Hallo!

Ich habe wohl Malware auf dem PC. Das Programm Malwarebytes startet nicht mehr. Ich habe auch alles nach der Anleitung hier probiert aber es startet nicht.

Wenn ich das Programm OTH starte und benutze stürzt der Rechner immer ab.

Danke



Hier die Logs von FRST


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-09-2014
Ran by Holger (administrator) on HOLGER-PC on 06-09-2014 12:34:55
Running from C:\Users\Holger\Downloads
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\BBSvc.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
(Nero AG) C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe
(pdfforge GmbH) C:\Program Files\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files\PDF Architect\ConversionService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Overwolf LTD) C:\Program Files\Overwolf\Overwolf.exe
(LOL Replay) C:\Program Files\LOLReplay\LOLRecorder.exe
() C:\Windows\System32\C2MP\TrayMenu.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_14_0_0_145_ActiveX.exe
(Overwolf LTD) C:\Program Files\Common Files\Overwolf\0.79.21.0\OverwolfHelper.exe
() C:\Program Files\Overwolf\0.79.21.0\OverwolfBrowser.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-14] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [747264 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [Nero MediaHome 4] => C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe [5178664 2010-10-26] (Nero AG)
HKLM\...\Run: [ApnTBMon] => C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1942424 2014-08-22] (APN)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3478752 2012-12-18] (Adobe Systems Inc.)
HKLM\...\Run: [RadioRage Home Page Guard 32 bit] => "C:\PROGRA~1\RADIOR~1\bar\1.bin\AppIntegrator.exe"
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.)
HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-08-31] (Microsoft Corporation)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [Nero MediaHome 4] => C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe [5178664 2010-10-26] (Nero AG)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [MKLOL] => C:\Program Files\MKJogo\MKLOL\Bin\MKIM.exe [1089736 2014-08-28] ()
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [Overwolf] => C:\Program Files\Overwolf\Overwolf.exe [39712 2014-08-28] (Overwolf LTD)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk
ShortcutTarget: LOLRecorder.lnk -> C:\Program Files\LOLReplay\LOLRecorder.exe (LOL Replay)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TrayMenu.lnk
ShortcutTarget: TrayMenu.lnk -> C:\Windows\System32\C2MP\TrayMenu.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: http=127.0.0.1:49220;https=127.0.0.1:49220
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x0ACB0707D5C8CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @Nero.com/KM -> C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt [2013-10-21]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-02-09]

Chrome: 
=======
CHR HomePage: Default -> 0DB0B33B2EB990B56FE21065B91F443549630593DF7E18781C7281D05BA8DDD4
CHR DefaultSearchKeyword: Default -> trovi.search
CHR DefaultSearchProvider: Default -> Trovi search
CHR DefaultSearchURL: Default -> hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3AEF6CD1-12FB-4095-BB5E-B8F007E34CBD&SearchSource=58&CUI=&UM=2&UP=SPEF674306-B5AD-44FD-8D8A-3D79F17072F0&q={searchTerms}&SSPV=
CHR DefaultSuggestURL: Default -> hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\37.0.2062.103\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\37.0.2062.103\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\37.0.2062.103\pdf.dll ()
CHR Plugin: (ChromeUtilPlugin) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh\20.53263_0\background/ChromeUtilPlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\system32\npDeployJava1.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR CustomProfile: C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh [2013-12-23]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]
CHR Extension: (YouTube) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-08]
CHR Extension: (No Name) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn [2013-10-21]
CHR Extension: (Google-Suche) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-08]
CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2014-02-23]
CHR Extension: (Avira Browser Safety) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-20]
CHR Extension: (Google Wallet) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-15]
CHR Extension: (Google Mail) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-08]
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2014-09-03]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2012-09-23]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1021008 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166296 2014-08-22] (APN LLC.)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1890128 2014-09-04] (LogMeIn Inc.)
R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [375056 2014-08-08] (LogMeIn, Inc.)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 NeroMediaHomeService.4; C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe [517416 2010-10-26] (Nero AG)
S3 OverwolfUpdater; C:\Program Files\Overwolf\OverwolfUpdater.exe [998176 2014-08-28] (Overwolf LTD)
R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-27] (Avira Operations GmbH & Co. KG)
S3 EverestDriver; C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt [7168 2005-08-18] () [File not signed]
R3 FETNDIS; C:\Windows\System32\DRIVERS\fetnd6.sys [44032 2009-07-14] (VIA Technologies, Inc.              )
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [22560 2013-08-31] (REALiX(tm))
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 taphss6; system32\DRIVERS\taphss6.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-06 12:34 - 2014-09-06 12:35 - 00019637 _____ () C:\Users\Holger\Downloads\FRST.txt
2014-09-06 12:34 - 2014-09-06 12:35 - 00000000 ____D () C:\FRST
2014-09-06 12:33 - 2014-09-06 12:33 - 01096704 _____ (Farbar) C:\Users\Holger\Downloads\FRST.exe
2014-09-06 12:28 - 2014-09-06 12:28 - 00142704 _____ () C:\Windows\Minidump\090614-18765-01.dmp
2014-09-06 10:25 - 2014-09-06 10:25 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-06 10:25 - 2014-09-06 10:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-06 10:24 - 2014-09-06 11:42 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-06 10:24 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-06 10:24 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-06 10:09 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-09-06 10:06 - 2014-09-06 10:06 - 01370467 _____ () C:\Users\Holger\Downloads\adwcleaner_3.309.exe
2014-09-06 09:54 - 2014-09-06 09:54 - 00142704 _____ () C:\Windows\Minidump\090614-18390-01.dmp
2014-09-06 09:45 - 2014-09-06 09:44 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Desktop\OTH.scr
2014-09-06 09:44 - 2014-09-06 09:44 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Downloads\OTH.scr
2014-09-06 09:25 - 2014-09-06 10:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
2014-09-06 09:25 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-09-06 09:23 - 2014-09-06 09:23 - 00000000 ____D () C:\Program Files\RCP
2014-09-06 08:59 - 2014-09-06 08:59 - 00000000 ____D () C:\Users\Holger\Downloads\ec5d398
2014-09-06 08:56 - 2014-09-06 08:56 - 17929263 _____ () C:\Users\Holger\Downloads\ec5d398.rar
2014-09-06 08:34 - 2014-09-06 08:34 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-SL-505
2014-09-06 08:33 - 2014-09-06 08:34 - 68953382 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part4.rar
2014-09-06 08:32 - 2014-09-06 08:33 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part3.rar
2014-09-06 08:32 - 2014-09-06 08:33 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part2.rar
2014-09-06 08:32 - 2014-09-06 08:33 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part1.rar
2014-09-06 08:32 - 2014-09-06 08:32 - 00616256 _____ (ClickMeIn Limited) C:\Users\Holger\AppData\Local\nsmC98D.tmp
2014-09-06 01:24 - 2014-09-06 01:24 - 00001892 _____ () C:\Users\Public\Desktop\NosTale.lnk
2014-09-06 01:24 - 2014-09-06 01:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nostale(DE)
2014-09-06 01:10 - 2014-09-06 01:18 - 00000000 ____D () C:\Program Files\GameforgeLive
2014-09-06 01:10 - 2014-09-06 01:10 - 00001029 _____ () C:\Users\Public\Desktop\Gameforge Live.lnk
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\Downloads\Gameforge Live
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\AppData\Local\Gameforge4d
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-09-06 01:02 - 2014-09-06 01:03 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup (1).exe
2014-09-06 00:59 - 2014-09-06 01:00 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup.exe
2014-09-06 00:43 - 2014-09-06 08:34 - 00000364 _____ () C:\Windows\Tasks\APSnotifierPP2.job
2014-09-06 00:42 - 2014-09-06 00:42 - 00631688 _____ (ClickMeIn Limited) C:\Users\Holger\AppData\Local\nsr15C9.tmp
2014-09-05 23:53 - 2014-09-05 23:53 - 00001919 _____ () C:\Users\Public\Desktop\Overwolf.lnk
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\ProgramData\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Common Files\Overwolf
2014-09-05 23:52 - 2014-09-06 12:30 - 00000000 ____D () C:\Users\Holger\AppData\Local\Overwolf
2014-09-05 23:52 - 2014-09-05 23:52 - 01248032 _____ (Overwolf) C:\Users\Holger\Downloads\OverwolfInstaller.exe
2014-09-05 23:25 - 2014-09-05 23:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-05 23:24 - 2014-09-05 23:50 - 00000000 ____D () C:\Fraps
2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-05 23:23 - 2014-09-05 23:23 - 02326976 _____ (Beepa Pty Ltd) C:\Users\Holger\Desktop\setup.exe
2014-09-05 23:23 - 2014-09-05 23:23 - 00001026 _____ () C:\Users\Holger\Desktop\FLVM Player.lnk
2014-09-05 23:22 - 2014-09-05 23:22 - 00528968 _____ (Eilio.-.Installer · sl) C:\Users\Holger\Downloads\Fraps.exe
2014-09-05 17:59 - 2014-09-05 18:00 - 00000000 ____D () C:\Users\Holger\Downloads\A.Million.Ways.to.Die.in.the.West.2014.BDRip.Line.Dubbed.German.XviD-POE
2014-09-05 17:58 - 2014-09-05 17:59 - 252028961 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part7.rar
2014-09-05 17:56 - 2014-09-05 17:58 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part6.rar
2014-09-05 17:56 - 2014-09-05 17:58 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part5.rar
2014-09-05 17:56 - 2014-09-05 17:58 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part4.rar
2014-09-05 17:54 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part3.rar
2014-09-05 17:54 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part2.rar
2014-09-05 17:54 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part1.rar
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\Program Files\LogMeIn Hamachi
2014-08-31 14:06 - 2014-08-31 14:06 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-XVID-DL-504
2014-08-31 14:05 - 2014-08-31 14:06 - 78567538 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part6.rar
2014-08-31 14:05 - 2014-08-31 14:06 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part5.rar
2014-08-31 14:05 - 2014-08-31 14:06 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part4.rar
2014-08-31 14:04 - 2014-08-31 14:05 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part3.rar
2014-08-31 14:04 - 2014-08-31 14:05 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part2.rar
2014-08-31 14:04 - 2014-08-31 14:05 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part1.rar
2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part15.rar
2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part14.rar
2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part13.rar
2014-08-28 18:33 - 2014-08-28 18:33 - 08371674 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part16.rar
2014-08-28 18:32 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part12.rar
2014-08-28 18:32 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part11.rar
2014-08-28 18:32 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part10.rar
2014-08-28 18:31 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part09.rar
2014-08-28 18:31 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part08.rar
2014-08-28 18:31 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part07.rar
2014-08-28 18:30 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part06.rar
2014-08-28 18:30 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part05.rar
2014-08-28 18:30 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part04.rar
2014-08-28 18:29 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part03.rar
2014-08-28 18:29 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part02.rar
2014-08-28 18:29 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part01.rar
2014-08-28 16:37 - 2014-08-28 16:39 - 616998912 _____ () C:\Users\Holger\Downloads\ubcd531.iso
2014-08-28 16:24 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 16:24 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-27 20:51 - 2014-08-27 20:51 - 00000000 ____D () C:\Users\Holger\Downloads\Bad.Neighbors.2014.German.BDRiP.AC3.XVID-CRG
2014-08-23 14:57 - 2014-08-23 14:58 - 00000000 ____D () C:\Users\Holger\Downloads\Die.Bestimmung.Divergent.2014.German.BDRiP.AC3.XviD-TOD
2014-08-23 14:53 - 2014-08-23 14:57 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part1.rar
2014-08-23 14:53 - 2014-08-23 14:57 - 480117824 _____ () C:\Users\Holger\Downloads\17567198qw7.part3.rar
2014-08-23 14:53 - 2014-08-23 14:56 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part2.rar
2014-08-23 11:38 - 2014-08-22 22:06 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-502
2014-08-23 11:23 - 2014-08-23 11:23 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-503
2014-08-23 07:22 - 2014-08-23 07:22 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-22 05:42 - 2014-08-24 13:18 - 00041187 _____ () C:\Users\Holger\Downloads\ESt2013_Timmermann_Rita.elfo
2014-08-21 17:38 - 2014-08-21 17:38 - 00001191 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\Program Files\ElsterFormular
2014-08-21 17:35 - 2014-08-21 17:37 - 77405552 _____ (Landesfinanzdirektion Thüringen) C:\Users\Holger\Downloads\ElsterFormular-15.2.20140326p.exe
2014-08-20 18:18 - 2011-10-20 17:51 - 1064916992 _____ () C:\Users\Holger\Downloads\Winnie.Puuh.2011.BDRip.German.AC3-XviD-Oxy.avi
2014-08-19 17:33 - 2013-10-02 14:40 - 00000863 _____ () C:\Users\Holger\Downloads\Bitte lesen - Please read.txt
2014-08-19 17:33 - 2013-06-15 15:04 - 00000173 _____ () C:\Users\Holger\Downloads\SHARE-ONLINE Premium-Account.url
2014-08-19 17:33 - 2013-06-15 14:32 - 00000113 _____ () C:\Users\Holger\Downloads\UPLOADED Premium-Account.url
2014-08-19 17:25 - 2014-08-19 17:28 - 00000000 ____D () C:\Users\Holger\Downloads\Captain.America.2.The.Return.of.the.First.Avenger.2014.German.BDRiP.AC3.XviD-TOD
2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\Bundesliga Kicker Sonderheft 14_15
2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\__MACOSX
2014-08-19 17:14 - 2014-08-19 17:15 - 68955853 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part25.rar
2014-08-19 17:14 - 2014-08-19 17:15 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part24.rar
2014-08-19 17:14 - 2014-08-19 17:15 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part22.rar
2014-08-19 17:14 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part23.rar
2014-08-19 17:13 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part21.rar
2014-08-19 17:13 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part20.rar
2014-08-19 17:13 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part19.rar
2014-08-19 17:12 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part18.rar
2014-08-19 17:12 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part17.rar
2014-08-19 17:12 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part16.rar
2014-08-19 17:11 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part15.rar
2014-08-19 17:11 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part14.rar
2014-08-19 17:11 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part13.rar
2014-08-19 17:10 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part12.rar
2014-08-19 17:10 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part11.rar
2014-08-19 17:10 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part10.rar
2014-08-19 17:09 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part09.rar
2014-08-19 17:09 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part08.rar
2014-08-19 17:09 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part07.rar
2014-08-19 17:08 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part06.rar
2014-08-19 17:08 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part05.rar
2014-08-19 17:08 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part04.rar
2014-08-19 17:07 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part03.rar
2014-08-19 17:07 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part02.rar
2014-08-19 17:07 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part01.rar
2014-08-16 18:00 - 2014-08-16 18:00 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\MPC
2014-08-16 17:59 - 2014-08-16 17:59 - 00002122 _____ () C:\Users\Public\Desktop\KODAK Create@Home Software (für dm).lnk
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\Users\Holger\.kodakch
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KODAK Create@Home Software (für dm)
2014-08-16 17:58 - 2014-08-18 16:35 - 00000000 ____D () C:\Program Files\KODAK Create@Home Software (für dm)
2014-08-16 17:57 - 2014-08-16 17:57 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Eastman Kodak Company
2014-08-16 17:55 - 2014-08-16 17:56 - 102239928 _____ (Eastman Kodak Company) C:\Users\Holger\Downloads\KodakCreateHome.exe
2014-08-14 18:10 - 2014-04-23 23:16 - 00000119 _____ () C:\Users\Holger\Downloads\Premium @ oboom.com.url
2014-08-14 18:10 - 2014-04-22 04:21 - 00000119 _____ () C:\Users\Holger\Downloads\Premium @ uploaded.net.url
2014-08-14 18:10 - 2014-04-22 04:21 - 00000119 _____ () C:\Users\Holger\Downloads\Premium @ share-online.biz.url
2014-08-14 18:09 - 2014-08-14 18:10 - 00000000 ____D () C:\Users\Holger\Downloads\Coyote.Ugly.2000.Unrated.Extended.Edition.AC3D.BDRip.XviD-HQSD
2014-08-14 17:35 - 2014-08-14 17:35 - 39354003 _____ (Fomanu AG ) C:\Users\Holger\Downloads\designer_20.exe.boc5hvl.partial
2014-08-14 03:05 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-14 03:05 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-14 03:05 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-14 03:05 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 18:55 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 18:55 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 18:55 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 18:55 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 18:55 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 18:55 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 18:55 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 18:55 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 18:55 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 18:55 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 18:55 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 18:55 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 18:55 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 18:55 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 18:55 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 18:55 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 18:55 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 18:55 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 18:55 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 18:55 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 18:55 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 18:55 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 18:55 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 18:55 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 18:55 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 18:55 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 18:55 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 18:55 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 18:55 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 18:55 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 18:55 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 18:55 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 18:55 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 18:55 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-13 18:55 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-13 18:54 - 2014-08-07 03:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 18:54 - 2014-08-07 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 18:54 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 18:54 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-13 18:54 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 18:54 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 18:54 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 18:54 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 18:50 - 2014-08-13 18:52 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rev
2014-08-13 18:50 - 2014-08-13 18:52 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rar
2014-08-13 18:50 - 2014-08-13 18:51 - 176763834 _____ () C:\Users\Holger\Downloads\KKW1OST.part2.rar
2014-08-11 05:19 - 2014-08-10 09:04 - 00000000 ____D () C:\Users\Holger\Downloads\Focus Magazin 33-2014 Deutsch
2014-08-11 05:18 - 2014-08-11 05:18 - 16311072 _____ () C:\Users\Holger\Downloads\ydfgb4532bhjkl.rar
2014-08-10 22:16 - 2014-08-10 22:17 - 00000000 ____D () C:\Users\Holger\Downloads\Person.of.Interest.S03E19.Frank.Mercer.und.Betty.Harris.German.Dubbed.DL.iTunesHD.x264-TVS
2014-08-10 22:16 - 2014-08-10 22:16 - 17260579 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part4.rar
2014-08-10 22:15 - 2014-08-10 22:16 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part3.rar
2014-08-10 22:15 - 2014-08-10 22:16 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part2.rar
2014-08-10 22:15 - 2014-08-10 22:16 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part1.rar
2014-08-10 22:15 - 2014-08-10 22:15 - 00012471 _____ () C:\Users\Holger\Downloads\xix.nfo
2014-08-10 22:15 - 2014-08-10 22:15 - 00006211 _____ () C:\Users\Holger\Downloads\ncode_imageresizer.js
2014-08-09 11:24 - 2014-08-09 11:24 - 00000000 ____D () C:\Users\Holger\Downloads\o594459t05q2e4i
2014-08-09 11:22 - 2014-08-09 11:24 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part09.rar
2014-08-09 11:22 - 2014-08-09 11:24 - 168822268 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part10.rar
2014-08-09 11:20 - 2014-08-09 11:22 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part08.rar
2014-08-09 11:19 - 2014-08-09 11:24 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part07.rar
2014-08-09 11:18 - 2014-08-28 20:05 - 00000000 ____D () C:\Users\Holger\Downloads\HTEC21GA3BRx6
2014-08-09 11:18 - 2014-08-09 11:22 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part06.rar
2014-08-09 11:17 - 2014-08-09 11:20 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part04.rar
2014-08-09 11:17 - 2014-08-09 11:19 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part05.rar
2014-08-09 11:15 - 2014-08-09 11:18 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part02.rar
2014-08-09 11:15 - 2014-08-09 11:17 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part03.rar
2014-08-09 11:15 - 2014-08-09 11:17 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part01.rar
2014-08-09 11:10 - 2014-08-09 11:14 - 550000000 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part2.rar
2014-08-09 11:10 - 2014-08-09 11:14 - 550000000 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part1.rar
2014-08-09 11:10 - 2014-08-09 11:13 - 330317416 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part3.rar
2014-08-09 10:40 - 2014-08-09 09:16 - 19648512 _____ () C:\Users\Holger\Downloads\sample.avi
2014-08-09 10:40 - 2014-08-09 09:13 - 00001472 _____ () C:\Users\Holger\Downloads\nfo.nfo
2014-08-09 10:34 - 2014-08-09 10:35 - 110100480 _____ () C:\Users\Holger\Downloads\PdARTSMDCiW.part02.rar
2014-08-09 10:34 - 2014-08-09 10:35 - 110100480 _____ () C:\Users\Holger\Downloads\PdARTSMDCiW.part01.rar
2014-08-09 01:08 - 2014-08-09 01:08 - 00000000 ____D () C:\Users\Holger\Tracing
2014-08-09 01:07 - 2014-08-09 01:07 - 00001251 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-08-09 01:07 - 2014-08-09 01:07 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-08-09 01:07 - 2014-08-09 01:07 - 00000000 ____D () C:\Windows\de
2014-08-09 01:07 - 2013-02-05 22:57 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys
2014-08-09 01:06 - 2014-08-09 01:06 - 00002432 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00001404 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00001320 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2014-08-09 01:05 - 2014-08-09 01:07 - 00000000 ____D () C:\Program Files\Windows Live
2014-08-09 01:05 - 2014-08-09 01:05 - 00000000 ____D () C:\Windows\PCHEALTH
2014-08-09 01:03 - 2014-08-09 01:03 - 00002145 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00002082 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00002082 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00000000 ___RD () C:\Users\Holger\SkyDrive
2014-08-09 01:03 - 2014-08-09 01:03 - 00000000 ____D () C:\Program Files\Microsoft SkyDrive
2014-08-09 01:02 - 2014-08-09 01:02 - 00000000 ____D () C:\ProgramData\Microsoft SkyDrive
2014-08-09 01:01 - 2014-08-09 01:09 - 00000000 ____D () C:\Users\Holger\AppData\Local\Windows Live
2014-08-09 01:01 - 2014-08-09 01:01 - 00000000 ____D () C:\Program Files\Common Files\Windows Live
2014-08-09 01:00 - 2014-08-09 01:01 - 142602520 _____ (Microsoft Corporation) C:\Users\Holger\Downloads\wlsetup-all_16.4.3508.0205.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-06 12:35 - 2014-09-06 12:34 - 00019637 _____ () C:\Users\Holger\Downloads\FRST.txt
2014-09-06 12:35 - 2014-09-06 12:34 - 00000000 ____D () C:\FRST
2014-09-06 12:33 - 2014-09-06 12:33 - 01096704 _____ (Farbar) C:\Users\Holger\Downloads\FRST.exe
2014-09-06 12:32 - 2013-08-27 16:00 - 01602452 _____ () C:\Windows\WindowsUpdate.log
2014-09-06 12:30 - 2014-09-05 23:52 - 00000000 ____D () C:\Users\Holger\AppData\Local\Overwolf
2014-09-06 12:29 - 2014-06-15 19:05 - 00000000 ____D () C:\Users\Holger\AppData\Local\LogMeIn Hamachi
2014-09-06 12:29 - 2013-09-08 13:32 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-06 12:28 - 2014-09-06 12:28 - 00142704 _____ () C:\Windows\Minidump\090614-18765-01.dmp
2014-09-06 12:28 - 2013-12-20 14:22 - 00000000 ____D () C:\Users\NeroMediaHomeUser.4
2014-09-06 12:28 - 2013-11-07 21:31 - 00000000 ____D () C:\Windows\Minidump
2014-09-06 12:28 - 2013-09-06 13:34 - 00069120 _____ () C:\Windows\setupact.log
2014-09-06 12:28 - 2013-08-27 16:08 - 00000000 ____D () C:\Users\Holger
2014-09-06 12:28 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-06 12:03 - 2013-08-27 16:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-06 11:54 - 2013-09-08 13:33 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-06 11:42 - 2014-09-06 10:24 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-06 10:41 - 2009-07-14 06:34 - 00026752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-06 10:41 - 2009-07-14 06:34 - 00026752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-06 10:33 - 2013-10-21 17:16 - 00000000 ____D () C:\AdwCleaner
2014-09-06 10:33 - 2013-09-06 13:34 - 00575022 _____ () C:\Windows\PFRO.log
2014-09-06 10:28 - 2014-09-06 09:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
2014-09-06 10:25 - 2014-09-06 10:25 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-06 10:25 - 2014-09-06 10:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-06 10:25 - 2014-06-11 19:52 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-09-06 10:11 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-06 10:11 - 2009-07-14 04:04 - 00000505 _____ () C:\Windows\win.ini
2014-09-06 10:06 - 2014-09-06 10:06 - 01370467 _____ () C:\Users\Holger\Downloads\adwcleaner_3.309.exe
2014-09-06 09:54 - 2014-09-06 09:54 - 00142704 _____ () C:\Windows\Minidump\090614-18390-01.dmp
2014-09-06 09:44 - 2014-09-06 09:45 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Desktop\OTH.scr
2014-09-06 09:44 - 2014-09-06 09:44 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Downloads\OTH.scr
2014-09-06 09:23 - 2014-09-06 09:23 - 00000000 ____D () C:\Program Files\RCP
2014-09-06 09:18 - 2013-08-29 18:05 - 00000000 ____D () C:\Users\Holger\AppData\Local\JDownloader v2.0
2014-09-06 09:17 - 2013-08-27 16:22 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\vlc
2014-09-06 08:59 - 2014-09-06 08:59 - 00000000 ____D () C:\Users\Holger\Downloads\ec5d398
2014-09-06 08:56 - 2014-09-06 08:56 - 17929263 _____ () C:\Users\Holger\Downloads\ec5d398.rar
2014-09-06 08:34 - 2014-09-06 08:34 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-SL-505
2014-09-06 08:34 - 2014-09-06 08:33 - 68953382 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part4.rar
2014-09-06 08:34 - 2014-09-06 00:43 - 00000364 _____ () C:\Windows\Tasks\APSnotifierPP2.job
2014-09-06 08:33 - 2014-09-06 08:32 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part3.rar
2014-09-06 08:33 - 2014-09-06 08:32 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part2.rar
2014-09-06 08:33 - 2014-09-06 08:32 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part1.rar
2014-09-06 08:32 - 2014-09-06 08:32 - 00616256 _____ (ClickMeIn Limited) C:\Users\Holger\AppData\Local\nsmC98D.tmp
2014-09-06 01:24 - 2014-09-06 01:24 - 00001892 _____ () C:\Users\Public\Desktop\NosTale.lnk
2014-09-06 01:24 - 2014-09-06 01:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nostale(DE)
2014-09-06 01:18 - 2014-09-06 01:10 - 00000000 ____D () C:\Program Files\GameforgeLive
2014-09-06 01:10 - 2014-09-06 01:10 - 00001029 _____ () C:\Users\Public\Desktop\Gameforge Live.lnk
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\Downloads\Gameforge Live
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\AppData\Local\Gameforge4d
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-09-06 01:03 - 2014-09-06 01:02 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup (1).exe
2014-09-06 01:00 - 2014-09-06 00:59 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup.exe
2014-09-06 00:42 - 2014-09-06 00:42 - 00631688 _____ (ClickMeIn Limited) C:\Users\Holger\AppData\Local\nsr15C9.tmp
2014-09-06 00:42 - 2013-10-18 21:54 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\.minecraft
2014-09-05 23:57 - 2013-08-30 14:49 - 00000000 ____D () C:\Users\Holger\AppData\Local\PMB Files
2014-09-05 23:53 - 2014-09-05 23:53 - 00001919 _____ () C:\Users\Public\Desktop\Overwolf.lnk
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\ProgramData\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Common Files\Overwolf
2014-09-05 23:52 - 2014-09-05 23:52 - 01248032 _____ (Overwolf) C:\Users\Holger\Downloads\OverwolfInstaller.exe
2014-09-05 23:50 - 2014-09-05 23:24 - 00000000 ____D () C:\Fraps
2014-09-05 23:25 - 2014-09-05 23:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-05 23:23 - 2014-09-05 23:23 - 02326976 _____ (Beepa Pty Ltd) C:\Users\Holger\Desktop\setup.exe
2014-09-05 23:23 - 2014-09-05 23:23 - 00001026 _____ () C:\Users\Holger\Desktop\FLVM Player.lnk
2014-09-05 23:22 - 2014-09-05 23:22 - 00528968 _____ (Eilio.-.Installer · sl) C:\Users\Holger\Downloads\Fraps.exe
2014-09-05 18:00 - 2014-09-05 17:59 - 00000000 ____D () C:\Users\Holger\Downloads\A.Million.Ways.to.Die.in.the.West.2014.BDRip.Line.Dubbed.German.XviD-POE
2014-09-05 17:59 - 2014-09-05 17:58 - 252028961 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part7.rar
2014-09-05 17:58 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part6.rar
2014-09-05 17:58 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part5.rar
2014-09-05 17:58 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part4.rar
2014-09-05 17:56 - 2014-09-05 17:54 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part3.rar
2014-09-05 17:56 - 2014-09-05 17:54 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part2.rar
2014-09-05 17:56 - 2014-09-05 17:54 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part1.rar
2014-09-05 08:59 - 2013-09-08 13:34 - 00002121 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\Program Files\LogMeIn Hamachi
2014-09-05 08:42 - 2014-06-18 19:14 - 00000896 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-08-31 14:06 - 2014-08-31 14:06 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-XVID-DL-504
2014-08-31 14:06 - 2014-08-31 14:05 - 78567538 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part6.rar
2014-08-31 14:06 - 2014-08-31 14:05 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part5.rar
2014-08-31 14:06 - 2014-08-31 14:05 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part4.rar
2014-08-31 14:05 - 2014-08-31 14:04 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part3.rar
2014-08-31 14:05 - 2014-08-31 14:04 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part2.rar
2014-08-31 14:05 - 2014-08-31 14:04 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part1.rar
2014-08-29 07:33 - 2009-07-14 06:33 - 00277824 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-28 20:05 - 2014-08-09 11:18 - 00000000 ____D () C:\Users\Holger\Downloads\HTEC21GA3BRx6
2014-08-28 20:04 - 2013-08-27 16:14 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-28 20:02 - 2013-08-30 14:49 - 00000000 ____D () C:\ProgramData\PMB Files
2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part15.rar
2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part14.rar
2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part13.rar
2014-08-28 18:33 - 2014-08-28 18:33 - 08371674 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part16.rar
2014-08-28 18:33 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part12.rar
2014-08-28 18:33 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part11.rar
2014-08-28 18:32 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part10.rar
2014-08-28 18:32 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part09.rar
2014-08-28 18:32 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part08.rar
2014-08-28 18:32 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part07.rar
2014-08-28 18:31 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part06.rar
2014-08-28 18:31 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part05.rar
2014-08-28 18:31 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part04.rar
2014-08-28 18:30 - 2014-08-28 18:29 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part03.rar
2014-08-28 18:30 - 2014-08-28 18:29 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part02.rar
2014-08-28 18:30 - 2014-08-28 18:29 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part01.rar
2014-08-28 16:39 - 2014-08-28 16:37 - 616998912 _____ () C:\Users\Holger\Downloads\ubcd531.iso
2014-08-27 20:51 - 2014-08-27 20:51 - 00000000 ____D () C:\Users\Holger\Downloads\Bad.Neighbors.2014.German.BDRiP.AC3.XVID-CRG
2014-08-24 13:18 - 2014-08-22 05:42 - 00041187 _____ () C:\Users\Holger\Downloads\ESt2013_Timmermann_Rita.elfo
2014-08-23 14:58 - 2014-08-23 14:57 - 00000000 ____D () C:\Users\Holger\Downloads\Die.Bestimmung.Divergent.2014.German.BDRiP.AC3.XviD-TOD
2014-08-23 14:57 - 2014-08-23 14:53 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part1.rar
2014-08-23 14:57 - 2014-08-23 14:53 - 480117824 _____ () C:\Users\Holger\Downloads\17567198qw7.part3.rar
2014-08-23 14:56 - 2014-08-23 14:53 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part2.rar
2014-08-23 11:23 - 2014-08-23 11:23 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-503
2014-08-23 07:22 - 2014-08-23 07:22 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-23 07:22 - 2013-10-04 08:57 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-23 07:22 - 2013-08-27 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-23 07:22 - 2013-08-27 17:19 - 00000000 ____D () C:\Program Files\Avira
2014-08-23 03:46 - 2014-08-28 16:24 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 02:42 - 2014-08-28 16:24 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 22:06 - 2014-08-23 11:38 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-502
2014-08-21 17:39 - 2013-09-03 16:40 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\elsterformular
2014-08-21 17:38 - 2014-08-21 17:38 - 00001191 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\Program Files\ElsterFormular
2014-08-21 17:38 - 2013-09-03 16:40 - 00000000 ____D () C:\ProgramData\elsterformular
2014-08-21 17:37 - 2014-08-21 17:35 - 77405552 _____ (Landesfinanzdirektion Thüringen) C:\Users\Holger\Downloads\ElsterFormular-15.2.20140326p.exe
2014-08-20 18:27 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-08-20 17:46 - 2013-08-27 17:19 - 00000000 ____D () C:\ProgramData\Avira
2014-08-19 17:28 - 2014-08-19 17:25 - 00000000 ____D () C:\Users\Holger\Downloads\Captain.America.2.The.Return.of.the.First.Avenger.2014.German.BDRiP.AC3.XviD-TOD
2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\Bundesliga Kicker Sonderheft 14_15
2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\__MACOSX
2014-08-19 17:15 - 2014-08-19 17:14 - 68955853 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part25.rar
2014-08-19 17:15 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part24.rar
2014-08-19 17:15 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part22.rar
2014-08-19 17:14 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part23.rar
2014-08-19 17:14 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part21.rar
2014-08-19 17:14 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part20.rar
2014-08-19 17:14 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part19.rar
2014-08-19 17:13 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part18.rar
2014-08-19 17:13 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part17.rar
2014-08-19 17:13 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part16.rar
2014-08-19 17:12 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part15.rar
2014-08-19 17:12 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part14.rar
2014-08-19 17:12 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part13.rar
2014-08-19 17:11 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part12.rar
2014-08-19 17:11 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part11.rar
2014-08-19 17:11 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part10.rar
2014-08-19 17:10 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part09.rar
2014-08-19 17:10 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part08.rar
2014-08-19 17:10 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part07.rar
2014-08-19 17:09 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part06.rar
2014-08-19 17:09 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part05.rar
2014-08-19 17:09 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part04.rar
2014-08-19 17:08 - 2014-08-19 17:07 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part03.rar
2014-08-19 17:08 - 2014-08-19 17:07 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part02.rar
2014-08-19 17:08 - 2014-08-19 17:07 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part01.rar
2014-08-18 16:35 - 2014-08-16 17:58 - 00000000 ____D () C:\Program Files\KODAK Create@Home Software (für dm)
2014-08-16 19:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-16 18:00 - 2014-08-16 18:00 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\MPC
2014-08-16 17:59 - 2014-08-16 17:59 - 00002122 _____ () C:\Users\Public\Desktop\KODAK Create@Home Software (für dm).lnk
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\Users\Holger\.kodakch
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KODAK Create@Home Software (für dm)
2014-08-16 17:57 - 2014-08-16 17:57 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Eastman Kodak Company
2014-08-16 17:56 - 2014-08-16 17:55 - 102239928 _____ (Eastman Kodak Company) C:\Users\Holger\Downloads\KodakCreateHome.exe
2014-08-14 18:10 - 2014-08-14 18:09 - 00000000 ____D () C:\Users\Holger\Downloads\Coyote.Ugly.2000.Unrated.Extended.Edition.AC3D.BDRip.XviD-HQSD
2014-08-14 17:35 - 2014-08-14 17:35 - 39354003 _____ (Fomanu AG ) C:\Users\Holger\Downloads\designer_20.exe.boc5hvl.partial
2014-08-14 03:45 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-08-14 03:29 - 2014-05-07 03:01 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-14 03:29 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-14 03:13 - 2014-01-18 10:07 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-14 03:09 - 2014-01-18 10:07 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 18:52 - 2014-08-13 18:50 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rev
2014-08-13 18:52 - 2014-08-13 18:50 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rar
2014-08-13 18:51 - 2014-08-13 18:50 - 176763834 _____ () C:\Users\Holger\Downloads\KKW1OST.part2.rar
2014-08-11 05:18 - 2014-08-11 05:18 - 16311072 _____ () C:\Users\Holger\Downloads\ydfgb4532bhjkl.rar
2014-08-10 22:17 - 2014-08-10 22:16 - 00000000 ____D () C:\Users\Holger\Downloads\Person.of.Interest.S03E19.Frank.Mercer.und.Betty.Harris.German.Dubbed.DL.iTunesHD.x264-TVS
2014-08-10 22:16 - 2014-08-10 22:16 - 17260579 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part4.rar
2014-08-10 22:16 - 2014-08-10 22:15 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part3.rar
2014-08-10 22:16 - 2014-08-10 22:15 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part2.rar
2014-08-10 22:16 - 2014-08-10 22:15 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part1.rar
2014-08-10 22:15 - 2014-08-10 22:15 - 00012471 _____ () C:\Users\Holger\Downloads\xix.nfo
2014-08-10 22:15 - 2014-08-10 22:15 - 00006211 _____ () C:\Users\Holger\Downloads\ncode_imageresizer.js
2014-08-10 09:04 - 2014-08-11 05:19 - 00000000 ____D () C:\Users\Holger\Downloads\Focus Magazin 33-2014 Deutsch
2014-08-09 11:24 - 2014-08-09 11:24 - 00000000 ____D () C:\Users\Holger\Downloads\o594459t05q2e4i
2014-08-09 11:24 - 2014-08-09 11:22 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part09.rar
2014-08-09 11:24 - 2014-08-09 11:22 - 168822268 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part10.rar
2014-08-09 11:24 - 2014-08-09 11:19 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part07.rar
2014-08-09 11:22 - 2014-08-09 11:20 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part08.rar
2014-08-09 11:22 - 2014-08-09 11:18 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part06.rar
2014-08-09 11:20 - 2014-08-09 11:17 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part04.rar
2014-08-09 11:19 - 2014-08-09 11:17 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part05.rar
2014-08-09 11:18 - 2014-08-09 11:15 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part02.rar
2014-08-09 11:17 - 2014-08-09 11:15 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part03.rar
2014-08-09 11:17 - 2014-08-09 11:15 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part01.rar
2014-08-09 11:14 - 2014-08-09 11:10 - 550000000 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part2.rar
2014-08-09 11:14 - 2014-08-09 11:10 - 550000000 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part1.rar
2014-08-09 11:13 - 2014-08-09 11:10 - 330317416 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part3.rar
2014-08-09 10:35 - 2014-08-09 10:34 - 110100480 _____ () C:\Users\Holger\Downloads\PdARTSMDCiW.part02.rar
2014-08-09 10:35 - 2014-08-09 10:34 - 110100480 _____ () C:\Users\Holger\Downloads\PdARTSMDCiW.part01.rar
2014-08-09 09:16 - 2014-08-09 10:40 - 19648512 _____ () C:\Users\Holger\Downloads\sample.avi
2014-08-09 09:13 - 2014-08-09 10:40 - 00001472 _____ () C:\Users\Holger\Downloads\nfo.nfo
2014-08-09 01:09 - 2014-08-09 01:01 - 00000000 ____D () C:\Users\Holger\AppData\Local\Windows Live
2014-08-09 01:08 - 2014-08-09 01:08 - 00000000 ____D () C:\Users\Holger\Tracing
2014-08-09 01:07 - 2014-08-09 01:07 - 00001251 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-08-09 01:07 - 2014-08-09 01:07 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-08-09 01:07 - 2014-08-09 01:07 - 00000000 ____D () C:\Windows\de
2014-08-09 01:07 - 2014-08-09 01:05 - 00000000 ____D () C:\Program Files\Windows Live
2014-08-09 01:06 - 2014-08-09 01:06 - 00002432 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00001404 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00001320 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2014-08-09 01:05 - 2014-08-09 01:05 - 00000000 ____D () C:\Windows\PCHEALTH
2014-08-09 01:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-08-09 01:03 - 2014-08-09 01:03 - 00002145 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00002082 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00002082 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00000000 ___RD () C:\Users\Holger\SkyDrive
2014-08-09 01:03 - 2014-08-09 01:03 - 00000000 ____D () C:\Program Files\Microsoft SkyDrive
2014-08-09 01:02 - 2014-08-09 01:02 - 00000000 ____D () C:\ProgramData\Microsoft SkyDrive
2014-08-09 01:01 - 2014-08-09 01:01 - 00000000 ____D () C:\Program Files\Common Files\Windows Live
2014-08-09 01:01 - 2014-08-09 01:00 - 142602520 _____ (Microsoft Corporation) C:\Users\Holger\Downloads\wlsetup-all_16.4.3508.0205.exe
2014-08-07 03:43 - 2014-08-13 18:54 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 03:39 - 2014-08-13 18:54 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.11516.dll


Some content of TEMP:
====================
C:\Users\Holger\AppData\Local\Temp\13-9_mobility_win7_win8_32_dd_ccc_whql.exe
C:\Users\Holger\AppData\Local\Temp\80656-671486-pdf-shrink.exe
C:\Users\Holger\AppData\Local\Temp\AutoRun.exe
C:\Users\Holger\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Holger\AppData\Local\Temp\avgnt.exe
C:\Users\Holger\AppData\Local\Temp\BackupSetup.exe
C:\Users\Holger\AppData\Local\Temp\bstrapInstall.exe
C:\Users\Holger\AppData\Local\Temp\catalyst_mobility_32-bit_util.exe
C:\Users\Holger\AppData\Local\Temp\cgtqp6hz.dll
C:\Users\Holger\AppData\Local\Temp\CloudBackup6826.exe
C:\Users\Holger\AppData\Local\Temp\dlLogic.exe
C:\Users\Holger\AppData\Local\Temp\dltr.exe
C:\Users\Holger\AppData\Local\Temp\GCVerifier.dll
C:\Users\Holger\AppData\Local\Temp\h7rxxkgy.dll
C:\Users\Holger\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Holger\AppData\Local\Temp\post1.exe
C:\Users\Holger\AppData\Local\Temp\post2.dll
C:\Users\Holger\AppData\Local\Temp\post2.exe
C:\Users\Holger\AppData\Local\Temp\proxy_vole1768017490497548973.dll
C:\Users\Holger\AppData\Local\Temp\Quarantine.exe
C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite22799.dll
C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite63844.dll
C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite67090.dll
C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite70292.dll
C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite80555.dll
C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite82604.dll
C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite85762.dll
C:\Users\Holger\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Holger\AppData\Local\Temp\verifier.exe
C:\Users\Holger\AppData\Local\Temp\vis-de.exe
C:\Users\Holger\AppData\Local\Temp\vlc-2.1.1-win32.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-06 11:03

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 06-09-2014
Ran by Holger at 2014-09-06 12:36:35
Running from C:\Users\Holger\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )
Adobe Acrobat XI Pro (HKLM\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.02 - Adobe Systems)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.8.0.1280 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.8.0.1280 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 14 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Advanced-System Protector (HKLM\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~4A5BE654_is1) (Version: 2.1.1000.13727 - Systweak Software)
Advertising Center (Version: 0.0.0.2 - Nero AG) Hidden
AMD Accelerated Video Transcoding (Version: 13.15.100.30830 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (Version: 2013.0830.1944.33589 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{103811D6-2580-5DF1-2689-5686C05AC91F}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.80830.1925 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM\...\{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}) (Version: 3.0.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{941B4CE7-3F5D-443E-A8B7-56A420D2EAFD}) (Version: 7.1.2.6 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Application Profiles (HKLM\...\{63059735-CA97-FDFB-0E7A-3B8D81572EFD}) (Version: 2.0.4888.34279 - Advanced Micro Devices, Inc.)
Avira (HKLM\...\{e67154a7-9cc5-4167-b782-f3982bc6c70d}) (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira)
Avira SearchFree Toolbar (HKLM\...\{41564952-412D-5637-00A7-A758B70C1001}) (Version: 12.16.1.1671 - APN, LLC)
Bing Bar (HKLM\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Catalyst Control Center - Branding (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
ccc-utility (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
Craften Terminal 3.4.5 (HKLM\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 3.4.5 - Craften.de)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Drakensang Online (HKLM\...\Drakensang Online) (Version:  - )
ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.2.20140326 - Landesfinanzdirektion Thüringen)
EVEREST Home Edition v2.20 (HKLM\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
FLV Player (remove only) (HKLM\...\FLVM Player) (Version:  - )
Fotogalerie (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fraps (HKLM\...\Fraps) (Version:  - )
Gameforge Live 2.0.5 (HKLM\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)
Google Chrome (HKLM\...\Google Chrome) (Version: 37.0.2062.103 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
HWiNFO32 Version 4.22 (HKLM\...\HWiNFO32_is1) (Version: 4.22 - Martin Malík - REALiX)
iTunes (HKLM\...\{0A37EE62-9A58-420D-90CC-4E52153112EE}) (Version: 11.3.0.54 - Apple Inc.)
Java 7 Update 45 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.450 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Junk Mail filter update (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
KODAK Create@Home Software (für dm) (HKLM\...\{43B8BDF6-13EC-44BE-9EDA-F284C4CA19A6}) (Version: 7.8.1392 - Eastman Kodak Company)
League of Legends (HKLM\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (Version: 3.0.1 - Riot Games ) Hidden
LogMeIn Hamachi (HKLM\...\LogMeIn Hamachi) (Version: 2.2.0.236 - LogMeIn, Inc.)
LogMeIn Hamachi (Version: 2.2.0.236 - LogMeIn, Inc.) Hidden
LOLReplay (HKLM\...\LOLReplay) (Version: 0.8.7.4 - www.leaguereplays.com)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Age of Empires II (HKLM\...\Age of Empires 2.0) (Version:  - )
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
MKLOL (HKCU\...\MKLOL) (Version:  - )
Movie Maker (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 12 (HKLM\...\{560FC78C-A4B2-461D-9B47-820C1EEF87B8}) (Version: 12.0.02000 - Nero AG)
Nero Audio Pack 1 (Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero BackItUp (Version: 12.0.2001 - Nero AG) Hidden
Nero BackItUp Help (CHM) (Version: 12.0.3000 - Nero AG) Hidden
Nero Blu-ray Player (Version: 12.0.14300 - Nero AG) Hidden
Nero Blu-ray Player Help (CHM) (Version: 12.0.4000 - Nero AG) Hidden
Nero Burning ROM (Version: 12.0.20000 - Nero AG) Hidden
Nero Burning ROM Help (CHM) (Version: 12.0.3000 - Nero AG) Hidden
Nero ControlCenter (Version: 11.0.15200 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (Version: 12.0.5000 - Nero AG) Hidden
Nero Core Components (Version: 11.0.18100 - Nero AG) Hidden
Nero Disc Menus Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Effects Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Express (Version: 12.0.20000 - Nero AG) Hidden
Nero Express Help (CHM) (Version: 12.0.5000 - Nero AG) Hidden
Nero Installer (Version: 4.4.9.0 - Nero AG) Hidden
Nero Kwik Media (Version: 1.18.18200 - Nero AG) Hidden
Nero Kwik Media Help (CHM) (Version: 12.0.4000 - Nero AG) Hidden
Nero Kwik Themes Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero MediaHome 4 (Version: 4.5.9.2 - Nero AG) Hidden
Nero MediaHome 4 Essentials (HKLM\...\{52000877-ae1f-4058-9ed0-0abde5553999}) (Version:  - Nero AG)
Nero PiP Effects Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Recode (Version: 12.0.24000 - Nero AG) Hidden
Nero Recode Help (CHM) (Version: 12.0.4000 - Nero AG) Hidden
Nero RescueAgent (Version: 12.0.9000 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (Version: 12.0.3000 - Nero AG) Hidden
Nero SharedVideoCodecs (Version: 1.0.12100.2.0 - Nero AG) Hidden
Nero Update (Version: 11.0.11800.31.0 - Nero AG) Hidden
Nero Video (Version: 12.0.3000 - Nero AG) Hidden
Nero Video Help (CHM) (Version: 12.0.4000 - Nero AG) Hidden
neroxml (Version: 1.0.0 - Nero AG) Hidden
Nostale(DE) (HKLM\...\NosTale(DE)_is1) (Version:  - Gameforge 4D GmbH)
Overwolf (HKLM\...\Overwolf) (Version: 0.79.21.0 - Overwolf Ltd.)
Pando Media Booster (HKLM\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
PDF Architect (HKLM\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.1 - pdfforge)
Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Prerequisite installer (Version: 12.0.0002 - Nero AG) Hidden
Ravensburger tiptoi (HKLM\...\Ravensburger tiptoi) (Version:  - )
RocketTab (HKLM\...\RocketTab) (Version:  - RocketTab)
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.27.0 - SAMSUNG Electronics Co., Ltd.)
SDFormatter (HKLM\...\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association)
SimCity 4 Deluxe (HKLM\...\{A7A34FC9-DF24-4A36-00AD-D4EFE94CC116}) (Version:  - )
Snap.Do (HKLM\...\{A20F162B-9C72-4093-9C15-8BCDF2D90D30}) (Version: 1.98.1.11691 - ReSoft Ltd.) <==== ATTENTION
SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)
TechPowerUp GPU-Z (HKLM\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
VLC Codec Pack 2.0.5 (HKLM\...\VLC - Codec Pack) (Version: 2.0.5 - VLC Codec Pack)
VLC media player 2.0.8 (HKLM\...\VLC media player) (Version: 2.0.8 - VideoLAN)
Welcome App (Start-up experience) (Version: 12.0.14000 - Nero AG) Hidden
Windows Live Communications Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
WinZip 17.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DC}) (Version: 17.5.10562 - WinZip Computing, S.L. )
World of Tanks (HKLM\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version:  - Wargaming.net)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{31261F21-2B16-45EE-BEAB-07C4CFA18B65}\InprocServer32 -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\FileSyncApi.dll (Microsoft Corporation)

==================== Restore Points  =========================

06-09-2014 10:07:39 Geplanter Prüfpunkt

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05F0F530-38C9-4F40-B5EF-03971A66D77E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-09-08] (Google Inc.)
Task: {07D14C9C-2F1D-479D-B481-A560B0ACAAD3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-09-08] (Google Inc.)
Task: {529A5FCA-3AE8-4F4D-B81F-AF14EF56E4FC} - System32\Tasks\RocketTab => C:\Windows\system32\cmd.exe [2010-11-20] (Microsoft Corporation)
Task: {5AA336F3-5A42-4C80-A20E-D61FC077E976} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-13] (Adobe Systems Incorporated)
Task: {89FF56BF-6C46-4D29-8FFB-A5FA86E91A5E} - System32\Tasks\Overwolf Updater Task => C:\Program Files\Overwolf\OverwolfUpdater.exe [2014-08-28] (Overwolf LTD)
Task: {AC0AA77B-8DB3-47E6-9CDC-2B62E6DAF505} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {C7EAC1AA-53DA-4D9F-862D-8AED39D10913} - System32\Tasks\RocketTab Update Task => C:\Program Files\RocketTab\uninstall.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-07-03 13:20 - 2014-07-03 13:20 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-07-03 13:19 - 2014-07-03 13:19 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-08-04 14:20 - 2014-08-04 14:20 - 00139056 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll
2014-08-04 14:20 - 2014-08-04 14:20 - 00067832 _____ () C:\Program Files\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-08-20 17:46 - 2014-08-04 14:20 - 00052472 _____ () C:\Users\Holger\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2012-09-23 21:43 - 2012-09-23 21:43 - 00010240 _____ () C:\Program Files\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu
2014-02-27 17:45 - 2014-02-27 17:45 - 00186368 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Commonc65c5a95#\7b778d24921453a8669f3c3b9cc0b71e\Kies.Common.DeviceServiceLib.Interface.ni.dll
2014-02-27 17:46 - 2014-02-27 17:46 - 14971904 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\1e35c2da60014113523a116c51f0f03a\Kies.Theme.ni.dll
2014-02-27 17:44 - 2014-02-27 17:44 - 01822208 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\98ab01d97977a8631264ad46875bebb3\Kies.UI.ni.dll
2014-02-27 17:44 - 2014-02-27 17:44 - 00081920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\713f8aa449d7a7b75bacbce9b9a8a34e\Kies.MVVM.ni.dll
2014-02-27 17:45 - 2014-02-27 17:45 - 00236032 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\cffeb31975c17760187d713cf2d7934d\ASF_cSharpAPI.ni.dll
2014-08-28 13:27 - 2014-08-28 13:27 - 00025600 _____ () C:\Program Files\Overwolf\0.79.21.0\CoreAudioApi.dll
2014-08-28 13:27 - 2014-08-28 13:27 - 38713856 _____ () C:\Program Files\Overwolf\0.79.21.0\libcef.DLL
2014-05-23 12:16 - 2014-05-23 12:16 - 00379904 _____ () C:\Program Files\LOLReplay\LOLUtils.dll
2013-02-24 22:04 - 2013-02-24 22:04 - 00704008 _____ () C:\Windows\System32\C2MP\TrayMenu.exe
2014-08-28 13:31 - 2014-08-28 13:31 - 00070432 _____ () C:\Program Files\Overwolf\0.79.21.0\OverwolfBrowser.exe
2014-08-28 13:27 - 2014-08-28 13:27 - 00514528 _____ () C:\Program Files\Overwolf\0.79.21.0\libglesv2.dll
2014-08-28 13:27 - 2014-08-28 13:27 - 00105952 _____ () C:\Program Files\Overwolf\0.79.21.0\libegl.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/06/2014 00:32:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x494
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (09/06/2014 00:05:45 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"1".
Die abhängige Assemblierung "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (09/06/2014 00:05:29 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"2" in Zeile  SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0".
Definition: SMC,processorArchitecture="x86",type="win32",version="12.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (09/06/2014 00:05:19 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (09/06/2014 00:00:46 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/06/2014 11:42:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x5bc
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (09/06/2014 11:41:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x132c
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (09/06/2014 11:36:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x408
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (09/06/2014 11:35:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0xbf0
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3

Error: (09/06/2014 11:29:01 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x12b8
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3


System errors:
=============
Error: (09/06/2014 00:28:26 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (09/06/2014 00:28:40 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x000000f4 (0x00000003, 0x86f6f4f8, 0x86f6f664, 0x831fe000)C:\Windows\MEMORY.DMP090614-18765-01

Error: (09/06/2014 00:28:35 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎06.‎09.‎2014 um 12:27:39 unerwartet heruntergefahren.

Error: (09/06/2014 10:33:52 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (09/06/2014 10:15:26 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (09/06/2014 10:13:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Gruppenrichtlinienclient" ist vom Dienst "Remoteprozeduraufruf (RPC)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (09/06/2014 10:13:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Remoteprozeduraufruf (RPC)" ist vom Dienst "RPC-Endpunktzuordnung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1062

Error: (09/06/2014 10:13:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "IP-Hilfsdienst" ist vom Dienst "Remoteprozeduraufruf (RPC)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (09/06/2014 10:13:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Remoteprozeduraufruf (RPC)" ist vom Dienst "RPC-Endpunktzuordnung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1062

Error: (09/06/2014 10:13:40 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Multimediaklassenplaner" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053


Microsoft Office Sessions:
=========================
Error: (09/06/2014 00:32:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd49401cfc9bddb24101fC:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll1d3d18f7-35b1-11e4-91b2-00138ff9b6fa

Error: (09/06/2014 00:05:45 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero recode\NeroBRServer.exe.Manifest

Error: (09/06/2014 00:05:29 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"SMC,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero burning rom\NeroCmd.exe.Manifestc:\program files\Nero\Nero 12\nero burning rom\SMC\SMC.MANIFEST3

Error: (09/06/2014 00:05:19 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Nero\Nero 12\nero backitup\NBVSSTool_x64.exe

Error: (09/06/2014 00:00:46 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: C:\Program Files\WinZip\adxloader.dll.ManifestC:\Program Files\WinZip\adxloader.dll.Manifest2

Error: (09/06/2014 11:42:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd5bc01cfc9b6e5e56f03C:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll273eb0b3-35aa-11e4-b2a3-00138ff9b6fa

Error: (09/06/2014 11:41:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd132c01cfc9b6c5d6c4a3C:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll073cb0d2-35aa-11e4-b2a3-00138ff9b6fa

Error: (09/06/2014 11:36:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd40801cfc9b5faadfd82C:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll3c6ef57d-35a9-11e4-b2a3-00138ff9b6fa

Error: (09/06/2014 11:35:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdbf001cfc9b5ed20b3b1C:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll2f1b0a42-35a9-11e4-b2a3-00138ff9b6fa

Error: (09/06/2014 11:29:01 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd12b801cfc9b4f9d73669C:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll3c035211-35a8-11e4-b2a3-00138ff9b6fa


CodeIntegrity Errors:
===================================
  Date: 2013-12-30 10:49:25.039
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-30 10:49:24.601
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-30 10:49:24.211
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-30 10:49:23.773
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-30 10:49:22.914
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-30 10:49:22.507
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-30 10:49:22.117
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-30 10:49:21.726
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-23 15:50:41.997
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-23 15:50:41.544
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) D CPU 2.80GHz
Percentage of memory in use: 44%
Total physical RAM: 3327.3 MB
Available physical RAM: 1831.63 MB
Total Pagefile: 6650.84 MB
Available Pagefile: 4658.09 MB
Total Virtual: 2047.88 MB
Available Virtual: 1888.4 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:292.87 GB) (Free:6.74 GB) NTFS
Drive d: () (Fixed) (Total:638.54 GB) (Free:472.58 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 9E3CAF4E)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=292.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=638.5 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

hi,

Adware & Co. deinstallieren

• Lade Dir bitte von hier Revo Uninstaller herunter.
• Installiere und starte das Programm.
• Suche im Uninstallerfeld nach den Programmen, die unter:
  
  diesen Zusatz haben:
  
• Wähle die Programme nacheinander aus und klicke jedesmal auf Uninstall.
• Wähle anschließend den Modus "Moderat" aus.
  
• Reste löschen:
  Klicke auf dann auf und dann auf .

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Danke

ComboFix 14-09-05.01 - Holger 06.09.2014  13:26:35.1.2 - x86
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3327.1658 [GMT 2:00]
ausgeführt von:: c:\users\Holger\Desktop\ComboFix.exe
AV: Avira Desktop *Enabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Enabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Holger\AppData\Local\nsmC98D.tmp
c:\users\Holger\AppData\Local\nsr15C9.tmp
c:\users\Holger\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
c:\users\Public\AlexaNSISPlugin.11516.dll
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-08-06 bis 2014-09-06  ))))))))))))))))))))))))))))))
.
.
2014-09-06 11:39 . 2014-09-06 11:40	--------	d-----w-	c:\users\NeroMediaHomeUser.4\AppData\Local\temp
2014-09-06 11:13 . 2014-09-06 11:13	--------	d-----w-	c:\program files\VS Revo Group
2014-09-06 10:34 . 2014-09-06 10:37	--------	d-----w-	C:\FRST
2014-09-06 09:03 . 2014-09-06 11:25	62576	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{ABC2C3C7-B82A-4E99-90DD-A4BF26B6C9D4}\offreg.dll
2014-09-06 08:09 . 2010-08-30 06:34	536576	----a-w-	c:\windows\system32\sqlite3.dll
2014-09-06 07:25 . 2012-07-25 10:03	17136	----a-w-	c:\windows\system32\sasnative32.exe
2014-09-06 07:23 . 2014-09-06 07:23	--------	d-----w-	c:\program files\RCP
2014-09-06 06:30 . 2014-08-21 02:44	8581864	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{ABC2C3C7-B82A-4E99-90DD-A4BF26B6C9D4}\mpengine.dll
2014-09-05 23:10 . 2014-09-05 23:10	--------	d-----w-	c:\users\Holger\AppData\Local\Gameforge4d
2014-09-05 23:10 . 2014-09-05 23:18	--------	d-----w-	c:\program files\GameforgeLive
2014-09-05 22:43 . 2014-09-05 22:43	--------	d-----w-	c:\users\Holger\AppData\Roaming\ap_logs
2014-09-05 21:53 . 2014-09-05 21:53	--------	d-----w-	c:\program files\Overwolf
2014-09-05 21:53 . 2014-09-05 21:53	--------	d-----w-	c:\program files\Common Files\Overwolf
2014-09-05 21:53 . 2014-09-05 21:53	--------	d-----w-	c:\programdata\Overwolf
2014-09-05 21:52 . 2014-09-06 10:30	--------	d-----w-	c:\users\Holger\AppData\Local\Overwolf
2014-09-05 21:24 . 2014-09-05 21:24	--------	d-----w-	c:\program files\Microsoft Silverlight
2014-09-05 21:24 . 2014-09-05 21:50	--------	d-----w-	C:\Fraps
2014-09-05 06:42 . 2014-09-05 06:42	--------	d-----w-	c:\program files\LogMeIn Hamachi
2014-08-28 14:24 . 2014-08-23 01:46	305152	----a-w-	c:\windows\system32\gdi32.dll
2014-08-28 14:24 . 2014-08-23 00:42	2352640	----a-w-	c:\windows\system32\win32k.sys
2014-08-21 15:38 . 2014-08-21 15:38	--------	d-----w-	c:\program files\ElsterFormular
2014-08-16 16:00 . 2014-08-16 16:00	--------	d-----w-	c:\users\Holger\AppData\Roaming\MPC
2014-08-16 15:59 . 2014-08-16 15:59	--------	d-----w-	c:\users\Holger\.kodakch
2014-08-16 15:58 . 2014-08-18 14:35	--------	d-----w-	c:\program files\KODAK Create@Home Software (für dm)
2014-08-16 15:57 . 2014-08-16 15:57	--------	d-----w-	c:\users\Holger\AppData\Roaming\Eastman Kodak Company
2014-08-14 01:05 . 2014-03-09 21:47	99480	----a-w-	c:\windows\system32\infocardapi.dll
2014-08-14 01:05 . 2014-06-30 22:14	8856	----a-w-	c:\windows\system32\icardres.dll
2014-08-14 01:05 . 2014-03-09 21:47	619672	----a-w-	c:\windows\system32\icardagt.exe
2014-08-14 01:05 . 2014-06-06 06:16	35480	----a-w-	c:\windows\system32\TsWpfWrp.exe
2014-08-13 16:54 . 2014-08-07 01:43	412160	----a-w-	c:\windows\system32\aepdu.dll
2014-08-13 16:54 . 2014-08-07 01:39	302592	----a-w-	c:\windows\system32\aeinv.dll
2014-08-13 16:54 . 2014-06-03 09:29	2363392	----a-w-	c:\windows\system32\msi.dll
2014-08-13 16:54 . 2014-06-03 09:30	101824	----a-w-	c:\windows\system32\consent.exe
2014-08-13 16:54 . 2014-06-03 09:29	337408	----a-w-	c:\windows\system32\msihnd.dll
2014-08-13 16:54 . 2014-06-03 09:29	1805824	----a-w-	c:\windows\system32\authui.dll
2014-08-13 16:54 . 2014-07-09 01:29	6144	----a-w-	c:\windows\system32\KBDYAK.DLL
2014-08-13 16:54 . 2014-07-09 01:29	6144	----a-w-	c:\windows\system32\KBDBASH.DLL
2014-08-08 23:08 . 2014-08-08 23:08	--------	d-----w-	c:\users\Holger\Tracing
2014-08-08 23:07 . 2014-08-08 23:07	--------	d-----w-	c:\windows\de
2014-08-08 23:07 . 2013-02-05 20:57	49664	----a-w-	c:\windows\system32\drivers\fssfltr.sys
2014-08-08 23:06 . 2014-08-08 23:06	--------	d-----w-	c:\program files\Microsoft SQL Server Compact Edition
2014-08-08 23:05 . 2014-08-08 23:05	--------	d-----w-	c:\windows\PCHEALTH
2014-08-08 23:05 . 2014-08-08 23:07	--------	d-----w-	c:\program files\Windows Live
2014-08-08 23:03 . 2014-08-08 23:03	--------	d-----w-	c:\program files\Microsoft SkyDrive
2014-08-08 23:03 . 2014-08-08 23:03	--------	d-----r-	c:\users\Holger\SkyDrive
2014-08-08 23:02 . 2014-08-08 23:02	--------	d-----w-	c:\programdata\Microsoft SkyDrive
2014-08-08 23:01 . 2014-08-08 23:09	--------	d-----w-	c:\users\Holger\AppData\Local\Windows Live
2014-08-08 23:01 . 2014-08-08 23:01	--------	d-----w-	c:\program files\Common Files\Windows Live
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-08-08 23:05 . 2012-07-17 12:37	23256	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-08-05 07:20 . 2013-08-27 14:23	231584	------w-	c:\windows\system32\MpSigStub.exe
2014-07-24 15:09 . 2013-08-27 15:24	35848	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2014-07-13 09:03 . 2013-08-27 14:57	71344	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2014-07-13 09:03 . 2013-08-27 14:57	699056	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2014-07-03 15:18 . 2013-08-27 15:19	97648	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2014-07-02 03:08 . 2013-08-27 15:19	136216	----a-w-	c:\windows\system32\drivers\avipbb.sys
2014-06-18 01:51 . 2014-07-12 07:17	646144	----a-w-	c:\windows\system32\osk.exe
2014-06-10 19:50 . 2014-06-10 19:50	6112864	----a-w-	c:\windows\system32\usbaaplrc.dll
2014-06-10 19:50 . 2014-06-10 19:50	45056	----a-w-	c:\windows\system32\drivers\usbaapl.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}]
2014-08-22 21:56	12184	----a-w-	c:\program files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{41564952-412D-5637-00A7-7A786E7484D7}"= "c:\program files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" [2014-08-22 12184]
.
[HKEY_CLASSES_ROOT\clsid\{41564952-412d-5637-00a7-7a786e7484d7}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{41564952-412D-5637-00A7-7A786E7484D7}"= "c:\program files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" [2014-08-22 12184]
.
[HKEY_CLASSES_ROOT\clsid\{41564952-412d-5637-00a7-7a786e7484d7}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-08-08 23:02	220632	----a-w-	c:\users\Holger\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-08-08 23:02	220632	----a-w-	c:\users\Holger\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-08-08 23:02	220632	----a-w-	c:\users\Holger\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KiesPreload"="c:\program files\Samsung\Kies\Kies.exe" [2013-09-04 1564528]
"Nero MediaHome 4"="c:\program files\Nero\Nero MediaHome 4\NeroMediaHome.exe" [2010-10-26 5178664]
"MKLOL"="c:\program files\MKJogo\MKLOL\Bin\MKIM.exe" [2014-08-28 1089736]
"Overwolf"="c:\program files\Overwolf\Overwolf.exe" [2014-08-28 39712]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2014-08-14 751184]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe" [2013-08-30 747264]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"KiesTrayAgent"="c:\program files\Samsung\Kies\KiesTrayAgent.exe" [2013-09-04 311152]
"Nero MediaHome 4"="c:\program files\Nero\Nero MediaHome 4\NeroMediaHome.exe" [2010-10-26 5178664]
"ApnTBMon"="c:\program files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2014-08-22 1942424]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe" [2012-12-18 3478752]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2014-07-08 152392]
"Avira Systray"="c:\program files\Avira\My Avira\Avira.OE.Systray.exe" [2014-08-04 161584]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-09-04 3802448]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2013-08-31 280576]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
LOLRecorder.lnk - c:\program files\LOLReplay\LOLRecorder.exe -minimize [2014-5-23 504832]
TrayMenu.lnk - c:\windows\System32\C2MP\TrayMenu.exe vlc.ico [2013-2-24 704008]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [2013-06-21 32064]
R3 BBUpdate;BBUpdate;c:\program files\Microsoft\BingBar\7.3.132.0\SeaPort.exe [2014-03-11 247968]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2013-06-21 84248]
R3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Home Edition\kerneld.wnt [2005-08-17 7168]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-07-25 108032]
R3 OverwolfUpdater;Overwolf Updater Windows SCM;c:\program files\Overwolf\OverwolfUpdater.exe [2014-08-28 998176]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [2013-06-21 136904]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [2013-06-21 17864]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [2013-06-21 153672]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [2013-06-21 130248]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2013-06-21 181912]
R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-11-27 37352]
S1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\windows\system32\drivers\HWiNFO32.SYS [2013-08-31 22560]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2013-08-30 209408]
S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2014-08-14 430160]
S2 AntiVirWebService;Avira Browser-Schutz;c:\program files\Avira\AntiVir Desktop\AVWEBGRD.EXE [2014-08-14 1021008]
S2 APNMCP;Ask Aktualisierungsdienst;c:\program files\AskPartnerNetwork\Toolbar\apnmcp.exe [2014-08-22 166296]
S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files\Avira\My Avira\Avira.OE.ServiceHost.exe [2014-08-04 149296]
S2 BBSvc;BingBar Service;c:\program files\Microsoft\BingBar\7.3.132.0\BBSvc.exe [2014-03-11 193696]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2014-09-04 1890128]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-08-08 375056]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2012-07-13 769432]
S2 PDF Architect Helper Service;PDF Architect Helper Service;c:\program files\PDF Architect\HelperService.exe [2013-04-08 1320496]
S2 PDF Architect Service;PDF Architect Service;c:\program files\PDF Architect\ConversionService.exe [2013-04-08 799280]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2013-07-05 78848]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-09-05 06:55	1096520	----a-w-	c:\program files\Google\Chrome\Application\37.0.2062.103\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-09-06 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-27 09:03]
.
2014-09-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-09-08 11:32]
.
2014-09-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-09-08 11:32]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.com
uInternet Settings,ProxyOverride = <-loopback>
uInternet Settings,ProxyServer = http=127.0.0.1:49220;https=127.0.0.1:49220
uSearchAssistant = hxxp://www.google.com
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKCU-Run-KiesAirMessage - c:\program files\Samsung\Kies\KiesAirMessage.exe
HKLM-Run-RadioRage Home Page Guard 32 bit - c:\progra~1\RADIOR~1\bar\1.bin\AppIntegrator.exe
AddRemove-FLVM Player - c:\program files\FLVM Player\FLVPlayerUninstaller.exe
AddRemove-RocketTab - c:\program files\RocketTab\uninstall.exe
AddRemove-01_Simmental - c:\program files\SAMSUNG\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\SAMSUNG\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\SAMSUNG\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\SAMSUNG\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-07_Schorl - c:\program files\SAMSUNG\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-09_Hsp - c:\program files\SAMSUNG\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\SAMSUNG\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\SAMSUNG\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\SAMSUNG\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-24_flashusbdriver - c:\program files\SAMSUNG\USB Drivers\24_flashusbdriver\Uninstall.exe
AddRemove-25_escape - c:\program files\SAMSUNG\USB Drivers\25_escape\Uninstall.exe
AddRemove-MKLOL - c:\program files\MKJogo\MKLOL\MKuInst.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Home Edition\kerneld.wnt"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1237565898-1862580291-3482752318-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1237565898-1862580291-3482752318-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'Explorer.exe'(4216)
c:\windows\System32\SyncCenter.dll
c:\windows\system32\FXSRESM.DLL
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\atieclxx.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Nero\Nero MediaHome 4\NMMediaServerService.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
c:\windows\servicing\TrustedInstaller.exe
c:\windows\system32\conhost.exe
c:\program files\LOLReplay\LOLRecorder.exe
c:\windows\System32\C2MP\TrayMenu.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\Common Files\Overwolf\0.79.21.0\OverwolfHelper.exe
c:\program files\Overwolf\0.79.21.0\OverwolfBrowser.exe
c:\windows\system32\sppsvc.exe
c:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\Common Files\Java\Java Update\jucheck.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-09-06  13:48:20 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2014-09-06 11:48
.
Vor Suchlauf: 7.623.471.104 Bytes frei
Nach Suchlauf: 8.788.586.496 Bytes frei
.
- - End Of File - - 5413388E5DBA1B351C05F023D8912C29
A36C5E4F47E84449FF07ED3517B43A31
         

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hallo!

Wenn ich Malwarebytes installiere kommen 3 Fehlermeldungen:

Interner Fehler Expension error Runtime Error at 79:177) External exception E06D736

Wenn ich dann das Programm starte kommt nichts.

Wenn ich über Malwarebytes Chameleon starte kommt der drucke ich ein blaues Feld. Dann kommt das schwarze Fenster.

dann kommt der Fehler: Failed to start the Update

Lass MBAM weg.

# AdwCleaner v3.309 - Bericht erstellt am 07/09/2014 um 20:37:54
# Aktualisiert 02/09/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : Holger - HOLGER-PC
# Gestartet von : C:\Users\Holger\Downloads\adwcleaner_3.309 (1).exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

[/!\] Nicht Gelöscht ( Junction ) : C:\Program Files\Gemeinsame Dateien
Ordner Gelöscht : C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieadcoanfjloocmfafkebdnfefmohngj
Ordner Gelöscht : C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mphpbdjcljebbcnfopfngmfdackbbdgf
Datei Gelöscht : C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Datei Gelöscht : C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17239


-\\ Mozilla Firefox v

-\\ Google Chrome v37.0.2062.103

[ Datei : C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3AEF6CD1-12FB-4095-BB5E-B8F007E34CBD&SearchSource=58&CUI=&UM=2&UP=SPEF674306-B5AD-44FD-8D8A-3D79F17072F0&q={searchTerms}&SSPV=
Gelöscht [Search Provider] : hxxp://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=DE&userid=ed5b3f27-bbe6-f323-ab02-5cbca443aaa8&searchtype=ds&q={searchTerms}&installDate=18/10/2013
Gelöscht [Search Provider] : hxxp://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=DE&userid=ed5b3f27-bbe6-f323-ab02-5cbca443aaa8&searchtype=ds&q={searchTerms}&installDate=18/10/2013
Gelöscht [Startup_urls] : hxxp://www.trovi.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3AEF6CD1-12FB-4095-BB5E-B8F007E34CBD&SearchSource=55&CUI=&UM=2&UP=SPEF674306-B5AD-44FD-8D8A-3D79F17072F0&SSPV=
Gelöscht [Extension] : fmlgoencnlndpglbocajlimaikjohmab
Gelöscht [Extension] : ieadcoanfjloocmfafkebdnfefmohngj
Gelöscht [Extension] : mphpbdjcljebbcnfopfngmfdackbbdgf

*************************

AdwCleaner[R0].txt - [7298 octets] - [21/10/2013 17:16:19]
AdwCleaner[R1].txt - [2464 octets] - [25/10/2013 15:30:02]
AdwCleaner[R2].txt - [18002 octets] - [06/09/2014 10:07:07]
AdwCleaner[R3].txt - [1751 octets] - [06/09/2014 10:31:25]
AdwCleaner[R4].txt - [2304 octets] - [07/09/2014 20:35:51]
AdwCleaner[S0].txt - [7039 octets] - [21/10/2013 17:49:05]
AdwCleaner[S1].txt - [2446 octets] - [25/10/2013 15:59:49]
AdwCleaner[S2].txt - [17437 octets] - [06/09/2014 10:10:43]
AdwCleaner[S3].txt - [1686 octets] - [06/09/2014 10:33:02]
AdwCleaner[S4].txt - [2894 octets] - [07/09/2014 20:37:54]

########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [2954 octets] ##########
         

Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x86
Ran by Holger on 07.09.2014 at 20:43:29,17
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"



~~~ Chrome

Successfully deleted: [Folder] C:\Users\Holger\appdata\local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh
Successfully deleted: [Folder] C:\Users\Holger\appdata\local\Google\Chrome\User Data\Default\Extensions\ieadcoanfjloocmfafkebdnfefmohngj
Successfully deleted: [Folder] C:\Users\Holger\appdata\local\Google\Chrome\User Data\Default\Extensions\mphpbdjcljebbcnfopfngmfdackbbdgf
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07.09.2014 at 20:48:41,56
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 07-09-2014
Ran by Holger (administrator) on HOLGER-PC on 07-09-2014 20:52:38
Running from C:\Users\Holger\Downloads
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\BBSvc.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
(Nero AG) C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe
(pdfforge GmbH) C:\Program Files\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files\PDF Architect\ConversionService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Overwolf LTD) C:\Program Files\Overwolf\Overwolf.exe
(LOL Replay) C:\Program Files\LOLReplay\LOLRecorder.exe
() C:\Windows\System32\C2MP\TrayMenu.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_14_0_0_145_ActiveX.exe
(Overwolf LTD) C:\Program Files\Common Files\Overwolf\0.79.21.0\OverwolfHelper.exe
() C:\Program Files\Overwolf\0.79.21.0\OverwolfBrowser.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(MalwareBytes) C:\Program Files\ Malwarebytes Anti-Malware \Chameleon\Windows\mbam-chameleon.pif
() C:\Program Files\ Malwarebytes Anti-Malware \Chameleon\Windows\mbam-killer.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-14] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [747264 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [Nero MediaHome 4] => C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe [5178664 2010-10-26] (Nero AG)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3478752 2012-12-18] (Adobe Systems Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.)
HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-08-31] (Microsoft Corporation)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [Nero MediaHome 4] => C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe [5178664 2010-10-26] (Nero AG)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [MKLOL] => C:\Program Files\MKJogo\MKLOL\Bin\MKIM.exe [1089736 2014-08-28] ()
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [Overwolf] => C:\Program Files\Overwolf\Overwolf.exe [39712 2014-08-28] (Overwolf LTD)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Nero MediaHome 4] => C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe [5178664 2010-10-26] (Nero AG)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [MKLOL] => C:\Program Files\MKJogo\MKLOL\Bin\MKIM.exe [1089736 2014-08-28] ()
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Overwolf] => C:\Program Files\Overwolf\Overwolf.exe [39712 2014-08-28] (Overwolf LTD)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk
ShortcutTarget: LOLRecorder.lnk -> C:\Program Files\LOLReplay\LOLRecorder.exe (LOL Replay)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TrayMenu.lnk
ShortcutTarget: TrayMenu.lnk -> C:\Windows\System32\C2MP\TrayMenu.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: http=127.0.0.1:49220;https=127.0.0.1:49220
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x0ACB0707D5C8CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO: No Name -> {41564952-412D-5637-00A7-7A786E7484D7} ->  No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File
Toolbar: HKLM - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @Nero.com/KM -> C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt [2013-10-21]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-02-09]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR DefaultSearchKeyword: Default -> trovi.search
CHR DefaultSearchURL: Default -> hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3AEF6CD1-12FB-4095-BB5E-B8F007E34CBD&SearchSource=58&CUI=&UM=2&UP=SPEF674306-B5AD-44FD-8D8A-3D79F17072F0&q={searchTerms}&SSPV=
CHR DefaultSuggestURL: Default -> hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}
CHR CustomProfile: C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]
CHR Extension: (YouTube) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-08]
CHR Extension: (Google-Suche) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-08]
CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2014-02-23]
CHR Extension: (Avira Browser Safety) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-20]
CHR Extension: (BonanzaDeals) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieadcoanfjloocmfafkebdnfefmohngj [2014-09-07]
CHR Extension: (DealPly Germany) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mphpbdjcljebbcnfopfngmfdackbbdgf [2014-09-07]
CHR Extension: (Google Wallet) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-15]
CHR Extension: (Google Mail) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-08]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2012-09-23]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1021008 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166296 2014-08-22] (APN LLC.)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1890128 2014-09-04] (LogMeIn Inc.)
R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [375056 2014-08-08] (LogMeIn, Inc.)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 NeroMediaHomeService.4; C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe [517416 2010-10-26] (Nero AG)
S3 OverwolfUpdater; C:\Program Files\Overwolf\OverwolfUpdater.exe [998176 2014-08-28] (Overwolf LTD)
R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-27] (Avira Operations GmbH & Co. KG)
S3 EverestDriver; C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt [7168 2005-08-18] () [File not signed]
R3 FETNDIS; C:\Windows\System32\DRIVERS\fetnd6.sys [44032 2009-07-14] (VIA Technologies, Inc.              )
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [22560 2013-08-31] (REALiX(tm))
R3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [74456 2014-09-07] (Malwarebytes Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Holger\AppData\Local\Temp\catchme.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-07 20:52 - 2014-09-07 20:52 - 00000000 ____D () C:\Users\Holger\Downloads\FRST-OlderVersion
2014-09-07 20:48 - 2014-09-07 20:48 - 00001459 _____ () C:\Users\Holger\Desktop\JRT.txt
2014-09-07 20:41 - 2014-09-07 20:41 - 01016261 _____ (Thisisu) C:\Users\Holger\Desktop\JRT.exe
2014-09-07 20:35 - 2014-09-07 20:35 - 01370483 _____ () C:\Users\Holger\Downloads\adwcleaner_3.309 (1).exe
2014-09-07 20:33 - 2014-09-07 20:33 - 00000000 _____ () C:\Users\Holger\Downloads\adwcleaner_3.309.exe.a5w4ph0.partial
2014-09-07 13:06 - 2014-09-07 13:06 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-07 13:06 - 2014-09-07 13:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-07 13:05 - 2014-09-07 20:50 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-07 13:05 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-07 13:05 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-07 13:03 - 2014-09-07 13:04 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Holger\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-06 13:55 - 2014-09-06 13:56 - 00000000 ____D () C:\Users\Holger\Downloads\Bibi.und.Tina.Der.Film.2014.German.BDRip.AC3.XViD-CiNEDOME
2014-09-06 13:48 - 2014-09-06 13:48 - 00021393 _____ () C:\ComboFix.txt
2014-09-06 13:23 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-09-06 13:23 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-09-06 13:23 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-09-06 13:23 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-09-06 13:23 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-09-06 13:23 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-09-06 13:23 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-09-06 13:23 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-09-06 13:22 - 2014-09-06 13:48 - 00000000 ____D () C:\Qoobox
2014-09-06 13:22 - 2014-09-06 13:45 - 00000000 ____D () C:\Windows\erdnt
2014-09-06 13:21 - 2014-09-06 13:21 - 05576440 ____R (Swearware) C:\Users\Holger\Desktop\ComboFix.exe
2014-09-06 13:13 - 2014-09-06 13:13 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Holger\Downloads\revosetup95.exe
2014-09-06 13:13 - 2014-09-06 13:13 - 00001226 _____ () C:\Users\Holger\Desktop\Revo Uninstaller.lnk
2014-09-06 13:13 - 2014-09-06 13:13 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-06 12:36 - 2014-09-06 12:37 - 00038955 _____ () C:\Users\Holger\Downloads\Addition.txt
2014-09-06 12:34 - 2014-09-07 20:52 - 00018588 _____ () C:\Users\Holger\Downloads\FRST.txt
2014-09-06 12:34 - 2014-09-07 20:52 - 00000000 ____D () C:\FRST
2014-09-06 12:33 - 2014-09-07 20:52 - 01097728 _____ (Farbar) C:\Users\Holger\Downloads\FRST.exe
2014-09-06 12:28 - 2014-09-06 12:28 - 00142704 _____ () C:\Windows\Minidump\090614-18765-01.dmp
2014-09-06 10:09 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-09-06 09:54 - 2014-09-06 09:54 - 00142704 _____ () C:\Windows\Minidump\090614-18390-01.dmp
2014-09-06 09:45 - 2014-09-06 09:44 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Desktop\OTH.scr
2014-09-06 09:44 - 2014-09-06 09:44 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Downloads\OTH.scr
2014-09-06 09:25 - 2014-09-06 10:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
2014-09-06 09:25 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-09-06 09:23 - 2014-09-06 09:23 - 00000000 ____D () C:\Program Files\RCP
2014-09-06 08:59 - 2014-09-06 08:59 - 00000000 ____D () C:\Users\Holger\Downloads\ec5d398
2014-09-06 08:56 - 2014-09-06 08:56 - 17929263 _____ () C:\Users\Holger\Downloads\ec5d398.rar
2014-09-06 08:34 - 2014-09-06 08:34 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-SL-505
2014-09-06 01:24 - 2014-09-06 01:24 - 00001892 _____ () C:\Users\Public\Desktop\NosTale.lnk
2014-09-06 01:24 - 2014-09-06 01:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nostale(DE)
2014-09-06 01:10 - 2014-09-07 08:46 - 00000000 ____D () C:\Users\Holger\Downloads\Gameforge Live
2014-09-06 01:10 - 2014-09-06 01:18 - 00000000 ____D () C:\Program Files\GameforgeLive
2014-09-06 01:10 - 2014-09-06 01:10 - 00001029 _____ () C:\Users\Public\Desktop\Gameforge Live.lnk
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\AppData\Local\Gameforge4d
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-09-06 01:02 - 2014-09-06 01:03 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup (1).exe
2014-09-06 00:59 - 2014-09-06 01:00 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup.exe
2014-09-05 23:53 - 2014-09-05 23:53 - 00001919 _____ () C:\Users\Public\Desktop\Overwolf.lnk
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\ProgramData\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Common Files\Overwolf
2014-09-05 23:52 - 2014-09-07 20:41 - 00000000 ____D () C:\Users\Holger\AppData\Local\Overwolf
2014-09-05 23:52 - 2014-09-05 23:52 - 01248032 _____ (Overwolf) C:\Users\Holger\Downloads\OverwolfInstaller.exe
2014-09-05 23:25 - 2014-09-07 08:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-05 23:24 - 2014-09-07 20:39 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-05 23:24 - 2014-09-05 23:50 - 00000000 ____D () C:\Fraps
2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-09-05 23:23 - 2014-09-05 23:23 - 02326976 _____ (Beepa Pty Ltd) C:\Users\Holger\Desktop\setup.exe
2014-09-05 23:23 - 2014-09-05 23:23 - 00001026 _____ () C:\Users\Holger\Desktop\FLVM Player.lnk
2014-09-05 23:22 - 2014-09-05 23:22 - 00528968 _____ (Eilio.-.Installer · sl) C:\Users\Holger\Downloads\Fraps.exe
2014-09-05 17:59 - 2014-09-05 18:00 - 00000000 ____D () C:\Users\Holger\Downloads\A.Million.Ways.to.Die.in.the.West.2014.BDRip.Line.Dubbed.German.XviD-POE
2014-09-05 17:58 - 2014-09-05 17:59 - 252028961 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part7.rar
2014-09-05 17:56 - 2014-09-05 17:58 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part6.rar
2014-09-05 17:56 - 2014-09-05 17:58 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part5.rar
2014-09-05 17:56 - 2014-09-05 17:58 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part4.rar
2014-09-05 17:54 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part3.rar
2014-09-05 17:54 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part2.rar
2014-09-05 17:54 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part1.rar
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\Program Files\LogMeIn Hamachi
2014-08-31 14:06 - 2014-08-31 14:06 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-XVID-DL-504
2014-08-28 16:37 - 2014-08-28 16:39 - 616998912 _____ () C:\Users\Holger\Downloads\ubcd531.iso
2014-08-28 16:24 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 16:24 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-27 20:51 - 2014-08-27 20:51 - 00000000 ____D () C:\Users\Holger\Downloads\Bad.Neighbors.2014.German.BDRiP.AC3.XVID-CRG
2014-08-23 14:57 - 2014-08-23 14:58 - 00000000 ____D () C:\Users\Holger\Downloads\Die.Bestimmung.Divergent.2014.German.BDRiP.AC3.XviD-TOD
2014-08-23 14:53 - 2014-08-23 14:57 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part1.rar
2014-08-23 14:53 - 2014-08-23 14:57 - 480117824 _____ () C:\Users\Holger\Downloads\17567198qw7.part3.rar
2014-08-23 14:53 - 2014-08-23 14:56 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part2.rar
2014-08-23 11:38 - 2014-08-22 22:06 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-502
2014-08-23 11:23 - 2014-08-23 11:23 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-503
2014-08-23 07:22 - 2014-08-23 07:22 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-22 05:42 - 2014-08-24 13:18 - 00041187 _____ () C:\Users\Holger\Downloads\ESt2013_Timmermann_Rita.elfo
2014-08-21 17:38 - 2014-08-21 17:38 - 00001191 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\Program Files\ElsterFormular
2014-08-21 17:35 - 2014-08-21 17:37 - 77405552 _____ (Landesfinanzdirektion Thüringen) C:\Users\Holger\Downloads\ElsterFormular-15.2.20140326p.exe
2014-08-20 18:18 - 2011-10-20 17:51 - 1064916992 _____ () C:\Users\Holger\Downloads\Winnie.Puuh.2011.BDRip.German.AC3-XviD-Oxy.avi
2014-08-19 17:33 - 2013-06-15 15:04 - 00000173 _____ () C:\Users\Holger\Downloads\SHARE-ONLINE Premium-Account.url
2014-08-19 17:33 - 2013-06-15 14:32 - 00000113 _____ () C:\Users\Holger\Downloads\UPLOADED Premium-Account.url
2014-08-19 17:25 - 2014-08-19 17:28 - 00000000 ____D () C:\Users\Holger\Downloads\Captain.America.2.The.Return.of.the.First.Avenger.2014.German.BDRiP.AC3.XviD-TOD
2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\Bundesliga Kicker Sonderheft 14_15
2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\__MACOSX
2014-08-16 18:00 - 2014-08-16 18:00 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\MPC
2014-08-16 17:59 - 2014-08-16 17:59 - 00002122 _____ () C:\Users\Public\Desktop\KODAK Create@Home Software (für dm).lnk
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\Users\Holger\.kodakch
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KODAK Create@Home Software (für dm)
2014-08-16 17:58 - 2014-08-18 16:35 - 00000000 ____D () C:\Program Files\KODAK Create@Home Software (für dm)
2014-08-16 17:57 - 2014-08-16 17:57 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Eastman Kodak Company
2014-08-16 17:55 - 2014-08-16 17:56 - 102239928 _____ (Eastman Kodak Company) C:\Users\Holger\Downloads\KodakCreateHome.exe
2014-08-14 18:10 - 2014-04-23 23:16 - 00000119 _____ () C:\Users\Holger\Downloads\Premium @ oboom.com.url
2014-08-14 18:10 - 2014-04-22 04:21 - 00000119 _____ () C:\Users\Holger\Downloads\Premium @ uploaded.net.url
2014-08-14 18:10 - 2014-04-22 04:21 - 00000119 _____ () C:\Users\Holger\Downloads\Premium @ share-online.biz.url
2014-08-14 18:09 - 2014-08-14 18:10 - 00000000 ____D () C:\Users\Holger\Downloads\Coyote.Ugly.2000.Unrated.Extended.Edition.AC3D.BDRip.XviD-HQSD
2014-08-14 17:35 - 2014-08-14 17:35 - 39354003 _____ (Fomanu AG ) C:\Users\Holger\Downloads\designer_20.exe.boc5hvl.partial
2014-08-14 03:05 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-14 03:05 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-14 03:05 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-14 03:05 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 18:55 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 18:55 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 18:55 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 18:55 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 18:55 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 18:55 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 18:55 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 18:55 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 18:55 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 18:55 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 18:55 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 18:55 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 18:55 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 18:55 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 18:55 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 18:55 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 18:55 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 18:55 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 18:55 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 18:55 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 18:55 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 18:55 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 18:55 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 18:55 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 18:55 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 18:55 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 18:55 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 18:55 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 18:55 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 18:55 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 18:55 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 18:55 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 18:55 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 18:55 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-13 18:55 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-13 18:54 - 2014-08-07 03:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 18:54 - 2014-08-07 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 18:54 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 18:54 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-13 18:54 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 18:54 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 18:54 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 18:54 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 18:50 - 2014-08-13 18:52 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rev
2014-08-13 18:50 - 2014-08-13 18:52 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rar
2014-08-13 18:50 - 2014-08-13 18:51 - 176763834 _____ () C:\Users\Holger\Downloads\KKW1OST.part2.rar
2014-08-11 05:19 - 2014-08-10 09:04 - 00000000 ____D () C:\Users\Holger\Downloads\Focus Magazin 33-2014 Deutsch
2014-08-11 05:18 - 2014-08-11 05:18 - 16311072 _____ () C:\Users\Holger\Downloads\ydfgb4532bhjkl.rar
2014-08-10 22:16 - 2014-08-10 22:17 - 00000000 ____D () C:\Users\Holger\Downloads\Person.of.Interest.S03E19.Frank.Mercer.und.Betty.Harris.German.Dubbed.DL.iTunesHD.x264-TVS
2014-08-10 22:16 - 2014-08-10 22:16 - 17260579 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part4.rar
2014-08-10 22:15 - 2014-08-10 22:16 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part3.rar
2014-08-10 22:15 - 2014-08-10 22:16 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part2.rar
2014-08-10 22:15 - 2014-08-10 22:16 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part1.rar
2014-08-10 22:15 - 2014-08-10 22:15 - 00012471 _____ () C:\Users\Holger\Downloads\xix.nfo
2014-08-10 22:15 - 2014-08-10 22:15 - 00006211 _____ () C:\Users\Holger\Downloads\ncode_imageresizer.js
2014-08-09 11:24 - 2014-08-09 11:24 - 00000000 ____D () C:\Users\Holger\Downloads\o594459t05q2e4i
2014-08-09 11:18 - 2014-08-28 20:05 - 00000000 ____D () C:\Users\Holger\Downloads\HTEC21GA3BRx6
2014-08-09 11:10 - 2014-08-09 11:14 - 550000000 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part2.rar
2014-08-09 11:10 - 2014-08-09 11:14 - 550000000 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part1.rar
2014-08-09 11:10 - 2014-08-09 11:13 - 330317416 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part3.rar
2014-08-09 10:40 - 2014-08-09 09:16 - 19648512 _____ () C:\Users\Holger\Downloads\sample.avi
2014-08-09 10:40 - 2014-08-09 09:13 - 00001472 _____ () C:\Users\Holger\Downloads\nfo.nfo
2014-08-09 10:34 - 2014-08-09 10:35 - 110100480 _____ () C:\Users\Holger\Downloads\PdARTSMDCiW.part02.rar
2014-08-09 10:34 - 2014-08-09 10:35 - 110100480 _____ () C:\Users\Holger\Downloads\PdARTSMDCiW.part01.rar
2014-08-09 01:08 - 2014-08-09 01:08 - 00000000 ____D () C:\Users\Holger\Tracing
2014-08-09 01:07 - 2014-08-09 01:07 - 00001251 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-08-09 01:07 - 2014-08-09 01:07 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-08-09 01:07 - 2014-08-09 01:07 - 00000000 ____D () C:\Windows\de
2014-08-09 01:07 - 2013-02-05 22:57 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys
2014-08-09 01:06 - 2014-08-09 01:06 - 00002432 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00001404 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00001320 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2014-08-09 01:05 - 2014-08-09 01:07 - 00000000 ____D () C:\Program Files\Windows Live
2014-08-09 01:05 - 2014-08-09 01:05 - 00000000 ____D () C:\Windows\PCHEALTH
2014-08-09 01:03 - 2014-08-09 01:03 - 00002145 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00002082 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00002082 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00000000 ___RD () C:\Users\Holger\SkyDrive
2014-08-09 01:03 - 2014-08-09 01:03 - 00000000 ____D () C:\Program Files\Microsoft SkyDrive
2014-08-09 01:02 - 2014-08-09 01:02 - 00000000 ____D () C:\ProgramData\Microsoft SkyDrive
2014-08-09 01:01 - 2014-08-09 01:09 - 00000000 ____D () C:\Users\Holger\AppData\Local\Windows Live
2014-08-09 01:01 - 2014-08-09 01:01 - 00000000 ____D () C:\Program Files\Common Files\Windows Live
2014-08-09 01:00 - 2014-08-09 01:01 - 142602520 _____ (Microsoft Corporation) C:\Users\Holger\Downloads\wlsetup-all_16.4.3508.0205.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-07 20:54 - 2014-09-06 12:34 - 00018588 _____ () C:\Users\Holger\Downloads\FRST.txt
2014-09-07 20:54 - 2013-09-08 13:33 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-07 20:52 - 2014-09-07 20:52 - 00000000 ____D () C:\Users\Holger\Downloads\FRST-OlderVersion
2014-09-07 20:52 - 2014-09-06 12:34 - 00000000 ____D () C:\FRST
2014-09-07 20:52 - 2014-09-06 12:33 - 01097728 _____ (Farbar) C:\Users\Holger\Downloads\FRST.exe
2014-09-07 20:50 - 2014-09-07 13:05 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-07 20:48 - 2014-09-07 20:48 - 00001459 _____ () C:\Users\Holger\Desktop\JRT.txt
2014-09-07 20:47 - 2009-07-14 06:34 - 00026752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-07 20:47 - 2009-07-14 06:34 - 00026752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-07 20:41 - 2014-09-07 20:41 - 01016261 _____ (Thisisu) C:\Users\Holger\Desktop\JRT.exe
2014-09-07 20:41 - 2014-09-05 23:52 - 00000000 ____D () C:\Users\Holger\AppData\Local\Overwolf
2014-09-07 20:40 - 2014-06-15 19:05 - 00000000 ____D () C:\Users\Holger\AppData\Local\LogMeIn Hamachi
2014-09-07 20:39 - 2014-09-05 23:24 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-07 20:39 - 2013-09-08 13:32 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-07 20:39 - 2013-09-06 13:34 - 00575882 _____ () C:\Windows\PFRO.log
2014-09-07 20:39 - 2013-09-06 13:34 - 00069456 _____ () C:\Windows\setupact.log
2014-09-07 20:39 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-07 20:38 - 2013-10-21 17:16 - 00000000 ____D () C:\AdwCleaner
2014-09-07 20:38 - 2013-08-27 16:00 - 01646454 _____ () C:\Windows\WindowsUpdate.log
2014-09-07 20:35 - 2014-09-07 20:35 - 01370483 _____ () C:\Users\Holger\Downloads\adwcleaner_3.309 (1).exe
2014-09-07 20:33 - 2014-09-07 20:33 - 00000000 _____ () C:\Users\Holger\Downloads\adwcleaner_3.309.exe.a5w4ph0.partial
2014-09-07 20:03 - 2013-08-27 16:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-07 18:21 - 2013-08-30 14:49 - 00000000 ____D () C:\Users\Holger\AppData\Local\PMB Files
2014-09-07 13:06 - 2014-09-07 13:06 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-07 13:06 - 2014-09-07 13:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-07 13:06 - 2014-06-11 19:52 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-09-07 13:04 - 2014-09-07 13:03 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Holger\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-07 11:06 - 2013-10-18 21:54 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\.minecraft
2014-09-07 08:46 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\Downloads\Gameforge Live
2014-09-07 08:20 - 2014-09-05 23:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-07 08:14 - 2013-12-20 14:22 - 00000000 ____D () C:\Users\NeroMediaHomeUser.4
2014-09-06 13:56 - 2014-09-06 13:55 - 00000000 ____D () C:\Users\Holger\Downloads\Bibi.und.Tina.Der.Film.2014.German.BDRip.AC3.XViD-CiNEDOME
2014-09-06 13:50 - 2013-08-29 18:05 - 00000000 ____D () C:\Users\Holger\AppData\Local\JDownloader v2.0
2014-09-06 13:48 - 2014-09-06 13:48 - 00021393 _____ () C:\ComboFix.txt
2014-09-06 13:48 - 2014-09-06 13:22 - 00000000 ____D () C:\Qoobox
2014-09-06 13:48 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2014-09-06 13:48 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-09-06 13:45 - 2014-09-06 13:22 - 00000000 ____D () C:\Windows\erdnt
2014-09-06 13:42 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2014-09-06 13:34 - 2013-08-27 16:45 - 00000000 ____D () C:\ProgramData\TEMP
2014-09-06 13:21 - 2014-09-06 13:21 - 05576440 ____R (Swearware) C:\Users\Holger\Desktop\ComboFix.exe
2014-09-06 13:13 - 2014-09-06 13:13 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Holger\Downloads\revosetup95.exe
2014-09-06 13:13 - 2014-09-06 13:13 - 00001226 _____ () C:\Users\Holger\Desktop\Revo Uninstaller.lnk
2014-09-06 13:13 - 2014-09-06 13:13 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-06 12:37 - 2014-09-06 12:36 - 00038955 _____ () C:\Users\Holger\Downloads\Addition.txt
2014-09-06 12:28 - 2014-09-06 12:28 - 00142704 _____ () C:\Windows\Minidump\090614-18765-01.dmp
2014-09-06 12:28 - 2013-11-07 21:31 - 00000000 ____D () C:\Windows\Minidump
2014-09-06 12:28 - 2013-08-27 16:08 - 00000000 ____D () C:\Users\Holger
2014-09-06 10:28 - 2014-09-06 09:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
2014-09-06 10:11 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-06 10:11 - 2009-07-14 04:04 - 00000505 _____ () C:\Windows\win.ini
2014-09-06 09:54 - 2014-09-06 09:54 - 00142704 _____ () C:\Windows\Minidump\090614-18390-01.dmp
2014-09-06 09:44 - 2014-09-06 09:45 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Desktop\OTH.scr
2014-09-06 09:44 - 2014-09-06 09:44 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Downloads\OTH.scr
2014-09-06 09:23 - 2014-09-06 09:23 - 00000000 ____D () C:\Program Files\RCP
2014-09-06 09:17 - 2013-08-27 16:22 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\vlc
2014-09-06 08:59 - 2014-09-06 08:59 - 00000000 ____D () C:\Users\Holger\Downloads\ec5d398
2014-09-06 08:56 - 2014-09-06 08:56 - 17929263 _____ () C:\Users\Holger\Downloads\ec5d398.rar
2014-09-06 08:34 - 2014-09-06 08:34 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-SL-505
2014-09-06 01:24 - 2014-09-06 01:24 - 00001892 _____ () C:\Users\Public\Desktop\NosTale.lnk
2014-09-06 01:24 - 2014-09-06 01:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nostale(DE)
2014-09-06 01:18 - 2014-09-06 01:10 - 00000000 ____D () C:\Program Files\GameforgeLive
2014-09-06 01:10 - 2014-09-06 01:10 - 00001029 _____ () C:\Users\Public\Desktop\Gameforge Live.lnk
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\AppData\Local\Gameforge4d
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-09-06 01:03 - 2014-09-06 01:02 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup (1).exe
2014-09-06 01:00 - 2014-09-06 00:59 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup.exe
2014-09-05 23:53 - 2014-09-05 23:53 - 00001919 _____ () C:\Users\Public\Desktop\Overwolf.lnk
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\ProgramData\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Common Files\Overwolf
2014-09-05 23:52 - 2014-09-05 23:52 - 01248032 _____ (Overwolf) C:\Users\Holger\Downloads\OverwolfInstaller.exe
2014-09-05 23:50 - 2014-09-05 23:24 - 00000000 ____D () C:\Fraps
2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-09-05 23:23 - 2014-09-05 23:23 - 02326976 _____ (Beepa Pty Ltd) C:\Users\Holger\Desktop\setup.exe
2014-09-05 23:23 - 2014-09-05 23:23 - 00001026 _____ () C:\Users\Holger\Desktop\FLVM Player.lnk
2014-09-05 23:22 - 2014-09-05 23:22 - 00528968 _____ (Eilio.-.Installer · sl) C:\Users\Holger\Downloads\Fraps.exe
2014-09-05 18:00 - 2014-09-05 17:59 - 00000000 ____D () C:\Users\Holger\Downloads\A.Million.Ways.to.Die.in.the.West.2014.BDRip.Line.Dubbed.German.XviD-POE
2014-09-05 17:59 - 2014-09-05 17:58 - 252028961 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part7.rar
2014-09-05 17:58 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part6.rar
2014-09-05 17:58 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part5.rar
2014-09-05 17:58 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part4.rar
2014-09-05 17:56 - 2014-09-05 17:54 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part3.rar
2014-09-05 17:56 - 2014-09-05 17:54 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part2.rar
2014-09-05 17:56 - 2014-09-05 17:54 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part1.rar
2014-09-05 08:59 - 2013-09-08 13:34 - 00002121 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\Program Files\LogMeIn Hamachi
2014-09-05 08:42 - 2014-06-18 19:14 - 00000896 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-08-31 14:06 - 2014-08-31 14:06 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-XVID-DL-504
2014-08-29 07:33 - 2009-07-14 06:33 - 00277824 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-28 20:05 - 2014-08-09 11:18 - 00000000 ____D () C:\Users\Holger\Downloads\HTEC21GA3BRx6
2014-08-28 20:04 - 2013-08-27 16:14 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-28 20:02 - 2013-08-30 14:49 - 00000000 ____D () C:\ProgramData\PMB Files
2014-08-28 16:39 - 2014-08-28 16:37 - 616998912 _____ () C:\Users\Holger\Downloads\ubcd531.iso
2014-08-27 20:51 - 2014-08-27 20:51 - 00000000 ____D () C:\Users\Holger\Downloads\Bad.Neighbors.2014.German.BDRiP.AC3.XVID-CRG
2014-08-24 13:18 - 2014-08-22 05:42 - 00041187 _____ () C:\Users\Holger\Downloads\ESt2013_Timmermann_Rita.elfo
2014-08-23 14:58 - 2014-08-23 14:57 - 00000000 ____D () C:\Users\Holger\Downloads\Die.Bestimmung.Divergent.2014.German.BDRiP.AC3.XviD-TOD
2014-08-23 14:57 - 2014-08-23 14:53 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part1.rar
2014-08-23 14:57 - 2014-08-23 14:53 - 480117824 _____ () C:\Users\Holger\Downloads\17567198qw7.part3.rar
2014-08-23 14:56 - 2014-08-23 14:53 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part2.rar
2014-08-23 11:23 - 2014-08-23 11:23 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-503
2014-08-23 07:22 - 2014-08-23 07:22 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-23 07:22 - 2013-10-04 08:57 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-23 07:22 - 2013-08-27 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-23 07:22 - 2013-08-27 17:19 - 00000000 ____D () C:\Program Files\Avira
2014-08-23 03:46 - 2014-08-28 16:24 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 02:42 - 2014-08-28 16:24 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 22:06 - 2014-08-23 11:38 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-502
2014-08-21 17:39 - 2013-09-03 16:40 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\elsterformular
2014-08-21 17:38 - 2014-08-21 17:38 - 00001191 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\Program Files\ElsterFormular
2014-08-21 17:38 - 2013-09-03 16:40 - 00000000 ____D () C:\ProgramData\elsterformular
2014-08-21 17:37 - 2014-08-21 17:35 - 77405552 _____ (Landesfinanzdirektion Thüringen) C:\Users\Holger\Downloads\ElsterFormular-15.2.20140326p.exe
2014-08-20 18:27 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-08-20 17:46 - 2013-08-27 17:19 - 00000000 ____D () C:\ProgramData\Avira
2014-08-19 17:28 - 2014-08-19 17:25 - 00000000 ____D () C:\Users\Holger\Downloads\Captain.America.2.The.Return.of.the.First.Avenger.2014.German.BDRiP.AC3.XviD-TOD
2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\Bundesliga Kicker Sonderheft 14_15
2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\__MACOSX
2014-08-18 16:35 - 2014-08-16 17:58 - 00000000 ____D () C:\Program Files\KODAK Create@Home Software (für dm)
2014-08-16 19:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-16 18:00 - 2014-08-16 18:00 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\MPC
2014-08-16 17:59 - 2014-08-16 17:59 - 00002122 _____ () C:\Users\Public\Desktop\KODAK Create@Home Software (für dm).lnk
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\Users\Holger\.kodakch
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KODAK Create@Home Software (für dm)
2014-08-16 17:57 - 2014-08-16 17:57 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Eastman Kodak Company
2014-08-16 17:56 - 2014-08-16 17:55 - 102239928 _____ (Eastman Kodak Company) C:\Users\Holger\Downloads\KodakCreateHome.exe
2014-08-14 18:10 - 2014-08-14 18:09 - 00000000 ____D () C:\Users\Holger\Downloads\Coyote.Ugly.2000.Unrated.Extended.Edition.AC3D.BDRip.XviD-HQSD
2014-08-14 17:35 - 2014-08-14 17:35 - 39354003 _____ (Fomanu AG ) C:\Users\Holger\Downloads\designer_20.exe.boc5hvl.partial
2014-08-14 03:45 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-08-14 03:29 - 2014-05-07 03:01 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-14 03:29 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-14 03:13 - 2014-01-18 10:07 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-14 03:09 - 2014-01-18 10:07 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 18:52 - 2014-08-13 18:50 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rev
2014-08-13 18:52 - 2014-08-13 18:50 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rar
2014-08-13 18:51 - 2014-08-13 18:50 - 176763834 _____ () C:\Users\Holger\Downloads\KKW1OST.part2.rar
2014-08-11 05:18 - 2014-08-11 05:18 - 16311072 _____ () C:\Users\Holger\Downloads\ydfgb4532bhjkl.rar
2014-08-10 22:17 - 2014-08-10 22:16 - 00000000 ____D () C:\Users\Holger\Downloads\Person.of.Interest.S03E19.Frank.Mercer.und.Betty.Harris.German.Dubbed.DL.iTunesHD.x264-TVS
2014-08-10 22:16 - 2014-08-10 22:16 - 17260579 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part4.rar
2014-08-10 22:16 - 2014-08-10 22:15 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part3.rar
2014-08-10 22:16 - 2014-08-10 22:15 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part2.rar
2014-08-10 22:16 - 2014-08-10 22:15 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part1.rar
2014-08-10 22:15 - 2014-08-10 22:15 - 00012471 _____ () C:\Users\Holger\Downloads\xix.nfo
2014-08-10 22:15 - 2014-08-10 22:15 - 00006211 _____ () C:\Users\Holger\Downloads\ncode_imageresizer.js
2014-08-10 09:04 - 2014-08-11 05:19 - 00000000 ____D () C:\Users\Holger\Downloads\Focus Magazin 33-2014 Deutsch
2014-08-09 11:24 - 2014-08-09 11:24 - 00000000 ____D () C:\Users\Holger\Downloads\o594459t05q2e4i
2014-08-09 11:14 - 2014-08-09 11:10 - 550000000 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part2.rar
2014-08-09 11:14 - 2014-08-09 11:10 - 550000000 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part1.rar
2014-08-09 11:13 - 2014-08-09 11:10 - 330317416 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part3.rar
2014-08-09 10:35 - 2014-08-09 10:34 - 110100480 _____ () C:\Users\Holger\Downloads\PdARTSMDCiW.part02.rar
2014-08-09 10:35 - 2014-08-09 10:34 - 110100480 _____ () C:\Users\Holger\Downloads\PdARTSMDCiW.part01.rar
2014-08-09 09:16 - 2014-08-09 10:40 - 19648512 _____ () C:\Users\Holger\Downloads\sample.avi
2014-08-09 09:13 - 2014-08-09 10:40 - 00001472 _____ () C:\Users\Holger\Downloads\nfo.nfo
2014-08-09 01:09 - 2014-08-09 01:01 - 00000000 ____D () C:\Users\Holger\AppData\Local\Windows Live
2014-08-09 01:08 - 2014-08-09 01:08 - 00000000 ____D () C:\Users\Holger\Tracing
2014-08-09 01:07 - 2014-08-09 01:07 - 00001251 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-08-09 01:07 - 2014-08-09 01:07 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-08-09 01:07 - 2014-08-09 01:07 - 00000000 ____D () C:\Windows\de
2014-08-09 01:07 - 2014-08-09 01:05 - 00000000 ____D () C:\Program Files\Windows Live
2014-08-09 01:06 - 2014-08-09 01:06 - 00002432 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00001404 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00001320 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2014-08-09 01:05 - 2014-08-09 01:05 - 00000000 ____D () C:\Windows\PCHEALTH
2014-08-09 01:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-08-09 01:03 - 2014-08-09 01:03 - 00002145 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00002082 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00002082 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00000000 ___RD () C:\Users\Holger\SkyDrive
2014-08-09 01:03 - 2014-08-09 01:03 - 00000000 ____D () C:\Program Files\Microsoft SkyDrive
2014-08-09 01:02 - 2014-08-09 01:02 - 00000000 ____D () C:\ProgramData\Microsoft SkyDrive
2014-08-09 01:01 - 2014-08-09 01:01 - 00000000 ____D () C:\Program Files\Common Files\Windows Live
2014-08-09 01:01 - 2014-08-09 01:00 - 142602520 _____ (Microsoft Corporation) C:\Users\Holger\Downloads\wlsetup-all_16.4.3508.0205.exe

Some content of TEMP:
====================
C:\Users\Holger\AppData\Local\temp\avgnt.exe
C:\Users\Holger\AppData\Local\temp\proxy_vole4058197884328596846.dll
C:\Users\Holger\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-06 11:03

==================== End Of Log ============================
         

--- --- ---

--- --- ---

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

iach habe den ESET Online Scanner jetzt 24 Stunden am laufen und er ist bei 53 Prozent.

Ich habe jetzt abgebrochen und nochmal gestartet.

nach 3 Minuten ist er bei 7 Prozent und 61 Bedrohungen.

läuft er immer noch?

Heute Morgen um 06:00 Uhr lief er immer noch. Ich bin jetzt bei der Arbeit . Ich melde mich um 16 Uhr wieder. Warum läuft er so lange und warum wird soviel gefunden?

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=dcf0d2b4358e1a46beecd4066437984c
# engine=20070
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-09-10 03:52:51
# local_time=2014-09-10 05:52:51 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 49569 275744461 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 249501 161952362 0 0
# scanned=217575
# found=72
# cleaned=0
# scan_time=49307
sh=2671548167495E39329843E5DD8CF0B173859219 ft=1 fh=9bf2e40bfdf54f72 vn="Variante von MSIL/AdvancedSystemProtector.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ASP\AdvancedSystemProtector.exe.vir"
sh=7ADCD80E14C3E7A47BF8C8C2F0ADA286F5B4C16E ft=1 fh=e62981ea7f9835cd vn="Variante von MSIL/AdvancedSystemProtector.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ASP\AspManager.exe.vir"
sh=DB4023A8DFB2D12D61356A0126B2FB0C36C99645 ft=1 fh=708bce69133986f1 vn="Variante von MSIL/AdvancedSystemProtector.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ASP\scandll.dll.vir"
sh=475F248095D35E333ADF2F38B02424DEBEE83F04 ft=1 fh=62a3e0d8b40d4617 vn="Win32/Systweak.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ASP\SSDPTstub.exe.vir"
sh=AC874F39355CEABCAFC203C91DCE1516E452A144 ft=1 fh=a31b866c83daa41a vn="MSIL/AdvancedSystemProtector.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ASP\Troubleshooter\asp-fixer.com.vir"
sh=AC874F39355CEABCAFC203C91DCE1516E452A144 ft=1 fh=a31b866c83daa41a vn="MSIL/AdvancedSystemProtector.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ASP\Troubleshooter\asp-fixer.exe.vir"
sh=AC874F39355CEABCAFC203C91DCE1516E452A144 ft=1 fh=a31b866c83daa41a vn="MSIL/AdvancedSystemProtector.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ASP\Troubleshooter\asp-fixer.pif.vir"
sh=AC874F39355CEABCAFC203C91DCE1516E452A144 ft=1 fh=a31b866c83daa41a vn="MSIL/AdvancedSystemProtector.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ASP\Troubleshooter\asp-fixer.scr.vir"
sh=AC874F39355CEABCAFC203C91DCE1516E452A144 ft=1 fh=a31b866c83daa41a vn="MSIL/AdvancedSystemProtector.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ASP\Troubleshooter\firefox.com.vir"
sh=AC874F39355CEABCAFC203C91DCE1516E452A144 ft=1 fh=a31b866c83daa41a vn="MSIL/AdvancedSystemProtector.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ASP\Troubleshooter\iexplore.exe.vir"
sh=642716AFDDFCAA41EEDB11070CE3191070ED685B ft=1 fh=2fd62bfc8ca2e705 vn="Variante von MSIL/Solimba.AC evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\FLVM Player\FLVPlayerUninstaller.exe.vir"
sh=2E9D9C1239A31EE9C84EBA9D7AABC25FA56D6F1C ft=1 fh=97244264372b8dd0 vn="Variante von Win32/AdWare.EoRezo.AU Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\fst_de_169\freeSoftToday_widget.exe.vir"
sh=A014735657122944E2C578BC6FE0B406D119A8A7 ft=1 fh=65ae21a822087514 vn="Variante von Win32/AdWare.EoRezo.AU Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\fst_de_169\fst_de_169.exe.vir"
sh=2DB76E64C44398F284BB9607477FFAB286C822A5 ft=1 fh=a15fd42821542f57 vn="Variante von Win32/Toolbar.MyWebSearch.AE evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\RadioRage_4j\bar\1.bin\4jbarsvc.exe.vir"
sh=43057F202484834CAED5265AF9ADBD5C1C00C47C ft=1 fh=cbe7b8075d97fef6 vn="Variante von Win32/Toolbar.MyWebSearch.AC evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\RadioRage_4j\bar\1.bin\4jbrstub.dll.vir"
sh=3C2251BC6DBC556B960D82FC7211B6005A613A8A ft=1 fh=e2babb33b836a3b5 vn="Variante von Win32/Toolbar.MyWebSearch.AC evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\RadioRage_4j\bar\1.bin\ASSISTMONITOR.DLL.vir"
sh=10AB6F5BF2AE7B357A7E1BEE97AA30A6512DE7DE ft=1 fh=fc4a296bcfd5af48 vn="Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\Main\bin\CltMngSvc.exe.vir"
sh=BB6E4EFDCDDC5C876EF941A8E8FC8C37A558C6D3 ft=1 fh=5a3b188cd9c263c2 vn="möglicherweise Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\Main\bin\SPTool.dll.vir"
sh=6E92E96780D7A012AEC66D81A04C1C1644989A7D ft=1 fh=42eab3640c7f75db vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\Main\bin\uninstall.exe.vir"
sh=7F851F7F3AB08BB489A9E9553635ACFF24BD2F4F ft=1 fh=480bb73806aecf9e vn="Variante von Win32/Conduit.SearchProtect.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\SearchProtect\bin\cltmng.exe.vir"
sh=ED0BB5C058DD66D8CF7FC430901119E5FA9460E8 ft=1 fh=493186a480a7c1be vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\SearchProtect\bin\SPTool64.exe.vir"
sh=3ECB52E629A307F1154A11FFC420FEABA8805651 ft=1 fh=7eaccb99bfbac335 vn="Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\SearchProtect\bin\SPVC32.dll.vir"
sh=3009704625F497D74601071243D3260D3C026D48 ft=1 fh=29c0ddfe71de86ad vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\SearchProtect\bin\SPVC32Loader.dll.vir"
sh=3F252E848CE5BA3571A8FA3B9CE9FD8D7EE86634 ft=1 fh=af780bdc59dfdab5 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\SearchProtect\bin\SPVC64.dll.vir"
sh=68E215FD9A959DD28595B0DA25EC5100EFB98253 ft=1 fh=50730cf0e69141f8 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\SearchProtect\bin\SPVC64Loader.dll.vir"
sh=EBB8454D4017FE184FD4B1A4D390C8CE099213C1 ft=1 fh=438201fe522fde58 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\UI\bin\cltmngui.exe.vir"
sh=BA70DAC8FD53D2B903A13C124C4BD9A6FA61982E ft=1 fh=40a5876e639a69ea vn="Variante von Win32/BrowseFox.O evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ToggleMark\ToggleMarkbho.dll.vir"
sh=AE90D9A4246BBADCEE3BA238A0DD331B56A77448 ft=1 fh=b0857e9852de4c7b vn="Win32/BrowseFox.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ToggleMark\ToggleMarkUninstall.exe.vir"
sh=C536341C9260C56069CBB528E3A9A1561692B307 ft=1 fh=4bdc8dda8b2b0e6b vn="Variante von Win32/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ToggleMark\updateToggleMark.exe.vir"
sh=4EE8134A62B3B4A09D60C97E5A0010EAD7DF87E6 ft=1 fh=56797e8b5a593f5e vn="Win32/BrowseFox.N evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ToggleMark\bin\9a9157bb003e4fef8bd1.dll.vir"
sh=DC69656FCCB4501F644C09683C3DA7EC4078CFBB ft=1 fh=f0565109af27e025 vn="Variante von Win32/BrowseFox.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ToggleMark\bin\ToggleMark.BrowserAdapter.exe.vir"
sh=DD858CAF3A800B7EEA1E386CEB164D85D4AAD85A ft=1 fh=087fbd189ca72028 vn="Variante von Win32/BrowseFox.J evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ToggleMark\bin\ToggleMark.PurBrowse.exe.vir"
sh=C536341C9260C56069CBB528E3A9A1561692B307 ft=1 fh=4bdc8dda8b2b0e6b vn="Variante von Win32/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ToggleMark\bin\utilToggleMark.exe.vir"
sh=9ECD2F937B2C63B2930303366E13C22694417CF3 ft=1 fh=66f41c5487147401 vn="Variante von Win32/BrowseFox.M evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ToggleMark\bin\{9a9157bb-003e-4fef-8bd1-c09bc4586a28}.dll.vir"
sh=1E7865258B1C1DAE72EC6DB6D3A81169E54D5367 ft=1 fh=4b2a76b556469811 vn="Variante von MSIL/BrowseFox.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ToggleMark\bin\plugins\ToggleMark.Bromon.dll.vir"
sh=42EDE5A3FF6233848E5D78EB4366FE0E4866E15C ft=1 fh=ff7c6b4e77ea5eb4 vn="Variante von MSIL/BrowseFox.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ToggleMark\bin\plugins\ToggleMark.BroStats.dll.vir"
sh=5804D231A0C49D94D093845325EB0DCB8F00E491 ft=1 fh=c1062fdaa0399c52 vn="möglicherweise Variante von MSIL/BrowseFox.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ToggleMark\bin\plugins\ToggleMark.BrowserAdapterS.dll.vir"
sh=5C454F2849238A4D917E5F66481324B221B44EB8 ft=1 fh=359dd0c3fe1c1283 vn="Variante von MSIL/BrowseFox.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ToggleMark\bin\plugins\ToggleMark.CompatibilityChecker.dll.vir"
sh=284C5CF22FD31922E5447542053BD17179E2C51E ft=1 fh=0bdf499ca3d7d66f vn="Variante von MSIL/BrowseFox.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ToggleMark\bin\plugins\ToggleMark.FFUpdate.dll.vir"
sh=6A863DB4AB1F6BD1F3652DF749C634012A45B86E ft=1 fh=9b97a61bb5df4d07 vn="Variante von MSIL/BrowseFox.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ToggleMark\bin\plugins\ToggleMark.IEUpdate.dll.vir"
sh=E0EACCB9ADCF679E2B02A49D765EABBD4CFDED93 ft=1 fh=4f964ec4f3b8eaa3 vn="Variante von MSIL/BrowseFox.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ToggleMark\bin\plugins\ToggleMark.PurBrowseG.dll.vir"
sh=7703FB6A55057D6EEDF3BEA07C71B92554A7D72D ft=1 fh=c71c0011d8b33e6e vn="Variante von Win32/AdWare.AddLyrics.BN Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\ver4Safer-Surf\L4Safer-SurfuL178.exe.vir"
sh=1BF98E82449CC3B23D23F71A9A10F1AA9EA600F3 ft=1 fh=2627511733ffabe7 vn="Variante von Win32/Adware.EoRezo.AJ Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Local\fst_de_169\upfst_de_169.exe.vir"
sh=CA253E60F5C1E9DA33E4A19BD99C1B6CE0F9CA59 ft=1 fh=e2c7d44537eb7d21 vn="Win32/AdWare.EoRezo.AW Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Local\fst_de_169\Download\majfst_gentlede.exe.vir"
sh=CE2058244EB6F64A397B56AA6E3F4F4976111DFD ft=1 fh=70bf0fae85cc8526 vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\GoogleChromeRemotePlugin.dll.vir"
sh=B5ED1E639B7D9AD3C0F3C81E5AA2E9F88DDFEB65 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.26.141_0\extensionData\plugins\102_dealply_m.js.vir"
sh=464E61CE0A166C746C8BE32F8BD662B0EDF79938 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.26.141_0\extensionData\plugins\103_intext_5_m.js.vir"
sh=8BFBBD749FDAA46297DA7F28A30E29C55FD72880 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.26.141_0\extensionData\plugins\104_jollywallet_m.js.vir"
sh=FE3704EEF2BFB9DCA552518E7AEC9D6AFC1ED15C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.26.141_0\extensionData\plugins\119_similar_web_m.js.vir"
sh=35CE3B76158991DDEA79CAF0C1F826A7EE18A820 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.26.141_0\extensionData\plugins\120_luck_m.js.vir"
sh=E106EF12FBA54AD37717391E3A2A8B7416B0A30E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.26.141_0\extensionData\plugins\123_intext_adv_m.js.vir"
sh=CFFCA6A4EE3A0DF2319440491BB297ADEC6EEF37 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.26.141_0\extensionData\plugins\178_revizer_ws_dynamic_m.js.vir"
sh=ADB54DE323736C99B4191A45B478B70DF1B7B945 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.26.141_0\extensionData\plugins\179_revizer_p_dynamic_m.js.vir"
sh=C9A8D5AE55FA65E00EE75767C5D2E9B56041858D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.26.141_0\extensionData\plugins\180_bpo_serp_m.js.vir"
sh=CE36251B85631AF0D145BF086D14272593AB253A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.26.141_0\extensionData\plugins\194_retargeting_bi_m.js.js.vir"
sh=5F25813D57A67DE3D622192979961AA8AFE7D723 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.26.141_0\extensionData\plugins\91_monetizationLoader.js.js.vir"
sh=0C5AC30A082628E85A9A8B68EF5E5EAFA46F0CC7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.26.141_0\extensionData\plugins\93_superfish_no_coupons_m.js.vir"
sh=475F248095D35E333ADF2F38B02424DEBEE83F04 ft=1 fh=62a3e0d8b40d4617 vn="Win32/Systweak.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Roaming\Systweak\ssd\SSDPTstub.exe.vir"
sh=80E9D13212EA12D210BFBD63A3B37261E9D10B9C ft=1 fh=b69ff78dedd678fc vn="Variante von Win32/VOPackage.V evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Roaming\VOPackage\runasu.exe.vir"
sh=9C4257B3BDF179F17FE59AB31811FFB72A5D1A0A ft=1 fh=32d595d39a91e27c vn="Variante von Win32/VOPackage.W evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Holger\AppData\Roaming\VOPackage\VOsrv.exe.vir"
sh=E1A2C9DA921D9DA917ADE37B872D97E732A138BD ft=1 fh=a4119be6dfe53dd8 vn="Variante von Win32/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\System32\roboot.exe.vir"
sh=A9AF20BAB92EC036274CEF500920B1EBC229F283 ft=1 fh=9f3e55497974f842 vn="Variante von Generik.FQMNCYT Trojaner" ac=I fn="C:\Program Files\Maxis\SimCity 4 Deluxe\Apps\SimCity 4.exe"
sh=452E9D455E744A8032DD74112511C370FEC9CB35 ft=1 fh=0752f663fb36a4c8 vn="Variante von Win32/Systweak evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\RCP\RegCleanPro.exe"
sh=0B35CAD1794A5BC9B291979DA38846B5A762C739 ft=1 fh=334c505ae47f7888 vn="Win32/Systweak.E evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\RCP\systweakasp.exe"
sh=67A75BAA7A5BBB2EEEBB99D490F00F82D0BB1E09 ft=1 fh=5d5a0ac2ab2c0a85 vn="möglicherweise Variante von Win32/Systweak evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\WinZip\Utils\WzSysScan\WINZIPSSRegClean.exe"
sh=0EC83220165E26A480565775A6CA3D7AFFFDFEAE ft=1 fh=e21c67e110de65e8 vn="Variante von Win32/SoftPulse.H evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Holger\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IVOF1W36\Player Setup[1].exe"
sh=1DBEBB366F1E881875074535E8E03D1BDFFE2CF4 ft=1 fh=2ebf0ce7fedbef82 vn="Variante von Win32/DomaIQ.BI evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Holger\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZE652X3U\jvlsetup[1].exe"
sh=DC053F3FEE66B06F1834A5C420E0A2B987E1DBFA ft=1 fh=5cff22699bb2feaf vn="Variante von Win32/Toolbar.MyWebSearch.V evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Holger\AppData\Local\StubInstaller\78ba36c9-6036-482b-b48d-ecca6f964b84\setups\RadioRageSetup.exe"
sh=AE0C7E2E08E586F3EEA84A657EEF0A6891C68380 ft=1 fh=d1ef71c4d8b5aae1 vn="Variante von MSIL/Solimba.AH evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Holger\Downloads\Fraps.exe"
sh=16D190003EB96226FE0E8D9A18B5A7B717AA7053 ft=0 fh=0000000000000000 vn="Variante von Generik.FQMNCYT Trojaner" ac=I fn="C:\Users\Holger\Downloads\SC.4.Deluxed.Mod.Edition.v1.1.638.0.GERMAN.PreCracked-m3Zz\SimCity.4.Deluxed.Mod.Edition.v1.1.638.0.GERMAN.PreCracked-m3Zz\SimCity.4.Deluxed.Mod.Edition.v1.1.638.0.GERMAN.PreCracked-m3Zz\m3Zz-SC4XEDME116380_DE.iso"
sh=2BC6529CF3D3D78B4BBB7061C44334D026F50DE4 ft=0 fh=0000000000000000 vn="möglicherweise Variante von Win32/Systweak evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\c400a7.msi"
sh=7F29C65D27184E6C1E65253A19154568335D994C ft=1 fh=8dfecc9f0b4d34d4 vn="Win32/AdvancedSystemProtector.A evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\System32\sasnative32.exe"
         

Results of screen317's Security Check version 0.99.87  
 Windows 7 Service Pack 1 x86 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 SpywareBlaster 5.0    
 Java 7 Update 45  
 Java version out of Date! 
 Adobe Reader XI  
 Google Chrome 36.0.1985.143  
 Google Chrome 37.0.2062.103  
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 07-09-2014
Ran by Holger (administrator) on HOLGER-PC on 10-09-2014 16:27:51
Running from C:\Users\Holger\Downloads
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
(Nero AG) C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe
(pdfforge GmbH) C:\Program Files\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files\PDF Architect\ConversionService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Overwolf LTD) C:\Program Files\Overwolf\Overwolf.exe
(LOL Replay) C:\Program Files\LOLReplay\LOLRecorder.exe
() C:\Windows\System32\C2MP\TrayMenu.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Overwolf LTD) C:\Program Files\Common Files\Overwolf\0.79.21.0\OverwolfHelper.exe
() C:\Program Files\Overwolf\0.79.21.0\OverwolfBrowser.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_14_0_0_145_ActiveX.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_15_0_0_152_ActiveX.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Users\Holger\Desktop\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-14] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [747264 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [Nero MediaHome 4] => C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe [5178664 2010-10-26] (Nero AG)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3478752 2012-12-18] (Adobe Systems Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.)
HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-08-31] (Microsoft Corporation)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [Nero MediaHome 4] => C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe [5178664 2010-10-26] (Nero AG)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [MKLOL] => C:\Program Files\MKJogo\MKLOL\Bin\MKIM.exe [1089736 2014-08-28] ()
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [Overwolf] => C:\Program Files\Overwolf\Overwolf.exe [39712 2014-08-28] (Overwolf LTD)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk
ShortcutTarget: LOLRecorder.lnk -> C:\Program Files\LOLReplay\LOLRecorder.exe (LOL Replay)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TrayMenu.lnk
ShortcutTarget: TrayMenu.lnk -> C:\Windows\System32\C2MP\TrayMenu.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: http=127.0.0.1:49220;https=127.0.0.1:49220
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x0ACB0707D5C8CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO: No Name -> {41564952-412D-5637-00A7-7A786E7484D7} ->  No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File
Toolbar: HKLM - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @Nero.com/KM -> C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt [2013-10-21]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-02-09]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR DefaultSearchKeyword: Default -> trovi.search
CHR DefaultSearchURL: Default -> hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3AEF6CD1-12FB-4095-BB5E-B8F007E34CBD&SearchSource=58&CUI=&UM=2&UP=SPEF674306-B5AD-44FD-8D8A-3D79F17072F0&q={searchTerms}&SSPV=
CHR DefaultSuggestURL: Default -> hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}
CHR CustomProfile: C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]
CHR Extension: (YouTube) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-08]
CHR Extension: (Google-Suche) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-08]
CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2014-02-23]
CHR Extension: (Avira Browser Safety) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-20]
CHR Extension: (BonanzaDeals) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieadcoanfjloocmfafkebdnfefmohngj [2014-09-07]
CHR Extension: (DealPly Germany) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mphpbdjcljebbcnfopfngmfdackbbdgf [2014-09-07]
CHR Extension: (Google Wallet) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-15]
CHR Extension: (Google Mail) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-08]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2012-09-23]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1021008 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166296 2014-08-22] (APN LLC.)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1890128 2014-09-04] (LogMeIn Inc.)
R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [375056 2014-08-08] (LogMeIn, Inc.)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 NeroMediaHomeService.4; C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe [517416 2010-10-26] (Nero AG)
S3 OverwolfUpdater; C:\Program Files\Overwolf\OverwolfUpdater.exe [998176 2014-08-28] (Overwolf LTD)
R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-27] (Avira Operations GmbH & Co. KG)
S3 EverestDriver; C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt [7168 2005-08-18] () [File not signed]
R3 FETNDIS; C:\Windows\System32\DRIVERS\fetnd6.sys [44032 2009-07-14] (VIA Technologies, Inc.              )
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [22560 2013-08-31] (REALiX(tm))
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Holger\AppData\Local\Temp\catchme.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-08 18:41 - 2014-09-08 18:46 - 560746580 _____ () C:\Users\Holger\Downloads\Sherloc.s02e02.Ger.A3.BRiP.XviD-FIJ.part1.rar.part
2014-09-08 18:41 - 2014-09-08 18:46 - 559450100 _____ () C:\Users\Holger\Downloads\Sherloc.s02e03.Ger.A3.BRiP.XviD-FIJ.part1.rar.part
2014-09-08 18:41 - 2014-09-08 18:46 - 555127040 _____ () C:\Users\Holger\Downloads\Sherloc.s02e01.Ger.A3.BRiP.XviD-FIJ.part1.rar.part
2014-09-08 18:31 - 2014-09-08 18:31 - 00854417 _____ () C:\Users\Holger\Desktop\SecurityCheck.exe
2014-09-08 18:16 - 2014-09-08 18:16 - 00000000 ____D () C:\Program Files\ESET
2014-09-08 18:15 - 2014-09-08 18:15 - 02347384 _____ (ESET) C:\Users\Holger\Downloads\esetsmartinstaller_deu.exe
2014-09-07 20:52 - 2014-09-07 20:52 - 00000000 ____D () C:\Users\Holger\Downloads\FRST-OlderVersion
2014-09-07 20:48 - 2014-09-07 20:48 - 00001459 _____ () C:\Users\Holger\Desktop\JRT.txt
2014-09-07 20:41 - 2014-09-07 20:41 - 01016261 _____ (Thisisu) C:\Users\Holger\Desktop\JRT.exe
2014-09-07 20:35 - 2014-09-07 20:35 - 01370483 _____ () C:\Users\Holger\Downloads\adwcleaner_3.309 (1).exe
2014-09-07 20:33 - 2014-09-07 20:33 - 00000000 _____ () C:\Users\Holger\Downloads\adwcleaner_3.309.exe.a5w4ph0.partial
2014-09-07 13:06 - 2014-09-07 13:06 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-07 13:06 - 2014-09-07 13:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-07 13:05 - 2014-09-07 20:50 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-07 13:05 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-07 13:05 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-07 13:03 - 2014-09-07 13:04 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Holger\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-06 13:55 - 2014-09-06 13:56 - 00000000 ____D () C:\Users\Holger\Downloads\Bibi.und.Tina.Der.Film.2014.German.BDRip.AC3.XViD-CiNEDOME
2014-09-06 13:48 - 2014-09-06 13:48 - 00021393 _____ () C:\ComboFix.txt
2014-09-06 13:23 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-09-06 13:23 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-09-06 13:23 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-09-06 13:23 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-09-06 13:23 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-09-06 13:23 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-09-06 13:23 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-09-06 13:23 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-09-06 13:22 - 2014-09-06 13:48 - 00000000 ____D () C:\Qoobox
2014-09-06 13:22 - 2014-09-06 13:45 - 00000000 ____D () C:\Windows\erdnt
2014-09-06 13:21 - 2014-09-06 13:21 - 05576440 ____R (Swearware) C:\Users\Holger\Desktop\ComboFix.exe
2014-09-06 13:13 - 2014-09-06 13:13 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Holger\Downloads\revosetup95.exe
2014-09-06 13:13 - 2014-09-06 13:13 - 00001226 _____ () C:\Users\Holger\Desktop\Revo Uninstaller.lnk
2014-09-06 13:13 - 2014-09-06 13:13 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-06 12:36 - 2014-09-06 12:37 - 00038955 _____ () C:\Users\Holger\Downloads\Addition.txt
2014-09-06 12:34 - 2014-09-10 16:27 - 00018261 _____ () C:\Users\Holger\Downloads\FRST.txt
2014-09-06 12:34 - 2014-09-10 16:27 - 00000000 ____D () C:\FRST
2014-09-06 12:33 - 2014-09-07 20:52 - 01097728 _____ (Farbar) C:\Users\Holger\Downloads\FRST.exe
2014-09-06 12:28 - 2014-09-06 12:28 - 00142704 _____ () C:\Windows\Minidump\090614-18765-01.dmp
2014-09-06 10:09 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-09-06 09:54 - 2014-09-06 09:54 - 00142704 _____ () C:\Windows\Minidump\090614-18390-01.dmp
2014-09-06 09:45 - 2014-09-06 09:44 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Desktop\OTH.scr
2014-09-06 09:44 - 2014-09-06 09:44 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Downloads\OTH.scr
2014-09-06 09:25 - 2014-09-06 10:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
2014-09-06 09:25 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-09-06 09:23 - 2014-09-06 09:23 - 00000000 ____D () C:\Program Files\RCP
2014-09-06 08:59 - 2014-09-06 08:59 - 00000000 ____D () C:\Users\Holger\Downloads\ec5d398
2014-09-06 08:56 - 2014-09-06 08:56 - 17929263 _____ () C:\Users\Holger\Downloads\ec5d398.rar
2014-09-06 08:34 - 2014-09-06 08:34 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-SL-505
2014-09-06 01:24 - 2014-09-06 01:24 - 00001892 _____ () C:\Users\Public\Desktop\NosTale.lnk
2014-09-06 01:24 - 2014-09-06 01:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nostale(DE)
2014-09-06 01:10 - 2014-09-07 08:46 - 00000000 ____D () C:\Users\Holger\Downloads\Gameforge Live
2014-09-06 01:10 - 2014-09-06 01:18 - 00000000 ____D () C:\Program Files\GameforgeLive
2014-09-06 01:10 - 2014-09-06 01:10 - 00001029 _____ () C:\Users\Public\Desktop\Gameforge Live.lnk
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\AppData\Local\Gameforge4d
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-09-06 01:02 - 2014-09-06 01:03 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup (1).exe
2014-09-06 00:59 - 2014-09-06 01:00 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup.exe
2014-09-05 23:53 - 2014-09-05 23:53 - 00001919 _____ () C:\Users\Public\Desktop\Overwolf.lnk
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\ProgramData\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Common Files\Overwolf
2014-09-05 23:52 - 2014-09-08 18:12 - 00000000 ____D () C:\Users\Holger\AppData\Local\Overwolf
2014-09-05 23:52 - 2014-09-05 23:52 - 01248032 _____ (Overwolf) C:\Users\Holger\Downloads\OverwolfInstaller.exe
2014-09-05 23:25 - 2014-09-07 08:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-05 23:24 - 2014-09-07 20:39 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-05 23:24 - 2014-09-05 23:50 - 00000000 ____D () C:\Fraps
2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-09-05 23:23 - 2014-09-05 23:23 - 02326976 _____ (Beepa Pty Ltd) C:\Users\Holger\Desktop\setup.exe
2014-09-05 23:23 - 2014-09-05 23:23 - 00001026 _____ () C:\Users\Holger\Desktop\FLVM Player.lnk
2014-09-05 23:22 - 2014-09-05 23:22 - 00528968 _____ (Eilio.-.Installer · sl) C:\Users\Holger\Downloads\Fraps.exe
2014-09-05 17:59 - 2014-09-05 18:00 - 00000000 ____D () C:\Users\Holger\Downloads\A.Million.Ways.to.Die.in.the.West.2014.BDRip.Line.Dubbed.German.XviD-POE
2014-09-05 17:58 - 2014-09-05 17:59 - 252028961 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part7.rar
2014-09-05 17:56 - 2014-09-05 17:58 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part6.rar
2014-09-05 17:56 - 2014-09-05 17:58 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part5.rar
2014-09-05 17:56 - 2014-09-05 17:58 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part4.rar
2014-09-05 17:54 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part3.rar
2014-09-05 17:54 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part2.rar
2014-09-05 17:54 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part1.rar
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\Program Files\LogMeIn Hamachi
2014-08-31 14:06 - 2014-08-31 14:06 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-XVID-DL-504
2014-08-28 16:37 - 2014-08-28 16:39 - 616998912 _____ () C:\Users\Holger\Downloads\ubcd531.iso
2014-08-28 16:24 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 16:24 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-27 20:51 - 2014-08-27 20:51 - 00000000 ____D () C:\Users\Holger\Downloads\Bad.Neighbors.2014.German.BDRiP.AC3.XVID-CRG
2014-08-23 14:57 - 2014-08-23 14:58 - 00000000 ____D () C:\Users\Holger\Downloads\Die.Bestimmung.Divergent.2014.German.BDRiP.AC3.XviD-TOD
2014-08-23 14:53 - 2014-08-23 14:57 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part1.rar
2014-08-23 14:53 - 2014-08-23 14:57 - 480117824 _____ () C:\Users\Holger\Downloads\17567198qw7.part3.rar
2014-08-23 14:53 - 2014-08-23 14:56 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part2.rar
2014-08-23 11:38 - 2014-08-22 22:06 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-502
2014-08-23 11:23 - 2014-08-23 11:23 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-503
2014-08-23 07:22 - 2014-08-23 07:22 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-22 05:42 - 2014-08-24 13:18 - 00041187 _____ () C:\Users\Holger\Downloads\ESt2013_Timmermann_Rita.elfo
2014-08-21 17:38 - 2014-08-21 17:38 - 00001191 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\Program Files\ElsterFormular
2014-08-21 17:35 - 2014-08-21 17:37 - 77405552 _____ (Landesfinanzdirektion Thüringen) C:\Users\Holger\Downloads\ElsterFormular-15.2.20140326p.exe
2014-08-20 18:18 - 2011-10-20 17:51 - 1064916992 _____ () C:\Users\Holger\Downloads\Winnie.Puuh.2011.BDRip.German.AC3-XviD-Oxy.avi
2014-08-19 17:33 - 2013-06-15 15:04 - 00000173 _____ () C:\Users\Holger\Downloads\SHARE-ONLINE Premium-Account.url
2014-08-19 17:33 - 2013-06-15 14:32 - 00000113 _____ () C:\Users\Holger\Downloads\UPLOADED Premium-Account.url
2014-08-19 17:25 - 2014-08-19 17:28 - 00000000 ____D () C:\Users\Holger\Downloads\Captain.America.2.The.Return.of.the.First.Avenger.2014.German.BDRiP.AC3.XviD-TOD
2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\Bundesliga Kicker Sonderheft 14_15
2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\__MACOSX
2014-08-16 18:00 - 2014-08-16 18:00 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\MPC
2014-08-16 17:59 - 2014-08-16 17:59 - 00002122 _____ () C:\Users\Public\Desktop\KODAK Create@Home Software (für dm).lnk
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\Users\Holger\.kodakch
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KODAK Create@Home Software (für dm)
2014-08-16 17:58 - 2014-08-18 16:35 - 00000000 ____D () C:\Program Files\KODAK Create@Home Software (für dm)
2014-08-16 17:57 - 2014-08-16 17:57 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Eastman Kodak Company
2014-08-16 17:55 - 2014-08-16 17:56 - 102239928 _____ (Eastman Kodak Company) C:\Users\Holger\Downloads\KodakCreateHome.exe
2014-08-14 18:10 - 2014-04-23 23:16 - 00000119 _____ () C:\Users\Holger\Downloads\Premium @ oboom.com.url
2014-08-14 18:10 - 2014-04-22 04:21 - 00000119 _____ () C:\Users\Holger\Downloads\Premium @ uploaded.net.url
2014-08-14 18:10 - 2014-04-22 04:21 - 00000119 _____ () C:\Users\Holger\Downloads\Premium @ share-online.biz.url
2014-08-14 18:09 - 2014-08-14 18:10 - 00000000 ____D () C:\Users\Holger\Downloads\Coyote.Ugly.2000.Unrated.Extended.Edition.AC3D.BDRip.XviD-HQSD
2014-08-14 17:35 - 2014-08-14 17:35 - 39354003 _____ (Fomanu AG ) C:\Users\Holger\Downloads\designer_20.exe.boc5hvl.partial
2014-08-14 03:05 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-14 03:05 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-14 03:05 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-14 03:05 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 18:55 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 18:55 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 18:55 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 18:55 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 18:55 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 18:55 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 18:55 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 18:55 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 18:55 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 18:55 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 18:55 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 18:55 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 18:55 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 18:55 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 18:55 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 18:55 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 18:55 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 18:55 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 18:55 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 18:55 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 18:55 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 18:55 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 18:55 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 18:55 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 18:55 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 18:55 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 18:55 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 18:55 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 18:55 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 18:55 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 18:55 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 18:55 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 18:55 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 18:55 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-13 18:55 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-13 18:54 - 2014-08-07 03:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 18:54 - 2014-08-07 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 18:54 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 18:54 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-13 18:54 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 18:54 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 18:54 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 18:54 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 18:50 - 2014-08-13 18:52 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rev
2014-08-13 18:50 - 2014-08-13 18:52 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rar
2014-08-13 18:50 - 2014-08-13 18:51 - 176763834 _____ () C:\Users\Holger\Downloads\KKW1OST.part2.rar
2014-08-11 05:19 - 2014-08-10 09:04 - 00000000 ____D () C:\Users\Holger\Downloads\Focus Magazin 33-2014 Deutsch
2014-08-11 05:18 - 2014-08-11 05:18 - 16311072 _____ () C:\Users\Holger\Downloads\ydfgb4532bhjkl.rar

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-10 16:29 - 2014-09-06 12:34 - 00018261 _____ () C:\Users\Holger\Downloads\FRST.txt
2014-09-10 16:27 - 2014-09-06 12:34 - 00000000 ____D () C:\FRST
2014-09-10 16:20 - 2013-09-08 13:33 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-10 16:20 - 2013-09-06 13:34 - 00070016 _____ () C:\Windows\setupact.log
2014-09-10 16:20 - 2013-08-27 16:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-10 16:20 - 2013-08-27 16:00 - 01735909 _____ () C:\Windows\WindowsUpdate.log
2014-09-10 16:19 - 2013-09-08 13:32 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-09 22:40 - 2013-08-27 16:57 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-09-09 22:40 - 2013-08-27 16:57 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-09-08 18:46 - 2014-09-08 18:41 - 560746580 _____ () C:\Users\Holger\Downloads\Sherloc.s02e02.Ger.A3.BRiP.XviD-FIJ.part1.rar.part
2014-09-08 18:46 - 2014-09-08 18:41 - 559450100 _____ () C:\Users\Holger\Downloads\Sherloc.s02e03.Ger.A3.BRiP.XviD-FIJ.part1.rar.part
2014-09-08 18:46 - 2014-09-08 18:41 - 555127040 _____ () C:\Users\Holger\Downloads\Sherloc.s02e01.Ger.A3.BRiP.XviD-FIJ.part1.rar.part
2014-09-08 18:46 - 2013-08-29 18:05 - 00000000 ____D () C:\Users\Holger\AppData\Local\JDownloader v2.0
2014-09-08 18:31 - 2014-09-08 18:31 - 00854417 _____ () C:\Users\Holger\Desktop\SecurityCheck.exe
2014-09-08 18:18 - 2009-07-14 06:34 - 00026752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-08 18:18 - 2009-07-14 06:34 - 00026752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-08 18:16 - 2014-09-08 18:16 - 00000000 ____D () C:\Program Files\ESET
2014-09-08 18:15 - 2014-09-08 18:15 - 02347384 _____ (ESET) C:\Users\Holger\Downloads\esetsmartinstaller_deu.exe
2014-09-08 18:12 - 2014-09-05 23:52 - 00000000 ____D () C:\Users\Holger\AppData\Local\Overwolf
2014-09-08 18:12 - 2014-06-15 19:05 - 00000000 ____D () C:\Users\Holger\AppData\Local\LogMeIn Hamachi
2014-09-08 18:10 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-07 20:52 - 2014-09-07 20:52 - 00000000 ____D () C:\Users\Holger\Downloads\FRST-OlderVersion
2014-09-07 20:52 - 2014-09-06 12:33 - 01097728 _____ (Farbar) C:\Users\Holger\Downloads\FRST.exe
2014-09-07 20:50 - 2014-09-07 13:05 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-07 20:48 - 2014-09-07 20:48 - 00001459 _____ () C:\Users\Holger\Desktop\JRT.txt
2014-09-07 20:41 - 2014-09-07 20:41 - 01016261 _____ (Thisisu) C:\Users\Holger\Desktop\JRT.exe
2014-09-07 20:39 - 2014-09-05 23:24 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-07 20:39 - 2013-09-06 13:34 - 00575882 _____ () C:\Windows\PFRO.log
2014-09-07 20:38 - 2013-10-21 17:16 - 00000000 ____D () C:\AdwCleaner
2014-09-07 20:35 - 2014-09-07 20:35 - 01370483 _____ () C:\Users\Holger\Downloads\adwcleaner_3.309 (1).exe
2014-09-07 20:33 - 2014-09-07 20:33 - 00000000 _____ () C:\Users\Holger\Downloads\adwcleaner_3.309.exe.a5w4ph0.partial
2014-09-07 18:21 - 2013-08-30 14:49 - 00000000 ____D () C:\Users\Holger\AppData\Local\PMB Files
2014-09-07 13:06 - 2014-09-07 13:06 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-07 13:06 - 2014-09-07 13:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-07 13:06 - 2014-06-11 19:52 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-09-07 13:04 - 2014-09-07 13:03 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Holger\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-07 11:06 - 2013-10-18 21:54 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\.minecraft
2014-09-07 08:46 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\Downloads\Gameforge Live
2014-09-07 08:20 - 2014-09-05 23:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-07 08:14 - 2013-12-20 14:22 - 00000000 ____D () C:\Users\NeroMediaHomeUser.4
2014-09-06 13:56 - 2014-09-06 13:55 - 00000000 ____D () C:\Users\Holger\Downloads\Bibi.und.Tina.Der.Film.2014.German.BDRip.AC3.XViD-CiNEDOME
2014-09-06 13:48 - 2014-09-06 13:48 - 00021393 _____ () C:\ComboFix.txt
2014-09-06 13:48 - 2014-09-06 13:22 - 00000000 ____D () C:\Qoobox
2014-09-06 13:48 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2014-09-06 13:48 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-09-06 13:45 - 2014-09-06 13:22 - 00000000 ____D () C:\Windows\erdnt
2014-09-06 13:42 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2014-09-06 13:34 - 2013-08-27 16:45 - 00000000 ____D () C:\ProgramData\TEMP
2014-09-06 13:21 - 2014-09-06 13:21 - 05576440 ____R (Swearware) C:\Users\Holger\Desktop\ComboFix.exe
2014-09-06 13:13 - 2014-09-06 13:13 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Holger\Downloads\revosetup95.exe
2014-09-06 13:13 - 2014-09-06 13:13 - 00001226 _____ () C:\Users\Holger\Desktop\Revo Uninstaller.lnk
2014-09-06 13:13 - 2014-09-06 13:13 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-06 12:37 - 2014-09-06 12:36 - 00038955 _____ () C:\Users\Holger\Downloads\Addition.txt
2014-09-06 12:28 - 2014-09-06 12:28 - 00142704 _____ () C:\Windows\Minidump\090614-18765-01.dmp
2014-09-06 12:28 - 2013-11-07 21:31 - 00000000 ____D () C:\Windows\Minidump
2014-09-06 12:28 - 2013-08-27 16:08 - 00000000 ____D () C:\Users\Holger
2014-09-06 10:28 - 2014-09-06 09:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
2014-09-06 10:11 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-06 10:11 - 2009-07-14 04:04 - 00000505 _____ () C:\Windows\win.ini
2014-09-06 09:54 - 2014-09-06 09:54 - 00142704 _____ () C:\Windows\Minidump\090614-18390-01.dmp
2014-09-06 09:44 - 2014-09-06 09:45 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Desktop\OTH.scr
2014-09-06 09:44 - 2014-09-06 09:44 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Downloads\OTH.scr
2014-09-06 09:23 - 2014-09-06 09:23 - 00000000 ____D () C:\Program Files\RCP
2014-09-06 09:17 - 2013-08-27 16:22 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\vlc
2014-09-06 08:59 - 2014-09-06 08:59 - 00000000 ____D () C:\Users\Holger\Downloads\ec5d398
2014-09-06 08:56 - 2014-09-06 08:56 - 17929263 _____ () C:\Users\Holger\Downloads\ec5d398.rar
2014-09-06 08:34 - 2014-09-06 08:34 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-SL-505
2014-09-06 01:24 - 2014-09-06 01:24 - 00001892 _____ () C:\Users\Public\Desktop\NosTale.lnk
2014-09-06 01:24 - 2014-09-06 01:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nostale(DE)
2014-09-06 01:18 - 2014-09-06 01:10 - 00000000 ____D () C:\Program Files\GameforgeLive
2014-09-06 01:10 - 2014-09-06 01:10 - 00001029 _____ () C:\Users\Public\Desktop\Gameforge Live.lnk
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\AppData\Local\Gameforge4d
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-09-06 01:03 - 2014-09-06 01:02 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup (1).exe
2014-09-06 01:00 - 2014-09-06 00:59 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup.exe
2014-09-05 23:53 - 2014-09-05 23:53 - 00001919 _____ () C:\Users\Public\Desktop\Overwolf.lnk
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\ProgramData\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Common Files\Overwolf
2014-09-05 23:52 - 2014-09-05 23:52 - 01248032 _____ (Overwolf) C:\Users\Holger\Downloads\OverwolfInstaller.exe
2014-09-05 23:50 - 2014-09-05 23:24 - 00000000 ____D () C:\Fraps
2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-09-05 23:23 - 2014-09-05 23:23 - 02326976 _____ (Beepa Pty Ltd) C:\Users\Holger\Desktop\setup.exe
2014-09-05 23:23 - 2014-09-05 23:23 - 00001026 _____ () C:\Users\Holger\Desktop\FLVM Player.lnk
2014-09-05 23:22 - 2014-09-05 23:22 - 00528968 _____ (Eilio.-.Installer · sl) C:\Users\Holger\Downloads\Fraps.exe
2014-09-05 18:00 - 2014-09-05 17:59 - 00000000 ____D () C:\Users\Holger\Downloads\A.Million.Ways.to.Die.in.the.West.2014.BDRip.Line.Dubbed.German.XviD-POE
2014-09-05 17:59 - 2014-09-05 17:58 - 252028961 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part7.rar
2014-09-05 17:58 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part6.rar
2014-09-05 17:58 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part5.rar
2014-09-05 17:58 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part4.rar
2014-09-05 17:56 - 2014-09-05 17:54 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part3.rar
2014-09-05 17:56 - 2014-09-05 17:54 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part2.rar
2014-09-05 17:56 - 2014-09-05 17:54 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part1.rar
2014-09-05 08:59 - 2013-09-08 13:34 - 00002121 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\Program Files\LogMeIn Hamachi
2014-09-05 08:42 - 2014-06-18 19:14 - 00000896 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-08-31 14:06 - 2014-08-31 14:06 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-XVID-DL-504
2014-08-29 07:33 - 2009-07-14 06:33 - 00277824 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-28 20:05 - 2014-08-09 11:18 - 00000000 ____D () C:\Users\Holger\Downloads\HTEC21GA3BRx6
2014-08-28 20:04 - 2013-08-27 16:14 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-28 20:02 - 2013-08-30 14:49 - 00000000 ____D () C:\ProgramData\PMB Files
2014-08-28 16:39 - 2014-08-28 16:37 - 616998912 _____ () C:\Users\Holger\Downloads\ubcd531.iso
2014-08-27 20:51 - 2014-08-27 20:51 - 00000000 ____D () C:\Users\Holger\Downloads\Bad.Neighbors.2014.German.BDRiP.AC3.XVID-CRG
2014-08-24 13:18 - 2014-08-22 05:42 - 00041187 _____ () C:\Users\Holger\Downloads\ESt2013_Timmermann_Rita.elfo
2014-08-23 14:58 - 2014-08-23 14:57 - 00000000 ____D () C:\Users\Holger\Downloads\Die.Bestimmung.Divergent.2014.German.BDRiP.AC3.XviD-TOD
2014-08-23 14:57 - 2014-08-23 14:53 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part1.rar
2014-08-23 14:57 - 2014-08-23 14:53 - 480117824 _____ () C:\Users\Holger\Downloads\17567198qw7.part3.rar
2014-08-23 14:56 - 2014-08-23 14:53 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part2.rar
2014-08-23 11:23 - 2014-08-23 11:23 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-503
2014-08-23 07:22 - 2014-08-23 07:22 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-23 07:22 - 2013-10-04 08:57 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-23 07:22 - 2013-08-27 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-23 07:22 - 2013-08-27 17:19 - 00000000 ____D () C:\Program Files\Avira
2014-08-23 03:46 - 2014-08-28 16:24 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 02:42 - 2014-08-28 16:24 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 22:06 - 2014-08-23 11:38 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-502
2014-08-21 17:39 - 2013-09-03 16:40 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\elsterformular
2014-08-21 17:38 - 2014-08-21 17:38 - 00001191 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\Program Files\ElsterFormular
2014-08-21 17:38 - 2013-09-03 16:40 - 00000000 ____D () C:\ProgramData\elsterformular
2014-08-21 17:37 - 2014-08-21 17:35 - 77405552 _____ (Landesfinanzdirektion Thüringen) C:\Users\Holger\Downloads\ElsterFormular-15.2.20140326p.exe
2014-08-20 18:27 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-08-20 17:46 - 2013-08-27 17:19 - 00000000 ____D () C:\ProgramData\Avira
2014-08-19 17:28 - 2014-08-19 17:25 - 00000000 ____D () C:\Users\Holger\Downloads\Captain.America.2.The.Return.of.the.First.Avenger.2014.German.BDRiP.AC3.XviD-TOD
2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\Bundesliga Kicker Sonderheft 14_15
2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\__MACOSX
2014-08-18 16:35 - 2014-08-16 17:58 - 00000000 ____D () C:\Program Files\KODAK Create@Home Software (für dm)
2014-08-16 19:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-16 18:00 - 2014-08-16 18:00 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\MPC
2014-08-16 17:59 - 2014-08-16 17:59 - 00002122 _____ () C:\Users\Public\Desktop\KODAK Create@Home Software (für dm).lnk
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\Users\Holger\.kodakch
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KODAK Create@Home Software (für dm)
2014-08-16 17:57 - 2014-08-16 17:57 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Eastman Kodak Company
2014-08-16 17:56 - 2014-08-16 17:55 - 102239928 _____ (Eastman Kodak Company) C:\Users\Holger\Downloads\KodakCreateHome.exe
2014-08-14 18:10 - 2014-08-14 18:09 - 00000000 ____D () C:\Users\Holger\Downloads\Coyote.Ugly.2000.Unrated.Extended.Edition.AC3D.BDRip.XviD-HQSD
2014-08-14 17:35 - 2014-08-14 17:35 - 39354003 _____ (Fomanu AG ) C:\Users\Holger\Downloads\designer_20.exe.boc5hvl.partial
2014-08-14 03:45 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-08-14 03:29 - 2014-05-07 03:01 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-14 03:29 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-14 03:13 - 2014-01-18 10:07 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-14 03:09 - 2014-01-18 10:07 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 18:52 - 2014-08-13 18:50 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rev
2014-08-13 18:52 - 2014-08-13 18:50 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rar
2014-08-13 18:51 - 2014-08-13 18:50 - 176763834 _____ () C:\Users\Holger\Downloads\KKW1OST.part2.rar
2014-08-11 05:18 - 2014-08-11 05:18 - 16311072 _____ () C:\Users\Holger\Downloads\ydfgb4532bhjkl.rar

Some content of TEMP:
====================
C:\Users\Holger\AppData\Local\temp\avgnt.exe
C:\Users\Holger\AppData\Local\temp\proxy_vole2729147245480876258.dll
C:\Users\Holger\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-06 11:03

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Ich kann mit dem Internet Explorer 11 viele Seiten nicht öffnen. Mit Google Chrom habe ich keine Probleme

Internet Explorer komplett zurücksetzen. Java updaten.

Warum so viel gefunden wird?

1) Ist das meiste schon in Quarantäne unserer Tools

2)Bist Du es selbst Schuld bei dem ganzen gecrackten Scheiss in deinem Downloard Ordner.

Alles gecrackte fliegt von der Platte, vorher gibt es keinen weiteren Support.

Danke

Mache ich und poste dann ein frisches FRST

Hallo!

Ich hoffe das jetzt alles sauber ist. Malwarebytes kann ich immer noch nicht öffnen.

Ich habe wieder die Meldung bekommen das Jave nicht aktuell ist obwohl ich es aktualisiert hatte.


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-09-2014
Ran by Holger (administrator) on HOLGER-PC on 11-09-2014 18:31:50
Running from C:\Users\Holger\Desktop
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\BBSvc.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
(Nero AG) C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe
(pdfforge GmbH) C:\Program Files\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files\PDF Architect\ConversionService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(Overwolf LTD) C:\Program Files\Overwolf\Overwolf.exe
(LOL Replay) C:\Program Files\LOLReplay\LOLRecorder.exe
() C:\Windows\System32\C2MP\TrayMenu.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Overwolf LTD) C:\Program Files\Common Files\Overwolf\0.79.21.0\OverwolfHelper.exe
() C:\Program Files\Overwolf\0.79.21.0\OverwolfBrowser.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_15_0_0_152_ActiveX.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
() C:\Program Files\Pando Networks\Media Booster\PMB.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.221\deploy\LoLLauncher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.5\deploy\LoLPatcher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.5\deploy\LoLPatcher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.5\deploy\LoLPatcher.exe
(Adobe Systems Incorporated.) C:\Program Files\Adobe\Acrobat 11.0\Acrobat\acrodist.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-14] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [747264 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [Nero MediaHome 4] => C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe [5178664 2010-10-26] (Nero AG)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3478752 2012-12-18] (Adobe Systems Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)
HKLM\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)
HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-08-31] (Microsoft Corporation)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [Nero MediaHome 4] => C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe [5178664 2010-10-26] (Nero AG)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [MKLOL] => C:\Program Files\MKJogo\MKLOL\Bin\MKIM.exe [1089736 2014-08-28] ()
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [Overwolf] => C:\Program Files\Overwolf\Overwolf.exe [39712 2014-08-28] (Overwolf LTD)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk
ShortcutTarget: LOLRecorder.lnk -> C:\Program Files\LOLReplay\LOLRecorder.exe (LOL Replay)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TrayMenu.lnk
ShortcutTarget: TrayMenu.lnk -> C:\Windows\System32\C2MP\TrayMenu.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: http=127.0.0.1:49220;https=127.0.0.1:49220
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO: No Name -> {41564952-412D-5637-00A7-7A786E7484D7} ->  No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File
Toolbar: HKLM - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @Nero.com/KM -> C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt [2013-10-21]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-02-09]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR DefaultSearchKeyword: Default -> trovi.search
CHR DefaultSearchURL: Default -> hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3AEF6CD1-12FB-4095-BB5E-B8F007E34CBD&SearchSource=58&CUI=&UM=2&UP=SPEF674306-B5AD-44FD-8D8A-3D79F17072F0&q={searchTerms}&SSPV=
CHR DefaultSuggestURL: Default -> hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\37.0.2062.103\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\37.0.2062.103\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\37.0.2062.103\pdf.dll ()
CHR Plugin: (ChromeUtilPlugin) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh\20.53263_0\background/ChromeUtilPlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\system32\npDeployJava1.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR CustomProfile: C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]
CHR Extension: (YouTube) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-08]
CHR Extension: (Google-Suche) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-08]
CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2014-02-23]
CHR Extension: (Avira Browser Safety) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-20]
CHR Extension: (Google Wallet) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-15]
CHR Extension: (Google Mail) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-08]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2012-09-23]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1021008 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166296 2014-08-22] (APN LLC.)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1890128 2014-09-04] (LogMeIn Inc.)
R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [375056 2014-08-08] (LogMeIn, Inc.)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 NeroMediaHomeService.4; C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe [517416 2010-10-26] (Nero AG)
S3 OverwolfUpdater; C:\Program Files\Overwolf\OverwolfUpdater.exe [998176 2014-08-28] (Overwolf LTD)
R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-27] (Avira Operations GmbH & Co. KG)
S3 EverestDriver; C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt [7168 2005-08-18] () [File not signed]
R3 FETNDIS; C:\Windows\System32\DRIVERS\fetnd6.sys [44032 2009-07-14] (VIA Technologies, Inc.              )
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [22560 2013-08-31] (REALiX(tm))
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Holger\AppData\Local\Temp\catchme.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-11 18:35 - 2014-09-11 18:35 - 00918440 _____ (Oracle Corporation) C:\Users\Holger\Desktop\JavaSetup7u67.com
2014-09-11 18:29 - 2014-09-11 18:29 - 00000922 _____ () C:\Users\Holger\Desktop\JRT.txt
2014-09-11 18:24 - 2014-09-11 18:24 - 01016261 _____ (Thisisu) C:\Users\Holger\Downloads\JRT.exe
2014-09-11 18:17 - 2014-09-11 18:17 - 01370483 _____ () C:\Users\Holger\Desktop\adwcleaner_3.309.exe
2014-09-11 18:10 - 2014-09-11 18:32 - 00018531 _____ () C:\Users\Holger\Desktop\FRST.txt
2014-09-11 18:09 - 2014-09-11 18:09 - 01097728 _____ (Farbar) C:\Users\Holger\Desktop\FRST.exe
2014-09-11 18:00 - 2014-09-11 18:00 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-09-11 17:39 - 2014-09-05 03:52 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-11 17:39 - 2014-09-05 03:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-11 16:46 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-11 16:46 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-11 16:46 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-11 16:46 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-11 16:46 - 2014-08-18 23:57 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-11 16:46 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-11 16:46 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-11 16:46 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-11 16:46 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-11 16:46 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-11 16:46 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-11 16:46 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-11 16:46 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-11 16:46 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-11 16:46 - 2014-08-18 23:36 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-11 16:46 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-11 16:46 - 2014-08-18 23:30 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-11 16:46 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-11 16:46 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-11 16:46 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-11 16:46 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-11 16:46 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-11 16:46 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-11 16:46 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-11 16:46 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-11 16:46 - 2014-08-18 23:08 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-11 16:46 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-11 16:46 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-11 16:46 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-11 16:46 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-11 16:46 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-11 05:49 - 2014-07-07 03:40 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-11 05:49 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-11 05:49 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-11 05:48 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-10 17:07 - 2014-09-10 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-09-10 17:07 - 2014-09-10 17:07 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-09-10 17:07 - 2014-07-25 12:55 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-09-10 17:07 - 2014-07-25 12:49 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-09-10 17:07 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-09-10 17:07 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-09-10 17:06 - 2014-09-10 17:07 - 00005801 _____ () C:\Windows\system32\jupdate-1.7.0_67-b01.log
2014-09-10 16:58 - 2014-09-10 16:58 - 00142704 _____ () C:\Windows\Minidump\091014-17578-01.dmp
2014-09-08 18:31 - 2014-09-08 18:31 - 00854417 _____ () C:\Users\Holger\Desktop\SecurityCheck.exe
2014-09-08 18:16 - 2014-09-08 18:16 - 00000000 ____D () C:\Program Files\ESET
2014-09-07 20:41 - 2014-09-07 20:41 - 01016261 _____ (Thisisu) C:\Users\Holger\Desktop\JRT.exe
2014-09-06 13:48 - 2014-09-06 13:48 - 00021393 _____ () C:\ComboFix.txt
2014-09-06 13:23 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-09-06 13:23 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-09-06 13:23 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-09-06 13:23 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-09-06 13:23 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-09-06 13:23 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-09-06 13:23 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-09-06 13:23 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-09-06 13:22 - 2014-09-06 13:48 - 00000000 ____D () C:\Qoobox
2014-09-06 13:22 - 2014-09-06 13:45 - 00000000 ____D () C:\Windows\erdnt
2014-09-06 13:21 - 2014-09-06 13:21 - 05576440 ____R (Swearware) C:\Users\Holger\Desktop\ComboFix.exe
2014-09-06 13:13 - 2014-09-06 13:13 - 00001226 _____ () C:\Users\Holger\Desktop\Revo Uninstaller.lnk
2014-09-06 13:13 - 2014-09-06 13:13 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-06 12:34 - 2014-09-11 18:32 - 00000000 ____D () C:\FRST
2014-09-06 12:28 - 2014-09-06 12:28 - 00142704 _____ () C:\Windows\Minidump\090614-18765-01.dmp
2014-09-06 10:09 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-09-06 09:54 - 2014-09-06 09:54 - 00142704 _____ () C:\Windows\Minidump\090614-18390-01.dmp
2014-09-06 09:45 - 2014-09-06 09:44 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Desktop\OTH.scr
2014-09-06 09:25 - 2014-09-06 10:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
2014-09-06 09:25 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-09-06 09:23 - 2014-09-06 09:23 - 00000000 ____D () C:\Program Files\RCP
2014-09-06 01:24 - 2014-09-06 01:24 - 00001892 _____ () C:\Users\Public\Desktop\NosTale.lnk
2014-09-06 01:24 - 2014-09-06 01:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nostale(DE)
2014-09-06 01:10 - 2014-09-06 01:18 - 00000000 ____D () C:\Program Files\GameforgeLive
2014-09-06 01:10 - 2014-09-06 01:10 - 00001029 _____ () C:\Users\Public\Desktop\Gameforge Live.lnk
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\AppData\Local\Gameforge4d
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-09-05 23:53 - 2014-09-05 23:53 - 00001919 _____ () C:\Users\Public\Desktop\Overwolf.lnk
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\ProgramData\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Common Files\Overwolf
2014-09-05 23:52 - 2014-09-11 18:22 - 00000000 ____D () C:\Users\Holger\AppData\Local\Overwolf
2014-09-05 23:25 - 2014-09-07 08:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-05 23:24 - 2014-09-07 20:39 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-05 23:24 - 2014-09-05 23:50 - 00000000 ____D () C:\Fraps
2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-09-05 23:23 - 2014-09-05 23:23 - 02326976 _____ (Beepa Pty Ltd) C:\Users\Holger\Desktop\setup.exe
2014-09-05 23:23 - 2014-09-05 23:23 - 00001026 _____ () C:\Users\Holger\Desktop\FLVM Player.lnk
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\Program Files\LogMeIn Hamachi
2014-08-28 16:24 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 16:24 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-21 17:38 - 2014-08-21 17:38 - 00001191 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\Program Files\ElsterFormular
2014-08-16 18:00 - 2014-08-16 18:00 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\MPC
2014-08-16 17:59 - 2014-08-16 17:59 - 00002122 _____ () C:\Users\Public\Desktop\KODAK Create@Home Software (für dm).lnk
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\Users\Holger\.kodakch
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KODAK Create@Home Software (für dm)
2014-08-16 17:58 - 2014-08-18 16:35 - 00000000 ____D () C:\Program Files\KODAK Create@Home Software (für dm)
2014-08-16 17:57 - 2014-08-16 17:57 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Eastman Kodak Company
2014-08-14 03:05 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-14 03:05 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-14 03:05 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-14 03:05 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 18:55 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 18:55 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 18:55 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 18:55 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-13 18:55 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 18:54 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 18:54 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-13 18:54 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 18:54 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 18:54 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 18:54 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-11 18:36 - 2013-08-30 14:49 - 00000000 ____D () C:\Users\Holger\AppData\Local\PMB Files
2014-09-11 18:35 - 2014-09-11 18:35 - 00918440 _____ (Oracle Corporation) C:\Users\Holger\Desktop\JavaSetup7u67.com
2014-09-11 18:33 - 2014-06-11 19:52 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-09-11 18:32 - 2014-09-11 18:10 - 00018531 _____ () C:\Users\Holger\Desktop\FRST.txt
2014-09-11 18:32 - 2014-09-06 12:34 - 00000000 ____D () C:\FRST
2014-09-11 18:29 - 2014-09-11 18:29 - 00000922 _____ () C:\Users\Holger\Desktop\JRT.txt
2014-09-11 18:29 - 2009-07-14 06:34 - 00026752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-11 18:29 - 2009-07-14 06:34 - 00026752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-11 18:24 - 2014-09-11 18:24 - 01016261 _____ (Thisisu) C:\Users\Holger\Downloads\JRT.exe
2014-09-11 18:22 - 2014-09-05 23:52 - 00000000 ____D () C:\Users\Holger\AppData\Local\Overwolf
2014-09-11 18:21 - 2014-06-15 19:05 - 00000000 ____D () C:\Users\Holger\AppData\Local\LogMeIn Hamachi
2014-09-11 18:21 - 2013-09-08 13:32 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-11 18:21 - 2013-09-06 13:34 - 00577232 _____ () C:\Windows\PFRO.log
2014-09-11 18:21 - 2013-09-06 13:34 - 00070408 _____ () C:\Windows\setupact.log
2014-09-11 18:21 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-11 18:20 - 2013-10-21 17:16 - 00000000 ____D () C:\AdwCleaner
2014-09-11 18:20 - 2013-08-27 16:00 - 01185266 _____ () C:\Windows\WindowsUpdate.log
2014-09-11 18:17 - 2014-09-11 18:17 - 01370483 _____ () C:\Users\Holger\Desktop\adwcleaner_3.309.exe
2014-09-11 18:16 - 2013-08-29 18:05 - 00000000 ____D () C:\Users\Holger\AppData\Local\JDownloader v2.0
2014-09-11 18:11 - 2013-08-30 14:49 - 00000000 ____D () C:\ProgramData\PMB Files
2014-09-11 18:09 - 2014-09-11 18:09 - 01097728 _____ (Farbar) C:\Users\Holger\Desktop\FRST.exe
2014-09-11 18:09 - 2013-08-27 16:08 - 00000000 ____D () C:\Users\Holger
2014-09-11 18:03 - 2013-08-27 16:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-11 18:00 - 2014-09-11 18:00 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-09-11 18:00 - 2013-10-04 08:57 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-11 18:00 - 2013-08-27 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-09-11 18:00 - 2013-08-27 17:19 - 00000000 ____D () C:\Program Files\Avira
2014-09-11 17:54 - 2013-09-08 13:33 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-11 17:43 - 2014-05-07 03:01 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-11 17:38 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-09-11 16:46 - 2014-01-18 10:07 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-11 16:41 - 2014-01-18 10:07 - 98758480 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-11 16:41 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-09-11 16:37 - 2013-08-27 16:14 - 01592628 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-11 05:36 - 2013-12-20 14:22 - 00000000 ____D () C:\Users\NeroMediaHomeUser.4
2014-09-10 17:08 - 2013-10-19 21:21 - 00000000 ____D () C:\ProgramData\Oracle
2014-09-10 17:07 - 2014-09-10 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-09-10 17:07 - 2014-09-10 17:07 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-09-10 17:07 - 2014-09-10 17:06 - 00005801 _____ () C:\Windows\system32\jupdate-1.7.0_67-b01.log
2014-09-10 17:07 - 2013-08-29 17:30 - 00000000 ____D () C:\Program Files\Java
2014-09-10 16:58 - 2014-09-10 16:58 - 00142704 _____ () C:\Windows\Minidump\091014-17578-01.dmp
2014-09-10 16:58 - 2013-11-07 21:31 - 00000000 ____D () C:\Windows\Minidump
2014-09-09 22:40 - 2013-08-27 16:57 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-09-09 22:40 - 2013-08-27 16:57 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-09-08 18:31 - 2014-09-08 18:31 - 00854417 _____ () C:\Users\Holger\Desktop\SecurityCheck.exe
2014-09-08 18:16 - 2014-09-08 18:16 - 00000000 ____D () C:\Program Files\ESET
2014-09-07 20:41 - 2014-09-07 20:41 - 01016261 _____ (Thisisu) C:\Users\Holger\Desktop\JRT.exe
2014-09-07 20:39 - 2014-09-05 23:24 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-07 11:06 - 2013-10-18 21:54 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\.minecraft
2014-09-07 08:20 - 2014-09-05 23:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-06 13:48 - 2014-09-06 13:48 - 00021393 _____ () C:\ComboFix.txt
2014-09-06 13:48 - 2014-09-06 13:22 - 00000000 ____D () C:\Qoobox
2014-09-06 13:48 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2014-09-06 13:48 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-09-06 13:45 - 2014-09-06 13:22 - 00000000 ____D () C:\Windows\erdnt
2014-09-06 13:42 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2014-09-06 13:34 - 2013-08-27 16:45 - 00000000 ____D () C:\ProgramData\TEMP
2014-09-06 13:21 - 2014-09-06 13:21 - 05576440 ____R (Swearware) C:\Users\Holger\Desktop\ComboFix.exe
2014-09-06 13:13 - 2014-09-06 13:13 - 00001226 _____ () C:\Users\Holger\Desktop\Revo Uninstaller.lnk
2014-09-06 13:13 - 2014-09-06 13:13 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-06 12:28 - 2014-09-06 12:28 - 00142704 _____ () C:\Windows\Minidump\090614-18765-01.dmp
2014-09-06 10:28 - 2014-09-06 09:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
2014-09-06 10:11 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-06 10:11 - 2009-07-14 04:04 - 00000505 _____ () C:\Windows\win.ini
2014-09-06 09:54 - 2014-09-06 09:54 - 00142704 _____ () C:\Windows\Minidump\090614-18390-01.dmp
2014-09-06 09:44 - 2014-09-06 09:45 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Desktop\OTH.scr
2014-09-06 09:23 - 2014-09-06 09:23 - 00000000 ____D () C:\Program Files\RCP
2014-09-06 09:17 - 2013-08-27 16:22 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\vlc
2014-09-06 01:24 - 2014-09-06 01:24 - 00001892 _____ () C:\Users\Public\Desktop\NosTale.lnk
2014-09-06 01:24 - 2014-09-06 01:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nostale(DE)
2014-09-06 01:18 - 2014-09-06 01:10 - 00000000 ____D () C:\Program Files\GameforgeLive
2014-09-06 01:10 - 2014-09-06 01:10 - 00001029 _____ () C:\Users\Public\Desktop\Gameforge Live.lnk
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\AppData\Local\Gameforge4d
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-09-05 23:53 - 2014-09-05 23:53 - 00001919 _____ () C:\Users\Public\Desktop\Overwolf.lnk
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\ProgramData\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Common Files\Overwolf
2014-09-05 23:50 - 2014-09-05 23:24 - 00000000 ____D () C:\Fraps
2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-09-05 23:23 - 2014-09-05 23:23 - 02326976 _____ (Beepa Pty Ltd) C:\Users\Holger\Desktop\setup.exe
2014-09-05 23:23 - 2014-09-05 23:23 - 00001026 _____ () C:\Users\Holger\Desktop\FLVM Player.lnk
2014-09-05 08:59 - 2013-09-08 13:34 - 00002121 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\Program Files\LogMeIn Hamachi
2014-09-05 08:42 - 2014-06-18 19:14 - 00000896 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-09-05 03:52 - 2014-09-11 17:39 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-05 03:47 - 2014-09-11 17:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-29 07:33 - 2009-07-14 06:33 - 00277824 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-23 03:46 - 2014-08-28 16:24 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 02:42 - 2014-08-28 16:24 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-21 17:39 - 2013-09-03 16:40 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\elsterformular
2014-08-21 17:38 - 2014-08-21 17:38 - 00001191 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\Program Files\ElsterFormular
2014-08-21 17:38 - 2013-09-03 16:40 - 00000000 ____D () C:\ProgramData\elsterformular
2014-08-20 18:27 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-08-20 17:46 - 2013-08-27 17:19 - 00000000 ____D () C:\ProgramData\Avira
2014-08-19 19:39 - 2014-09-11 16:46 - 00327872 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-19 00:26 - 2014-09-11 16:46 - 17455104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-19 00:08 - 2014-09-11 16:46 - 04232704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-18 23:57 - 2014-09-11 16:46 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-18 23:57 - 2014-09-11 16:46 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-18 23:46 - 2014-09-11 16:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-18 23:45 - 2014-09-11 16:46 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-18 23:44 - 2014-09-11 16:46 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-18 23:44 - 2014-09-11 16:46 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-18 23:42 - 2014-09-11 16:46 - 02185728 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-18 23:39 - 2014-09-11 16:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-18 23:39 - 2014-09-11 16:46 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-18 23:37 - 2014-09-11 16:46 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-18 23:36 - 2014-09-11 16:46 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-18 23:36 - 2014-09-11 16:46 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-18 23:35 - 2014-09-11 16:46 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-18 23:30 - 2014-09-11 16:46 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-18 23:27 - 2014-09-11 16:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-18 23:22 - 2014-09-11 16:46 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-18 23:19 - 2014-09-11 16:46 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-18 23:17 - 2014-09-11 16:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-18 23:17 - 2014-09-11 16:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-18 23:15 - 2014-09-11 16:46 - 11769856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-18 23:09 - 2014-09-11 16:46 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-18 23:08 - 2014-09-11 16:46 - 02014208 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-18 23:08 - 2014-09-11 16:46 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-18 23:07 - 2014-09-11 16:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-18 22:46 - 2014-09-11 16:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-18 22:38 - 2014-09-11 16:46 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-18 22:36 - 2014-09-11 16:46 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-18 16:35 - 2014-08-16 17:58 - 00000000 ____D () C:\Program Files\KODAK Create@Home Software (für dm)
2014-08-16 19:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-16 18:00 - 2014-08-16 18:00 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\MPC
2014-08-16 17:59 - 2014-08-16 17:59 - 00002122 _____ () C:\Users\Public\Desktop\KODAK Create@Home Software (für dm).lnk
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\Users\Holger\.kodakch
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KODAK Create@Home Software (für dm)
2014-08-16 17:57 - 2014-08-16 17:57 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Eastman Kodak Company

Some content of TEMP:
====================
C:\Users\Holger\AppData\Local\temp\avgnt.exe
C:\Users\Holger\AppData\Local\temp\proxy_vole8454141105560782454.dll
C:\Users\Holger\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-06 11:03

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

ProxyServer: http=127.0.0.1:49220;https=127.0.0.1:49220
CHR DefaultSearchKeyword: Default -> trovi.search
CHR DefaultSearchURL: Default -> hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3AEF6CD1-12FB-4095-BB5E-B8F007E34CBD&SearchSource=58&CUI=&UM=2&UP=SPEF674306-B5AD-44FD-8D8A-3D79F17072F0&q={searchTerms}&SSPV=
CHR DefaultSuggestURL: Default -> hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

In welchem Browser bekommst Du diese Meldungen?

Hallo!

Die Meldung mit Java kommt nicht mehr.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 11-09-2014
Ran by Holger at 2014-09-12 13:37:22 Run:1
Running from C:\Users\Holger\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
ProxyServer: http=127.0.0.1:49220;https=127.0.0.1:49220
CHR DefaultSearchKeyword: Default -> trovi.search
CHR DefaultSearchURL: Default -> hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3AEF6CD1-12FB-4095-BB5E-B8F007E34CBD&SearchSource=58&CUI=&UM=2&UP=SPEF674306-B5AD-44FD-8D8A-3D79F17072F0&q={searchTerms}&SSPV=
CHR DefaultSuggestURL: Default -> hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}
         
*****************

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
Chrome DefaultSearchKeyword deleted successfully.
Chrome DefaultSearchURL deleted successfully.
Chrome DefaultSuggestURL deleted successfully.

==== End of Fixlog ====