Productions GmbH)
The Elder Scrolls Online Beta (HKLM-x32\...\The Elder Scrolls Online Beta_is1) (Version: 0.3.4 - )
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
TKKG 14 (HKLM-x32\...\TKKG 14) (Version:  - )
TKKG11 (HKLM-x32\...\TKKG11) (Version:  - )
TKKG12 (HKLM-x32\...\TKKG12) (Version:  - )
Tom Clancy's Splinter Cell Conviction (HKLM-x32\...\{6D8DDB4A-C263-40DE-BA16-AFDAD159D59A}) (Version: 1.00.000 - Ubisoft)
Tom Clancy's Splinter Cell® Blacklist™ (HKLM-x32\...\{A6356F2F-D3E1-4D83-9AA2-72871DD0C298}) (Version: 1.02 - Ubisoft)
TP-LINK Wireless Client Utility (HKLM-x32\...\{7A2A107B-9695-423F-9462-8F17C178BD35}) (Version: 7.0 - TP-LINK)
Train Simulator 2014 Version 39.3a (HKLM-x32\...\Train Simulator 2014_is1) (Version: 39.3a - Rail Simulator Developments)
Tunngle beta (HKLM-x32\...\Tunngle beta_is1) (Version:  - Tunngle.net GmbH)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Uplay (HKLM-x32\...\Uplay) (Version: 3.0 - Ubisoft)
Versystem Soundboard (HKLM-x32\...\VersystemSoundboard) (Version:  - )
Visual C++ 8.0 Runtime Setup Package (x64) (HKLM-x32\...\{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}) (Version: 9.0.0.623 - AVG Technologies CZ, s.r.o.)
VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
WinTrack v11.06 (HKLM-x32\...\WinTrack_is1) (Version:  - )
World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812}_is1) (Version:  - Wargaming.net)
X Rebirth (HKLM-x32\...\Steam App 2870) (Version:  - Egosoft)
X3 Albion Prelude Bonuspaket 5.1.0.0 (HKLM-x32\...\X3AP Bonus Pack_is1) (Version: 5.1.0.0 - Egosoft)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-381864347-1611218167-1957032609-1000_Classes\CLSID\{07474513-7B58-45c7-B3E6-13A3669B1AFD}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-381864347-1611218167-1957032609-1000_Classes\CLSID\{8ed370ca-cfaa-462c-88e9-5d463204fe30}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)

==================== Restore Points  =========================


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2011-10-14 16:53 - 2011-10-14 16:53 - 00000030 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 secure.tune-up.com

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0BDE7F4A-9E6A-4DD8-B331-1524A2D5BE85} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express Self Updater\ExpressSelfUpdater.exe [2014-07-01] ()
Task: {27799E91-033A-4C6D-9C81-D797237A3175} - System32\Tasks\{FA083AE2-11AB-4704-97D1-A973CF033FAB} => N:\INSTALL.EXE
Task: {27A8720A-7F73-440F-A6E2-CF32689F4E80} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {48C48579-437B-429D-99A6-4E905AA4623E} - System32\Tasks\{8AD70E13-62EB-4914-A328-1BE6D578EAF6} => N:\INSTALL.EXE
Task: {5A7F9CC5-65F7-4FA6-A9EF-758857C86E33} - System32\Tasks\{7EF41B0E-C176-4D3D-B806-25610EA448C1} => N:\INSTALL.EXE
Task: {5E5B273E-4AD7-41B4-B26E-12F3375818F5} - System32\Tasks\{8C3A9EFB-9F0F-4F81-B068-CBC2427E4D0B} => N:\INSTALL.EXE
Task: {6A47FA16-9688-4C84-B5D8-A51C3376A9A8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-03-28] (AVAST Software)
Task: {909CECDC-0E88-47FF-B9C0-9F56741D99F7} - System32\Tasks\{6916EA04-3ECF-4B4E-8B0F-8B32E5757B0B} => N:\INSTALL.EXE
Task: {964199A1-8876-44C6-AC30-EE7DE3EAC5F3} - System32\Tasks\FF Watcher {3CF34533-1BF9-4F27-AE11-7C21B338FB02} => C:\Program Files\V-bates\PrefHelper.exe
Task: {9F4C5695-BE20-4548-B87E-73D95DDF13EC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {9FD7539A-84E4-4F0B-9744-1D514FA89948} - System32\Tasks\{A77F8802-0E05-473C-AAE2-E05DA7BBFA00} => N:\INSTALL.EXE
Task: {A39EEF80-F13E-442D-BA31-6B4668E8B899} - System32\Tasks\{EE198CBB-E2CB-465F-8FCF-0FD95EA0023E} => N:\INSTALL.EXE
Task: {AA31321E-CF2B-4F9D-A389-6D01B4EE1156} - System32\Tasks\{E4908DAE-8842-464B-9B9D-8ECAEE54BF44} => N:\INSTALL.EXE
Task: {AB9BCB20-F164-4155-AD22-AE503604BD18} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)
Task: {B3575235-218E-4B80-B550-515F2563E671} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-14] (Adobe Systems Incorporated)
Task: {B8986DB0-39B3-4507-A698-B03F34326437} - System32\Tasks\{BAA95CE3-6856-4663-B550-41B834C8D5AE} => N:\INSTALL.EXE
Task: {BFEC8D08-8072-4397-B7D5-EB97DBD77389} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FF Watcher {3CF34533-1BF9-4F27-AE11-7C21B338FB02}.job => C:\Program Files\V-bates\PrefHelper.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-12-31 00:38 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-09-09 17:35 - 2013-09-09 17:35 - 00344880 _____ () F:\Softwareprogramme\O&O DiskImage Professional\oodishrs.dll
2014-05-12 11:49 - 2014-05-12 11:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2013-03-21 06:10 - 2013-03-21 06:10 - 00258944 _____ () H:\Verzeichnis Software\Xfire\xfire64.exe
2013-10-12 03:26 - 2012-12-21 10:42 - 00390672 _____ () C:\Program Files\Cyberlink\Shared files\RichVideo64.exe
2013-09-09 17:35 - 2013-09-09 17:35 - 00326448 _____ () F:\Softwareprogramme\O&O DiskImage Professional\oodiagrs.dll
2014-08-01 00:16 - 2014-08-01 00:16 - 02795008 _____ () C:\Program Files\AVAST Software\Avast\defs\14073101\algo.dll
2014-08-01 10:47 - 2014-08-01 10:47 - 02795008 _____ () C:\Program Files\AVAST Software\Avast\defs\14080100\algo.dll
2014-03-16 02:55 - 2014-03-16 02:55 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-05-27 14:11 - 2012-06-23 14:54 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kone Pure Mouse\hiddriver.dll
2014-07-22 17:26 - 2014-07-22 17:26 - 03800688 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-06-11 01:53 - 2014-06-11 01:53 - 03022960 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2014-06-11 01:53 - 2014-06-11 01:53 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2014-06-11 01:53 - 2014-06-11 01:53 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2014-07-14 09:37 - 2014-07-14 09:37 - 17029808 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Sony PC Companion => "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/01/2014 00:51:35 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (08/01/2014 11:48:11 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (08/01/2014 10:47:24 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/01/2014 03:16:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 31.0.0.5310, Zeitstempel: 0x53c75e91
Name des fehlerhaften Moduls: mozalloc.dll, Version: 31.0.0.5310, Zeitstempel: 0x53c72e91
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000141b
ID des fehlerhaften Prozesses: 0x1694
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (08/01/2014 00:15:28 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/31/2014 03:01:41 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (07/31/2014 03:01:41 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (07/31/2014 03:01:41 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (07/31/2014 10:54:21 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/30/2014 09:19:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: DVSShellContextMenuExtension64.dll, Version: 1.0.0.1, Zeitstempel: 0x524d80e8
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000000b116
ID des fehlerhaften Prozesses: 0x760
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3


System errors:
=============
Error: (08/01/2014 10:45:44 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126

Error: (08/01/2014 00:13:54 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126

Error: (07/31/2014 02:44:06 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126

Error: (07/31/2014 00:58:24 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR3 gefunden.

Error: (07/31/2014 00:58:22 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR3 gefunden.

Error: (07/31/2014 10:52:47 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126

Error: (07/30/2014 07:07:22 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (07/30/2014 06:29:22 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126

Error: (07/30/2014 10:18:33 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126

Error: (07/29/2014 11:16:25 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 31%
Total physical RAM: 8191.05 MB
Available physical RAM: 5609.62 MB
Total Pagefile: 16380.29 MB
Available Pagefile: 13481.6 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:58.59 GB) (Free:6.94 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Musik, Bilder, Videos II) (Fixed) (Total:465.73 GB) (Free:245.39 GB) NTFS
Drive e: (Spiele-Installationen II) (Fixed) (Total:311.51 GB) (Free:81.42 GB) NTFS
Drive f: (Volume) (Fixed) (Total:117.19 GB) (Free:51.12 GB) NTFS
Drive g: (Volume) (Fixed) (Total:310 GB) (Free:31.09 GB) NTFS
Drive h: (Volume) (Fixed) (Total:310 GB) (Free:126.97 GB) NTFS
Drive i: (Videos I (Anime) +neue Spiele) (Fixed) (Total:465.72 GB) (Free:22.2 GB) NTFS
Drive j: (Videos II) (Fixed) (Total:465.72 GB) (Free:14.75 GB) NTFS
Drive k: (Spiele-Installationen) (Fixed) (Total:465.84 GB) (Free:109.3 GB) NTFS
Drive l: (Volume) (Fixed) (Total:122.31 GB) (Free:75.65 GB) NTFS
Drive n: (TrainSim2014) (CDROM) (Total:7.4 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 20732072)
Partition 1: (Active) - (Size=59 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=239 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 0C581A98)
Partition 1: (Active) - (Size=466 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=466 GB) - (Type=OF Extended)

========================================================
Disk: 2 (MBR Code: Windows 7 or Vista) (Size: 932 GB) (Disk ID: 71BFD3E3)
Partition 1: (Not Active) - (Size=312 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=310 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=310 GB) - (Type=07 NTFS)

==================== End Of Log ============================

M-K-D-B · 01.08.2014, 12:54

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

start
nointegritychecks: ==> Integrity Checks is disabled <===== ATTENTION!
Reboot:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Bona · 01.08.2014, 16:11

Es ist leider zu einem schwerwiegendem Problem gekommen. Mit der Sicherheit, Schritt 1 korrekt auszuführen, ist es nach Erstellen der txt.-Datei, bei dem Versuch, den Inhalt der Fixlog.txt über notepad zu einem ungewollten Neustart gekommen. Der Rechner hat eine Systemreparatur durchgeführt, welche immer wieder abbrach und es zu keinem erfolgreichen Windowsstart kam. Weder Bootauswahl (F8 nach Bios-Piepen) noch kurz danach, um über evtl. Abgesicherten Modus zu starten hatte ich eine Möglichkeit, korrekt zu starten. Letzendlich habe ich versucht, über die Eingabeaufforderung den Bootstart zu reparieren. Leider stellte sich heraus, dass wichtige Systemdateien restlos zerstört wurden und mir nichts anderes blieb, als eine Formatierung und Neuinstallation von C.

Besteht nebenher vielleicht sogar das Glück, den Trojaner gleichzeit mit entfernt zu haben?
Wenn nein, bitte mitteilen, ob ich alle Vorgänge wiederholen muss und vielleicht mir mitzuteilen, welchen Fehler ich gemacht habe, dass es zu einem PC-Neustart kam mit Zerstörung wichtiger, nicht reparierbarer Dateien.

M-K-D-B · 01.08.2014, 20:36

Zitat:

Zitat von Bona

Es ist leider zu einem schwerwiegendem Problem gekommen. Mit der Sicherheit, Schritt 1 korrekt auszuführen, ist es nach Erstellen der txt.-Datei, bei dem Versuch, den Inhalt der Fixlog.txt über notepad zu einem ungewollten Neustart gekommen. Der Rechner hat eine Systemreparatur durchgeführt, welche immer wieder abbrach und es zu keinem erfolgreichen Windowsstart kam. Weder Bootauswahl (F8 nach Bios-Piepen) noch kurz danach, um über evtl. Abgesicherten Modus zu starten hatte ich eine Möglichkeit, korrekt zu starten. Letzendlich habe ich versucht, über die Eingabeaufforderung den Bootstart zu reparieren. Leider stellte sich heraus, dass wichtige Systemdateien restlos zerstört wurden und mir nichts anderes blieb, als eine Formatierung und Neuinstallation von C.

Besteht nebenher vielleicht sogar das Glück, den Trojaner gleichzeit mit entfernt zu haben?
Wenn nein, bitte mitteilen, ob ich alle Vorgänge wiederholen muss und vielleicht mir mitzuteilen, welchen Fehler ich gemacht habe, dass es zu einem PC-Neustart kam mit Zerstörung wichtiger, nicht reparierbarer Dateien.

Tut mir wirklich leid, das zu hören...

Normalerweise sollte die Malware automatisch mit entfernt sein, ja.

Wenn du Windows, etc. installiert hast, tue uns einen Gefallen und sag mir, ob es Probleme wie zuvor gibt.

FRST nur kurz zur Kontrolle bitte:

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Bona · 01.08.2014, 23:08

Ich habe soweit erstmal alles am Rechner fertig, was ich aktuell nutze, der Rest kommt wieder nach und nach und beide Dateien nochmal erstellen lassen.

Was ich vorher aber nochmal gerne wüsste: Ich habe ja deinen Code in das Notepad kopiert und genauso "Fixlist.txt" genannt. Unter FRST den "Fix" angeklickt und habe dann die Datei Fixlog.txt bekommen. Da hieß es ja, ich soll den Inhalt posten. Diese Datei habe ich ja doppelt geklickt und in dem Moment startete der Rechner neu inkl. der Systemreparatur. Hatte ich da irgendwas falsch verstanden und somit falsch gemacht? Oder war evtl. etwas anderes defekt, wo die Fixlog.txt nur beigetragen hat zu diesem Problem? Nicht, dass das nächste Mal wieder etwas ist, ich das wieder genauso ausführe und den gleichen Fehler habe.

Nun nochmal die Auswertungen:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-07-2014 02
Ran by Thorsten (administrator) on THORSTEN-C01 on 01-08-2014 23:54:03
Running from C:\Users\Thorsten\Desktop
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal



==================== Processes (Whitelisted) =================




(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-01] (AVAST Software)
HKU\S-1-5-21-601294433-4003985586-2510437137-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-601294433-4003985586-2510437137-1000\...\MountPoints2: N - N:\LaunchU3.exe -a
HKU\S-1-5-21-601294433-4003985586-2510437137-1000\...\MountPoints2: {0774e1e7-1983-11e4-99cd-00248c0e4862} - O:\LaunchU3.exe -a
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x289F720A93ADCF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\5jznf89o.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Thorsten\AppData\Roaming\Mozilla\Firefox\Profiles\5jznf89o.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-01]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-08-01]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-08-01] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-08-01] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-08-01] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-08-01] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-08-01] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-08-01] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-08-01] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-08-01] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-08-01] ()
S3 athr; C:\Windows\System32\DRIVERS\athrx.sys [2374656 2011-02-08] (Atheros Communications, Inc.) [File not signed]
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R0 oem-drv64; C:\Windows\System32\DRIVERS\oem-drv64.sys [42496 2014-08-01] (secr9tos) [File not signed]
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-01 23:54 - 2014-08-01 23:54 - 00009396 _____ () C:\Users\Thorsten\Desktop\FRST.txt
2014-08-01 23:48 - 2014-08-01 23:48 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-08-01 23:48 - 2012-02-13 15:46 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2014-08-01 23:47 - 2014-08-01 23:47 - 00000000 ____D () C:\Intel
2014-08-01 23:46 - 2014-08-01 23:46 - 00001769 _____ () C:\Windows\Language_trs.ini
2014-08-01 23:40 - 2014-08-01 23:54 - 00000000 ____D () C:\FRST
2014-08-01 23:31 - 2014-08-01 23:31 - 02094080 _____ (Farbar) C:\Users\Thorsten\Desktop\FRST64.exe
2014-08-01 23:28 - 2014-08-01 23:28 - 00000472 _____ () C:\Users\Thorsten\Desktop\Volume (H) - Verknüpfung.lnk
2014-08-01 20:19 - 2014-08-01 20:19 - 00001130 _____ () C:\Users\Thorsten\Desktop\eigene Bücher - Verknüpfung.lnk
2014-08-01 20:18 - 2014-08-01 20:18 - 00000543 _____ () C:\Users\Thorsten\Desktop\Videos I (Anime) +neue Spiele (I) - Verknüpfung.lnk
2014-08-01 20:18 - 2014-08-01 20:18 - 00000472 _____ () C:\Users\Thorsten\Desktop\Volume (G) - Verknüpfung.lnk
2014-08-01 19:54 - 2014-08-01 19:54 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Deployment
2014-08-01 19:54 - 2014-08-01 19:54 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Apps\2.0
2014-08-01 19:52 - 2014-08-01 19:52 - 00000029 _____ () C:\Windows\DEBUGSM.INI
2014-08-01 19:52 - 2014-08-01 19:52 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Smart Panel
2014-08-01 18:50 - 2014-08-01 18:50 - 00000000 ____D () C:\Users\Thorsten\Documents\Egosoft
2014-08-01 18:50 - 2014-08-01 18:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft PhotoImpression 5
2014-08-01 18:50 - 2014-08-01 18:50 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
2014-08-01 18:50 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-08-01 18:50 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-08-01 18:50 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-08-01 18:50 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-08-01 18:50 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-08-01 18:50 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-08-01 18:50 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-08-01 18:50 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-08-01 18:50 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-08-01 18:50 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-08-01 18:50 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-08-01 18:50 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-08-01 18:50 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-08-01 18:50 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-08-01 18:50 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-08-01 18:50 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-08-01 18:50 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-08-01 18:50 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-08-01 18:50 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-08-01 18:50 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-08-01 18:50 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-08-01 18:50 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-08-01 18:50 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-08-01 18:50 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-08-01 18:50 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-08-01 18:50 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-08-01 18:50 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-08-01 18:50 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-08-01 18:50 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-08-01 18:50 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-08-01 18:50 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-08-01 18:50 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-08-01 18:50 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-08-01 18:50 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-08-01 18:50 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-08-01 18:50 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-08-01 18:50 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-08-01 18:50 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-08-01 18:50 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-08-01 18:50 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-08-01 18:50 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-08-01 18:50 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-08-01 18:50 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-08-01 18:50 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-08-01 18:50 - 2001-08-23 16:25 - 01706800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2014-08-01 18:50 - 1995-07-31 12:44 - 00212480 _____ (Eastman Kodak) C:\Windows\PCDLIB32.DLL
2014-08-01 18:49 - 2014-08-01 18:49 - 00010085 _____ () C:\Windows\DirectX.log
2014-08-01 18:49 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-08-01 18:49 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-08-01 18:49 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-08-01 18:49 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-08-01 18:49 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-08-01 18:49 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-08-01 18:49 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-08-01 18:49 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-08-01 18:49 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-08-01 18:49 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-08-01 18:49 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-08-01 18:49 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-08-01 18:49 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-08-01 18:49 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-08-01 18:49 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-08-01 18:49 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-08-01 18:49 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-08-01 18:49 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-08-01 18:49 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-08-01 18:49 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-08-01 18:49 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-08-01 18:49 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-08-01 18:49 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-08-01 18:49 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-08-01 18:49 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-08-01 18:49 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-08-01 18:49 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-08-01 18:49 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-08-01 18:49 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-08-01 18:49 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-08-01 18:49 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-08-01 18:49 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-08-01 18:49 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-08-01 18:49 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-08-01 18:49 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-08-01 18:49 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-08-01 18:49 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-08-01 18:49 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-08-01 18:49 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-08-01 18:49 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-08-01 18:49 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-08-01 18:49 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-08-01 18:49 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-08-01 18:49 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-08-01 18:49 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-08-01 18:49 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-08-01 18:49 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-08-01 18:49 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-08-01 18:49 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-08-01 18:49 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-08-01 18:49 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-08-01 18:49 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-08-01 18:49 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-08-01 18:49 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-08-01 18:49 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-08-01 18:49 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-08-01 18:49 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-08-01 18:49 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-08-01 18:49 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-08-01 18:49 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-08-01 18:49 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-08-01 18:49 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-08-01 18:49 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-08-01 18:49 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-08-01 18:49 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-08-01 18:49 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-08-01 18:49 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-08-01 18:49 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-08-01 18:49 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-08-01 18:49 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-08-01 18:49 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-08-01 18:49 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-08-01 18:49 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-08-01 18:49 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-08-01 18:49 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-08-01 18:49 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-08-01 18:49 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-08-01 18:49 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-08-01 18:49 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-08-01 18:49 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-08-01 18:49 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-08-01 18:49 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-08-01 18:49 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-08-01 18:49 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-08-01 18:49 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-08-01 18:49 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-08-01 18:49 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-08-01 18:49 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-08-01 18:49 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-08-01 18:49 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-08-01 18:49 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-08-01 18:49 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-08-01 18:49 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-08-01 18:49 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-08-01 18:49 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-08-01 18:49 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-08-01 18:49 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-08-01 18:49 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-08-01 18:49 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-08-01 18:49 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-08-01 18:49 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-08-01 18:49 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-08-01 18:49 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-08-01 18:49 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-08-01 18:49 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-08-01 18:49 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-08-01 18:49 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-08-01 18:49 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-08-01 18:49 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-08-01 18:49 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-08-01 18:49 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-08-01 18:49 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-08-01 18:49 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-08-01 18:49 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-08-01 18:49 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-08-01 18:49 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-08-01 18:49 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-08-01 18:49 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-08-01 18:49 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-08-01 18:49 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-08-01 18:49 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-08-01 18:49 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-08-01 18:49 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-08-01 18:49 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-08-01 18:49 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-08-01 18:49 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-08-01 18:49 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-08-01 18:49 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-08-01 18:49 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-08-01 18:49 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-08-01 18:49 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-08-01 18:49 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-08-01 18:47 - 2014-08-01 18:47 - 00001912 _____ () C:\Users\Public\Desktop\EPSON Smart Panel.lnk
2014-08-01 18:47 - 2014-08-01 18:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Scan to Web
2014-08-01 18:45 - 2014-08-01 18:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Utility Suite
2014-08-01 18:44 - 2014-08-01 18:47 - 00000000 ____D () C:\Program Files (x86)\EPSON
2014-08-01 18:42 - 2014-08-01 18:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Smart Panel
2014-08-01 18:42 - 2014-08-01 18:47 - 00000000 ____D () C:\Program Files (x86)\Smart Panel
2014-08-01 18:42 - 1999-12-07 02:03 - 00073216 _____ (SEIKO EPSON CORPORATION) C:\Windows\ADE.DLL
2014-08-01 18:42 - 1999-08-09 23:50 - 00000072 ____N () C:\Windows\SysWOW64\epDPE.ini
2014-08-01 18:42 - 1999-06-15 11:31 - 00096768 _____ () C:\Windows\SlantAdj.dll
2014-08-01 18:42 - 1999-04-27 00:17 - 00003136 _____ () C:\Windows\Ade001.bin
2014-08-01 18:41 - 2004-02-01 02:00 - 00413696 _____ (SEIKO EPSON CORPORATION) C:\Windows\SysWOW64\PICSDK.dll
2014-08-01 18:41 - 2004-02-01 02:00 - 00034782 _____ () C:\Windows\SysWOW64\EPPICPrinterDB.dat
2014-08-01 18:41 - 2004-02-01 02:00 - 00027030 _____ () C:\Windows\SysWOW64\EPPICPattern1.dat
2014-08-01 18:41 - 2004-02-01 02:00 - 00006113 _____ () C:\Windows\SysWOW64\EPPICLocal_GE.cfg
2014-08-01 18:41 - 2004-02-01 02:00 - 00000022 _____ () C:\Windows\SysWOW64\PICSDK.ini
2014-08-01 18:41 - 2002-11-15 00:00 - 00114688 _____ (SEIKO EPSON CORPORATION) C:\Windows\SysWOW64\EpPicPrt.dll
2014-08-01 18:41 - 2002-11-15 00:00 - 00065536 _____ (SEIKO EPSON CORPORATION) C:\Windows\SysWOW64\EPPicMgr.dll
2014-08-01 18:40 - 2014-08-01 18:40 - 00008284 _____ () C:\Windows\SysWOW64\eps_icon.avi
2014-08-01 18:39 - 2014-08-01 18:39 - 00000025 _____ () C:\Windows\CDE RX420FG.ini
2014-08-01 17:02 - 2014-08-01 23:18 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-01 17:02 - 2014-08-01 18:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-08-01 17:02 - 2014-08-01 17:03 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\NVIDIA Corporation
2014-08-01 17:02 - 2014-08-01 17:02 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\NVIDIA
2014-08-01 17:02 - 2014-08-01 17:02 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-08-01 17:02 - 2014-07-25 16:01 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-08-01 17:02 - 2014-07-25 16:01 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-08-01 17:02 - 2014-07-25 16:01 - 01283136 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-08-01 17:02 - 2014-07-25 16:01 - 01126480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-08-01 17:02 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-08-01 17:02 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-08-01 17:02 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-08-01 17:02 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-08-01 17:02 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-08-01 17:02 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-08-01 17:01 - 2014-08-01 17:12 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-08-01 17:01 - 2014-08-01 17:02 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-08-01 17:01 - 2014-07-02 22:48 - 00075040 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-08-01 17:01 - 2014-07-02 22:48 - 00061912 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-08-01 17:01 - 2014-07-02 20:55 - 06783776 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-08-01 17:01 - 2014-07-02 20:55 - 03522392 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-08-01 17:01 - 2014-07-02 20:55 - 02559960 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-08-01 17:01 - 2014-07-02 20:55 - 00935368 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-08-01 17:01 - 2014-07-02 20:55 - 00386520 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-08-01 17:01 - 2014-07-02 20:55 - 00062808 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-08-01 17:01 - 2014-07-02 19:44 - 00609240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-08-01 17:01 - 2014-07-02 12:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin
2014-08-01 17:00 - 2014-08-01 17:00 - 01588294 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-08-01 16:58 - 2014-07-02 23:29 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-08-01 16:58 - 2014-07-02 23:29 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-08-01 16:58 - 2014-07-02 23:29 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 31512520 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 24196896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 22994208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 18626304 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 17555104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 16122344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 14498552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 13922752 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 13835208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 12866008 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-08-01 16:58 - 2014-07-02 22:48 - 11283344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 11222048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 04247000 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 03989960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 03196816 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 02814656 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 01890080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434052.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 01539928 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434052.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 00965312 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 00944928 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 00907096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 00903624 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 00869152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 00846832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 00354016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 00166568 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 00146480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-08-01 16:58 - 2014-07-02 22:48 - 00026353 _____ () C:\Windows\system32\nvinfo.pb
2014-08-01 16:58 - 2014-03-31 18:42 - 00040392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-08-01 16:58 - 2014-03-31 18:42 - 00037320 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-08-01 16:58 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-08-01 16:55 - 2014-08-01 17:02 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-01 16:55 - 2014-08-01 16:55 - 00000483 _____ () C:\Users\Thorsten\Desktop\Videos II (J) - Verknüpfung.lnk
2014-08-01 16:54 - 2014-08-01 16:54 - 00000000 ____D () C:\NVIDIA
2014-08-01 16:48 - 2014-08-01 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-08-01 16:47 - 2014-08-01 16:47 - 00000000 ____D () C:\Windows\PCHEALTH
2014-08-01 16:47 - 2014-08-01 16:47 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-08-01 16:47 - 2014-08-01 16:47 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio
2014-08-01 16:46 - 2014-08-01 16:46 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-08-01 16:45 - 2014-08-01 16:48 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-01 16:45 - 2014-08-01 16:47 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-08-01 16:45 - 2014-08-01 16:45 - 00000000 __RHD () C:\MSOCache
2014-08-01 16:45 - 2014-08-01 16:45 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Microsoft Help
2014-08-01 16:44 - 2014-08-01 16:44 - 00008192 __RSH () C:\BOOTSECT.BAK
2014-08-01 16:44 - 2010-11-21 05:23 - 00383786 __RSH () C:\bootmgr
2014-08-01 16:40 - 2014-08-01 18:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-08-01 16:40 - 2014-08-01 16:40 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Thunderbird
2014-08-01 16:40 - 2014-08-01 16:40 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Thunderbird
2014-08-01 16:33 - 2014-08-01 23:49 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Skype
2014-08-01 16:33 - 2014-08-01 16:33 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-08-01 16:33 - 2014-08-01 16:33 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-08-01 16:33 - 2014-08-01 16:33 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Skype
2014-08-01 16:33 - 2014-08-01 16:33 - 00000000 ____D () C:\ProgramData\Skype
2014-08-01 16:33 - 2014-08-01 16:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-08-01 16:32 - 2014-08-01 16:32 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Macromedia
2014-08-01 16:32 - 2014-08-01 16:32 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Adobe
2014-08-01 16:32 - 2014-08-01 16:32 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Macromedia
2014-08-01 16:31 - 2014-08-01 23:37 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-01 16:31 - 2014-08-01 16:31 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-01 16:31 - 2014-08-01 16:31 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-01 16:31 - 2014-08-01 16:31 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-08-01 16:31 - 2014-08-01 16:31 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-08-01 16:31 - 2014-08-01 16:31 - 00000000 ____D () C:\Windows\system32\Macromed
2014-08-01 16:27 - 2014-08-01 16:27 - 00000992 _____ () C:\Users\Thorsten\Desktop\Thorsten.lnk
2014-08-01 16:24 - 2014-08-01 16:24 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-08-01 16:24 - 2014-08-01 16:24 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-08-01 16:18 - 2014-08-01 18:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-01 16:18 - 2014-08-01 16:18 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Mozilla
2014-08-01 16:18 - 2014-08-01 16:18 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Mozilla
2014-08-01 16:18 - 2014-08-01 16:18 - 00000000 ____D () C:\ProgramData\Mozilla
2014-08-01 16:18 - 2014-08-01 16:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-01 16:17 - 2014-08-01 16:17 - 00244408 _____ () C:\Users\Thorsten\Downloads\Firefox Setup Stub 31.0.exe
2014-08-01 16:12 - 2014-08-01 18:50 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-08-01 16:12 - 2014-08-01 16:12 - 00000000 ____D () C:\Windows\Options
2014-08-01 16:12 - 2010-05-13 09:58 - 00007484 _____ () C:\Windows\system32\athurextx.cat
2014-08-01 16:12 - 2010-01-05 19:23 - 01847296 ____R (Atheros Communications, Inc.) C:\Windows\system32\athurx.sys
2014-08-01 16:12 - 2010-01-05 19:23 - 01847296 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athurx.sys
2014-08-01 16:10 - 2014-08-01 16:10 - 00000000 ____D () C:\ProgramData\TP-LINK
2014-08-01 16:09 - 2014-08-01 16:09 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\AVAST Software
2014-08-01 16:08 - 2014-08-01 18:22 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-08-01 16:08 - 2014-08-01 16:25 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-08-01 16:08 - 2014-08-01 16:24 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-08-01 16:08 - 2014-08-01 16:24 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-08-01 16:08 - 2014-08-01 16:24 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-08-01 16:08 - 2014-08-01 16:24 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-08-01 16:08 - 2014-08-01 16:24 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-08-01 16:08 - 2014-08-01 16:24 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-08-01 16:08 - 2014-08-01 16:24 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-08-01 16:08 - 2014-08-01 16:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-08-01 16:08 - 2014-08-01 16:08 - 00000000 ____D () C:\Program Files\AVAST Software
2014-08-01 16:06 - 2014-08-01 18:55 - 00084136 _____ () C:\Users\Thorsten\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-01 16:06 - 2014-08-01 16:06 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-08-01 15:54 - 2014-08-01 15:54 - 00000526 _____ () C:\Users\Thorsten\Desktop\Spiele-Installationen II (E) - Verknüpfung.lnk
2014-08-01 15:54 - 2014-08-01 15:54 - 00000526 _____ () C:\Users\Thorsten\Desktop\Musik, Bilder, Videos II (D) - Verknüpfung.lnk
2014-08-01 15:54 - 2014-08-01 15:54 - 00000512 _____ () C:\Users\Thorsten\Desktop\Lokaler Datenträger (C) - Verknüpfung.lnk
2014-08-01 15:52 - 2014-08-01 15:52 - 00001439 _____ () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-01 15:52 - 2014-08-01 15:52 - 00001405 _____ () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-08-01 15:51 - 2014-08-01 15:51 - 00000020 ___SH () C:\Users\Thorsten\ntuser.ini
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Vorlagen
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Startmenü
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Netzwerkumgebung
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Lokale Einstellungen
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Eigene Dateien
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Druckumgebung
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Documents\Eigene Musik
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Documents\Eigene Bilder
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Local\Verlauf
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Local\Anwendungsdaten
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Anwendungsdaten
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\VirtualStore
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 ____D () C:\Users\Thorsten
2014-08-01 15:51 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-01 15:51 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-08-01 15:50 - 2014-08-01 23:18 - 00042496 _____ (secr9tos) C:\Windows\system32\Drivers\oem-drv64.sys
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Programme
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 __SHD () C:\Recovery
2014-08-01 15:50 - 2011-02-05 19:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\xOsLoad.exe
2014-08-01 15:50 - 2010-11-21 05:24 - 05563776 _____ (Microsoft Corporation) C:\Windows\system32\xNtKrnl.exe
2014-08-01 15:47 - 2014-08-01 23:21 - 00024038 _____ () C:\Windows\WindowsUpdate.log
2014-08-01 15:45 - 2014-08-01 15:45 - 00000000 ____D () C:\Windows\CSC

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-01 23:54 - 2014-08-01 23:54 - 00009396 _____ () C:\Users\Thorsten\Desktop\FRST.txt
2014-08-01 23:54 - 2014-08-01 23:40 - 00000000 ____D () C:\FRST
2014-08-01 23:49 - 2014-08-01 16:33 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Skype
2014-08-01 23:48 - 2014-08-01 23:48 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-08-01 23:47 - 2014-08-01 23:47 - 00000000 ____D () C:\Intel
2014-08-01 23:46 - 2014-08-01 23:46 - 00001769 _____ () C:\Windows\Language_trs.ini
2014-08-01 23:37 - 2014-08-01 16:31 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-01 23:31 - 2014-08-01 23:31 - 02094080 _____ (Farbar) C:\Users\Thorsten\Desktop\FRST64.exe
2014-08-01 23:28 - 2014-08-01 23:28 - 00000472 _____ () C:\Users\Thorsten\Desktop\Volume (H) - Verknüpfung.lnk
2014-08-01 23:26 - 2009-07-14 06:45 - 00026080 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-01 23:26 - 2009-07-14 06:45 - 00026080 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-01 23:24 - 2010-11-21 08:50 - 00696132 _____ () C:\Windows\system32\perfh007.dat
2014-08-01 23:24 - 2010-11-21 08:50 - 00147428 _____ () C:\Windows\system32\perfc007.dat
2014-08-01 23:24 - 2009-07-14 07:13 - 01611160 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-01 23:21 - 2014-08-01 15:47 - 00024038 _____ () C:\Windows\WindowsUpdate.log
2014-08-01 23:18 - 2014-08-01 17:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-01 23:18 - 2014-08-01 15:50 - 00042496 _____ (secr9tos) C:\Windows\system32\Drivers\oem-drv64.sys
2014-08-01 23:18 - 2011-04-13 20:12 - 00010331 _____ () C:\Windows\setupact.log
2014-08-01 23:18 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-01 20:19 - 2014-08-01 20:19 - 00001130 _____ () C:\Users\Thorsten\Desktop\eigene Bücher - Verknüpfung.lnk
2014-08-01 20:18 - 2014-08-01 20:18 - 00000543 _____ () C:\Users\Thorsten\Desktop\Videos I (Anime) +neue Spiele (I) - Verknüpfung.lnk
2014-08-01 20:18 - 2014-08-01 20:18 - 00000472 _____ () C:\Users\Thorsten\Desktop\Volume (G) - Verknüpfung.lnk
2014-08-01 19:54 - 2014-08-01 19:54 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Deployment
2014-08-01 19:54 - 2014-08-01 19:54 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Apps\2.0
2014-08-01 19:52 - 2014-08-01 19:52 - 00000029 _____ () C:\Windows\DEBUGSM.INI
2014-08-01 19:52 - 2014-08-01 19:52 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Smart Panel
2014-08-01 18:55 - 2014-08-01 16:06 - 00084136 _____ () C:\Users\Thorsten\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-01 18:50 - 2014-08-01 18:50 - 00000000 ____D () C:\Users\Thorsten\Documents\Egosoft
2014-08-01 18:50 - 2014-08-01 18:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft PhotoImpression 5
2014-08-01 18:50 - 2014-08-01 18:50 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
2014-08-01 18:50 - 2014-08-01 16:12 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-08-01 18:49 - 2014-08-01 18:49 - 00010085 _____ () C:\Windows\DirectX.log
2014-08-01 18:48 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-08-01 18:47 - 2014-08-01 18:47 - 00001912 _____ () C:\Users\Public\Desktop\EPSON Smart Panel.lnk
2014-08-01 18:47 - 2014-08-01 18:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Scan to Web
2014-08-01 18:47 - 2014-08-01 18:44 - 00000000 ____D () C:\Program Files (x86)\EPSON
2014-08-01 18:47 - 2014-08-01 18:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Smart Panel
2014-08-01 18:47 - 2014-08-01 18:42 - 00000000 ____D () C:\Program Files (x86)\Smart Panel
2014-08-01 18:45 - 2014-08-01 18:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Utility Suite
2014-08-01 18:40 - 2014-08-01 18:40 - 00008284 _____ () C:\Windows\SysWOW64\eps_icon.avi
2014-08-01 18:39 - 2014-08-01 18:39 - 00000025 _____ () C:\Windows\CDE RX420FG.ini
2014-08-01 18:22 - 2014-08-01 16:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-08-01 18:22 - 2014-08-01 16:08 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-08-01 18:21 - 2014-08-01 17:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-08-01 18:21 - 2009-07-14 06:45 - 00344864 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-01 18:20 - 2014-08-01 16:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-01 18:20 - 2010-11-21 05:47 - 00009862 _____ () C:\Windows\PFRO.log
2014-08-01 17:12 - 2014-08-01 17:01 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-08-01 17:03 - 2014-08-01 17:02 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\NVIDIA Corporation
2014-08-01 17:02 - 2014-08-01 17:02 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\NVIDIA
2014-08-01 17:02 - 2014-08-01 17:02 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-08-01 17:02 - 2014-08-01 17:01 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-08-01 17:02 - 2014-08-01 16:55 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-01 17:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-08-01 17:00 - 2014-08-01 17:00 - 01588294 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-08-01 16:55 - 2014-08-01 16:55 - 00000483 _____ () C:\Users\Thorsten\Desktop\Videos II (J) - Verknüpfung.lnk
2014-08-01 16:54 - 2014-08-01 16:54 - 00000000 ____D () C:\NVIDIA
2014-08-01 16:48 - 2014-08-01 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-08-01 16:48 - 2014-08-01 16:45 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-01 16:47 - 2014-08-01 16:47 - 00000000 ____D () C:\Windows\PCHEALTH
2014-08-01 16:47 - 2014-08-01 16:47 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-08-01 16:47 - 2014-08-01 16:47 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio
2014-08-01 16:47 - 2014-08-01 16:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-08-01 16:46 - 2014-08-01 16:46 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-08-01 16:46 - 2010-11-21 09:00 - 00000000 ____D () C:\Windows\ShellNew
2014-08-01 16:45 - 2014-08-01 16:45 - 00000000 __RHD () C:\MSOCache
2014-08-01 16:45 - 2014-08-01 16:45 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Microsoft Help
2014-08-01 16:44 - 2014-08-01 16:44 - 00008192 __RSH () C:\BOOTSECT.BAK
2014-08-01 16:44 - 2009-07-14 07:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-08-01 16:44 - 2009-07-14 07:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-08-01 16:40 - 2014-08-01 16:40 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Thunderbird
2014-08-01 16:40 - 2014-08-01 16:40 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Thunderbird
2014-08-01 16:33 - 2014-08-01 16:33 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-08-01 16:33 - 2014-08-01 16:33 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-08-01 16:33 - 2014-08-01 16:33 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Skype
2014-08-01 16:33 - 2014-08-01 16:33 - 00000000 ____D () C:\ProgramData\Skype
2014-08-01 16:33 - 2014-08-01 16:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-08-01 16:32 - 2014-08-01 16:32 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Macromedia
2014-08-01 16:32 - 2014-08-01 16:32 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Adobe
2014-08-01 16:32 - 2014-08-01 16:32 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Macromedia
2014-08-01 16:31 - 2014-08-01 16:31 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-01 16:31 - 2014-08-01 16:31 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-01 16:31 - 2014-08-01 16:31 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-08-01 16:31 - 2014-08-01 16:31 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-08-01 16:31 - 2014-08-01 16:31 - 00000000 ____D () C:\Windows\system32\Macromed
2014-08-01 16:27 - 2014-08-01 16:27 - 00000992 _____ () C:\Users\Thorsten\Desktop\Thorsten.lnk
2014-08-01 16:25 - 2014-08-01 16:08 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-08-01 16:24 - 2014-08-01 16:24 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-08-01 16:24 - 2014-08-01 16:24 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-08-01 16:24 - 2014-08-01 16:08 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-08-01 16:24 - 2014-08-01 16:08 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-08-01 16:24 - 2014-08-01 16:08 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-08-01 16:24 - 2014-08-01 16:08 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-08-01 16:24 - 2014-08-01 16:08 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-08-01 16:24 - 2014-08-01 16:08 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-08-01 16:24 - 2014-08-01 16:08 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-08-01 16:18 - 2014-08-01 16:18 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\Mozilla
2014-08-01 16:18 - 2014-08-01 16:18 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\Mozilla
2014-08-01 16:18 - 2014-08-01 16:18 - 00000000 ____D () C:\ProgramData\Mozilla
2014-08-01 16:18 - 2014-08-01 16:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-01 16:17 - 2014-08-01 16:17 - 00244408 _____ () C:\Users\Thorsten\Downloads\Firefox Setup Stub 31.0.exe
2014-08-01 16:12 - 2014-08-01 16:12 - 00000000 ____D () C:\Windows\Options
2014-08-01 16:10 - 2014-08-01 16:10 - 00000000 ____D () C:\ProgramData\TP-LINK
2014-08-01 16:09 - 2014-08-01 16:09 - 00000000 ____D () C:\Users\Thorsten\AppData\Roaming\AVAST Software
2014-08-01 16:08 - 2014-08-01 16:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-08-01 16:08 - 2014-08-01 16:08 - 00000000 ____D () C:\Program Files\AVAST Software
2014-08-01 16:08 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\restore
2014-08-01 16:06 - 2014-08-01 16:06 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-08-01 15:54 - 2014-08-01 15:54 - 00000526 _____ () C:\Users\Thorsten\Desktop\Spiele-Installationen II (E) - Verknüpfung.lnk
2014-08-01 15:54 - 2014-08-01 15:54 - 00000526 _____ () C:\Users\Thorsten\Desktop\Musik, Bilder, Videos II (D) - Verknüpfung.lnk
2014-08-01 15:54 - 2014-08-01 15:54 - 00000512 _____ () C:\Users\Thorsten\Desktop\Lokaler Datenträger (C) - Verknüpfung.lnk
2014-08-01 15:52 - 2014-08-01 15:52 - 00001439 _____ () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-01 15:52 - 2014-08-01 15:52 - 00001405 _____ () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-08-01 15:51 - 2014-08-01 15:51 - 00000020 ___SH () C:\Users\Thorsten\ntuser.ini
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Vorlagen
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Startmenü
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Netzwerkumgebung
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Lokale Einstellungen
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Eigene Dateien
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Druckumgebung
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Documents\Eigene Musik
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Documents\Eigene Bilder
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Local\Verlauf
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\AppData\Local\Anwendungsdaten
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 _SHDL () C:\Users\Thorsten\Anwendungsdaten
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 ____D () C:\Users\Thorsten\AppData\Local\VirtualStore
2014-08-01 15:51 - 2014-08-01 15:51 - 00000000 ____D () C:\Users\Thorsten
2014-08-01 15:51 - 2011-04-13 19:45 - 00000000 ____D () C:\Windows\Panther
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Programme
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-08-01 15:50 - 2014-08-01 15:50 - 00000000 __SHD () C:\Recovery
2014-08-01 15:50 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-08-01 15:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-01 15:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-08-01 15:47 - 2011-04-13 18:49 - 00003652 _____ () C:\Windows\TSSysprep.log
2014-08-01 15:47 - 2009-07-14 06:46 - 00003806 _____ () C:\Windows\DtcInstall.log
2014-08-01 15:45 - 2014-08-01 15:45 - 00000000 ____D () C:\Windows\CSC
2014-07-25 16:01 - 2014-08-01 17:02 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-07-25 16:01 - 2014-08-01 17:02 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-07-25 16:01 - 2014-08-01 17:02 - 01283136 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-07-25 16:01 - 2014-08-01 17:02 - 01126480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-07-02 23:29 - 2014-08-01 16:58 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-07-02 23:29 - 2014-08-01 16:58 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-07-02 23:29 - 2014-08-01 16:58 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-07-02 22:48 - 2014-08-01 17:01 - 00075040 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-07-02 22:48 - 2014-08-01 17:01 - 00061912 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 31512520 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 24196896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 22994208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 18626304 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 17555104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 16122344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 14498552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 13922752 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 13835208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 12866008 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-07-02 22:48 - 2014-08-01 16:58 - 11283344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 11222048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 04247000 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 03989960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 03196816 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 02814656 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 01890080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434052.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 01539928 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434052.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 00965312 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 00944928 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 00907096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 00903624 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 00869152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 00846832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 00354016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 00166568 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 00146480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-07-02 22:48 - 2014-08-01 16:58 - 00026353 _____ () C:\Windows\system32\nvinfo.pb
2014-07-02 20:55 - 2014-08-01 17:01 - 06783776 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-07-02 20:55 - 2014-08-01 17:01 - 03522392 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-07-02 20:55 - 2014-08-01 17:01 - 02559960 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-07-02 20:55 - 2014-08-01 17:01 - 00935368 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-07-02 20:55 - 2014-08-01 17:01 - 00386520 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-07-02 20:55 - 2014-08-01 17:01 - 00062808 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-07-02 19:44 - 2014-08-01 17:01 - 00609240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-07-02 12:14 - 2014-08-01 17:01 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


nointegritychecks: ==> Integrity Checks is disabled <===== ATTENTION!


LastRegBack: 2011-04-13 18:46

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-07-2014 02
Ran by Thorsten at 2014-08-01 23:54:27
Running from C:\Users\Thorsten\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software)
EPSON Copy Utility 3 (HKLM-x32\...\{67EDD823-135A-4D59-87BD-950616D6E857}) (Version: 3.0.2.0 - )
EPSON Smart Panel (HKLM-x32\...\{6C11D561-620B-47DA-A693-4C597F3CDF40}) (Version:  - )
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla)
Mozilla Thunderbird 31.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.0 (x86 de)) (Version: 31.0 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 340.52 (Version: 340.52 - NVIDIA Corporation) Hidden
NVIDIA Update 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 15.3.33 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
PhotoImpression 5 (HKLM-x32\...\{66C8BE35-8BBB-472B-96C7-C7C9A499F988}) (Version:  - )
ScanToWeb (HKLM-x32\...\{EBAE381B-60A6-4863-AA9F-FCAB755BC9E5}) (Version:  - )
SHIELD Streaming (Version: 3.1.100 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
TP-LINK Wireless Client Utility (HKLM-x32\...\{7A2A107B-9695-423F-9462-8F17C178BD35}) (Version: 7.0 - TP-LINK)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

01-08-2014 14:23:11 avast! antivirus system restore point
01-08-2014 14:45:05 Installed Microsoft Office Enterprise 2007
01-08-2014 14:59:09 Windows Update
01-08-2014 15:02:26 DirectX wurde installiert
01-08-2014 16:40:51 Installiert EPSON EasyPrintModule
01-08-2014 16:42:35 Installiert Smart Panel
01-08-2014 16:43:44 Installed Applet_File
01-08-2014 16:44:00 Installed Applet_Copy
01-08-2014 16:45:55 Installed Applet_CopyToFax
01-08-2014 16:46:11 Installed Applet_VC
01-08-2014 16:46:26 Installed Applet_App
01-08-2014 16:46:42 Installed Applet_Email
01-08-2014 16:46:56 Installed Applet_Web
01-08-2014 16:47:10 Installed ScanToWeb
01-08-2014 16:48:58 DirectX wurde installiert
01-08-2014 16:49:57 Installiert PhotoImpression 5

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {40C8ADE3-F202-424C-A584-2AA63618AB0E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-01] (Adobe Systems Incorporated)
Task: {5C274DCF-6D6A-4393-90F2-00103F3CD416} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-08-01] (AVAST Software)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-08-01 17:01 - 2014-07-02 20:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-08-01 16:24 - 2014-08-01 16:24 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
2014-08-01 16:17 - 2014-08-01 09:12 - 02795008 _____ () C:\Program Files\AVAST Software\Avast\defs\14080100\algo.dll
2014-08-01 23:19 - 2014-08-01 23:19 - 02795008 _____ () C:\Program Files\AVAST Software\Avast\defs\14080101\algo.dll
2014-08-01 16:24 - 2014-08-01 16:24 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-08-01 16:18 - 2014-07-17 07:42 - 03800688 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-08-01 16:40 - 2014-07-18 03:39 - 03338352 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2014-08-01 16:40 - 2014-07-18 03:39 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2014-08-01 16:40 - 2014-07-18 03:39 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/01/2014 11:31:53 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (08/01/2014 11:20:10 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/01/2014 07:54:47 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (08/01/2014 07:53:38 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (08/01/2014 06:40:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: EPSTP32U.EXE, Version: 6.6.0.1, Zeitstempel: 0x4074f7ad
Name des fehlerhaften Moduls: epsmtl32.dll, Version: 1.0.2.1, Zeitstempel: 0x4074f764
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0001b3f9
ID des fehlerhaften Prozesses: 0x138c
Startzeit der fehlerhaften Anwendung: 0xEPSTP32U.EXE0
Pfad der fehlerhaften Anwendung: EPSTP32U.EXE1
Pfad des fehlerhaften Moduls: EPSTP32U.EXE2
Berichtskennung: EPSTP32U.EXE3

Error: (08/01/2014 06:22:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/01/2014 06:21:44 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (08/01/2014 06:21:44 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (08/01/2014 06:21:44 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (08/01/2014 05:02:26 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary cjhzvswx.

System Error:
Das System kann die angegebene Datei nicht finden.
.


System errors:
=============
Error: (08/01/2014 11:18:39 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126

Error: (08/01/2014 07:25:38 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk4\DR4 gefunden.

Error: (08/01/2014 06:21:23 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126

Error: (08/01/2014 04:12:55 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 25%
Total physical RAM: 8191.05 MB
Available physical RAM: 6106.14 MB
Total Pagefile: 16380.29 MB
Available Pagefile: 14175.16 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:58.59 GB) (Free:29.64 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Musik, Bilder, Videos II) (Fixed) (Total:465.73 GB) (Free:245.39 GB) NTFS
Drive e: (Spiele-Installationen II) (Fixed) (Total:311.51 GB) (Free:81.42 GB) NTFS
Drive f: (Volume) (Fixed) (Total:117.19 GB) (Free:51.12 GB) NTFS
Drive g: (Volume) (Fixed) (Total:310 GB) (Free:31.09 GB) NTFS
Drive h: (Volume) (Fixed) (Total:310 GB) (Free:126.6 GB) NTFS
Drive i: (Videos I (Anime) +neue Spiele) (Fixed) (Total:465.72 GB) (Free:22.2 GB) NTFS
Drive j: (Videos II) (Fixed) (Total:465.72 GB) (Free:14.75 GB) NTFS
Drive k: (Spiele-Installationen) (Fixed) (Total:465.84 GB) (Free:109.3 GB) NTFS
Drive l: (Volume) (Fixed) (Total:122.31 GB) (Free:75.65 GB) NTFS
Drive o: (U3 System) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
Drive p: () (Removable) (Total:14.9 GB) (Free:3.31 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 20732072)
Partition 1: (Active) - (Size=59 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=239 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 0C581A98)
Partition 1: (Active) - (Size=466 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=466 GB) - (Type=OF Extended)

========================================================
Disk: 2 (MBR Code: Windows 7 or Vista) (Size: 932 GB) (Disk ID: 71BFD3E3)
Partition 1: (Not Active) - (Size=312 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=310 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=310 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (Size: 15 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================

M-K-D-B · 02.08.2014, 11:18

Zitat:

Zitat von Bona

Was ich vorher aber nochmal gerne wüsste: Ich habe ja deinen Code in das Notepad kopiert und genauso "Fixlist.txt" genannt. Unter FRST den "Fix" angeklickt und habe dann die Datei Fixlog.txt bekommen. Da hieß es ja, ich soll den Inhalt posten. Diese Datei habe ich ja doppelt geklickt und in dem Moment startete der Rechner neu inkl. der Systemreparatur. Hatte ich da irgendwas falsch verstanden und somit falsch gemacht? Oder war evtl. etwas anderes defekt, wo die Fixlog.txt nur beigetragen hat zu diesem Problem? Nicht, dass das nächste Mal wieder etwas ist, ich das wieder genauso ausführe und den gleichen Fehler habe.

Du hast alles richtig gemacht, da war wohl mehr defekt...

Sieht gut aus.

Wenn du keine Probleme mehr hast, dann sind wir hier fertig. Deine Logdateien sind sauber.

Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.

Schritt 1
Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Schritt 2
Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems.

Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti-Viren-Programm und zusätzlicher Schutz

Gehe sicher, dass du immer nur eine Anti-Viren Software installiert hast und dass diese auch up to date ist! Ein kostenloses Anti-Viren Programm, das wir empfehlen, wäre z. B. Avast! Free Antivirus oder Microsoft Security Essentials.
MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt. Du kannst es zusätzlich zu deinem Anti-Viren Programm verwenden.
Update das Tool und lasse es einmal in der Woche laufen. Die Kaufversion bietet zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
AdwCleaner
Dieses Tool erkennt eine Vielzahl von Werbeprogrammen (Adware) und unerwümschten Programmen (PUPs).
Starte das Tool einmal die Woche und lass es laufen. Sollte eine neue Version verfügbar sein, so wird dies angezeigt und du kannst dir die neueste Version direkt von der Herstellerseite auf den Desktop herunterladen. Auch dieses Programm kann parallel zu deinem Anti-Viren Programm verwendet werden.
SpywareBlaster
Eine kurze Einführung findest du Hier

Alternative Browser
Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Mozilla Firefox

Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
NoScript
Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt, wenn Du es bestätigst.
AdblockPlus
Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzuzufügen reicht und dieser wird nicht mehr geladen.
Es spart außerdem Downloadkapazität.

Performance

Halte dich fern von Registry Cleanern.
Diese Schaden deinem System mehr als dass sie helfen. Hier ein englischer Link:
Miekemoes Blogspot ( MVP )

Was du vermeiden solltest:

Klicke nicht auf alles, nur weil es dich dazu auffordert und schön bunt ist.
Verwende keine P2P oder Filesharing Software (Emule, uTorrent,..).
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie z.B. deinFoto.jpg.exe.
Lade keine Software von Softonic oder Chip herunter, da diese Installer oft mit Adware oder unerünschter Software versehen sind!

Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen?

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Bona · 04.08.2014, 10:36

Vielen Dank erstmal für die Hilfe, im Moment habe ich alles voller fehlgeschlagener Windows Updates, die meisten Programme habe ich aber drauf und werde bei gegebener Zeit mir die Anleitung genau anschauen. Im Moment ist es mir leider zu viel alles und melde mich sonst nochmal, wenn es Probleme gibt. Soll ich dann einfach hier in den Thread reinschreiben, oder dich per PN kontaktieren, falls du dieses Abo löschst?

M-K-D-B · 04.08.2014, 11:23

Zitat:

Zitat von Bona

Vielen Dank erstmal für die Hilfe, im Moment habe ich alles voller fehlgeschlagener Windows Updates, die meisten Programme habe ich aber drauf und werde bei gegebener Zeit mir die Anleitung genau anschauen. Im Moment ist es mir leider zu viel alles und melde mich sonst nochmal, wenn es Probleme gibt. Soll ich dann einfach hier in den Thread reinschreiben, oder dich per PN kontaktieren, falls du dieses Abo löschst?

Wenn es länger (> 3 Tage) dauert, einfach ein neues Thema aufmachen, sonst eine PM an mich mit einem Link zu diesem Thema hier)

Ich bin froh, dass wir helfen konnten

In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest:
Lob, Kritik und Wünsche
Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank!

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen.

http://98uj8.de/s3brsn5ba66mgfzeinrum#noad öfnet sich hintereinander

Plagegeister aller Art und deren Bekämpfung: http://98uj8.de/s3brsn5ba66mgfzeinrum#noad öfnet sich hintereinander