Trojaner, der Wörter grün schreibt und sie doppelt unterstreicht

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 17:02 on 01/09/2014 (Regina Mewis)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:31-08-2014 02
Ran by Regina Mewis (administrator) on REGINA on 01-09-2014 17:06:57
Running from C:\Users\Regina Mewis\Desktop
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal

The only official  link for FRST:
 link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agrsmsvc.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\ENAgent.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RP7.EXE
(Teruten) C:\Windows\System32\FsUsbExService.Exe
() C:\Program Files\V-bates\guardsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Entriq, Inc.) C:\Program Files\maxdome\DCBin\DCService.exe
(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
() C:\Program Files\V-bates\ExtensionUpdaterService.exe
(Microsoft Corporation) C:\Windows\System32\FXSSVC.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(app) C:\Program Files\Browsers App\7cca331e-396f-40bf-8241-bd27ffe8e14d.exe
(app) C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-6.exe
(Systweak) C:\Program Files\ASP\AdvancedSystemProtector.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files\Browsers App\22056005-f3c2-4889-9022-506ee31c6cec.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files\SupTab\HpUI.exe
() C:\Program Files\SupTab\Loader32.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Program Files\V-bates\notifier.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(SEIKO EPSON CORPORATION) C:\Program Files\EPSON Software\Event Manager\EEventManager.exe
(CyberLink Corp.) C:\Program Files\CyberLink\YouCam\YouCamService.exe
(Microsoft Corporation) C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(Nuance Communications, Inc.) C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe
(Intenium) C:\Program Files\OXXOGames\GPlayer\GameCenterNotifier.exe
(Google Inc.) C:\Users\Regina Mewis\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FARNLGE.EXE


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [GDFirewallTray] => C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1724728 2013-12-19] (G Data Software AG)
HKLM\...\Run: [G Data ASM] => C:\Program Files\G Data\InternetSecurity\DelayLoader\AutorunDelayLoader.exe [431224 2013-12-19] (G Data Software AG)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation)
HKLM\...\Run: [fst_de_139] => [X]
HKU\.DEFAULT\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-19\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-20\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Run: [C31D876762E9834E3AD32A29087D7606DB9ADAD4._service_run] => C:\Program Files\Google\Chrome\Application\chrome.exe [860488 2014-08-07] (Google Inc.)
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATILGE.EXE [260160 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Run: [GoogleChromeAutoLaunch_1673F09D0EFFC8301A21AC33DF36C55D] => C:\Program Files\Google\Chrome\Application\chrome.exe [860488 2014-08-07] (Google Inc.)
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\MountPoints2: H - H:\LaunchU3.exe -a
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
AppInit_DLLs: C:\PROGRA~1\Amazon\AMAZON~1\\AMAZON~1.DLL => C:\Program Files\Amazon\Amazon1ButtonApp\\AmazonExtIE.dll [138048 2013-12-15] ()
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC542FC175C87CB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hp&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hp&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartsurf.com/web/?type=ds&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922&q={searchTerms}
URLSearchHook: HKCU - (No Name) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} -  No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1406654666&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922&q={searchTerms}
SearchScopes: HKLM - {31090377-0740-419E-BEFC-A56E50500D5B} URL = hxxp://speedial.com/results.php?f=4&q={searchTerms}&a=spd_aw_14_24_ch&cd=2XzuyEtN2Y1L1QzutDzzzzyCtA0ByC0A0A0B0F0E0EyE0AyEtN0D0Tzu0SzzzytCtN1L2XzutBtFtBtDtFtCzytFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyBtB0CtCyEyDyE0FtGtBtDtDyBtGtDzzzytCtGzytAtD0EtGtAtCyCzyyCyEzy0D0CyB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDzyyD0D0CyDyBtDtGzyzzyDyDtG0B0DtAyDtGzy0EyC0BtGtB0F0B0AtDyDtB0E0FyDzz0B2QtN1B1L1H1Ezu1O2U1M1B&cr=412235727&ir=
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922&q={searchTerms}
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = 
SearchScopes: HKCU - {31090377-0740-419E-BEFC-A56E50500D5B} URL = 
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922&q={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {6B4D7C79-4957-4C33-BA1D-4B4EF6E2ACA9} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=3d90709d-11c6-4139-b77d-def355537c54&apn_sauid=9FE21BEC-E99F-401B-8976-6A6596C30EDF
SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=NIS&chn=retail&geo=DE&ver=20&locale=de_DE&gct=kwd&qsrc=2869
SearchScopes: HKCU - {C16DFC1C-57B8-44D6-B7F3-D4D2E223A7E9} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
BHO: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} ->  No File
BHO: Browsers App -> {11111111-1111-1111-1111-110611171187} -> C:\Program Files\Browsers App\Browsers App-bho.dll No File
BHO: videos MediaPlay-Air -> {11111111-1111-1111-1111-110611171199} -> C:\Program Files\videos MediaPlay-Air\videos MediaPlay-Air-bho.dll No File
BHO: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO: V-bates -> {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} -> C:\Program Files\V-bates\Extension32.dll ()
BHO: The Amazon 1Button App for IE -> {26B19FA4-E8A1-4A1B-A163-1A1E46F830DD} -> C:\Program Files\Amazon\Amazon1ButtonApp\AmazonAppIE.dll (Amazon Inc.)
BHO: No Name -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} ->  No File
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: AusweisApp 1.8.0.0 -> {C9EE92B7-EDD5-4ad9-8029-2EC6818E653A} -> C:\Program Files\AusweisApp\siqeCardClient.ols (OpenLimit SignCubes AG)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - No Name - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -  No File
Toolbar: HKLM - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Toolbar: HKCU - No Name - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} -  No File
Toolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} -  No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0060-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.188.1

FireFox:
========
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin ProgramFiles/Appdata: C:\Users\Regina Mewis\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Regina Mewis\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF HKLM\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files\Epson Software\E-Web Print\Firefox Add-on [2014-03-11]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR DefaultSearchURL: Default -> https://docs.google.com/offline/backgroundshell#ouid=u566ca757a5ddb2f9
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR CustomProfile: C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs Offline Background Page) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-06]
CHR Extension: (YouTube) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-11-10]
CHR Extension: (Google-Suche) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-11-10]
CHR Extension: (Black Menu for Google™) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\eignhdfgaldabilaaegmdfbajngjmoke [2013-08-31]
CHR Extension: (backgroundPage) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2013-08-31]
CHR Extension: (Google Kalender) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2013-08-31]
CHR Extension: (Google Play Music) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2014-06-16]
CHR Extension: (Cloudy for Gmail™) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfnjfpcmnoabmbhponbioedjceaddaa [2013-12-29]
CHR Extension: (Kalender Uhr) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\galgfocamdohgeifjlbefkfpaalankfi [2014-08-09]
CHR Extension: (Google Notizen – Notizen und Listen) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2014-04-28]
CHR Extension: (HelloSign: Online signatures made easy) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajjckmbclbffbpecfbiecehkfgopppd [2013-08-31]
CHR Extension: (Autodesk Homestyler) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2013-12-29]
CHR Extension: (Button für Notizen) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldlehbcmklbijjlonmbbbmdobmlanegg [2014-04-28]
CHR Extension: (Skype Click to Call) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-08-04]
CHR Extension: (Google Mail-Checker) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2013-08-31]
CHR Extension: (FastestFox – Schneller browsen) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmffncokckfccddfenhkhnllmlobdahm [2013-10-01]
CHR Extension: (multifolder) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncfjlfpabnjllhcpgncdmbelnehboeki [2014-08-09]
CHR Extension: (Google Wallet) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Kostenlose Spiele) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\odnlkojnclefkippkkijniiobhpappnm [2013-08-31]
CHR Extension: (Quick start) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-08-16]
CHR Extension: (Psykopaint) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgjchkcfmigkkhedgjedmffdepgmpfil [2013-08-31]
CHR Extension: (Gutscheinsammler Finder) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilobbegphefikcgjpajnneiiahhejam [2013-08-31]
CHR Extension: (Google Mail) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-11-10]
CHR CustomProfile: C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Profile 1
CHR HKLM\...\Chrome\Extension: [aaaaabfjnbeinlpljodiajipidiompfl] - C:\Users\Regina Mewis\AppData\Local\APN\GoogleCRXs\aaaaabfjnbeinlpljodiajipidiompfl_7.15.24.0.crx [2013-05-05]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\REGINA~1\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-08-06]
CHR HKCU\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam] - C:\Program Files\Amazon\ABB\AmazonChrome-bds-amzn.crx [2014-01-31]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336 2009-03-27] (LSI Corporation)
R2 AVKProxy; C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe [2244728 2014-02-12] (G Data Software AG)
R2 AVKService; C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG)
R2 AVKWCtl; C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe [2159472 2014-03-25] (G Data Software AG)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ENAgent; C:\Windows\system32\ENAgent.exe [4209856 2013-04-30] (SEIKO EPSON CORPORATION)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc.exe [126128 2012-05-17] (Seiko Epson Corporation)
R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RP7.EXE [143424 2013-04-30] (SEIKO EPSON CORPORATION)
R2 ezGOSvc; C:\Windows\system32\ezGOSvc.dll [73600 2011-06-17] ()
R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2009-03-31] (Teruten) [File not signed]
R3 GDFwSvc; C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe [2409280 2014-01-30] (G Data Software AG)
R3 GDScan; C:\Program Files\Common Files\G Data\GDScan\GDScan.exe [700024 2014-02-03] (G Data Software AG)
S2 globalUpdate; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-08-16] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-08-16] (globalUpdate) [File not signed]
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [694784 2014-08-16] (Cherished Technololgy LIMITED) [File not signed]
R2 Mext Guard; C:\Program Files\V-bates\guardsvc.exe [128800 2014-06-08] () [File not signed]
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19741472 2014-05-30] (NVIDIA Corporation)
R2 Prosieben; C:\Program Files\maxdome\DCBin\DCService.exe [77032 2009-05-01] (Entriq, Inc.)
S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [430592 2008-04-07] (Nokia.) [File not signed]
S3 SystemExplorerHelpService; C:\Program Files\System Explorer\service\SystemExplorerService.exe [558040 2012-05-21] (Mister Group)
R2 V-bates Updater; C:\Program Files\V-bates\ExtensionUpdaterService.exe [210208 2014-06-08] () [File not signed]
S2 DokanMounter; C:\Program Files\COMPUTERBILD-Cloud\Data\Tools\mounter.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 cpuz134; C:\Program Files\CPUID\PC Wizard 2010\pcwiz_x32.sys [20328 2010-07-09] (Windows (R) Win 7 DDK provider)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-03-31] () [File not signed]
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [44544 2014-06-09] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [101504 2014-06-09] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [56832 2014-06-09] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [53248 2014-06-09] (G Data Software AG)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [50176 2014-06-09] (G Data Software AG)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19232 2014-05-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2014-03-31] (NVIDIA Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [648808 2011-07-06] (Realtek Semiconductor Corporation                           )
S3 S6000KNT; C:\Windows\System32\Drivers\S6000KNT.sys [3328472 2011-07-28] (Windows (R) Win 7 DDK provider)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [90112 2009-03-20] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14976 2009-03-20] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [121856 2009-03-20] (MCCI Corporation)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.)
S2 Dokan; \??\C:\Windows\system32\drivers\dokan.sys [X]
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\usbccid.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

NETSVC: ezGOSvc -> C:\Windows\system32\ezGOSvc.dll ()

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-01 17:06 - 2014-09-01 17:08 - 00025740 _____ () C:\Users\Regina Mewis\Desktop\FRST.txt
2014-09-01 17:06 - 2014-09-01 17:07 - 00000000 ____D () C:\FRST
2014-09-01 17:04 - 2014-09-01 17:05 - 01096704 _____ (Farbar) C:\Users\Regina Mewis\Desktop\FRST.exe
2014-09-01 16:58 - 2014-09-01 17:02 - 00000486 _____ () C:\Users\Regina Mewis\Desktop\defogger_disable.log
2014-09-01 16:58 - 2014-09-01 16:58 - 00000000 _____ () C:\Users\Regina Mewis\defogger_reenable
2014-09-01 16:55 - 2014-09-01 16:55 - 00050477 _____ () C:\Users\Regina Mewis\Desktop\Defogger.exe
2014-09-01 16:46 - 2014-09-01 16:46 - 01364531 _____ () C:\Users\Regina Mewis\Desktop\adwcleaner_3.308.exe
2014-09-01 16:21 - 2014-09-01 16:22 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\Advanced System Protector
2014-08-30 18:29 - 2014-08-31 19:59 - 00001003 _____ () C:\Users\Public\Desktop\Advanced System Protector.lnk
2014-08-28 11:41 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 11:41 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-26 15:34 - 2014-08-26 15:34 - 00001028 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-08-26 15:34 - 2014-08-26 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-08-25 16:29 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-25 16:29 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-25 16:29 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-25 16:29 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-25 16:29 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-25 16:29 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-25 16:29 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-25 16:28 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-25 16:28 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-20 22:20 - 2014-08-20 22:20 - 00001113 _____ () C:\Users\Public\Desktop\ALDI Bestellsoftware.lnk
2014-08-20 22:20 - 2014-08-20 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALDI Bestellsoftware
2014-08-20 22:10 - 2014-08-20 22:20 - 00000000 ____D () C:\Program Files\ALDI Bestellsoftware
2014-08-18 18:30 - 2014-08-31 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
2014-08-18 18:29 - 2014-08-31 19:59 - 00000000 ____D () C:\Program Files\ASP
2014-08-18 18:29 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-08-18 18:28 - 2014-09-01 16:20 - 00002352 _____ () C:\Windows\setupact.log
2014-08-18 18:28 - 2014-08-18 18:28 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-16 22:49 - 2014-08-16 22:49 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-08-16 22:48 - 2014-08-16 22:50 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-08-16 22:46 - 2014-06-03 18:51 - 03103512 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-08-16 22:46 - 2014-05-19 17:16 - 02575064 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-08-16 22:46 - 2014-05-14 15:43 - 02143024 _____ () C:\Windows\system32\SStudio.dll
2014-08-16 22:46 - 2014-04-10 12:19 - 01823320 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-08-16 22:46 - 2014-03-06 16:35 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-08-16 22:46 - 2014-03-05 05:11 - 00966904 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2014-08-16 22:46 - 2014-03-05 05:11 - 00818936 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2014-08-16 22:46 - 2014-03-05 05:11 - 00606968 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2014-08-16 22:46 - 2014-03-05 05:11 - 00219896 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2014-08-16 22:46 - 2014-02-06 11:28 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-08-16 22:46 - 2013-10-11 11:31 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-08-16 22:46 - 2012-01-30 11:42 - 00819648 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo2.dll
2014-08-16 22:46 - 2012-01-10 10:20 - 00058264 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\TepeqAPO.dll
2014-08-16 22:46 - 2011-09-02 14:21 - 00214368 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK.dll
2014-08-16 22:46 - 2011-09-02 14:21 - 00074080 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM.dll
2014-08-16 22:46 - 2011-09-02 14:21 - 00068960 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO.dll
2014-08-16 22:46 - 2011-03-17 12:16 - 01379760 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-08-16 22:46 - 2011-03-07 17:03 - 00134584 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-08-16 22:46 - 2009-11-24 09:55 - 00345328 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSXT.dll
2014-08-16 22:46 - 2009-11-24 09:55 - 00185584 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSHD.dll
2014-08-16 22:46 - 2009-11-24 09:55 - 00173296 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP360.dll
2014-08-16 22:46 - 2009-11-24 09:55 - 00140528 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW.dll
2014-08-16 22:46 - 2009-11-18 18:42 - 01783056 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesLib.dll
2014-08-16 22:45 - 2014-06-03 17:07 - 01149674 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-08-16 22:45 - 2014-06-03 16:07 - 62084608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-08-16 22:45 - 2014-06-03 15:40 - 00917208 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-08-16 22:45 - 2014-05-29 18:11 - 02474200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2014-08-16 22:45 - 2014-05-22 16:24 - 00087864 _____ () C:\Windows\system32\audioLibVc.dll
2014-08-16 22:45 - 2014-05-22 13:21 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-08-16 22:45 - 2014-04-17 17:42 - 01116248 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO60.dll
2014-08-16 22:45 - 2014-04-17 17:42 - 00987224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-08-16 22:45 - 2014-04-17 17:42 - 00966744 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2014-08-16 22:45 - 2014-04-10 12:20 - 11821656 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO30.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 28062296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 14585432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 03683416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 01940056 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 01691224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-08-16 22:45 - 2014-04-09 16:39 - 00890160 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-08-16 22:45 - 2014-04-09 16:37 - 05086984 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-08-16 22:45 - 2014-04-07 16:03 - 06177624 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-08-16 22:45 - 2014-04-07 16:03 - 01490264 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-08-16 22:45 - 2014-04-07 16:03 - 00274264 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-08-16 22:45 - 2014-04-07 16:03 - 00221528 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-08-16 22:45 - 2014-03-21 14:17 - 00265376 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO.dll
2014-08-16 22:45 - 2014-03-19 19:19 - 00798296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2014-08-16 22:45 - 2014-02-18 17:04 - 02421792 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2014-08-16 22:45 - 2014-01-31 16:44 - 00948336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-08-16 22:45 - 2013-10-16 03:43 - 00182472 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-08-16 22:45 - 2013-10-11 12:47 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-08-16 22:45 - 2013-10-07 00:14 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2014-08-16 22:45 - 2013-10-07 00:14 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2014-08-16 22:45 - 2013-10-07 00:14 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2014-08-16 22:45 - 2013-08-14 15:36 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-08-16 22:45 - 2013-08-14 15:35 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-08-16 22:45 - 2013-06-17 20:20 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2014-08-16 22:45 - 2013-04-03 14:12 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 07162128 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 00352016 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 00106768 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 00091920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 00062224 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll
2014-08-16 22:45 - 2012-03-08 11:47 - 00095840 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTARen.dll
2014-08-16 22:45 - 2011-11-22 16:28 - 00013416 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR.dll
2014-08-16 22:45 - 2011-08-23 17:00 - 00357712 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 01509480 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 01292904 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 01220200 _____ (DTS) C:\Windows\system32\DTSBoostDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00654952 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00631400 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00601704 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00458344 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00389736 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00375400 _____ (DTS) C:\Windows\system32\DTSLimiterDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00218728 _____ (DTS) C:\Windows\system32\DTSGFXAPONS.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00218728 _____ (DTS) C:\Windows\system32\DTSGFXAPO.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00218216 _____ (DTS) C:\Windows\system32\DTSLFXAPO.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00359768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP32A.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00295768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT32.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00295768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA32.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00170840 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED32A.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL32A.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00064856 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG32A.dll
2014-08-16 22:45 - 2010-09-27 09:34 - 00232792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-08-16 22:45 - 2009-12-04 15:43 - 00132368 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO.dll
2014-08-16 21:10 - 2014-08-16 21:10 - 00000000 ____D () C:\Program Files\predm
2014-08-16 20:12 - 2014-04-24 16:58 - 02148552 _____ (Ralink Technology, Corp.) C:\Windows\system32\Drivers\netr28.sys
2014-08-16 20:12 - 2014-04-24 15:53 - 00382212 _____ () C:\Windows\system32\Drivers\FW7650.bin
2014-08-16 20:12 - 2013-12-17 12:26 - 00239920 _____ (Ralink Technology, Inc.) C:\Windows\system32\RaCoInst.dll
2014-08-16 20:12 - 2013-12-17 11:41 - 00013973 _____ () C:\Windows\system32\RaCoInst.dat
2014-08-16 20:12 - 2012-05-24 09:39 - 00008192 _____ () C:\Windows\system32\Drivers\rt2860.bin
2014-08-16 20:12 - 2012-05-24 09:39 - 00004096 _____ () C:\Windows\system32\Drivers\rt3290.bin
2014-08-16 20:12 - 2012-05-24 09:39 - 00004096 _____ () C:\Windows\system32\Drivers\3290PCI4KB.bin
2014-08-16 20:07 - 2014-06-17 14:13 - 00718552 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2014-08-16 20:07 - 2014-06-17 14:13 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2014-08-16 20:07 - 2014-06-17 14:13 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-08-16 20:04 - 2014-08-16 20:04 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Local\com
2014-08-16 19:56 - 2014-09-01 16:21 - 00001766 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5_user.job
2014-08-16 19:56 - 2014-09-01 16:21 - 00001746 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.job
2014-08-16 19:54 - 2014-09-01 16:21 - 00001886 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-1.job
2014-08-16 19:54 - 2014-09-01 16:21 - 00001486 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2.job
2014-08-16 19:53 - 2014-09-01 16:21 - 00004158 _____ () C:\Windows\Tasks\4bad4403-9a20-4feb-b764-9caf2c6c085b.job
2014-08-16 19:53 - 2014-09-01 16:21 - 00002686 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.job
2014-08-16 19:52 - 2014-09-01 16:53 - 00002252 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6.job
2014-08-16 19:52 - 2014-09-01 16:21 - 00004496 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11.job
2014-08-16 19:52 - 2014-09-01 16:21 - 00003814 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3.job
2014-08-16 19:52 - 2014-09-01 16:21 - 00002304 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7.job
2014-08-16 19:51 - 2014-08-16 20:53 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\Activeris
2014-08-13 20:28 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 20:27 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-13 20:27 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-13 20:27 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-13 19:05 - 2014-08-13 19:05 - 00000000 ____D () C:\ProgramData\Sony Corporation
2014-08-13 14:16 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 14:16 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 14:16 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 14:16 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 14:16 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 14:16 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 14:16 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 14:16 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 14:16 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 14:16 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 14:16 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 14:16 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 14:16 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 14:16 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 14:16 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 14:16 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 14:16 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 14:16 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 14:16 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 14:16 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 14:16 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 14:16 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 14:16 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 14:16 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 14:16 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 14:16 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 14:16 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 14:16 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 14:16 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 14:16 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 14:16 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 14:16 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 14:16 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-13 14:16 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-13 14:15 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 14:15 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 14:15 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 14:15 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 14:15 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 14:14 - 2014-08-07 03:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 14:14 - 2014-08-07 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 14:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 14:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 14:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 14:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 14:14 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 14:14 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 14:14 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-10 20:41 - 2014-08-10 20:41 - 00001235 _____ () C:\Users\Public\Desktop\Asian Mahjong.lnk
2014-08-10 17:46 - 2014-08-10 17:46 - 00001134 _____ () C:\Users\Regina Mewis\Desktop\Mahjong Quest.lnk
2014-08-09 16:47 - 2014-08-09 16:47 - 00000000 ____D () C:\Windows\pss
2014-08-04 18:48 - 2014-08-04 18:48 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Local\Skype
2014-08-04 18:46 - 2014-08-04 18:46 - 00002505 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-08-04 18:46 - 2014-08-04 18:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-08-04 16:02 - 2014-08-18 18:30 - 00000000 ____D () C:\ProgramData\Systweak

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-01 17:08 - 2014-09-01 17:06 - 00025740 _____ () C:\Users\Regina Mewis\Desktop\FRST.txt
2014-09-01 17:07 - 2014-09-01 17:06 - 00000000 ____D () C:\FRST
2014-09-01 17:05 - 2014-09-01 17:04 - 01096704 _____ (Farbar) C:\Users\Regina Mewis\Desktop\FRST.exe
2014-09-01 17:02 - 2014-09-01 16:58 - 00000486 _____ () C:\Users\Regina Mewis\Desktop\defogger_disable.log
2014-09-01 17:01 - 2014-06-11 13:01 - 00000296 _____ () C:\Windows\Tasks\FF Watcher {C3021DF6-D33C-40E3-BAE9-81A0DFA0378E}.job
2014-09-01 16:58 - 2014-09-01 16:58 - 00000000 _____ () C:\Users\Regina Mewis\defogger_reenable
2014-09-01 16:58 - 2010-11-17 22:34 - 00000000 ____D () C:\Users\Regina Mewis
2014-09-01 16:55 - 2014-09-01 16:55 - 00050477 _____ () C:\Users\Regina Mewis\Desktop\Defogger.exe
2014-09-01 16:53 - 2014-08-16 19:52 - 00002252 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6.job
2014-09-01 16:52 - 2010-11-24 14:49 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-01 16:46 - 2014-09-01 16:46 - 01364531 _____ () C:\Users\Regina Mewis\Desktop\adwcleaner_3.308.exe
2014-09-01 16:38 - 2013-04-26 22:49 - 00000000 ___RD () C:\Users\Regina Mewis\SkyDrive
2014-09-01 16:29 - 2012-12-30 21:56 - 00000000 ____D () C:\Users\Regina Mewis\Documents\Youcam
2014-09-01 16:29 - 2009-07-14 06:34 - 00022848 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-01 16:29 - 2009-07-14 06:34 - 00022848 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-01 16:28 - 2014-07-29 19:27 - 00001852 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-6.job
2014-09-01 16:27 - 2010-11-17 22:24 - 02079107 _____ () C:\Windows\WindowsUpdate.log
2014-09-01 16:25 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\tracing
2014-09-01 16:24 - 2014-04-01 09:24 - 00000917 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {1C4F898C-6C4D-4C65-AA54-04311C30BFAD}.job
2014-09-01 16:24 - 2014-04-01 09:24 - 00000731 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {1C4F898C-6C4D-4C65-AA54-04311C30BFAD}.job
2014-09-01 16:24 - 2011-08-04 20:33 - 00001148 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000UA.job
2014-09-01 16:23 - 2013-08-06 23:25 - 00000000 ___RD () C:\Users\Regina Mewis\Google Drive
2014-09-01 16:22 - 2014-09-01 16:21 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\Advanced System Protector
2014-09-01 16:21 - 2014-08-16 19:56 - 00001766 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5_user.job
2014-09-01 16:21 - 2014-08-16 19:56 - 00001746 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.job
2014-09-01 16:21 - 2014-08-16 19:54 - 00001886 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-1.job
2014-09-01 16:21 - 2014-08-16 19:54 - 00001486 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2.job
2014-09-01 16:21 - 2014-08-16 19:53 - 00004158 _____ () C:\Windows\Tasks\4bad4403-9a20-4feb-b764-9caf2c6c085b.job
2014-09-01 16:21 - 2014-08-16 19:53 - 00002686 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.job
2014-09-01 16:21 - 2014-08-16 19:52 - 00004496 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11.job
2014-09-01 16:21 - 2014-08-16 19:52 - 00003814 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3.job
2014-09-01 16:21 - 2014-08-16 19:52 - 00002304 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7.job
2014-09-01 16:21 - 2014-07-29 19:31 - 00001486 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-5_user.job
2014-09-01 16:21 - 2014-07-29 19:31 - 00001472 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-5.job
2014-09-01 16:21 - 2014-07-29 19:30 - 00001306 _____ () C:\Windows\Tasks\7cca331e-396f-40bf-8241-bd27ffe8e14d.job
2014-09-01 16:21 - 2014-07-29 19:29 - 00002060 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-4.job
2014-09-01 16:21 - 2014-07-29 19:29 - 00001578 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-1.job
2014-09-01 16:21 - 2014-07-29 19:29 - 00001382 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-2.job
2014-09-01 16:21 - 2014-07-29 19:27 - 00001902 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-7.job
2014-09-01 16:21 - 2014-07-29 19:27 - 00000614 _____ () C:\Windows\Tasks\22056005-f3c2-4889-9022-506ee31c6cec.job
2014-09-01 16:21 - 2014-07-29 19:26 - 00003802 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-11.job
2014-09-01 16:21 - 2014-07-29 19:26 - 00003120 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-3.job
2014-09-01 16:21 - 2014-07-29 19:26 - 00000900 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-01 16:21 - 2010-11-24 14:49 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-01 16:20 - 2014-08-18 18:28 - 00002352 _____ () C:\Windows\setupact.log
2014-09-01 16:20 - 2014-07-14 20:17 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-09-01 16:20 - 2012-02-23 13:25 - 00000000 ____D () C:\Users\Regina Mewis\Documents\Fax
2014-09-01 16:20 - 2011-02-04 20:26 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-01 16:20 - 2010-11-20 22:37 - 00000435 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-09-01 16:20 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-01 16:20 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-08-31 22:19 - 2014-06-09 20:19 - 00000312 _____ () C:\Windows\Tasks\Speedial.job
2014-08-31 22:15 - 2014-07-14 21:15 - 00000917 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {9CACE44F-32AD-4C79-B024-71FC0CD02948}.job
2014-08-31 22:15 - 2014-07-14 21:15 - 00000731 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {9CACE44F-32AD-4C79-B024-71FC0CD02948}.job
2014-08-31 22:15 - 2012-08-08 21:15 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-31 22:15 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-08-31 22:13 - 2014-07-22 12:13 - 00000917 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {1675FE88-8384-4682-80A4-D5EBFBCDE4CA}.job
2014-08-31 22:13 - 2014-07-22 12:13 - 00000731 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {1675FE88-8384-4682-80A4-D5EBFBCDE4CA}.job
2014-08-31 21:24 - 2011-08-04 20:33 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000Core.job
2014-08-31 21:15 - 2013-07-11 10:18 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Local\CrashDumps
2014-08-31 19:59 - 2014-08-30 18:29 - 00001003 _____ () C:\Users\Public\Desktop\Advanced System Protector.lnk
2014-08-31 19:59 - 2014-08-18 18:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
2014-08-31 19:59 - 2014-08-18 18:29 - 00000000 ____D () C:\Program Files\ASP
2014-08-31 19:57 - 2014-07-29 19:26 - 00000904 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-08-30 19:51 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-30 18:26 - 2009-07-14 06:33 - 00444944 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-26 15:40 - 2014-07-29 19:25 - 00000000 ____D () C:\Program Files\Browsers App
2014-08-26 15:37 - 2013-05-05 21:11 - 00000000 ____D () C:\Program Files\Ask.com
2014-08-26 15:34 - 2014-08-26 15:34 - 00001028 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-08-26 15:34 - 2014-08-26 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-08-26 15:33 - 2013-09-27 19:51 - 00000000 ____D () C:\Program Files\VideoLAN
2014-08-26 14:47 - 2014-07-22 12:00 - 00002209 _____ () C:\Windows\system32\ÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ
2014-08-26 14:47 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-23 19:54 - 2010-11-17 22:32 - 01638598 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-23 03:46 - 2014-08-28 11:41 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 02:42 - 2014-08-28 11:41 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-20 22:26 - 2014-03-10 22:30 - 00000000 ____D () C:\ProgramData\tmp
2014-08-20 22:20 - 2014-08-20 22:20 - 00001113 _____ () C:\Users\Public\Desktop\ALDI Bestellsoftware.lnk
2014-08-20 22:20 - 2014-08-20 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALDI Bestellsoftware
2014-08-20 22:20 - 2014-08-20 22:10 - 00000000 ____D () C:\Program Files\ALDI Bestellsoftware
2014-08-20 20:41 - 2014-06-27 22:22 - 00001188 _____ () C:\Users\Public\Desktop\Mein CEWE FOTOBUCH.lnk
2014-08-20 20:41 - 2014-06-27 22:22 - 00001168 _____ () C:\Users\Public\Desktop\CEWE FOTOSCHAU.lnk
2014-08-18 22:41 - 2013-08-14 10:53 - 00000000 ____D () C:\Users\Regina Mewis\Documents\My Digital Editions
2014-08-18 21:07 - 2013-06-28 17:25 - 00000000 ____D () C:\Users\Regina Mewis\Documents\Ebooks
2014-08-18 18:55 - 2012-09-30 11:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-08-18 18:30 - 2014-08-04 16:02 - 00000000 ____D () C:\ProgramData\Systweak
2014-08-18 18:28 - 2014-08-18 18:28 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-18 16:41 - 2012-11-07 12:19 - 00000000 ____D () C:\Windows\Minidump
2014-08-18 13:00 - 2014-03-25 13:04 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\systweak
2014-08-17 21:38 - 2012-09-04 11:10 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\calibre
2014-08-16 22:51 - 2011-02-05 17:32 - 00000000 ___HD () C:\Program Files\Temp
2014-08-16 22:50 - 2014-08-16 22:48 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-08-16 22:49 - 2014-08-16 22:49 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-08-16 22:45 - 2010-11-30 23:03 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-08-16 22:34 - 2013-08-29 16:54 - 00002263 _____ () C:\Users\Regina Mewis\Desktop\Google Chrome.lnk
2014-08-16 21:52 - 2013-09-27 19:55 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\vlc
2014-08-16 21:10 - 2014-08-16 21:10 - 00000000 ____D () C:\Program Files\predm
2014-08-16 20:59 - 2014-07-29 19:27 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\istartsurf
2014-08-16 20:59 - 2014-04-28 18:23 - 00002362 _____ () C:\Users\Regina Mewis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Notizen.lnk
2014-08-16 20:59 - 2013-07-18 13:17 - 00001413 _____ () C:\Users\Regina Mewis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-16 20:59 - 2013-01-09 11:48 - 00001383 _____ () C:\Users\Regina Mewis\Desktop\Internet Explorer.lnk
2014-08-16 20:53 - 2014-08-16 19:51 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\Activeris
2014-08-16 20:07 - 2011-02-05 17:33 - 00000000 ____D () C:\Program Files\Realtek
2014-08-16 20:04 - 2014-08-16 20:04 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Local\com
2014-08-16 19:58 - 2014-07-29 19:30 - 00000000 ____D () C:\ProgramData\IePluginServices
2014-08-16 19:58 - 2014-07-29 19:29 - 00000000 ____D () C:\Program Files\SupTab
2014-08-16 17:13 - 2014-06-25 10:39 - 00000000 ____D () C:\ProgramData\DriverGenius
2014-08-14 18:12 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-08-14 16:50 - 2014-05-06 22:15 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-13 20:41 - 2013-07-30 14:23 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-13 20:32 - 2010-11-19 22:48 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 19:10 - 2014-03-11 20:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2014-08-13 19:05 - 2014-08-13 19:05 - 00000000 ____D () C:\ProgramData\Sony Corporation
2014-08-13 19:04 - 2014-06-09 17:44 - 00002012 _____ () C:\Users\Public\Desktop\G Data InternetSecurity CBE.lnk
2014-08-10 20:41 - 2014-08-10 20:41 - 00001235 _____ () C:\Users\Public\Desktop\Asian Mahjong.lnk
2014-08-10 20:41 - 2013-08-08 22:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DEUTSCHLAND SPIELT
2014-08-10 17:46 - 2014-08-10 17:46 - 00001134 _____ () C:\Users\Regina Mewis\Desktop\Mahjong Quest.lnk
2014-08-10 17:46 - 2014-01-15 22:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameTop.com
2014-08-09 22:21 - 2010-11-24 14:47 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\Skype
2014-08-09 16:47 - 2014-08-09 16:47 - 00000000 ____D () C:\Windows\pss
2014-08-07 19:58 - 2014-02-20 11:08 - 00002217 _____ () C:\Users\Regina Mewis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-08-07 03:43 - 2014-08-13 14:14 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 03:39 - 2014-08-13 14:14 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-05 09:20 - 2010-11-18 21:23 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-04 20:20 - 2013-04-26 22:49 - 00000000 ____D () C:\Program Files\Microsoft SkyDrive
2014-08-04 18:49 - 2010-11-24 14:47 - 00000000 ___RD () C:\Program Files\Skype
2014-08-04 18:48 - 2014-08-04 18:48 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Local\Skype
2014-08-04 18:47 - 2010-11-24 14:47 - 00000000 ____D () C:\ProgramData\Skype
2014-08-04 18:46 - 2014-08-04 18:46 - 00002505 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-08-04 18:46 - 2014-08-04 18:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-08-04 18:46 - 2013-04-26 20:24 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-08-04 16:18 - 2014-03-25 16:19 - 00001688 _____ () C:\Windows\system32\ASOROSet.bin
2014-08-04 16:18 - 2009-07-14 04:03 - 54525952 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-08-04 16:18 - 2009-07-14 04:03 - 23068672 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-08-04 16:18 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-08-04 16:13 - 2009-07-14 04:03 - 00057344 _____ () C:\Windows\system32\config\SAM.bak
2014-08-04 16:09 - 2014-03-25 16:18 - 00000000 ____D () C:\Windows\system32\config\RCCBakup

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-30 19:40

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version:31-08-2014 02
Ran by Regina Mewis at 2014-09-01 17:09:51
Running from C:\Users\Regina Mewis\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: G Data InternetSecurity CBE (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G Data InternetSecurity CBE (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G Data Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.9.0.1210 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.9.0.1210 - Adobe Systems Incorporated) Hidden
Adobe Digital Editions (HKLM\...\Digital Editions) (Version:  - )
Adobe Flash Player 14 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.3.133 - Adobe Systems, Inc.)
Advanced-System Protector (HKLM\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1) (Version: 2.1.1000.13665 - Systweak Software)
Age of Emerald (HKLM\...\Age of Emerald) (Version: 0.0.0.0 - INTENIUM GmbH)
ALDI Bestellsoftware 4.14.3 (HKLM\...\ALDI Bestellsoftware) (Version: 4.14.3 - ORWO Net)
Amazon 1Button App (Version: 1.0.4 - Amazon) Hidden
Amazon Kindle (HKCU\...\Amazon Kindle) (Version:  - Amazon)
Asian Mahjong (HKLM\...\Asian Mahjong) (Version: 1.0.0.0 - INTENIUM GmbH)
AusweisApp (HKLM\...\{EE56DCD1-13FD-435B-BC4C-EE8CD83FF17A}) (Version: 1.8.0 - OpenLimit SignCubes AG)
Awakening 2: Der Mondenwald (HKLM\...\BFG-Awakening 2 - Der Mondenwald) (Version:  - )
Awakening: Schloss ohne Träume (HKLM\...\BFG-Awakening - Schloss ohne Traeume) (Version:  - )
Belkin F7D1102 Surf Wireless Micro USB Adapter (HKLM\...\{B20F9D1C-A0A5-4cd8-8306-DA03872311B1}) (Version: 1.00.0155 - )
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v7.00.05(G) - TOSHIBA CORPORATION)
calibre (HKLM\...\{E1E819A4-112C-454D-A3BE-FB58C60A2D80}) (Version: 1.40.0 - Kovid Goyal)
Call Of Atlantis (HKLM\...\Call Of Atlantis_is1) (Version: 1.0 - Media Contact LLC)
CCleaner (HKLM\...\CCleaner) (Version: 3.01 - Piriform)
CrystalPortal (HKLM\...\CrystalPortal_is1) (Version: 1.0 - Media Contact LLC)
Cut Out 3.0 (HKLM\...\Cut Out_is1) (Version:  - Franzis.de)
CyberLink YouCam 5 (Version: 5.0.1930 - CyberLink Corp.) Hidden
Das Biest von Lycan Isle (HKLM\...\Das Biest von Lycan Isle) (Version: 1.0.0.0 - INTENIUM GmbH)
DateiCommander 12 Kompakt (HKLM\...\DateiCommander 12 Kompakt_is1) (Version:  - Christian Lütgens, Inc.)
Der Tempel des Lebens: Die Legende der Vier Elemente (HKLM\...\Der Tempel des Lebens: Die Legende der Vier Elemente) (Version: 1.0.0.0 - INTENIUM GmbH)
Deutschland Spielt - Spiele Post (HKLM\...\Deutschland Spielt - Spiele Post) (Version: 1.0.3.0 - INTENIUM GmbH)
DEUTSCHLAND SPIELT GAME CENTER (HKLM\...\DSGPlayer) (Version: 1.0.0.46 - INTENIUM GmbH)
Driver Genius (HKLM\...\Driver Genius_is1) (Version: 14.0 - Driver-Soft Inc.)
Epson Connect Printer Setup (HKLM\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.2.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print 2 (HKLM\...\{71E90740-5E5F-4D43-AB8F-CAC1D93DBB5B}) (Version: 2.5.0.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM\...\{0F13C24A-FFE2-4CD0-8E0B-DC804E0A0E0B}) (Version: 3.10.0035 - Seiko Epson Corporation)
Epson E-Web Print (HKLM\...\{896667C8-53F8-47B8-B6B0-B113B10F05BC}) (Version: 1.20.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON XP-215 217 Series Printer Uninstall (HKLM\...\EPSON XP-215 217 Series) (Version:  - SEIKO EPSON Corporation)
EPSON-Handbücher (HKLM\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.32.0.0 - SEIKO EPSON CORPORATION)
EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
Fantasy Quest: Von Zauberern und Elfen (HKLM\...\Fantasy Quest: Von Zauberern und Elfen) (Version: 1.0.0.0 - INTENIUM GmbH)
Fences (HKLM\...\Fences) (Version:  - Stardock Corporation)
Fences (Version: 1.0 - Stardock Corporation) Hidden
Ferne Königreiche (HKLM\...\Ferne Königreiche) (Version: 1.0.0.0 - INTENIUM GmbH)
FormatFactory 3.0.1 (HKLM\...\FormatFactory) (Version: 3.0.1 - Free Time)
G Data InternetSecurity CBE (HKLM\...\{85203592-3610-4FB9-AA11-15B2255B5A12}) (Version: 25.0.1.2 - G Data Software AG)
GameXN GO (HKCU\...\Game Organizer) (Version:  - GameXN AS)
Glitzerndes Troja (HKLM\...\Glitzerndes Troja_is1) (Version:  - Contendo Media GmbH)
Golden Path (HKLM\...\Golden Path_is1) (Version: 1.0 - Media Contact LLC)
Google Chrome (HKLM\...\Google Chrome) (Version: 36.0.1985.143 - Google Inc.)
Google Drive (HKLM\...\{C6640705-7479-4EE5-BC86-879F05F65E74}) (Version: 1.17.7290.4094 - Google, Inc.)
Google Earth (HKLM\...\{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}) (Version: 6.0.3.2197 - Google)
Google Talk Plugin (HKLM\...\{C1E3DFE7-4EAD-3E9E-A826-E06055BA5921}) (Version: 5.4.2.18903 - Google)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Google+ Auto Backup (HKCU\...\Google+ Auto Backup) (Version: 1.0.26.151 - Google, Inc.)
Haus der 1000 Türen: Familiengeheimnisse (HKLM\...\Haus der 1000 Türen: Familiengeheimnisse) (Version: 1.0.0.0 - INTENIUM GmbH)
Hexus Premium (HKLM\...\Hexus Premium) (Version: 1.0.0.0 - INTENIUM GmbH)
Jane Angel. Das Rätsel der Templer (HKLM\...\{2C08A762-6847-4B7C-AD49-1D28052E4626}_is1) (Version:  - )
Java 7 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.600 - Oracle)
Java Auto Updater (Version: 2.1.60.19 - Oracle, Inc.) Hidden
Jewel Legends: Atlantis (HKLM\...\Jewel Legends: Atlantis) (Version: 1.0.0.0 - INTENIUM GmbH)
Jewel Quest 3 (HKLM\...\Jewel Quest 3_is1) (Version:  - FreeGamePick.com)
Kuros (HKLM\...\Kuros) (Version: 1.0.0.0 - INTENIUM GmbH)
L&H TTS3000 Deutsch (HKLM\...\LHTTSGED) (Version:  - )
Legacy Tales - Der schwarze Tod (HKLM\...\Legacy Tales - Der schwarze Tod) (Version:  - )
LibreOffice 3.6 (HKLM\...\{60B2F25C-22CB-4CD9-9168-8C63708DC1A1}) (Version: 3.6.4.3 - The Document Foundation)
LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.2.95 - LSI Corporation)
Luxor Evolved (HKLM\...\Luxor Evolved) (Version: 1.0.0.0 - INTENIUM GmbH)
Magic Encyclopedia (HKLM\...\Magic Encyclopedia) (Version:  - )
Magic Encyclopedia 2 (HKLM\...\Magic Encyclopedia 2) (Version:  - )
Magic Encyclopedia 3 - Illusionen (HKLM\...\Magic Encyclopedia 3 - Illusionen) (Version:  - )
Mahjong Quest (HKLM\...\Mahjong Quest_is1) (Version: 1.0 - Media Contact LLC)
maxdome Download Manager 4.1.300.78 (HKLM\...\{E948B551-08DB-4163-8995-8C43B03D1B19}) (Version: 4.1.30078 - Prosieben)
Medion Home Cinema 10 (HKLM\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
MEDION MD86511 (HKLM\...\{1251B5BC-E285-4078-98C9-ED21F61B552A}) (Version: 1.0.0.0 - )
Mein CEWE FOTOBUCH (HKLM\...\Mein CEWE FOTOBUCH) (Version: 5.1.6 - CEWE Stiftung u Co. KGaA)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC90_CRT_x86 (HKLM\...\{DF2035BE-5820-4965-BD97-7FAF8D4A7879}) (Version: 1.0.0 - Microsoft Corporation)
Mini Golf Pro (HKLM\...\MiniGolfPro_is1) (Version: 1.0 - Media Contact LLC)
Mortlake Mansion (HKLM\...\Mortlake Mansion_is1) (Version: 1.0 - Media Contact LLC)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery Masterpiece - Moonstone (HKLM\...\{CDC21426-5E29-4FD1-84B7-391803A9FCC1}) (Version: 1.00.0000 - PurpleHills)
Mysteryville (HKLM\...\Mysteryville) (Version: 0.0.0.0 - INTENIUM GmbH)
NVIDIA 3D Vision Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 337.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.10.0514 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 260.99 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 260.99 - NVIDIA Corporation)
NVIDIA ShadowPlay 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden
NVIDIA Update 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
PC Connectivity Solution (HKLM\...\{AC599724-5755-48C1-ABE7-ABB857652930}) (Version: 8.15.0.0 - Nokia)
PC Inspector File Recovery (HKLM\...\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}) (Version: 4.0 - )
PC Wizard 2010.1.95 (HKLM\...\PC Wizard 2010_is1) (Version:  - CPUID)
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Ralink RT2860 Wireless LAN Card (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.1 - Ralink)
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.88.617.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7260 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30126 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
roomeon 3D-Planer (HKLM\...\{40BF3500-3324-4648-ADED-234FF4F82C0F}) (Version: 1.5.0 - roomeon GmbH)
SAMSUNG Mobile Composite Device Software (HKLM\...\SAMSUNG Mobile Composite Device) (Version:  - )
Samsung Mobile Modem Device Software (HKLM\...\Samsung Mobile Modem Device) (Version:  - )
SAMSUNG Mobile Modem Driver Set (HKLM\...\SAMSUNG Mobile Modem) (Version:  - )
Samsung Mobile phone USB driver Drive Software (HKLM\...\Samsung Mobile phone USB driver Drive) (Version:  - )
SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version:  - )
SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version:  - )
Samsung New PC Studio (HKLM\...\InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
Samsung New PC Studio Full Update (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
Samsung New PC Studio USB Driver Installer (HKLM\...\InstallShield_{AF7E85DC-317C-47F5-810E-B82EE093A612}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio USB Driver Installer (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Mobile Device Software (HKLM\...\SAMSUNG USB Mobile Device) (Version:  - )
SamsungConnectivityCableDriver (HKLM\...\{7E84FAC8-C518-40F9-9807-7455301D6D25}) (Version: 6.83.6.2.1 - Samsung)
ScanSoft OmniPage SE 4 (HKLM\...\{DEE88727-779B-47A9-ACEF-F87CA5F92A65}) (Version: 15.2.0020 - Nuance Communications, Inc.)
Season Match 3: Der Fluch der Krähe (HKLM\...\Season Match 3: Der Fluch der Krähe) (Version: 1.0.0.0 - INTENIUM GmbH)
Shadow Shelter: Im Schutz der Schatten (HKLM\...\Shadow Shelter: Im Schutz der Schatten) (Version: 2.0.0.0 - INTENIUM GmbH)
SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.18 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
Software Updater (HKLM\...\{B307472F-7BD9-4040-9255-CE6D6A1196A3}) (Version: 4.3.1 - SEIKO EPSON CORPORATION)
Solitaire Mystery: Die vier Jahreszeiten (HKLM\...\Solitaire Mystery: Die vier Jahreszeiten) (Version: 1.0.0.0 - INTENIUM GmbH)
Stardock Central (HKCU\...\Stardock Central) (Version:  - Stardock Corporation)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.0.3 - Synaptics Incorporated)
System Explorer 3.9.0 (HKLM\...\System Explorer_is1) (Version:  - Mister Group)
System Requirements Lab (HKLM\...\SystemRequirementsLab) (Version:  - )
The Rise Of Atlantis (HKLM\...\The Rise Of Atlantis_is1) (Version:  - FreeGamePick.com)
TomTom HOME (HKLM\...\{99072AB4-D795-44D5-9D65-E3C9F8322C97}) (Version: 2.9.7 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
V-bates 2.0.0.441 (HKLM\...\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}_is1) (Version: 2.0.0.441 - Wajamu) <==== ATTENTION
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WindowsMangerProtect20.0.0.502 (HKLM\...\WindowsMangerProtect) (Version: 20.0.0.502 - WindowsProtect LIMITED) <==== ATTENTION
WISO Mein Geld 2014 Standard (HKCU\...\WISO Mein Geld 2014 Standard) (Version:  - Buhl Data Service GmbH)
WISO Mein Geld 2014 Standard (Version: 16.0.1.0 - Buhl Data Service GmbH) Hidden
Wondershare Scrapbook Studio(Build 2.5.0.7) (HKLM\...\Wondershare Scrapbook Studio_is1) (Version: 2.5.0.7 - WonderShare Software Co.,Ltd.)
Zattoo4 4.0.5 (HKLM\...\Zattoo4) (Version: 4.0.5 - Zattoo Inc.)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Google Talk Plugin\googletalkax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Google Talk Plugin\o1dax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{BB6410D8-F879-4184-9C5C-6A02D16AE0B3}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{CA1073A2-5F3F-4445-8E5E-7109BDCEDDBE}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{D5A55D2D-C59D-42C3-A5BF-4C08EEE74339}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\FileSyncApi.dll (Microsoft Corporation)

==================== Restore Points  =========================

13-08-2014 17:06:48 Installed Epson Event Manager
13-08-2014 18:21:30 Windows Update
16-08-2014 15:19:07 Vor der Installation neuer Treiber - 16.08.2014 17:18:57
16-08-2014 18:05:37 Installiert Realtek Ethernet Controller Driver
19-08-2014 11:33:41 Windows Update
23-08-2014 18:01:22 Windows Update
25-08-2014 14:27:42 Windows Update
26-08-2014 13:45:21 Konfiguriert lingDIALOG
28-08-2014 10:44:31 Windows Update
31-08-2014 16:39:14 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {024E7E6C-05A1-42C0-AB89-9BBE25839B19} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: {03E98A77-1B2E-4C49-A490-C9CC11418B01} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.exe <==== ATTENTION
Task: {1126F77C-9406-4671-98D4-D3B7885986B4} - System32\Tasks\22056005-f3c2-4889-9022-506ee31c6cec => C:\Program Files\Browsers App\22056005-f3c2-4889-9022-506ee31c6cec.exe [2014-07-29] ()
Task: {1CF853B8-1B8E-43E6-841B-E601E9E5A779} - System32\Tasks\Advanced System Protector => C:\Program Files\RegClean Pro\SystweakASP.exe [2014-01-17] (Systweak Inc                                                ) <==== ATTENTION
Task: {22326729-C6CA-431C-A4CA-DDBA243A8FF8} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-1 => C:\Program Files\Browsers App\Browsers App-codedownloader.exe
Task: {256101F4-936B-4458-A55C-DCCF9FA1CFE6} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11.exe <==== ATTENTION
Task: {280ED10B-44CB-4762-9F73-4C75C9A1CA1E} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-5 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-5.exe
Task: {2E1AC54D-DDC6-4AC6-BFA9-37261F18A93B} - System32\Tasks\EPSON XP-215 217 Series Invitation {1C4F898C-6C4D-4C65-AA54-04311C30BFAD} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {3792DA74-617A-42EE-A60D-C6CF02E00AA8} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5_user => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.exe <==== ATTENTION
Task: {45719E7A-B104-4585-85F7-C2E206B8E681} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3.exe <==== ATTENTION
Task: {48D19D87-E4B2-4190-8C0D-C5F6F6C68874} - System32\Tasks\4bad4403-9a20-4feb-b764-9caf2c6c085b => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.exe <==== ATTENTION
Task: {496D60DC-C92E-4BDC-BBDF-E83955F67FDE} - System32\Tasks\Google Software Updater => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-21] (Google)
Task: {4A3D8BDA-3D7D-4C91-B475-64B2697C485F} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1834288282-3800065426-3978100689-1000
Task: {4B012E82-D411-4C22-980F-8B0D09AC29B4} - System32\Tasks\Advanced System Protector_startup => C:\Program Files\ASP\AdvancedSystemProtector.exe [2014-07-16] (Systweak)
Task: {4B3C818F-E986-455C-869C-69FAC9345E85} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-7 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-7.exe
Task: {578F4CE0-1317-4862-994B-F6842B65BC0B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-24] (Google Inc.)
Task: {5F885D1D-22C3-43DB-84A5-CF0ADF005BF5} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-08-16] (globalUpdate) <==== ATTENTION
Task: {6926A744-8ACD-4147-AEB0-BD8AA6E17466} - System32\Tasks\{3C376C5C-639C-487B-A5A1-8CE492A58C39} => C:\Program Files\Skype\\Phone\Skype.exe [2014-07-24] (Skype Technologies S.A.)
Task: {6D39E1B1-4319-4302-95C2-220FFFE7D03F} - System32\Tasks\{3A17E3D0-B5C7-4A47-90C1-B06DB3A50030} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.1.0.104.259/en/abandoninstall?page=tsDownload&amp;installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:offered-notinstalled
Task: {72283F3C-2F65-43AC-914F-0462DA3F25B6} - System32\Tasks\LaunchSignup => C:\Program Files\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: {7B2AB0E4-151A-4E8E-AB5A-22830D0D5994} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2.exe <==== ATTENTION
Task: {7B63E736-7388-4826-8475-EAC7E23FBB43} - System32\Tasks\{AE4FCB65-FA95-47DE-A953-279F1070E035} => C:\Program Files\Google\Picasa3\Picasa3.exe [2012-03-22] (Google Inc.)
Task: {7E26A6DC-652B-4800-833A-9EE3640577AB} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-2 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-2.exe
Task: {80A8B90C-D071-4A8B-B929-1C4A789407FA} - System32\Tasks\Speedial => C:\Users\REGINA~1\AppData\Roaming\Speedial\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {880AAB1A-708D-4274-910E-F16B8D8B0D37} - System32\Tasks\EPSON XP-215 217 Series Update {9CACE44F-32AD-4C79-B024-71FC0CD02948} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {89B00E12-7561-436A-BF85-9C0319821E94} - System32\Tasks\EPSON XP-215 217 Series Update {1C4F898C-6C4D-4C65-AA54-04311C30BFAD} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {9C7BCEBA-7A87-46A9-90D5-D096F5C9AEC7} - System32\Tasks\Mext Guard FBE8818C-5B13-48C2-A93E-AD731167DBF2 => C:\Program Files\V-bates\startsc.bat [2014-03-24] ()
Task: {9FFA1BC5-1A1E-4810-B455-52C89758E65B} - System32\Tasks\EPSON XP-215 217 Series Update {1675FE88-8384-4682-80A4-D5EBFBCDE4CA} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {A2E5D2B7-91F2-44EC-A19D-1C4CEA057700} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-3 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-3.exe
Task: {A3FF63B6-C21B-4733-82B9-D500664FF2EC} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-1 => C:\Program Files\videos MediaPlay-Air\videos MediaPlay-Air-codedownloader.exe <==== ATTENTION
Task: {A51B2A3B-0F72-407F-944E-CBC887FDAE0E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-24] (Google Inc.)
Task: {A8AE6EA9-4032-4E19-80CE-EC268C38A99C} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-08-16] (globalUpdate) <==== ATTENTION
Task: {B149F8E1-32FC-4610-8E5B-6A7418CDF358} - System32\Tasks\ASP => C:\Program Files\RegClean Pro\SystweakASP.exe [2014-01-17] (Systweak Inc                                                ) <==== ATTENTION
Task: {B63CE955-9E40-4559-A4B4-720886A66393} - System32\Tasks\7cca331e-396f-40bf-8241-bd27ffe8e14d => C:\Program Files\Browsers App\7cca331e-396f-40bf-8241-bd27ffe8e14d.exe [2014-07-29] (app)
Task: {B8BC3CC3-F092-4544-BA45-F6074B803C33} - System32\Tasks\Norton Internet Security CBE\Norton Error Processor => C:\Program Files\Norton Internet Security CBE\Engine\20.3.1.22\SymErr.exe
Task: {CB732D78-AF42-42A1-80CC-35BBA8712F82} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.exe <==== ATTENTION
Task: {CD1CD338-9E26-4823-91D4-6B255188B8FC} - System32\Tasks\EPSON XP-215 217 Series Invitation {1675FE88-8384-4682-80A4-D5EBFBCDE4CA} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {D496756E-9CEB-4D55-B6BE-DA96DA4BB783} - System32\Tasks\Norton Internet Security CBE\Norton Error Analyzer => C:\Program Files\Norton Internet Security CBE\Engine\20.3.1.22\SymErr.exe
Task: {DA04B7F0-6E08-4769-9C97-4E09007C17CE} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-6 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-6.exe [2014-07-29] (app)
Task: {DDF802B9-7274-4EAC-A0EA-0DF3F73EBD84} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000Core => C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-16] (Google Inc.)
Task: {DE4FCC05-91B1-4EAF-8651-B24D2CECBC2E} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-5_user => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-5.exe
Task: {E29DF998-4B50-4F8F-B581-19412AA3136A} - System32\Tasks\FF Watcher {C3021DF6-D33C-40E3-BAE9-81A0DFA0378E} => C:\Program Files\V-bates\PrefHelper.exe [2014-06-08] () <==== ATTENTION
Task: {ED9161FA-FE91-424E-B0F2-D12993423BC7} - System32\Tasks\EPSON XP-215 217 Series Invitation {9CACE44F-32AD-4C79-B024-71FC0CD02948} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {F0CA9B92-F39E-4F48-9015-BBB700FCAC44} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000UA => C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-16] (Google Inc.)
Task: {F4F58681-56D7-4EA9-8D47-DE2196104588} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {FCC47E91-46E0-48C6-AE0D-00B024270593} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7.exe <==== ATTENTION
Task: {FDF71011-BEAA-43CA-9BE3-623274C72348} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6.exe <==== ATTENTION
Task: {FE97373E-1861-4D07-BC53-A296A8A7BDEA} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-11 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-11.exe
Task: {FFC2FC16-32BF-4158-9E5E-534D53EADC7B} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-4 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-4.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\22056005-f3c2-4889-9022-506ee31c6cec.job => C:\Program Files\Browsers App\22056005-f3c2-4889-9022-506ee31c6cec.exe
Task: C:\Windows\Tasks\4bad4403-9a20-4feb-b764-9caf2c6c085b.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.exe
Task: C:\Windows\Tasks\7cca331e-396f-40bf-8241-bd27ffe8e14d.job => C:\Program Files\Browsers App\7cca331e-396f-40bf-8241-bd27ffe8e14d.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-1.job => C:\Program Files\Browsers App\Browsers App-codedownloader.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-11.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-11.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-2.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-2.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-3.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-3.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-4.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-4.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-5.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-5.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-5_user.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-5.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-6.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-6.exeé/QxUPN='Browsers App' /ZaNABdKVC=61787 /rfMHehz='001739' /idYZrCu='verticals-' /hoNJdU='0' /NofnrLXhn=AC22A37DE7AA4AD789962B17A04C0030IE /xdMfwPsFJ=cbb4a6cc43289a9977c721daca4b756e /xdaqi=1_34_07_29 /zkCGI=1.34.7.29 /pArpzloO=1406654672 /BNMRUh=hxxp://stats.infogenservice.com /oySfG=hxxp://errors.infogenservice.com /snlsgiL=hxxp://js.infogenservice.com /YcllzA=ch /gWLZGUR /fPAENI=Browsers App /lTOQwIIBN8672e5c9-0808-45f7-b12a-7f0822bbcf9b.dll /OWVdaAab72a655-2d70-4a30-b72b-68f3c738d152.dll /BTKVFbq94162637-b046-4f81-a3d0-141ad68e71cd-64.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-7.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-7.exe/tmvsVgk /QxUPN='Browsers App' /ZaNABdKVC=61787 /rfMHehz='001739' /idYZrCu='verticals-' /hoNJdU='0' /NofnrLXhn=AC22A37DE7AA4AD789962B17A04C0030IE /xdMfwPsFJ=cbb4a6cc43289a9977c721daca4b756e /xdaqi=1_34_07_29 /zkCGI=1.34.7.29 /pArpzloO=1406654672 /BNMRUh=hxxp://stats.infogenservice.com /oySfG=hxxp://errors.infogenservice.com /snlsgiL=hxxp://js.infogenservice.com /YcllzA=ch /gWLZGUR /fPAENI=Browsers App /lTOQwIIBN8672e5c9-0808-45f7-b12a-7f0822bbcf9b.dll /OWVdaAab72a655-2d70-4a30-b72b-68f3c738d152.dll /BTKVFbq94162637-b046-4f81-a3d0-141ad68e71cd-64.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-1.job => C:\Program Files\videos MediaPlay-Air\videos MediaPlay-Air-codedownloader.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5_user.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6.exe©/agentregpath='videos MediaPlay-Air-nv' /appid=61799 /srcid='001673' /subid='verticals-shopping' /zdata='0' /bic=EDFA0C30FE144D89BF171BF7C01011E3IE /verifier=ace1061bc52ab9a685f989eb3eb64e8c /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408211417 /statsdomain=hxxp://stats.inputdatacloud.com /errorsdomain=hxxp://errors.inputdatacloud.com /codedownloaddomain=hxxp://js.inputdatacloud.com /defbro=ch /DllName32ToInjectToChrome='c4d7310c-08d0-47c4-9220-650dea60d665.dll' /DllName64ToInjectToChrome='103d2c33-b79e-4f6a-8999-323a76a68e61.dll' /nova64bitexe='b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-64.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7.exeÃ/updateapp /agentregpath='videos MediaPlay-Air-nv' /appid=61799 /srcid='001673' /subid='verticals-shopping' /zdata='0' /bic=EDFA0C30FE144D89BF171BF7C01011E3IE /verifier=ace1061bc52ab9a685f989eb3eb64e8c /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408211417 /statsdomain=hxxp://stats.inputdatacloud.com /errorsdomain=hxxp://errors.inputdatacloud.com /codedownloaddomain=hxxp://js.inputdatacloud.com /defbro=ch /DllName32ToInjectToChrome='c4d7310c-08d0-47c4-9220-650dea60d665.dll' /DllName64ToInjectToChrome='103d2c33-b79e-4f6a-8999-323a76a68e61.dll' /nova64bitexe='b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-64.exe
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {1675FE88-8384-4682-80A4-D5EBFBCDE4CA}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {1C4F898C-6C4D-4C65-AA54-04311C30BFAD}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {9CACE44F-32AD-4C79-B024-71FC0CD02948}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {1675FE88-8384-4682-80A4-D5EBFBCDE4CA}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {1C4F898C-6C4D-4C65-AA54-04311C30BFAD}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {9CACE44F-32AD-4C79-B024-71FC0CD02948}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\FF Watcher {C3021DF6-D33C-40E3-BAE9-81A0DFA0378E}.job => C:\Program Files\V-bates\PrefHelper.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Google Software Updater.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000Core.job => C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000UA.job => C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Speedial.job => C:\Users\REGINA~1\AppData\Roaming\Speedial\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2010-12-05 19:42 - 2010-06-17 22:56 - 00116224 _____ () C:\Windows\System32\redmonnt.dll
2011-07-17 22:00 - 2011-06-17 16:55 - 00073600 _____ () c:\windows\system32\ezgosvc.dll
2014-06-11 13:01 - 2014-06-08 14:07 - 00128800 _____ () C:\Program Files\V-bates\guardsvc.exe
2009-05-01 17:58 - 2009-05-01 17:58 - 01057512 _____ () C:\Program Files\maxdome\DCBin\PocoFoundation.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00627944 _____ () C:\Program Files\maxdome\DCBin\PocoNet.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00514352 _____ () C:\Program Files\maxdome\DCBin\sqlite3.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00517352 _____ () C:\Program Files\maxdome\DCBin\PocoXML.dll
2014-06-11 13:01 - 2014-06-08 14:07 - 00210208 _____ () C:\Program Files\V-bates\ExtensionUpdaterService.exe
2013-12-19 04:42 - 2013-12-19 04:42 - 00287864 ____N () C:\Program Files\Common Files\G Data\AVKProxy\PktIcpt2.dll
2013-02-28 14:47 - 2014-05-20 02:04 - 00106840 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2014-06-11 13:01 - 2014-06-08 14:07 - 00087840 _____ () C:\Program Files\V-bates\libwinhook.dll
2014-07-28 18:17 - 2014-07-29 19:30 - 00086016 _____ () C:\Program Files\SupTab\WindowsSupportDll32.dll
2014-08-18 18:30 - 2012-07-25 12:03 - 00886272 _____ () C:\Program Files\ASP\System.Data.SQLite.dll
2014-08-18 18:30 - 2014-07-16 18:58 - 01730936 _____ () C:\Program Files\ASP\aspsys.dll
2014-08-18 18:30 - 2012-07-25 12:03 - 00168448 _____ () C:\Program Files\ASP\UNRAR.DLL
2014-07-29 19:26 - 2014-07-29 19:26 - 00031592 _____ () C:\Program Files\Browsers App\22056005-f3c2-4889-9022-506ee31c6cec.exe
2014-07-28 18:17 - 2014-07-29 19:29 - 00724480 _____ () C:\Program Files\SupTab\HpUI.exe
2014-07-16 11:16 - 2014-07-16 11:16 - 00064000 _____ () C:\Program Files\SupTab\Loader32.exe
2014-07-29 19:28 - 2014-07-29 19:28 - 00132968 _____ () C:\Program Files\Browsers App\8672e5c9-0808-45f7-b12a-7f0822bbcf9b.dll
2014-06-11 13:01 - 2014-06-08 14:07 - 00411936 _____ () C:\Program Files\V-bates\notifier.exe
2014-06-11 13:01 - 2014-06-08 14:07 - 00389408 _____ () C:\Program Files\V-bates\libredir2.dll
2014-06-11 13:01 - 2014-06-08 14:07 - 00188704 _____ () C:\Program Files\V-bates\libapi2hook.dll
2014-06-11 13:01 - 2014-06-08 14:07 - 00291104 _____ () C:\Program Files\V-bates\libinject2.dll
2014-08-16 17:04 - 2014-08-07 05:20 - 00718152 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\libglesv2.dll
2014-08-16 17:04 - 2014-08-07 05:20 - 00126280 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\libegl.dll
2014-08-16 17:05 - 2014-08-07 05:20 - 08537928 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\pdf.dll
2014-08-16 17:05 - 2014-08-07 05:20 - 00353096 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\ppGoogleNaClPluginChrome.dll
2014-08-16 17:04 - 2014-08-07 05:20 - 01732936 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\ffmpegsumo.dll
2014-09-01 16:21 - 2014-09-01 16:21 - 00098816 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32api.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00110080 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\pywintypes27.dll
2014-09-01 16:21 - 2014-09-01 16:21 - 00364544 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\pythoncom27.dll
2014-09-01 16:21 - 2014-09-01 16:21 - 00045568 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\_socket.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 01160704 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\_ssl.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00320512 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32com.shell.shell.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00713216 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\_hashlib.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 01175040 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\wx._core_.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00805888 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\wx._gdi_.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00811008 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\wx._windows_.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 01062400 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\wx._controls_.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00735232 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\wx._misc_.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00128512 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\_elementtree.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00127488 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\pyexpat.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00557056 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\pysqlite2._sqlite.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00007168 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\hashobjs_ext.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00087552 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\_ctypes.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00119808 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32file.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00108544 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32security.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00018432 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32event.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00038912 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32inet.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00070656 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\wx._html2.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00167936 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32gui.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00011264 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32crypt.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00027136 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\_multiprocessing.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00686080 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\unicodedata.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00122368 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\wx._wizard.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00010240 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\select.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00024064 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32pipe.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00025600 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32pdh.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00525640 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\windows._lib_cacheinvalidation.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00035840 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32process.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00017408 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32profile.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00022528 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32ts.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00078336 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\wx._animate.pyd
2014-08-16 17:05 - 2014-08-07 05:20 - 14669128 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\PepperFlash\pepflashplayer.dll
2014-08-13 00:29 - 2014-08-13 00:29 - 03219456 _____ () C:\Users\Regina Mewis\AppData\Local\Programs\Google\Google+ Auto Backup\gpuploader_i18n.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:206470A5
AlternateDataStreams: C:\ProgramData\TEMP:2AE74FF9
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk => C:\Windows\pss\Bluetooth Manager.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AusweisApp => C:\Program Files\AusweisApp\siqBootLoader.exe
MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: GameXN GO => "C:\ProgramData\GameXN\GameXNGO.exe" /startup
MSCONFIG\startupreg: ITSecMng => %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spiele Post => C:\Program Files\OXXOGames\GPlayer\GameCenterNotifier.exe
MSCONFIG\startupreg: swg => "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: SystemExplorerAutoStart => "C:\Program Files\System Explorer\SystemExplorer.exe" /TRAY
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
MSCONFIG\startupreg: Uninstall C: => 

==================== Faulty Device Manager Devices =============

Name: USB 2.0 PC Camera
Description: USB 2.0 PC Camera
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 802.11n Wireless LAN Card
Description: 802.11n Wireless LAN Card
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Ralink Technology, Corp.
Service: netr28
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/31/2014 09:15:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: E_FINVLGE.EXE, Version: 1.2.0.0, Zeitstempel: 0x50a1a0f7
Name des fehlerhaften Moduls: E_FMAILGE.DLL, Version: 0.3.1.11, Zeitstempel: 0x5137e060
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000062e0
ID des fehlerhaften Prozesses: 0x2414
Startzeit der fehlerhaften Anwendung: 0xE_FINVLGE.EXE0
Pfad der fehlerhaften Anwendung: E_FINVLGE.EXE1
Pfad des fehlerhaften Moduls: E_FINVLGE.EXE2
Berichtskennung: E_FINVLGE.EXE3

Error: (08/31/2014 09:13:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: E_FINVLGE.EXE, Version: 1.2.0.0, Zeitstempel: 0x50a1a0f7
Name des fehlerhaften Moduls: E_FMAILGE.DLL, Version: 0.3.1.11, Zeitstempel: 0x5137e060
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000062e0
ID des fehlerhaften Prozesses: 0x2fa0
Startzeit der fehlerhaften Anwendung: 0xE_FINVLGE.EXE0
Pfad der fehlerhaften Anwendung: E_FINVLGE.EXE1
Pfad des fehlerhaften Moduls: E_FINVLGE.EXE2
Berichtskennung: E_FINVLGE.EXE3


System errors:
=============
Error: (09/01/2014 04:22:12 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {BCB3CC02-761B-4C74-8B04-891A31034D19}

Error: (09/01/2014 04:21:28 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (09/01/2014 04:20:43 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.188.20192.168.137.0255.255.255.0

Error: (09/01/2014 04:20:43 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (08/31/2014 10:20:30 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst G Data Personal Firewall konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (08/31/2014 07:52:11 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.188.20192.168.137.0255.255.255.0

Error: (08/31/2014 07:44:50 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (08/31/2014 06:33:37 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (08/31/2014 06:32:53 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.188.20192.168.137.0255.255.255.0

Error: (08/31/2014 06:32:53 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 


Microsoft Office Sessions:
=========================
Error: (08/31/2014 09:15:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: E_FINVLGE.EXE1.2.0.050a1a0f7E_FMAILGE.DLL0.3.1.115137e060c0000005000062e0241401cfc54fdc546786C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_FINVLGE.EXEC:\Windows\system32\spool\DRIVERS\W32X86\3\E_FMAILGE.DLL1ae523d6-3143-11e4-95a6-0040d0e5438a

Error: (08/31/2014 09:13:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: E_FINVLGE.EXE1.2.0.050a1a0f7E_FMAILGE.DLL0.3.1.115137e060c0000005000062e02fa001cfc54f95180a50C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_FINVLGE.EXEC:\Windows\system32\spool\DRIVERS\W32X86\3\E_FMAILGE.DLLd75317ad-3142-11e4-95a6-0040d0e5438a


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz
Percentage of memory in use: 70%
Total physical RAM: 2046.43 MB
Available physical RAM: 608.43 MB
Total Pagefile: 4092.86 MB
Available Pagefile: 1413.54 MB
Total Virtual: 2047.88 MB
Available Virtual: 1904.24 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:212.67 GB) (Free:115.93 GB) NTFS
Drive d: (RECOVER) (Fixed) (Total:20.11 GB) (Free:10.55 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 0B01E1EC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=212.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=20.1 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

Virenprüfung von Web-Inhalten

Adresse: ****hxxp://download161bucket.com/go/windowsupdate?_alc=1&_cb=1&_ep=1&_sd=1&adprovider=advertisecom&source=advertisecom_driverupdater-de-dt-ron⊂id=58826-mmp_1⊂id2=hier&servpixel=1409598270831_1409598256686_121_19923_160868392_1
Status: ****Der Zugriff wurde verweigert.
         

}Virenprüfung von Web-Inhalten

Adresse: ****hxxp://download161bucket.com/go/windowsupdate?_alc=1&_cb=1&_ep=1&_sd=1&adprovider=advertisecom&source=advertisecom_driverupdater-de-dt-ron⊂id=58826-mmp_1⊂id2=hier&servpixel=1409598270831_1409598256686_121_19923_160868392_1
Status: ****Der Zugriff wurde verweigert.
         

Virenprüfung von Web-Inhalten

Adresse: ****hxxp://download161bucket.com/favicon.ico
Status: ****Der Zugriff wurde verweigert.