Google Chrome viel werbung und Neue Tabs werden mit Malware geöfnet

winniwinkel · 09.01.2015, 19:00

Hallo
Seit heute nachmittag spiel mein Chrome verrückt.
Bei anklicken von Links, auch hier im Board, wird ein neuer Tab geöffnet
teilweise mit Werbung aller " Ihr PC Ist gefährdet" teilweise mit Maleware
die durch meinen Bitdefender blockiert wird.
Was kann ich da tun?

cosinus · 09.01.2015, 19:06

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

winniwinkel · 09.01.2015, 19:09

Hallo
Hier die FRST.txt

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015
Ran by Thomas (administrator) on THOMAS-PC on 09-01-2015 18:40:07
Running from I:\Daten von Thomas\Downloads
Loaded Profile: Thomas (Available profiles: Thomas)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(VOLKSWAGEN AG) I:\Neuer\BBGate.exe
() I:\Neuer\Apache.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() I:\Neuer\Apache.exe
(CrypKey (Canada) Ltd.) C:\Windows\System32\Crypserv.exe
(FileZilla Project) C:\Program Files (x86)\FileZilla Server\FileZilla server.exe
(Gladinet, INC) C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSVSSSvr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Samsung) C:\Program Files (x86)\Samsung\PC Auto Backup\WiselinkPro.exe
() C:\Program Files (x86)\Samsung\PC Auto Backup\http_ss_win_pro.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Google Inc.) C:\Users\Thomas\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe
() C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe
(Microsoft Corporation) C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Spotify Ltd) C:\Users\Thomas\AppData\Roaming\Spotify\spotify.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwtxapps.exe
(Samsung) C:\Program Files (x86)\Samsung\PC Auto Backup\AutoBackup.exe
(PS3 Media Server) C:\Program Files (x86)\PS3 Media Server\pms.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFGuage.exe
(Oracle Corporation) C:\Program Files (x86)\PS3 Media Server\jre\bin\javaw.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFRealTimeD.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFTimerD.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Create 8\PdfCreate8Hook.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Professional 7\PdfPro7Hook.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Gladinet, INC) C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladinetClient.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxcr.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\OFFICE15\CSISYNCCLIENT.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\MSOSYNC.EXE
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1626752 2014-11-24] (Bitdefender)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5263504 2012-08-09] (VIA)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3498728 2014-12-03] (Adobe Systems Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [FileZilla Server Interface] => C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe [1044480 2013-12-16] (FileZilla Project)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2068856 2011-10-12] (Flexera Software LLC.)
HKLM-x32\...\Run: [OmniPage Preload] => C:\Program Files (x86)\Nuance\OmniPage19\OmniPage19.exe [2922824 2013-04-22] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [Nuance OmniPage Ultimate-reminder] => C:\Program Files (x86)\Nuance\OmniPage19\Ereg\Ereg.exe [334152 2013-01-14] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFCreHook] => C:\Program Files (x86)\Nuance\PDF Create 8\pdfcreate8hook.exe [1029960 2013-03-12] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDF8 Registry Controller] => C:\Program Files (x86)\Nuance\PDF Create 8\RegistryController.exe [180040 2013-03-12] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [36168 2013-04-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [18248 2013-04-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFProHook] => C:\Program Files (x86)\Nuance\PDF Professional 7\pdfpro7hook.exe [641864 2013-03-20] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1679360 2012-02-28] (Wondershare)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [Google+ Auto Backup] => C:\Users\Thomas\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3619096 2014-01-06] (Google Inc.)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe [473352 2014-02-14] ()
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790344 2014-11-24] (Bitdefender)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [SkyDrive] => C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [277672 2014-11-02] (Microsoft Corporation)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [Spotify] => C:\Users\Thomas\AppData\Roaming\Spotify\Spotify.exe [6737976 2014-12-30] (Spotify Ltd)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [GoogleChromeAutoLaunch_D1D0AD69A13928375769191006ADC5F6] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\MountPoints2: {56b64bd4-bf07-11e2-ae08-806e6f6e6963} - D:\Start.exe
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\MountPoints2: {d1bea689-8b2c-11e3-b140-94de80005579} - K:\pushinst.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-05-05] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [GladinetIconOverlay] -> {3C3DC57A-7535-48AF-BB9E-C3576A4F34D0} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIcon.dll (Gladinet, INC)
ShellIconOverlayIdentifiers: [GladinetUploading] -> {959A18D3-9CC9-41e8-B76F-34ED9A89D4EA} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIconU.dll (Gladinet, INC)
ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [GladinetIconOverlay] -> {3C3DC57A-7535-48AF-BB9E-C3576A4F34D0} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIcon32.dll (Gladinet, INC)
ShellIconOverlayIdentifiers-x32: [GladinetUploading] -> {959A18D3-9CC9-41e8-B76F-34ED9A89D4EA} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIconU32.dll (Gladinet, INC)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-64129086-1818121567-326312414-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-64129086-1818121567-326312414-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-64129086-1818121567-326312414-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKU\S-1-5-21-64129086-1818121567-326312414-1000 -> {C97E1300-5067-4D6F-8A64-3F5DB9CBD664} URL = hxxp://yandex.ru/yandsearch?win=78&clid=1989707&text={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Box Rock 1.0.0.6 -> {464deeb8-b74f-4117-b8ec-e42f4028f3d1} -> C:\Program Files (x86)\Box Rock\BoxRockBHO.dll No File
BHO-x32: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files (x86)\Nuance\PDF Professional 7\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: ZeonIEEventHelper Class -> {C7DA0384-42AA-428c-B832-88AC343DE1A8} -> C:\Program Files (x86)\Nuance\PDF Create 8\Bin\GZeonIEFavClient.dll (Zeon Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll (Bitdefender)
Toolbar: HKLM-x32 - Nuance PDF - {BCCE15AE-AC7E-4bc9-94AF-2A714A412BCB} - C:\Program Files (x86)\Nuance\PDF Create 8\Bin\GZeonIEFavClient.dll (Zeon Corporation)
Toolbar: HKU\S-1-5-21-64129086-1818121567-326312414-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: HKLM-x32 {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} hxxp://download.gigabyte.com.tw/object/Dldrv.ocx
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default
FF SelectedSearchEngine: Яндекс
FF Homepage: hxxp://www.yandex.ru/?win=78&clid=1989706
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Professional 7\bin\nppdf.dll (Zeon Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yandex.ru-183920.xml
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext
FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2014-08-26]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-05-07]
FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff [2014-08-26]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext

Chrome: 
=======
CHR HomePage: Default -> 
CHR StartupUrls: Default -> "https://mail.google.com/mail/?hl=de&shva=1#inbox"
CHR Profile: C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-09]
CHR Extension: (Angry Birds) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2015-01-09]
CHR Extension: (Google Docs) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-09]
CHR Extension: (SuperMegaBest.com) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aonedlchkbicmhepimiahfalheedjgbh [2015-01-09]
CHR Extension: (Google Drive) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-09]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-09]
CHR Extension: (YouTube) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-09]
CHR Extension: (HelloFax: 50 Free Fax Pages) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bocmleclimfnadgmcdgecijlblfcmfnm [2015-01-09]
CHR Extension: (Adblock Plus) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-09]
CHR Extension: (Pushbullet) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2015-01-09]
CHR Extension: (Google-Suche) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-09]
CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2015-01-09]
CHR Extension: (Bitdefender Wallet) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabcmochhfpldjekobfaaggijgohadih [2015-01-09]
CHR Extension: (Google Tabellen) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-09]
CHR Extension: (Cr!Box) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjodchcocbnbhfkjeapbdoflbiibnapp [2015-01-09]
CHR Extension: (Google Kalender (von Google)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbgaklkmjakoegficnlkhebmhkjfich [2015-01-09]
CHR Extension: (Google Notizen – Notizen & Listen) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2015-01-09]
CHR Extension: (WEB.DE MailCheck) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2015-01-09]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-01-09]
CHR Extension: (Google Input Tools) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mclkkofklkfljcocdinagocijmpgbhab [2015-01-09]
CHR Extension: (Google Mail-Checker) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2015-01-09]
CHR Extension: (Erweiterung \) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlbjncdgjeocebhnmkbbbdekmmmcbfjd [2015-01-09]
CHR Extension: (Google Wallet) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-09]
CHR Extension: (Google Chrome to Phone Extension) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadboiipflhobonjjffjbfekfjcgkhco [2015-01-09]
CHR Extension: (Any.do) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocgddccilgpeepgglnlpchkpgamkgmld [2015-01-09]
CHR Extension: (LEO Wörterbuchsuche) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojniiiidjmoaiehegaedmfdclmgmmpdp [2015-01-09]
CHR Extension: (Google Calendar Checker (by Google)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookhcbgokankfmjafalglpofmolfopek [2015-01-09]
CHR Extension: (Evernote Web Clipper) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-01-09]
CHR Extension: (Google Mail) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-09]
CHR Extension: (Tapatalk Notifier) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\plfhcjljnfjpfcbjpgnflfofmahljkjj [2015-01-09]
CHR HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Thomas\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-07-23]
CHR HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - No Path
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-12-03]
CHR HKLM-x32\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 BBGate; I:\Neuer\BBGate.exe [532480 2011-12-06] (VOLKSWAGEN AG) [File not signed]
R2 BBGate-HTTPD; I:\Neuer\Apache.exe [20480 2011-12-06] () [File not signed]
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [78144 2014-11-24] (Bitdefender)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
S2 c7522d84; c:\Program Files (x86)\Optimizer Pro 3.27\OptProMon.dll [2462800 2015-01-09] ()
R2 Crypkey License; C:\Windows\system32\crypserv.exe [122880 2008-05-08] (CrypKey (Canada) Ltd.) [File not signed]
R2 FileZilla Server; C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe [613376 2013-12-16] (FileZilla Project) [File not signed]
R2 GladFileMonSvc; C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe [30032 2013-03-22] (Gladinet, INC)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [77640 2013-04-05] (Nuance Communications, Inc.)
S4 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 StarMoney 7.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [67320 2014-11-24] (Bitdefender)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27792 2012-08-03] (VIA Technologies, Inc.)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1527360 2014-11-24] (Bitdefender)
R2 WiselinkPro; C:\Program Files (x86)\Samsung\PC Auto Backup\WiselinkPro.exe [7274561 2013-02-18] (Samsung) [File not signed]
S2 Update Box Rock; "C:\Program Files (x86)\Box Rock\updateBoxRock.exe" [X]
S2 Util Box Rock; "C:\Program Files (x86)\Box Rock\bin\utilBoxRock.exe" [X]
S2 ZAPrivacyService; "C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1288472 2014-11-24] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [263032 2014-11-24] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [647752 2014-08-27] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-11-13] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107080 2012-10-29] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2014-08-27] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2014-08-27] (BitDefender)
S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-07-20] (DT Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [110744 2012-07-19] (Qualcomm Atheros Co., Ltd.)
R1 NetworkX; C:\Windows\system32\ckldrv.sys [28664 2008-03-17] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-10-07] (Audials AG)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [452040 2014-11-24] (BitDefender S.R.L.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [106256 2013-04-12] (Oracle Corporation)
R2 webinstrNHK; C:\Windows\system32\Drivers\webinstrNHK.sys [56432 2015-01-09] (Corsica)
S3 WsAudioDevice_383S(1); C:\Windows\System32\drivers\WsAudioDevice_383S(1).sys [29288 2014-07-31] (Wondershare)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-09 18:08 - 2015-01-09 18:08 - 00000168 _____ () C:\Users\Thomas\defogger_reenable
2015-01-09 17:58 - 2015-01-09 18:40 - 00000000 ____D () C:\FRST
2015-01-09 17:47 - 2015-01-09 17:47 - 00000000 ____D () C:\Users\Thomas\AppData\Local\CrashRpt
2015-01-09 17:44 - 2015-01-09 17:46 - 00000000 ____D () C:\AdwCleaner
2015-01-09 17:36 - 2015-01-09 17:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-01-09 16:53 - 2015-01-09 17:31 - 00002770 _____ () C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5_user.job
2015-01-09 16:53 - 2015-01-09 17:31 - 00002770 _____ () C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5.job
2015-01-09 16:53 - 2015-01-09 16:53 - 00005800 _____ () C:\Windows\System32\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5
2015-01-09 16:51 - 2015-01-09 17:31 - 00003424 _____ () C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-1.job
2015-01-09 16:51 - 2015-01-09 16:51 - 00006454 _____ () C:\Windows\System32\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-1
2015-01-09 16:50 - 2015-01-09 16:50 - 00003788 _____ () C:\Windows\System32\Tasks\PostPoneInstall
2015-01-09 16:36 - 2015-01-09 16:36 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 3.27
2015-01-09 16:35 - 2015-01-09 17:31 - 00002456 _____ () C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5_user.job
2015-01-09 16:35 - 2015-01-09 17:31 - 00002456 _____ () C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5.job
2015-01-09 16:35 - 2015-01-09 16:35 - 00056432 _____ (Corsica) C:\Windows\system32\Drivers\webinstrNHK.sys
2015-01-09 16:35 - 2015-01-09 16:35 - 00005486 _____ () C:\Windows\System32\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5
2015-01-09 16:35 - 2015-01-09 16:35 - 00002119 _____ () C:\Windows\patsearch.bin
2015-01-09 16:35 - 2015-01-09 16:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNHK_01009.Wdf
2015-01-09 16:33 - 2015-01-09 17:31 - 00003484 _____ () C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-1.job
2015-01-09 16:33 - 2015-01-09 16:33 - 00006514 _____ () C:\Windows\System32\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-1
2015-01-09 16:27 - 2015-01-09 16:27 - 00003110 _____ () C:\Windows\System32\Tasks\Update Service HitsBlender
2015-01-09 13:44 - 2015-01-09 16:31 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Wondershare
2015-01-09 13:44 - 2015-01-09 16:31 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2015-01-09 13:44 - 2015-01-09 13:44 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Wondershare
2015-01-09 13:44 - 2014-07-31 15:55 - 00029288 _____ (Wondershare) C:\Windows\system32\Drivers\WsAudioDevice_383S(1).sys
2015-01-08 15:24 - 2015-01-08 15:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic MP3 Tagger
2015-01-08 15:24 - 2015-01-08 15:24 - 00000000 ____D () C:\Program Files (x86)\Magic MP3 Tagger
2015-01-07 09:00 - 2015-01-07 09:00 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\GHISLER
2014-12-30 18:28 - 2014-12-30 18:39 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Apowersoft
2014-12-30 18:28 - 2014-12-30 18:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apowersoft
2014-12-30 18:28 - 2014-12-30 18:28 - 00000000 ____D () C:\Program Files (x86)\Apowersoft
2014-12-30 18:20 - 2015-01-08 03:42 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Spotify
2014-12-30 18:18 - 2015-01-09 18:36 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Spotify
2014-12-30 10:01 - 2015-01-09 18:36 - 00000000 ____D () C:\ProgramData\PMS
2014-12-30 10:01 - 2015-01-02 14:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PS3 Media Server
2014-12-30 10:01 - 2014-12-30 10:01 - 00000000 ____D () C:\Program Files (x86)\PS3 Media Server
2014-12-26 18:51 - 2014-12-26 18:51 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2014-12-26 18:37 - 2014-12-26 18:37 - 00002091 _____ () C:\Users\Thomas\AppData\Local\2AE5D5AFBC8142c2AB89DCD9CB41C9AF.Layout2.lbx
2014-12-26 18:34 - 2014-12-26 18:34 - 00000000 __SHD () C:\Users\Thomas\AppData\Local\EmieBrowserModeList
2014-12-25 18:15 - 2014-12-25 18:15 - 00000000 ____D () C:\ProgramData\TVersity
2014-12-25 18:15 - 2014-12-25 18:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xiph.Org
2014-12-25 18:15 - 2014-12-25 18:15 - 00000000 ____D () C:\Program Files (x86)\Xiph.Org
2014-12-25 18:15 - 2014-12-25 18:15 - 00000000 ____D () C:\Program Files (x86)\TVersity Codec Pack
2014-12-18 04:13 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-18 04:13 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-15 03:27 - 2014-12-15 03:27 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-15 03:01 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-15 03:01 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-14 14:06 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-14 14:06 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-14 14:06 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-14 14:06 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-14 14:06 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-14 14:06 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-14 14:06 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-14 14:06 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-14 14:06 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-14 14:06 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-14 14:06 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-14 14:06 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-14 14:06 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-14 14:06 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-14 14:06 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-14 14:06 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-14 14:06 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-14 14:06 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-14 14:06 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-14 14:06 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-14 14:06 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-14 14:06 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-14 14:06 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-14 14:06 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-14 14:06 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-14 14:06 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-14 14:06 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-14 14:06 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-14 14:06 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-14 14:06 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-14 14:06 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-14 14:06 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-14 14:06 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-14 14:06 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-14 14:06 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-14 14:06 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-14 14:06 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-14 14:06 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-14 14:06 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-14 14:06 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-14 14:06 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-14 14:06 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-14 14:06 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-14 14:06 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-14 14:06 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-14 14:06 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-14 14:06 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-14 14:06 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-14 14:06 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-14 14:06 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-14 14:06 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-14 14:06 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-14 14:06 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-14 14:06 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-10 10:25 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-10 10:25 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-10 10:25 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 10:25 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 10:25 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-10 10:17 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-10 10:17 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-10 10:17 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-10 10:17 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-10 10:17 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-10 10:17 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-10 10:17 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-10 10:17 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-10 10:17 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-10 10:17 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-10 10:17 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-10 10:17 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-10 10:17 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-10 10:17 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-09 18:39 - 2013-05-04 18:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-09 18:39 - 2013-05-04 18:54 - 01664287 _____ () C:\Windows\WindowsUpdate.log
2015-01-09 18:38 - 2014-05-07 18:25 - 05890850 _____ () C:\ProgramData\OfflineCatalogue_2_2014_TECDOC_CD.log
2015-01-09 18:38 - 2014-05-07 18:25 - 00000000 ____D () C:\ProgramData\TECDOC_CD
2015-01-09 18:38 - 2013-11-27 19:34 - 00000000 ____D () C:\Users\Thomas\AppData\Local\gladinet
2015-01-09 18:37 - 2014-11-02 15:00 - 00005140 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for Thomas-PC-Thomas Thomas-PC
2015-01-09 18:36 - 2013-12-21 17:56 - 00013020 _____ () C:\Windows\error.log
2015-01-09 18:36 - 2013-12-21 17:56 - 00002968 _____ () C:\Windows\errord.log
2015-01-09 18:36 - 2013-12-09 19:29 - 00000000 ___RD () C:\Users\Thomas\Google Drive
2015-01-09 18:36 - 2013-05-12 12:51 - 00000000 ____D () C:\ProgramData\Temp
2015-01-09 18:36 - 2013-05-04 19:17 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-09 18:36 - 2013-05-04 19:13 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-09 18:36 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-09 18:36 - 2009-07-14 05:51 - 00053576 _____ () C:\Windows\setupact.log
2015-01-09 18:22 - 2014-09-10 08:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsaWin
2015-01-09 18:22 - 2014-06-22 13:51 - 00000270 _____ () C:\Windows\ODBC.INI
2015-01-09 18:15 - 2013-05-04 19:13 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-09 18:08 - 2013-05-04 18:54 - 00000000 ____D () C:\Users\Thomas
2015-01-09 18:05 - 2013-07-06 16:01 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-09 17:54 - 2009-07-14 05:45 - 00023056 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-09 17:54 - 2009-07-14 05:45 - 00023056 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-09 17:53 - 2009-07-14 18:58 - 00705002 _____ () C:\Windows\system32\perfh007.dat
2015-01-09 17:53 - 2009-07-14 18:58 - 00151346 _____ () C:\Windows\system32\perfc007.dat
2015-01-09 17:53 - 2009-07-14 06:13 - 01629708 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-09 17:47 - 2013-05-04 19:23 - 00404454 _____ () C:\Windows\PFRO.log
2015-01-09 17:45 - 2009-07-14 03:34 - 00000601 _____ () C:\Windows\win.ini
2015-01-09 17:36 - 2013-05-04 19:13 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Google
2015-01-09 17:29 - 2013-05-10 09:38 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\vlc
2015-01-07 08:46 - 2013-05-04 19:40 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Dropbox
2015-01-06 11:15 - 2013-05-07 18:13 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\FileZilla
2015-01-02 11:20 - 2014-11-16 12:47 - 00000000 ____D () C:\Users\Thomas\AppData\Local\JDownloader v2.0
2014-12-28 13:09 - 2013-05-07 18:07 - 00002453 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat XI Pro.lnk
2014-12-28 13:09 - 2013-05-07 18:07 - 00002210 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe FormsCentral.lnk
2014-12-28 13:09 - 2013-05-07 18:07 - 00002049 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller XI.lnk
2014-12-28 13:08 - 2013-05-27 19:09 - 00001458 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
2014-12-25 19:06 - 2013-07-06 16:01 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-25 19:06 - 2013-07-06 16:01 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-25 19:06 - 2013-05-12 19:00 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-20 12:49 - 2014-06-20 12:53 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Brother
2014-12-16 02:15 - 2014-09-07 17:35 - 00000000 ____D () C:\ProgramData\MEGAsync
2014-12-15 07:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-15 06:17 - 2013-06-13 11:25 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-15 06:15 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-12-15 03:53 - 2014-09-11 03:06 - 00000000 ____D () C:\Windows\rescache
2014-12-15 03:33 - 2013-05-26 12:27 - 00000000 ____D () C:\Program Files (x86)\StarMoney 7.0
2014-12-15 03:27 - 2014-05-07 02:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-15 03:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-15 03:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-15 03:11 - 2013-09-10 17:44 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-12-15 03:11 - 2013-05-04 19:46 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-15 03:09 - 2013-08-15 02:01 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-15 03:04 - 2013-05-05 10:54 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-14 12:46 - 2014-12-07 16:48 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\DVDVideoSoft
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_SusX70p3.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_InjX83P2.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_InjX70P3.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_Dacia.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_AbAC4VLL.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000008 _____ () C:\Windows\5800Hard.ini
2014-12-14 12:45 - 2014-11-02 13:53 - 00247786 _____ () C:\Clip_err.txt
2014-12-14 12:45 - 2014-11-02 13:53 - 00001928 _____ () C:\Clip.txt
2014-12-14 12:45 - 2014-10-31 18:11 - 00000383 _____ () C:\Autoformation CLIP.TXT
2014-12-14 12:45 - 2014-06-22 13:51 - 00000141 _____ () C:\Trace.ini
2014-12-14 12:45 - 2013-05-05 17:51 - 00000000 ____D () C:\ProgramData\InstallShield

Some content of TEMP:
====================
C:\Users\Thomas\AppData\Local\Temp\130606118584661085.exe
C:\Users\Thomas\AppData\Local\Temp\13060611860670120558.exe
C:\Users\Thomas\AppData\Local\Temp\1jr1aoxu.dll
C:\Users\Thomas\AppData\Local\Temp\AF0C55FA-A41B-46F6-0170-EB50554B3274.exe
C:\Users\Thomas\AppData\Local\Temp\AF126BA6-3872-EC0C-B96F-F742E50C11E6.dll
C:\Users\Thomas\AppData\Local\Temp\AskPIP_FF_.exe
C:\Users\Thomas\AppData\Local\Temp\AutoRun.exe
C:\Users\Thomas\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Thomas\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe
C:\Users\Thomas\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyorbfh.dll
C:\Users\Thomas\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Thomas\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Thomas\AppData\Local\Temp\Execute2App.exe
C:\Users\Thomas\AppData\Local\Temp\FreeAudioCDBurner.exe
C:\Users\Thomas\AppData\Local\Temp\GdiPlus.dll
C:\Users\Thomas\AppData\Local\Temp\GsLXh1E3NY.exe
C:\Users\Thomas\AppData\Local\Temp\hfh4yhxx.dll
C:\Users\Thomas\AppData\Local\Temp\InstallerMessageBox.exe
C:\Users\Thomas\AppData\Local\Temp\jna1108045323995340031.dll
C:\Users\Thomas\AppData\Local\Temp\jna1874070241583102263.dll
C:\Users\Thomas\AppData\Local\Temp\jna3670992309178468449.dll
C:\Users\Thomas\AppData\Local\Temp\jna9019976945229357317.dll
C:\Users\Thomas\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Thomas\AppData\Local\Temp\L1Y8Ufulh8.exe
C:\Users\Thomas\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Thomas\AppData\Local\Temp\msvcp90.dll
C:\Users\Thomas\AppData\Local\Temp\msvcr90.dll
C:\Users\Thomas\AppData\Local\Temp\NPSInstallerProxy.exe
C:\Users\Thomas\AppData\Local\Temp\NPSInstallerProxyMessageBoxHookDll.dll
C:\Users\Thomas\AppData\Local\Temp\nsf7E51.exe
C:\Users\Thomas\AppData\Local\Temp\nsnC1F6.exe
C:\Users\Thomas\AppData\Local\Temp\nsnD74E.exe
C:\Users\Thomas\AppData\Local\Temp\nssD54A.exe
C:\Users\Thomas\AppData\Local\Temp\nsxC011.exe
C:\Users\Thomas\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Thomas\AppData\Local\Temp\nvStInst.exe
C:\Users\Thomas\AppData\Local\Temp\optprosetup.exe
C:\Users\Thomas\AppData\Local\Temp\ose00001.exe
C:\Users\Thomas\AppData\Local\Temp\PidGenX.dll
C:\Users\Thomas\AppData\Local\Temp\proxy_vole7398810760119204713.dll
C:\Users\Thomas\AppData\Local\Temp\Quarantine.exe
C:\Users\Thomas\AppData\Local\Temp\Runner.exe
C:\Users\Thomas\AppData\Local\Temp\Runner2.exe
C:\Users\Thomas\AppData\Local\Temp\Runner4.exe
C:\Users\Thomas\AppData\Local\Temp\ScanProfilesBackup.dll
C:\Users\Thomas\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Thomas\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Thomas\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Thomas\AppData\Local\Temp\sfextra.dll
C:\Users\Thomas\AppData\Local\Temp\smarter.exe
C:\Users\Thomas\AppData\Local\Temp\sp-downloader.exe
C:\Users\Thomas\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\Thomas\AppData\Local\Temp\sqlite3.dll
C:\Users\Thomas\AppData\Local\Temp\Util.dll
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.1-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.2-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.3-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.4-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.5-win64.exe
C:\Users\Thomas\AppData\Local\Temp\VP6Install.exe
C:\Users\Thomas\AppData\Local\Temp\VP6VFW.dll
C:\Users\Thomas\AppData\Local\Temp\YourFileDownloaderf1Cv0E6zGO.exe
C:\Users\Thomas\AppData\Local\Temp\YourFileDownloaderGiIB8VtIkL.exe
C:\Users\Thomas\AppData\Local\Temp\zyqEnLZxVY.exe
C:\Users\Thomas\AppData\Local\Temp\_is19F6.exe
C:\Users\Thomas\AppData\Local\Temp\_isBDD3.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-04 00:59

==================== End Of Log ============================

--- --- ---

Und hier dir Addition.txt
FRST Additions Logfile:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-01-2015
Ran by Thomas at 2015-01-09 18:40:29
Running from I:\Daten von Thomas\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Bitdefender Antivirus (Enabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {A23392FD-84B9-F933-2C71-81E751F6EF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.10 - Adobe Systems)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5 64-bit (HKLM\...\{6C1A010F-9108-4162-A26F-9FEC4AC0F0F0}) (Version: 5.0.1 - Adobe)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version:  3.0 - )
Amazon Cloud Drive (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\23ab716f18849b6f) (Version: 2.1.2013.1340 - Amazon)
Amazon.com Kindle Fire (HKLM\...\Kindle Fire Drivers) (Version:  - )
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.)
Audials (HKLM-x32\...\{3C07AF26-8705-4DF5-96C7-51432E0C9F03}) (Version: 11.0.51201.100 - Audials AG)
AVS Audio Converter 7 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 7.0.5.510 - Online Media Technologies Ltd.)
AVS Audio Editor 7.1 (HKLM-x32\...\AVS Audio Editor_is1) (Version: 7.1.5.479 - Online Media Technologies Ltd.)
AVS Audio Recorder version 4.0 (HKLM-x32\...\AVS Audio Recorder_is1) (Version: 4.0.1.21 - Online Media Technologies Ltd.)
AVS Cover Editor 2.0.1.3 (HKLM-x32\...\AVSCoverEditor2_is1) (Version: 2.0.1.3 - Online Media Technologies Ltd.)
AVS Disc Creator 5 (HKLM-x32\...\AVS Disc Creator_is1) (Version: 5.0.6.520 - Online Media Technologies Ltd.)
AVS Document Converter 2.2.5 (HKLM-x32\...\AVS Document Converter_is1) (Version: 2.2.5.218 - Online Media Technologies Ltd.)
AVS DVD Copy 4.1.2.283 (HKLM-x32\...\AVS DVD Copy_is1) (Version: 4.1.2.283 - Online Media Technologies Ltd.)
AVS Image Converter 2.3.2.248 (HKLM-x32\...\AVS Image Converter_is1) (Version: 2.3.2.248 - Online Media Technologies Ltd.)
AVS Media Player 4.1.10.99 (HKLM-x32\...\AVS Media Player_is1) (Version: 4.1.10.99 - Online Media Technologies Ltd.)
AVS Photo Editor (HKLM-x32\...\AVS Photo Editor_is1) (Version: 2.0.8.128 - Online Media Technologies Ltd.)
AVS Registry Cleaner version 2.2 (HKLM-x32\...\AVSRegistryCleaner_is1) (Version: 2.2.3.236 - Online Media Technologies Ltd.)
AVS Ringtone Maker version 1.6 (HKLM-x32\...\AVS Ringtone Maker 1.6_is1) (Version: 1.6.1.140 - Online Media Technologies Ltd.)
AVS Video Converter 8 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 8.3.2.533 - Online Media Technologies Ltd.)
AVS Video Editor 6 (HKLM-x32\...\AVS Video Editor_is1) (Version: 6.3.2.234 - Online Media Technologies Ltd.)
AVS Video Recorder 2.5 (HKLM-x32\...\AVS Video Recorder_is1) (Version: 2.5.3.83 - Online Media Technologies Ltd.)
AVS Video ReMaker 4.1.3.149 (HKLM-x32\...\AVS Video ReMaker_is1) (Version: 4.1.3.149 - Online Media Technologies Ltd.)
Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
Bitdefender Total Security 2015 (HKLM\...\Bitdefender) (Version: 18.11.0.872 - Bitdefender)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite MFC-J4610DW (HKLM-x32\...\{DD98C438-D769-4677-AA87-3481FA32D20C}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
Brother P-touch Address Book 1.2 (HKLM-x32\...\{71410B72-3DA8-4330-BC05-7380FDE09410}) (Version: 1.2.0010 - Brother Industries, Ltd.)
Brother P-touch Editor 5.1 (HKLM-x32\...\{39270390-A851-4E4B-94A9-D5C468216ED3}) (Version: 5.1.0200 - Brother Industries, Ltd.)
Brother QL-Series Software User's Guide (HKLM-x32\...\InstallShield_{A242CAB2-870C-4AC9-8AFE-34379D9383CD}) (Version: 1.00.0000 - Brother Industries, Ltd.)
Brother QL-Series Software User's Guide (x32 Version: 1.00.0000 - Brother Industries, Ltd.) Hidden
calibre (HKLM-x32\...\{17429B3C-DC4B-4ED8-BBEA-CF14BD6203C5}) (Version: 1.28.0 - Kovid Goyal)
CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)
CloneDVDmobile (HKLM-x32\...\CloneDVDmobile) (Version: 1.9.0.1 - SlySoft)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
Dropbox (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.2.13992 - Landesfinanzdirektion Thüringen)
FileZilla Client 3.9.0.6 (HKLM-x32\...\FileZilla Client) (Version: 3.9.0.6 - Tim Kosse)
FileZilla Server (HKLM-x32\...\FileZilla Server) (Version: beta 0.9.42 - FileZilla Project)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Drive (HKLM-x32\...\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java 7 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417040FF}) (Version: 7.0.400 - Oracle)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.670 - Oracle)
Java SE Development Kit 7 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170250}) (Version: 1.7.0.250 - Oracle)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Joe (HKLM-x32\...\{F8C986EA-13F8-4B39-91C3-A6B9A851CD34}) (Version: 4.01.0000 - Wirth IT Design)
KFZ-Faktura (HKLM-x32\...\KFZ-Faktura_is1) (Version: 13 - Nürenberg IT-Service)
Magic MP3 Tagger 2.2.6 (HKLM-x32\...\uniquemagicmp3taggerappid_is1) (Version:  - Mathias Kunter)
MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Access database engine 2010 (German) (HKLM-x32\...\{90140000-00D1-0407-0000-0000000FF1CE}) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\OneDriveSetup.exe) (Version: 17.3.1229.0918 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{2C303EE0-A595-3543-A71A-931C7AC40EDE}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{14297226-E0A0-3781-8911-E9D529552663}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4048 (HKLM\...\{91415F19-4C22-3609-A105-92ED3522D83C}) (Version: 9.0.30729.4048 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 (HKLM-x32\...\{5B1F2843-B379-3FF2-B0D3-64DD143ED53A}) (Version: 9.0.30729.4048 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\MyFreeCodec) (Version:  - )
NirSoft ProduKey (HKLM-x32\...\NirSoft ProduKey) (Version:  - )
Nuance Cloud Connector (HKLM-x32\...\{4C99EAAA-A846-4029-B500-312C5937D714}) (Version: 3.2.1026 - Nuance Communications, Inc.)
Nuance OmniPage Ultimate (HKLM-x32\...\{419512F9-D5E7-4ED2-BF99-E7F2C0176B6A}) (Version: 19.00.0000 - Nuance Communications, Inc.)
Nuance PaperPort 14 (HKLM-x32\...\{B2E8EFDC-E4FF-42A8-B305-FE06D29BB33C}) (Version: 14.5.0000 - Nuance Communications, Inc.)
Nuance PDF Create 8 (HKLM\...\{D8AD8411-A273-4560-B756-A418ED4910AD}) (Version: 8.10.6293 - Nuance Communications, Inc.)
Nuance PDF Create 8 (HKLM-x32\...\{D8AD8411-A273-4560-B756-A418ED4910AD}) (Version: 8.10.6293 - Nuance Communications, Inc.)
Nuance PDF Viewer Plus (HKLM-x32\...\{5B28CD4A-ADCF-4B39-BB67-F2F398818F2F}) (Version: 7.20.3208 - Nuance Communications, Inc.)
NVIDIA 3D Vision Controller-Treiber 344.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.46 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.48 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation)
Oracle VM VirtualBox 4.3.12 (HKLM\...\{B5121457-0126-4E62-BCBF-6DC7C73D9E4A}) (Version: 4.3.12 - Oracle Corporation)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PaperPort Image Printer 64-bit (HKLM\...\{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}) (Version: 14.00.0001 - Nuance Communications, Inc.)
PC Auto Backup (HKLM-x32\...\InstallShield_{662548BC-3506-4843-B7AA-F44D352F76A8}) (Version: 1.1.1.21 - Samsung Electronics Co,. Ltd.)
PC Auto Backup (x32 Version: 1.1.1.21 - Samsung Electronics Co,. Ltd.) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
PS3 Media Server (HKLM-x32\...\PS3 Media Server) (Version: 1.90.1 - PS3 Media Server) <==== ATTENTION!
QPST 2.7 (HKLM-x32\...\{8035964D-75EB-4463-91DC-3F02EE9CF103}) (Version: 2.7.378 - Qualcomm)
Rosetta Stone Version 3 (HKLM-x32\...\{99011A6E-5200-11DE-BDB8-7ACD56D89593}) (Version: 3.4.5.0 - Rosetta Stone Ltd.)
Samsung Auto Backup (HKLM-x32\...\{821D6F49-1B20-4809-8C73-286CFC52B1B1}) (Version: 4.1.371.0 - Clarus)
Samsung i-Launcher 1.0.1.54 (HKLM-x32\...\Samsung i-Launcher) (Version: 1.0.1.54 - Samsung Electronics Co., Ltd.)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.1.13105_7 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.1.13105_7 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.) Hidden
Samsung RAW Converter 4 (HKLM-x32\...\InstallShield_{D09E159D-0264-4597-B200-A9B4C0866F25}) (Version: 4 - Ichikawa Soft Laboratory)
Samsung RAW Converter 4 (x32 Version: 4 - Ichikawa Soft Laboratory) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
SanDisk SSD Toolkit 1.0.0.1 (HKLM-x32\...\{26326B5B-3D62-4C12-8841-6B55A19B552D}_is1) (Version: 1.0.0.1 - SanDisk Corporation)
Scansoft PDF Professional (x32 Version:  - ) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version:  - Microsoft)
SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spotify (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
StarMoney (x32 Version: 2.0 - StarFinanz) Hidden
StarMoney 7.0  (HKLM-x32\...\{79917F09-8405-48E0-AE82-6E2F17CB0A34}) (Version: 7.0 - Star Finanz GmbH)
Streaming Audio Recorder Version 3.4.1 (HKLM-x32\...\{B6D9D06B-4B4D-4B41-B963-C056B627F704}_is1) (Version: 3.4.1 - APOWERSOFT LIMITED)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
TVersity Codec Pack 1.7 (HKLM-x32\...\TVersity Codec Pack) (Version: 1.7 - TVersity Inc.)
UltraISO Premium V9.62 (HKLM-x32\...\UltraISO_is1) (Version:  - )
Update Service HitsBlender (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Update Service HitsBlender) (Version: 2.14.52 - hxxp://www.hitsblender.com)
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows-Treiberpaket - Amazon.com (WinUSB) KindleFireUsbDeviceClass  (08/20/2012 1.0.0000.00000) (HKLM\...\289137531F7C014BF296EFFBFC7E3748A293FEE9) (Version: 08/20/2012 1.0.0000.00000 - Amazon.com)
WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
XMedia Recode Version 3.1.3.7 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.3.7 - XMedia Recode)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points  =========================

09-01-2015 18:37:46 Entfernt TECDOC CD

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2014-12-30 18:28 - 00000930 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 audials.com
127.0.0.1 188.40.53.196127.0.0.1 support.apowersoft.com
127.0.0.1 apowersoft.com


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {09CD44EE-85CD-4735-ACB9-31E2E7366AF5} - System32\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5 => C:\Program Files (x86)\I - Cinema\c7e225d9-e592-4799-a023-7acaa225b91d-5.exe <==== ATTENTION
Task: {114AF372-8B94-499A-BDD3-B8718F70E7D8} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {1E924CA3-EB37-4C20-AF75-BE99320A5C55} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-25] (Adobe Systems Incorporated)
Task: {2079835D-A26F-42BB-8AD8-5FB4989E7FEF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {21BB1D1C-FBEF-4CA5-8FE0-2E4E43617F27} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-25] (Google Inc.)
Task: {465E2225-6B2C-4D43-BB75-DCCD56FFFEE2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {4680E46B-2405-4506-8408-EBF37817CD55} - System32\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5_user => C:\Program Files (x86)\ClickMovie1-Downloaderv10\57c01995-efd5-4f2e-96df-983449831ddc-5.exe <==== ATTENTION
Task: {54AC37B8-EA9A-4B2E-B4D7-0E8A830B7D7C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {64178EAD-F705-4C16-A9C5-859F884B1D04} - System32\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5_user => C:\Program Files (x86)\I - Cinema\c7e225d9-e592-4799-a023-7acaa225b91d-5.exe <==== ATTENTION
Task: {66C4AE2B-593C-4B5D-AC6E-978797C4601A} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Thomas-PC-Thomas Thomas-PC => C:\Program Files (x86)\Microsoft Office\Office15\MsoSync.exe [2014-11-12] (Microsoft Corporation)
Task: {6AC17DBC-C98E-47A7-BFCE-41CEBB46015D} - System32\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-1 => C:\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-codedownloader.exe <==== ATTENTION
Task: {7CA8209E-CB95-452E-B7D0-6D6A4C50A62D} - System32\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-1 => C:\Program Files (x86)\I - Cinema\I - Cinema-codedownloader.exe <==== ATTENTION
Task: {9A6DB46C-DE41-4E12-A6C0-F257B6F0AA01} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {A6AA64DD-6C0F-4E6C-8D5C-0CC82990C121} - System32\Tasks\PostPoneInstall => C:\Users\Thomas\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe [2015-01-09] (C.L.A.R.A) <==== ATTENTION
Task: {B11602B9-1519-44B4-80B1-423A74825373} - System32\Tasks\{E8B03A25-D220-416C-B78D-6D25B6F82365} => I:\TECDOC_CD\2_2014\pb\tof.exe
Task: {C56C77DD-BACE-4C5D-AF26-48B210BE8037} - System32\Tasks\Update Service HitsBlender => C:\Program Files (x86)\HitsBlenderUpdater\HitsBlenderUpdater.exe
Task: {D8F18997-315C-4420-BC38-565B960776FE} - System32\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5 => C:\Program Files (x86)\ClickMovie1-Downloaderv10\57c01995-efd5-4f2e-96df-983449831ddc-5.exe <==== ATTENTION
Task: {EDD2C7E7-179B-43C3-8125-FEFC1D1EF66A} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: {EE1BC51D-F046-4EB2-95D3-B1C238EB781B} - System32\Tasks\{0B71CE26-2C2E-44F7-9576-05AA21F78FD3} => H:\Die Sims 3\Inselparadies\Game\Bin\Sims3Launcher.exe
Task: {F20177EC-29FD-4536-8AF6-31A885A46214} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-25] (Google Inc.)
Task: C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-1.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\57c01995-efd5-4f2e-96df-983449831ddc-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5_user.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\57c01995-efd5-4f2e-96df-983449831ddc-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-1.job => C:\Program Files (x86)\I - Cinema\I - Cinema-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5.job => C:\Program Files (x86)\I - Cinema\c7e225d9-e592-4799-a023-7acaa225b91d-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5_user.job => C:\Program Files (x86)\I - Cinema\c7e225d9-e592-4799-a023-7acaa225b91d-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-08-26 17:59 - 2014-10-02 14:47 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\txmlutil.dll
2014-08-26 17:59 - 2013-09-03 13:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdmetrics.dll
2014-08-26 18:02 - 2014-06-30 12:26 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\UI\accessl.ui
2014-08-26 18:01 - 2012-10-29 14:22 - 00152816 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdfwcore.dll
2014-05-01 15:13 - 2014-05-01 15:13 - 00470016 _____ () C:\ProgramData\MEGAsync\ShellExtX64.dll
2014-08-26 18:11 - 2014-08-26 18:11 - 00780592 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00047_002\ashttpbr.mdl
2014-08-26 18:11 - 2014-08-26 18:11 - 00568400 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00047_002\ashttpdsp.mdl
2014-08-26 18:11 - 2014-08-26 18:11 - 02602680 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00047_002\ashttpph.mdl
2014-08-26 18:11 - 2014-08-26 18:11 - 01323408 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00047_002\ashttprbl.mdl
2013-05-04 19:17 - 2014-10-16 15:11 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-09-10 08:29 - 2011-12-06 15:55 - 00020480 _____ () I:\Neuer\Apache.exe
2013-03-22 13:10 - 2013-03-22 13:10 - 00222544 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSVSSSvr.exe
2010-09-03 12:11 - 2010-09-03 12:11 - 00520295 _____ () C:\Program Files (x86)\Samsung\PC Auto Backup\http_ss_win_pro.exe
2014-05-01 20:29 - 2014-05-01 20:29 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2013-05-09 08:39 - 2010-03-15 10:28 - 00166400 _____ () C:\Program Files\WinRAR\rarext.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00473352 _____ () C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe
2013-05-04 19:05 - 2012-08-09 11:55 - 00078480 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2013-05-04 19:05 - 2012-08-09 11:55 - 00386192 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 00374840 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-09-10 08:29 - 2011-12-06 15:55 - 00299008 _____ () I:\Neuer\ApacheCore.dll
2013-03-22 12:59 - 2013-03-22 12:59 - 00293200 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\sqlite3.dll
2013-03-22 13:00 - 2013-03-22 13:00 - 00080208 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\zlib125.dll
2013-03-22 13:00 - 2013-03-22 13:00 - 00016720 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSMui.dll
2013-05-26 12:28 - 2009-10-06 13:36 - 00205312 _____ () C:\Program Files (x86)\StarMoney 7.0\ouservice\PATCHW32.dll
2010-04-30 13:02 - 2010-04-30 13:02 - 00057344 _____ () C:\Program Files (x86)\Samsung\PC Auto Backup\lang.dll
2014-01-06 10:52 - 2014-01-06 10:52 - 03244032 _____ () C:\Users\Thomas\AppData\Local\Programs\Google\Google+ Auto Backup\gpuploader_i18n.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00046080 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_thread-vc90-mt-1_39.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00045056 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_date_time-vc90-mt-1_39.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00545032 _____ () C:\Program Files (x86)\Audials\Audials 11\StreamingClient.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00012800 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_system-vc90-mt-1_39.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00068360 _____ () C:\Program Files (x86)\Audials\Audials 11\CrashRpt.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00409352 _____ () C:\Program Files (x86)\Audials\Audials 11\SQLite3.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00614912 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_regex-vc90-mt-1_39.dll
2014-10-16 02:23 - 2014-10-16 02:23 - 00290304 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Utils\65caba6fdb77ed17123be2746c441efc\Utils.ni.dll
2014-10-16 02:23 - 2014-10-16 02:23 - 00585216 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ManagedInterfaces\7cd297f92be83270ed007373b97bbe42\ManagedInterfaces.ni.dll
2014-11-12 03:09 - 2014-11-12 03:09 - 02950656 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\AudialsComponents\b883e8c49918945b0ae5f4780b281bcf\AudialsComponents.ni.dll
2014-10-16 02:23 - 2014-10-16 02:23 - 00178688 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\fastJSON\dd7cfc6548a6267386e0761f678b647f\fastJSON.ni.dll
2014-11-02 14:58 - 2014-11-02 14:58 - 00081056 _____ () C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\LoggingPlatform.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 36966968 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\libcef.dll
2015-01-09 18:36 - 2015-01-09 18:36 - 00011264 _____ () C:\Users\Thomas\AppData\Local\Temp\nsf58CA.tmp\System.dll
2012-09-23 19:43 - 2012-09-23 19:43 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu
2015-01-09 17:36 - 2014-12-06 02:50 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libglesv2.dll
2015-01-09 17:36 - 2014-12-06 02:50 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libegl.dll
2014-06-21 14:48 - 2009-02-27 15:38 - 00139264 ____N () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-01-09 17:36 - 2014-12-06 02:50 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll
2015-01-09 17:36 - 2014-12-06 02:50 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll
2015-01-09 18:36 - 2015-01-09 18:36 - 00098816 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32api.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00110080 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\pywintypes27.dll
2015-01-09 18:36 - 2015-01-09 18:36 - 00364544 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\pythoncom27.dll
2015-01-09 18:36 - 2015-01-09 18:36 - 00045568 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\_socket.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 01160704 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\_ssl.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00320512 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32com.shell.shell.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00713216 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\_hashlib.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 01175040 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\wx._core_.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00805888 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\wx._gdi_.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00811008 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\wx._windows_.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 01062400 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\wx._controls_.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00735232 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\wx._misc_.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00128512 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\_elementtree.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00127488 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\pyexpat.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00557056 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\pysqlite2._sqlite.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00087552 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\_ctypes.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00119808 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32file.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00108544 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32security.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00007168 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\hashobjs_ext.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00167936 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32gui.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00018432 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32event.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00038912 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32inet.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00011264 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32crypt.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00070656 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\wx._html2.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00027136 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\_multiprocessing.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00035840 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32process.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00686080 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\unicodedata.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00122368 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\wx._wizard.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00024064 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32pipe.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00025600 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32pdh.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00525640 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\windows._lib_cacheinvalidation.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00010240 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\select.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00017408 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32profile.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00022528 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32ts.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00078336 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\wx._animate.pyd
2013-03-22 13:00 - 2013-03-22 13:00 - 00158032 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSMui_GER.dll
2013-03-22 13:03 - 2013-03-22 13:03 - 00252240 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSBr_nuance.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 00867896 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\ffmpegsumo.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 00886840 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\libglesv2.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 00108600 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\libegl.dll
2013-05-04 19:15 - 2012-06-25 09:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:2683706C
AlternateDataStreams: C:\ProgramData\Temp:A303874F
AlternateDataStreams: C:\ProgramData\Temp:D5FBE8F9
AlternateDataStreams: C:\ProgramData\Temp:FC595E85

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-64129086-1818121567-326312414-500 - Administrator - Disabled)
Gast (S-1-5-21-64129086-1818121567-326312414-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-64129086-1818121567-326312414-1011 - Limited - Enabled)
Thomas (S-1-5-21-64129086-1818121567-326312414-1000 - Administrator - Enabled) => C:\Users\Thomas

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: VirtualBox Host-Only Ethernet Adapter
Description: VirtualBox Host-Only Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Oracle Corporation
Service: VBoxNetAdp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/09/2015 06:36:42 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder

Error: (01/09/2015 06:36:42 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder

Error: (01/09/2015 06:36:36 PM) (Source: BBGate) (EventID: 110) (User: NT-AUTORITÄT)
Description: Critical Error: BBGate(C:\_E_\srv_apps\BBGate\1.3.1.2\SOURCE\ElsaGate.cpp, 4637): Connection to aktive partner server failed. Klasse nicht registriert

Error: (01/09/2015 06:29:24 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (01/09/2015 06:29:19 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe -Embedding; Beschreibung = Entfernt TECDOC CD; Fehler = 0x800706be).

Error: (01/09/2015 05:47:50 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder

Error: (01/09/2015 05:47:50 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder

Error: (01/09/2015 05:35:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.17496, Zeitstempel: 0x546fddcc
Name des fehlerhaften Moduls: I - Cinema-bho.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x54af61e3
Ausnahmecode: 0xc0000005
Fehleroffset: 0x02f2cab2
ID des fehlerhaften Prozesses: 0x2b78
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (01/09/2015 05:31:30 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder

Error: (01/09/2015 05:31:30 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder


System errors:
=============
Error: (01/09/2015 06:37:42 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (01/09/2015 06:37:40 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)

Error: (01/09/2015 06:36:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "ZoneAlarm Privacy Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (01/09/2015 06:36:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Util Box Rock" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (01/09/2015 06:36:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Update Box Rock" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (01/09/2015 06:29:19 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F32D97DF-E3E5-4CB9-9E3E-0EB5B4E49801}

Error: (01/09/2015 05:48:44 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (01/09/2015 05:48:42 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)

Error: (01/09/2015 05:47:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "ZoneAlarm Privacy Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (01/09/2015 05:47:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Util Box Rock" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================
Error: (01/09/2015 06:36:42 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder

Error: (01/09/2015 06:36:42 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder

Error: (01/09/2015 06:36:36 PM) (Source: BBGate) (EventID: 110) (User: NT-AUTORITÄT)
Description: BBGate(C:\_E_\srv_apps\BBGate\1.3.1.2\SOURCE\ElsaGate.cpp, 4637): Connection to aktive partner server failed. Klasse nicht registriert

Error: (01/09/2015 06:29:24 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (01/09/2015 06:29:19 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe -EmbeddingEntfernt TECDOC CD0x800706be

Error: (01/09/2015 05:47:50 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder

Error: (01/09/2015 05:47:50 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder

Error: (01/09/2015 05:35:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE11.0.9600.17496546fddccI - Cinema-bho.dll_unloaded0.0.0.054af61e3c000000502f2cab22b7801d02c2a02cb14f1C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEI - Cinema-bho.dll7ec67519-981d-11e4-93af-94de80005579

Error: (01/09/2015 05:31:30 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder

Error: (01/09/2015 05:31:30 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3570 CPU @ 3.40GHz
Percentage of memory in use: 34%
Total physical RAM: 8147.35 MB
Available physical RAM: 5332.42 MB
Total Pagefile: 16292.88 MB
Available Pagefile: 13122.54 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:119.14 GB) (Free:13.38 GB) NTFS
Drive d: (622010_DDS) (CDROM) (Total:0.17 GB) (Free:0 GB) CDFS
Drive f: () (Fixed) (Total:465.54 GB) (Free:107.7 GB) NTFS
Drive h: () (Fixed) (Total:931.51 GB) (Free:788.11 GB) NTFS
Drive i: (Volume) (Fixed) (Total:1863.01 GB) (Free:118.64 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 313C1AE6)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119.1 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 4DBD6351)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=OF Extended)

========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: DDC41BD8)

Partition: GPT Partition Type.

========================================================
Disk: 3 (Size: 1863 GB) (Disk ID: 6EA0882C)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== End Of Log ============================

--- --- ---

cosinus · 09.01.2015, 20:02

Zukünftig bitte beachten:

Zitat:

Running from I:\Daten von Thomas\Downloads

Leider hast du unsere Anleitung nicht richtig befolgt:
Bitte alle Tools direkt auf den Desktop downloaden bzw. dorthin verschieben und vom Desktop starten, da unsere Anleitungen daraufhin ausgelegt sind.
Zudem lassen sich dann am Ende der Bereinigung alle verwendeten Tools sehr einfach entfernen.
Alle Tools bis zum Ende der Bereinigung auf dem Desktop lassen, evtl. benötigen wir manche öfter.

Zitat:

127.0.0.1 audials.com
127.0.0.1 188.40.53.196127.0.0.1 support.apowersoft.com
127.0.0.1 apowersoft.com

Lesestoff:
Illegale Software: Cracks, Keygens und Co

Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.

winniwinkel · 09.01.2015, 20:06

Hier noch mal.

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015
Ran by Thomas (administrator) on THOMAS-PC on 09-01-2015 20:04:00
Running from I:\Daten von Thomas\Desstop
Loaded Profile: Thomas (Available profiles: Thomas)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(VOLKSWAGEN AG) I:\Neuer\BBGate.exe
() I:\Neuer\Apache.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() I:\Neuer\Apache.exe
(CrypKey (Canada) Ltd.) C:\Windows\System32\Crypserv.exe
(FileZilla Project) C:\Program Files (x86)\FileZilla Server\FileZilla server.exe
(Gladinet, INC) C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSVSSSvr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Samsung) C:\Program Files (x86)\Samsung\PC Auto Backup\WiselinkPro.exe
() C:\Program Files (x86)\Samsung\PC Auto Backup\http_ss_win_pro.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Google Inc.) C:\Users\Thomas\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe
() C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe
(Microsoft Corporation) C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Spotify Ltd) C:\Users\Thomas\AppData\Roaming\Spotify\spotify.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwtxapps.exe
(Samsung) C:\Program Files (x86)\Samsung\PC Auto Backup\AutoBackup.exe
(PS3 Media Server) C:\Program Files (x86)\PS3 Media Server\pms.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFGuage.exe
(Oracle Corporation) C:\Program Files (x86)\PS3 Media Server\jre\bin\javaw.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFRealTimeD.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFTimerD.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Create 8\PdfCreate8Hook.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Professional 7\PdfPro7Hook.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Gladinet, INC) C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladinetClient.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxcr.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\OFFICE15\CSISYNCCLIENT.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmprph.exe
(VideoLAN) C:\Program Files\VideoLAN\VLC\vlc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\seccenter.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1626752 2014-11-24] (Bitdefender)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5263504 2012-08-09] (VIA)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3498728 2014-12-03] (Adobe Systems Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [FileZilla Server Interface] => C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe [1044480 2013-12-16] (FileZilla Project)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2068856 2011-10-12] (Flexera Software LLC.)
HKLM-x32\...\Run: [OmniPage Preload] => C:\Program Files (x86)\Nuance\OmniPage19\OmniPage19.exe [2922824 2013-04-22] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [Nuance OmniPage Ultimate-reminder] => C:\Program Files (x86)\Nuance\OmniPage19\Ereg\Ereg.exe [334152 2013-01-14] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFCreHook] => C:\Program Files (x86)\Nuance\PDF Create 8\pdfcreate8hook.exe [1029960 2013-03-12] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDF8 Registry Controller] => C:\Program Files (x86)\Nuance\PDF Create 8\RegistryController.exe [180040 2013-03-12] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [36168 2013-04-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [18248 2013-04-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFProHook] => C:\Program Files (x86)\Nuance\PDF Professional 7\pdfpro7hook.exe [641864 2013-03-20] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1679360 2012-02-28] (Wondershare)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [Google+ Auto Backup] => C:\Users\Thomas\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3619096 2014-01-06] (Google Inc.)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe [473352 2014-02-14] ()
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790344 2014-11-24] (Bitdefender)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [SkyDrive] => C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [277672 2014-11-02] (Microsoft Corporation)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [Spotify] => C:\Users\Thomas\AppData\Roaming\Spotify\Spotify.exe [6737976 2014-12-30] (Spotify Ltd)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [GoogleChromeAutoLaunch_D1D0AD69A13928375769191006ADC5F6] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\MountPoints2: {56b64bd4-bf07-11e2-ae08-806e6f6e6963} - D:\Start.exe
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\MountPoints2: {d1bea689-8b2c-11e3-b140-94de80005579} - K:\pushinst.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-05-05] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [GladinetIconOverlay] -> {3C3DC57A-7535-48AF-BB9E-C3576A4F34D0} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIcon.dll (Gladinet, INC)
ShellIconOverlayIdentifiers: [GladinetUploading] -> {959A18D3-9CC9-41e8-B76F-34ED9A89D4EA} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIconU.dll (Gladinet, INC)
ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [GladinetIconOverlay] -> {3C3DC57A-7535-48AF-BB9E-C3576A4F34D0} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIcon32.dll (Gladinet, INC)
ShellIconOverlayIdentifiers-x32: [GladinetUploading] -> {959A18D3-9CC9-41e8-B76F-34ED9A89D4EA} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIconU32.dll (Gladinet, INC)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-64129086-1818121567-326312414-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-64129086-1818121567-326312414-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-64129086-1818121567-326312414-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKU\S-1-5-21-64129086-1818121567-326312414-1000 -> {C97E1300-5067-4D6F-8A64-3F5DB9CBD664} URL = hxxp://yandex.ru/yandsearch?win=78&clid=1989707&text={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Box Rock 1.0.0.6 -> {464deeb8-b74f-4117-b8ec-e42f4028f3d1} -> C:\Program Files (x86)\Box Rock\BoxRockBHO.dll No File
BHO-x32: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files (x86)\Nuance\PDF Professional 7\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: ZeonIEEventHelper Class -> {C7DA0384-42AA-428c-B832-88AC343DE1A8} -> C:\Program Files (x86)\Nuance\PDF Create 8\Bin\GZeonIEFavClient.dll (Zeon Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll (Bitdefender)
Toolbar: HKLM-x32 - Nuance PDF - {BCCE15AE-AC7E-4bc9-94AF-2A714A412BCB} - C:\Program Files (x86)\Nuance\PDF Create 8\Bin\GZeonIEFavClient.dll (Zeon Corporation)
Toolbar: HKU\S-1-5-21-64129086-1818121567-326312414-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: HKLM-x32 {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} hxxp://download.gigabyte.com.tw/object/Dldrv.ocx
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default
FF SelectedSearchEngine: Яндекс
FF Homepage: hxxp://www.yandex.ru/?win=78&clid=1989706
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Professional 7\bin\nppdf.dll (Zeon Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yandex.ru-183920.xml
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext
FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2014-08-26]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-05-07]
FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff [2014-08-26]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext

Chrome: 
=======
CHR HomePage: Default -> 
CHR StartupUrls: Default -> "https://mail.google.com/mail/?hl=de&shva=1#inbox"
CHR Profile: C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-09]
CHR Extension: (Angry Birds) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2015-01-09]
CHR Extension: (Google Docs) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-09]
CHR Extension: (SuperMegaBest.com) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aonedlchkbicmhepimiahfalheedjgbh [2015-01-09]
CHR Extension: (Google Drive) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-09]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-09]
CHR Extension: (YouTube) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-09]
CHR Extension: (HelloFax: 50 Free Fax Pages) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bocmleclimfnadgmcdgecijlblfcmfnm [2015-01-09]
CHR Extension: (Adblock Plus) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-09]
CHR Extension: (Pushbullet) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2015-01-09]
CHR Extension: (Google-Suche) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-09]
CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2015-01-09]
CHR Extension: (Bitdefender Wallet) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabcmochhfpldjekobfaaggijgohadih [2015-01-09]
CHR Extension: (Google Tabellen) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-09]
CHR Extension: (Cr!Box) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjodchcocbnbhfkjeapbdoflbiibnapp [2015-01-09]
CHR Extension: (Google Kalender (von Google)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbgaklkmjakoegficnlkhebmhkjfich [2015-01-09]
CHR Extension: (Google Notizen – Notizen & Listen) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2015-01-09]
CHR Extension: (WEB.DE MailCheck) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2015-01-09]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-01-09]
CHR Extension: (Google Input Tools) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mclkkofklkfljcocdinagocijmpgbhab [2015-01-09]
CHR Extension: (Google Mail-Checker) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2015-01-09]
CHR Extension: (Erweiterung \) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlbjncdgjeocebhnmkbbbdekmmmcbfjd [2015-01-09]
CHR Extension: (Google Wallet) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-09]
CHR Extension: (Google Chrome to Phone Extension) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadboiipflhobonjjffjbfekfjcgkhco [2015-01-09]
CHR Extension: (Any.do) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocgddccilgpeepgglnlpchkpgamkgmld [2015-01-09]
CHR Extension: (LEO Wörterbuchsuche) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojniiiidjmoaiehegaedmfdclmgmmpdp [2015-01-09]
CHR Extension: (Google Calendar Checker (by Google)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookhcbgokankfmjafalglpofmolfopek [2015-01-09]
CHR Extension: (Evernote Web Clipper) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-01-09]
CHR Extension: (Google Mail) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-09]
CHR Extension: (Tapatalk Notifier) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\plfhcjljnfjpfcbjpgnflfofmahljkjj [2015-01-09]
CHR HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Thomas\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-07-23]
CHR HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - No Path
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-12-03]
CHR HKLM-x32\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 BBGate; I:\Neuer\BBGate.exe [532480 2011-12-06] (VOLKSWAGEN AG) [File not signed]
R2 BBGate-HTTPD; I:\Neuer\Apache.exe [20480 2011-12-06] () [File not signed]
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [78144 2014-11-24] (Bitdefender)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
S2 c7522d84; c:\Program Files (x86)\Optimizer Pro 3.27\OptProMon.dll [2462800 2015-01-09] ()
R2 Crypkey License; C:\Windows\system32\crypserv.exe [122880 2008-05-08] (CrypKey (Canada) Ltd.) [File not signed]
R2 FileZilla Server; C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe [613376 2013-12-16] (FileZilla Project) [File not signed]
R2 GladFileMonSvc; C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe [30032 2013-03-22] (Gladinet, INC)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [77640 2013-04-05] (Nuance Communications, Inc.)
S4 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 StarMoney 7.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [67320 2014-11-24] (Bitdefender)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27792 2012-08-03] (VIA Technologies, Inc.)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1527360 2014-11-24] (Bitdefender)
R2 WiselinkPro; C:\Program Files (x86)\Samsung\PC Auto Backup\WiselinkPro.exe [7274561 2013-02-18] (Samsung) [File not signed]
S2 Update Box Rock; "C:\Program Files (x86)\Box Rock\updateBoxRock.exe" [X]
S2 Util Box Rock; "C:\Program Files (x86)\Box Rock\bin\utilBoxRock.exe" [X]
S2 ZAPrivacyService; "C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1288472 2014-11-24] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [263032 2014-11-24] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [647752 2014-08-27] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-11-13] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107080 2012-10-29] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2014-08-27] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2014-08-27] (BitDefender)
S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-07-20] (DT Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [110744 2012-07-19] (Qualcomm Atheros Co., Ltd.)
R1 NetworkX; C:\Windows\system32\ckldrv.sys [28664 2008-03-17] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-10-07] (Audials AG)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [452040 2014-11-24] (BitDefender S.R.L.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [106256 2013-04-12] (Oracle Corporation)
R2 webinstrNHK; C:\Windows\system32\Drivers\webinstrNHK.sys [56432 2015-01-09] (Corsica)
S3 WsAudioDevice_383S(1); C:\Windows\System32\drivers\WsAudioDevice_383S(1).sys [29288 2014-07-31] (Wondershare)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-09 18:08 - 2015-01-09 18:08 - 00000168 _____ () C:\Users\Thomas\defogger_reenable
2015-01-09 17:58 - 2015-01-09 20:04 - 00000000 ____D () C:\FRST
2015-01-09 17:47 - 2015-01-09 17:47 - 00000000 ____D () C:\Users\Thomas\AppData\Local\CrashRpt
2015-01-09 17:44 - 2015-01-09 17:46 - 00000000 ____D () C:\AdwCleaner
2015-01-09 17:36 - 2015-01-09 17:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-01-09 16:53 - 2015-01-09 17:31 - 00002770 _____ () C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5_user.job
2015-01-09 16:53 - 2015-01-09 17:31 - 00002770 _____ () C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5.job
2015-01-09 16:53 - 2015-01-09 16:53 - 00005800 _____ () C:\Windows\System32\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5
2015-01-09 16:51 - 2015-01-09 17:31 - 00003424 _____ () C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-1.job
2015-01-09 16:51 - 2015-01-09 16:51 - 00006454 _____ () C:\Windows\System32\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-1
2015-01-09 16:50 - 2015-01-09 16:50 - 00003788 _____ () C:\Windows\System32\Tasks\PostPoneInstall
2015-01-09 16:36 - 2015-01-09 16:36 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 3.27
2015-01-09 16:35 - 2015-01-09 17:31 - 00002456 _____ () C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5_user.job
2015-01-09 16:35 - 2015-01-09 17:31 - 00002456 _____ () C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5.job
2015-01-09 16:35 - 2015-01-09 16:35 - 00056432 _____ (Corsica) C:\Windows\system32\Drivers\webinstrNHK.sys
2015-01-09 16:35 - 2015-01-09 16:35 - 00005486 _____ () C:\Windows\System32\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5
2015-01-09 16:35 - 2015-01-09 16:35 - 00002119 _____ () C:\Windows\patsearch.bin
2015-01-09 16:35 - 2015-01-09 16:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNHK_01009.Wdf
2015-01-09 16:33 - 2015-01-09 17:31 - 00003484 _____ () C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-1.job
2015-01-09 16:33 - 2015-01-09 16:33 - 00006514 _____ () C:\Windows\System32\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-1
2015-01-09 16:27 - 2015-01-09 16:27 - 00003110 _____ () C:\Windows\System32\Tasks\Update Service HitsBlender
2015-01-09 13:44 - 2015-01-09 16:31 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Wondershare
2015-01-09 13:44 - 2015-01-09 16:31 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2015-01-09 13:44 - 2015-01-09 13:44 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Wondershare
2015-01-09 13:44 - 2014-07-31 15:55 - 00029288 _____ (Wondershare) C:\Windows\system32\Drivers\WsAudioDevice_383S(1).sys
2015-01-08 15:24 - 2015-01-08 15:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic MP3 Tagger
2015-01-08 15:24 - 2015-01-08 15:24 - 00000000 ____D () C:\Program Files (x86)\Magic MP3 Tagger
2015-01-07 09:00 - 2015-01-07 09:00 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\GHISLER
2014-12-30 18:28 - 2014-12-30 18:39 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Apowersoft
2014-12-30 18:28 - 2014-12-30 18:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apowersoft
2014-12-30 18:28 - 2014-12-30 18:28 - 00000000 ____D () C:\Program Files (x86)\Apowersoft
2014-12-30 18:20 - 2015-01-08 03:42 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Spotify
2014-12-30 18:18 - 2015-01-09 18:36 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Spotify
2014-12-30 10:01 - 2015-01-09 18:36 - 00000000 ____D () C:\ProgramData\PMS
2014-12-30 10:01 - 2015-01-02 14:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PS3 Media Server
2014-12-30 10:01 - 2014-12-30 10:01 - 00000000 ____D () C:\Program Files (x86)\PS3 Media Server
2014-12-26 18:51 - 2014-12-26 18:51 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2014-12-26 18:37 - 2014-12-26 18:37 - 00002091 _____ () C:\Users\Thomas\AppData\Local\2AE5D5AFBC8142c2AB89DCD9CB41C9AF.Layout2.lbx
2014-12-26 18:34 - 2014-12-26 18:34 - 00000000 __SHD () C:\Users\Thomas\AppData\Local\EmieBrowserModeList
2014-12-25 18:15 - 2014-12-25 18:15 - 00000000 ____D () C:\ProgramData\TVersity
2014-12-25 18:15 - 2014-12-25 18:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xiph.Org
2014-12-25 18:15 - 2014-12-25 18:15 - 00000000 ____D () C:\Program Files (x86)\Xiph.Org
2014-12-25 18:15 - 2014-12-25 18:15 - 00000000 ____D () C:\Program Files (x86)\TVersity Codec Pack
2014-12-18 04:13 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-18 04:13 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-15 03:27 - 2014-12-15 03:27 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-15 03:01 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-15 03:01 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-14 14:06 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-14 14:06 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-14 14:06 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-14 14:06 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-14 14:06 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-14 14:06 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-14 14:06 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-14 14:06 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-14 14:06 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-14 14:06 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-14 14:06 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-14 14:06 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-14 14:06 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-14 14:06 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-14 14:06 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-14 14:06 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-14 14:06 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-14 14:06 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-14 14:06 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-14 14:06 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-14 14:06 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-14 14:06 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-14 14:06 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-14 14:06 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-14 14:06 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-14 14:06 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-14 14:06 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-14 14:06 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-14 14:06 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-14 14:06 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-14 14:06 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-14 14:06 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-14 14:06 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-14 14:06 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-14 14:06 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-14 14:06 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-14 14:06 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-14 14:06 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-14 14:06 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-14 14:06 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-14 14:06 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-14 14:06 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-14 14:06 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-14 14:06 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-14 14:06 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-14 14:06 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-14 14:06 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-14 14:06 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-14 14:06 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-14 14:06 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-14 14:06 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-14 14:06 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-14 14:06 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-14 14:06 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-10 10:25 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-10 10:25 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-10 10:25 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 10:25 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 10:25 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-10 10:17 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-10 10:17 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-10 10:17 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-10 10:17 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-10 10:17 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-10 10:17 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-10 10:17 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-10 10:17 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-10 10:17 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-10 10:17 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-10 10:17 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-10 10:17 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-10 10:17 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-10 10:17 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-09 19:15 - 2013-05-04 19:13 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-09 19:10 - 2013-05-04 18:54 - 01673948 _____ () C:\Windows\WindowsUpdate.log
2015-01-09 19:05 - 2013-07-06 16:01 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-09 18:57 - 2014-11-02 15:00 - 00005138 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for Thomas-PC-Thomas Thomas-PC
2015-01-09 18:43 - 2009-07-14 05:45 - 00023056 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-09 18:43 - 2009-07-14 05:45 - 00023056 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-09 18:42 - 2009-07-14 18:58 - 00705002 _____ () C:\Windows\system32\perfh007.dat
2015-01-09 18:42 - 2009-07-14 18:58 - 00151346 _____ () C:\Windows\system32\perfc007.dat
2015-01-09 18:42 - 2009-07-14 06:13 - 01629708 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-09 18:39 - 2013-05-04 18:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-09 18:38 - 2014-05-07 18:25 - 05890850 _____ () C:\ProgramData\OfflineCatalogue_2_2014_TECDOC_CD.log
2015-01-09 18:38 - 2014-05-07 18:25 - 00000000 ____D () C:\ProgramData\TECDOC_CD
2015-01-09 18:38 - 2013-11-27 19:34 - 00000000 ____D () C:\Users\Thomas\AppData\Local\gladinet
2015-01-09 18:36 - 2013-12-21 17:56 - 00013020 _____ () C:\Windows\error.log
2015-01-09 18:36 - 2013-12-21 17:56 - 00002968 _____ () C:\Windows\errord.log
2015-01-09 18:36 - 2013-12-09 19:29 - 00000000 ___RD () C:\Users\Thomas\Google Drive
2015-01-09 18:36 - 2013-05-12 12:51 - 00000000 ____D () C:\ProgramData\Temp
2015-01-09 18:36 - 2013-05-04 19:17 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-09 18:36 - 2013-05-04 19:13 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-09 18:36 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-09 18:36 - 2009-07-14 05:51 - 00053576 _____ () C:\Windows\setupact.log
2015-01-09 18:22 - 2014-09-10 08:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsaWin
2015-01-09 18:22 - 2014-06-22 13:51 - 00000270 _____ () C:\Windows\ODBC.INI
2015-01-09 18:08 - 2013-05-04 18:54 - 00000000 ____D () C:\Users\Thomas
2015-01-09 17:47 - 2013-05-04 19:23 - 00404454 _____ () C:\Windows\PFRO.log
2015-01-09 17:45 - 2009-07-14 03:34 - 00000601 _____ () C:\Windows\win.ini
2015-01-09 17:36 - 2013-05-04 19:13 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Google
2015-01-09 17:29 - 2013-05-10 09:38 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\vlc
2015-01-07 08:46 - 2013-05-04 19:40 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Dropbox
2015-01-06 11:15 - 2013-05-07 18:13 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\FileZilla
2015-01-02 11:20 - 2014-11-16 12:47 - 00000000 ____D () C:\Users\Thomas\AppData\Local\JDownloader v2.0
2014-12-28 13:09 - 2013-05-07 18:07 - 00002453 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat XI Pro.lnk
2014-12-28 13:09 - 2013-05-07 18:07 - 00002210 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe FormsCentral.lnk
2014-12-28 13:09 - 2013-05-07 18:07 - 00002049 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller XI.lnk
2014-12-28 13:08 - 2013-05-27 19:09 - 00001458 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
2014-12-25 19:06 - 2013-07-06 16:01 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-25 19:06 - 2013-07-06 16:01 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-25 19:06 - 2013-05-12 19:00 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-20 12:49 - 2014-06-20 12:53 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Brother
2014-12-16 02:15 - 2014-09-07 17:35 - 00000000 ____D () C:\ProgramData\MEGAsync
2014-12-15 07:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-15 06:17 - 2013-06-13 11:25 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-15 06:15 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-12-15 03:53 - 2014-09-11 03:06 - 00000000 ____D () C:\Windows\rescache
2014-12-15 03:33 - 2013-05-26 12:27 - 00000000 ____D () C:\Program Files (x86)\StarMoney 7.0
2014-12-15 03:27 - 2014-05-07 02:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-15 03:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-15 03:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-15 03:11 - 2013-09-10 17:44 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-12-15 03:11 - 2013-05-04 19:46 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-15 03:09 - 2013-08-15 02:01 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-15 03:04 - 2013-05-05 10:54 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-14 12:46 - 2014-12-07 16:48 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\DVDVideoSoft
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_SusX70p3.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_InjX83P2.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_InjX70P3.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_Dacia.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_AbAC4VLL.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000008 _____ () C:\Windows\5800Hard.ini
2014-12-14 12:45 - 2014-11-02 13:53 - 00247786 _____ () C:\Clip_err.txt
2014-12-14 12:45 - 2014-11-02 13:53 - 00001928 _____ () C:\Clip.txt
2014-12-14 12:45 - 2014-10-31 18:11 - 00000383 _____ () C:\Autoformation CLIP.TXT
2014-12-14 12:45 - 2014-06-22 13:51 - 00000141 _____ () C:\Trace.ini
2014-12-14 12:45 - 2013-05-05 17:51 - 00000000 ____D () C:\ProgramData\InstallShield

Some content of TEMP:
====================
C:\Users\Thomas\AppData\Local\Temp\130606118584661085.exe
C:\Users\Thomas\AppData\Local\Temp\13060611860670120558.exe
C:\Users\Thomas\AppData\Local\Temp\1jr1aoxu.dll
C:\Users\Thomas\AppData\Local\Temp\AF0C55FA-A41B-46F6-0170-EB50554B3274.exe
C:\Users\Thomas\AppData\Local\Temp\AF126BA6-3872-EC0C-B96F-F742E50C11E6.dll
C:\Users\Thomas\AppData\Local\Temp\AskPIP_FF_.exe
C:\Users\Thomas\AppData\Local\Temp\AutoRun.exe
C:\Users\Thomas\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Thomas\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe
C:\Users\Thomas\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyorbfh.dll
C:\Users\Thomas\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Thomas\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Thomas\AppData\Local\Temp\Execute2App.exe
C:\Users\Thomas\AppData\Local\Temp\FreeAudioCDBurner.exe
C:\Users\Thomas\AppData\Local\Temp\GdiPlus.dll
C:\Users\Thomas\AppData\Local\Temp\GsLXh1E3NY.exe
C:\Users\Thomas\AppData\Local\Temp\hfh4yhxx.dll
C:\Users\Thomas\AppData\Local\Temp\InstallerMessageBox.exe
C:\Users\Thomas\AppData\Local\Temp\jna1108045323995340031.dll
C:\Users\Thomas\AppData\Local\Temp\jna1874070241583102263.dll
C:\Users\Thomas\AppData\Local\Temp\jna3670992309178468449.dll
C:\Users\Thomas\AppData\Local\Temp\jna9019976945229357317.dll
C:\Users\Thomas\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Thomas\AppData\Local\Temp\L1Y8Ufulh8.exe
C:\Users\Thomas\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Thomas\AppData\Local\Temp\msvcp90.dll
C:\Users\Thomas\AppData\Local\Temp\msvcr90.dll
C:\Users\Thomas\AppData\Local\Temp\NPSInstallerProxy.exe
C:\Users\Thomas\AppData\Local\Temp\NPSInstallerProxyMessageBoxHookDll.dll
C:\Users\Thomas\AppData\Local\Temp\nsf7E51.exe
C:\Users\Thomas\AppData\Local\Temp\nsnC1F6.exe
C:\Users\Thomas\AppData\Local\Temp\nsnD74E.exe
C:\Users\Thomas\AppData\Local\Temp\nssD54A.exe
C:\Users\Thomas\AppData\Local\Temp\nsxC011.exe
C:\Users\Thomas\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Thomas\AppData\Local\Temp\nvStInst.exe
C:\Users\Thomas\AppData\Local\Temp\optprosetup.exe
C:\Users\Thomas\AppData\Local\Temp\ose00001.exe
C:\Users\Thomas\AppData\Local\Temp\PidGenX.dll
C:\Users\Thomas\AppData\Local\Temp\proxy_vole7398810760119204713.dll
C:\Users\Thomas\AppData\Local\Temp\Quarantine.exe
C:\Users\Thomas\AppData\Local\Temp\Runner.exe
C:\Users\Thomas\AppData\Local\Temp\Runner2.exe
C:\Users\Thomas\AppData\Local\Temp\Runner4.exe
C:\Users\Thomas\AppData\Local\Temp\ScanProfilesBackup.dll
C:\Users\Thomas\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Thomas\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Thomas\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Thomas\AppData\Local\Temp\sfextra.dll
C:\Users\Thomas\AppData\Local\Temp\smarter.exe
C:\Users\Thomas\AppData\Local\Temp\sp-downloader.exe
C:\Users\Thomas\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\Thomas\AppData\Local\Temp\sqlite3.dll
C:\Users\Thomas\AppData\Local\Temp\Util.dll
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.1-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.2-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.3-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.4-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.5-win64.exe
C:\Users\Thomas\AppData\Local\Temp\VP6Install.exe
C:\Users\Thomas\AppData\Local\Temp\VP6VFW.dll
C:\Users\Thomas\AppData\Local\Temp\YourFileDownloaderf1Cv0E6zGO.exe
C:\Users\Thomas\AppData\Local\Temp\YourFileDownloaderGiIB8VtIkL.exe
C:\Users\Thomas\AppData\Local\Temp\zyqEnLZxVY.exe
C:\Users\Thomas\AppData\Local\Temp\_is19F6.exe
C:\Users\Thomas\AppData\Local\Temp\_isBDD3.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-04 00:59

==================== End Of Log ============================

--- --- ---

FRST Additions Logfile:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-01-2015
Ran by Thomas at 2015-01-09 20:04:20
Running from I:\Daten von Thomas\Desstop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Bitdefender Antivirus (Enabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {A23392FD-84B9-F933-2C71-81E751F6EF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.10 - Adobe Systems)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5 64-bit (HKLM\...\{6C1A010F-9108-4162-A26F-9FEC4AC0F0F0}) (Version: 5.0.1 - Adobe)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version:  3.0 - )
Amazon Cloud Drive (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\23ab716f18849b6f) (Version: 2.1.2013.1340 - Amazon)
Amazon.com Kindle Fire (HKLM\...\Kindle Fire Drivers) (Version:  - )
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.)
Audials (HKLM-x32\...\{3C07AF26-8705-4DF5-96C7-51432E0C9F03}) (Version: 11.0.51201.100 - Audials AG)
AVS Audio Converter 7 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 7.0.5.510 - Online Media Technologies Ltd.)
AVS Audio Editor 7.1 (HKLM-x32\...\AVS Audio Editor_is1) (Version: 7.1.5.479 - Online Media Technologies Ltd.)
AVS Audio Recorder version 4.0 (HKLM-x32\...\AVS Audio Recorder_is1) (Version: 4.0.1.21 - Online Media Technologies Ltd.)
AVS Cover Editor 2.0.1.3 (HKLM-x32\...\AVSCoverEditor2_is1) (Version: 2.0.1.3 - Online Media Technologies Ltd.)
AVS Disc Creator 5 (HKLM-x32\...\AVS Disc Creator_is1) (Version: 5.0.6.520 - Online Media Technologies Ltd.)
AVS Document Converter 2.2.5 (HKLM-x32\...\AVS Document Converter_is1) (Version: 2.2.5.218 - Online Media Technologies Ltd.)
AVS DVD Copy 4.1.2.283 (HKLM-x32\...\AVS DVD Copy_is1) (Version: 4.1.2.283 - Online Media Technologies Ltd.)
AVS Image Converter 2.3.2.248 (HKLM-x32\...\AVS Image Converter_is1) (Version: 2.3.2.248 - Online Media Technologies Ltd.)
AVS Media Player 4.1.10.99 (HKLM-x32\...\AVS Media Player_is1) (Version: 4.1.10.99 - Online Media Technologies Ltd.)
AVS Photo Editor (HKLM-x32\...\AVS Photo Editor_is1) (Version: 2.0.8.128 - Online Media Technologies Ltd.)
AVS Registry Cleaner version 2.2 (HKLM-x32\...\AVSRegistryCleaner_is1) (Version: 2.2.3.236 - Online Media Technologies Ltd.)
AVS Ringtone Maker version 1.6 (HKLM-x32\...\AVS Ringtone Maker 1.6_is1) (Version: 1.6.1.140 - Online Media Technologies Ltd.)
AVS Video Converter 8 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 8.3.2.533 - Online Media Technologies Ltd.)
AVS Video Editor 6 (HKLM-x32\...\AVS Video Editor_is1) (Version: 6.3.2.234 - Online Media Technologies Ltd.)
AVS Video Recorder 2.5 (HKLM-x32\...\AVS Video Recorder_is1) (Version: 2.5.3.83 - Online Media Technologies Ltd.)
AVS Video ReMaker 4.1.3.149 (HKLM-x32\...\AVS Video ReMaker_is1) (Version: 4.1.3.149 - Online Media Technologies Ltd.)
Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
Bitdefender Total Security 2015 (HKLM\...\Bitdefender) (Version: 18.11.0.872 - Bitdefender)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite MFC-J4610DW (HKLM-x32\...\{DD98C438-D769-4677-AA87-3481FA32D20C}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
Brother P-touch Address Book 1.2 (HKLM-x32\...\{71410B72-3DA8-4330-BC05-7380FDE09410}) (Version: 1.2.0010 - Brother Industries, Ltd.)
Brother P-touch Editor 5.1 (HKLM-x32\...\{39270390-A851-4E4B-94A9-D5C468216ED3}) (Version: 5.1.0200 - Brother Industries, Ltd.)
Brother QL-Series Software User's Guide (HKLM-x32\...\InstallShield_{A242CAB2-870C-4AC9-8AFE-34379D9383CD}) (Version: 1.00.0000 - Brother Industries, Ltd.)
Brother QL-Series Software User's Guide (x32 Version: 1.00.0000 - Brother Industries, Ltd.) Hidden
calibre (HKLM-x32\...\{17429B3C-DC4B-4ED8-BBEA-CF14BD6203C5}) (Version: 1.28.0 - Kovid Goyal)
CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)
CloneDVDmobile (HKLM-x32\...\CloneDVDmobile) (Version: 1.9.0.1 - SlySoft)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
Dropbox (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.2.13992 - Landesfinanzdirektion Thüringen)
FileZilla Client 3.9.0.6 (HKLM-x32\...\FileZilla Client) (Version: 3.9.0.6 - Tim Kosse)
FileZilla Server (HKLM-x32\...\FileZilla Server) (Version: beta 0.9.42 - FileZilla Project)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Drive (HKLM-x32\...\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java 7 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417040FF}) (Version: 7.0.400 - Oracle)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.670 - Oracle)
Java SE Development Kit 7 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170250}) (Version: 1.7.0.250 - Oracle)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Joe (HKLM-x32\...\{F8C986EA-13F8-4B39-91C3-A6B9A851CD34}) (Version: 4.01.0000 - Wirth IT Design)
KFZ-Faktura (HKLM-x32\...\KFZ-Faktura_is1) (Version: 13 - Nürenberg IT-Service)
Magic MP3 Tagger 2.2.6 (HKLM-x32\...\uniquemagicmp3taggerappid_is1) (Version:  - Mathias Kunter)
MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Access database engine 2010 (German) (HKLM-x32\...\{90140000-00D1-0407-0000-0000000FF1CE}) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\OneDriveSetup.exe) (Version: 17.3.1229.0918 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{2C303EE0-A595-3543-A71A-931C7AC40EDE}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{14297226-E0A0-3781-8911-E9D529552663}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4048 (HKLM\...\{91415F19-4C22-3609-A105-92ED3522D83C}) (Version: 9.0.30729.4048 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 (HKLM-x32\...\{5B1F2843-B379-3FF2-B0D3-64DD143ED53A}) (Version: 9.0.30729.4048 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\MyFreeCodec) (Version:  - )
NirSoft ProduKey (HKLM-x32\...\NirSoft ProduKey) (Version:  - )
Nuance Cloud Connector (HKLM-x32\...\{4C99EAAA-A846-4029-B500-312C5937D714}) (Version: 3.2.1026 - Nuance Communications, Inc.)
Nuance OmniPage Ultimate (HKLM-x32\...\{419512F9-D5E7-4ED2-BF99-E7F2C0176B6A}) (Version: 19.00.0000 - Nuance Communications, Inc.)
Nuance PaperPort 14 (HKLM-x32\...\{B2E8EFDC-E4FF-42A8-B305-FE06D29BB33C}) (Version: 14.5.0000 - Nuance Communications, Inc.)
Nuance PDF Create 8 (HKLM\...\{D8AD8411-A273-4560-B756-A418ED4910AD}) (Version: 8.10.6293 - Nuance Communications, Inc.)
Nuance PDF Create 8 (HKLM-x32\...\{D8AD8411-A273-4560-B756-A418ED4910AD}) (Version: 8.10.6293 - Nuance Communications, Inc.)
Nuance PDF Viewer Plus (HKLM-x32\...\{5B28CD4A-ADCF-4B39-BB67-F2F398818F2F}) (Version: 7.20.3208 - Nuance Communications, Inc.)
NVIDIA 3D Vision Controller-Treiber 344.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.46 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.48 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation)
Oracle VM VirtualBox 4.3.12 (HKLM\...\{B5121457-0126-4E62-BCBF-6DC7C73D9E4A}) (Version: 4.3.12 - Oracle Corporation)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PaperPort Image Printer 64-bit (HKLM\...\{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}) (Version: 14.00.0001 - Nuance Communications, Inc.)
PC Auto Backup (HKLM-x32\...\InstallShield_{662548BC-3506-4843-B7AA-F44D352F76A8}) (Version: 1.1.1.21 - Samsung Electronics Co,. Ltd.)
PC Auto Backup (x32 Version: 1.1.1.21 - Samsung Electronics Co,. Ltd.) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
PS3 Media Server (HKLM-x32\...\PS3 Media Server) (Version: 1.90.1 - PS3 Media Server) <==== ATTENTION!
QPST 2.7 (HKLM-x32\...\{8035964D-75EB-4463-91DC-3F02EE9CF103}) (Version: 2.7.378 - Qualcomm)
Rosetta Stone Version 3 (HKLM-x32\...\{99011A6E-5200-11DE-BDB8-7ACD56D89593}) (Version: 3.4.5.0 - Rosetta Stone Ltd.)
Samsung Auto Backup (HKLM-x32\...\{821D6F49-1B20-4809-8C73-286CFC52B1B1}) (Version: 4.1.371.0 - Clarus)
Samsung i-Launcher 1.0.1.54 (HKLM-x32\...\Samsung i-Launcher) (Version: 1.0.1.54 - Samsung Electronics Co., Ltd.)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.1.13105_7 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.1.13105_7 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.) Hidden
Samsung RAW Converter 4 (HKLM-x32\...\InstallShield_{D09E159D-0264-4597-B200-A9B4C0866F25}) (Version: 4 - Ichikawa Soft Laboratory)
Samsung RAW Converter 4 (x32 Version: 4 - Ichikawa Soft Laboratory) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
SanDisk SSD Toolkit 1.0.0.1 (HKLM-x32\...\{26326B5B-3D62-4C12-8841-6B55A19B552D}_is1) (Version: 1.0.0.1 - SanDisk Corporation)
Scansoft PDF Professional (x32 Version:  - ) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version:  - Microsoft)
SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spotify (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
StarMoney (x32 Version: 2.0 - StarFinanz) Hidden
StarMoney 7.0  (HKLM-x32\...\{79917F09-8405-48E0-AE82-6E2F17CB0A34}) (Version: 7.0 - Star Finanz GmbH)
Streaming Audio Recorder Version 3.4.1 (HKLM-x32\...\{B6D9D06B-4B4D-4B41-B963-C056B627F704}_is1) (Version: 3.4.1 - APOWERSOFT LIMITED)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
TVersity Codec Pack 1.7 (HKLM-x32\...\TVersity Codec Pack) (Version: 1.7 - TVersity Inc.)
UltraISO Premium V9.62 (HKLM-x32\...\UltraISO_is1) (Version:  - )
Update Service HitsBlender (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Update Service HitsBlender) (Version: 2.14.52 - hxxp://www.hitsblender.com)
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows-Treiberpaket - Amazon.com (WinUSB) KindleFireUsbDeviceClass  (08/20/2012 1.0.0000.00000) (HKLM\...\289137531F7C014BF296EFFBFC7E3748A293FEE9) (Version: 08/20/2012 1.0.0000.00000 - Amazon.com)
WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
XMedia Recode Version 3.1.3.7 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.3.7 - XMedia Recode)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points  =========================

09-01-2015 18:37:46 Entfernt TECDOC CD

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2014-12-30 18:28 - 00000930 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 audials.com
127.0.0.1 188.40.53.196127.0.0.1 support.apowersoft.com
127.0.0.1 apowersoft.com


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {09CD44EE-85CD-4735-ACB9-31E2E7366AF5} - System32\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5 => C:\Program Files (x86)\I - Cinema\c7e225d9-e592-4799-a023-7acaa225b91d-5.exe <==== ATTENTION
Task: {114AF372-8B94-499A-BDD3-B8718F70E7D8} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {1E924CA3-EB37-4C20-AF75-BE99320A5C55} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-25] (Adobe Systems Incorporated)
Task: {2079835D-A26F-42BB-8AD8-5FB4989E7FEF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {21BB1D1C-FBEF-4CA5-8FE0-2E4E43617F27} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-25] (Google Inc.)
Task: {465E2225-6B2C-4D43-BB75-DCCD56FFFEE2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {4680E46B-2405-4506-8408-EBF37817CD55} - System32\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5_user => C:\Program Files (x86)\ClickMovie1-Downloaderv10\57c01995-efd5-4f2e-96df-983449831ddc-5.exe <==== ATTENTION
Task: {54AC37B8-EA9A-4B2E-B4D7-0E8A830B7D7C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {64178EAD-F705-4C16-A9C5-859F884B1D04} - System32\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5_user => C:\Program Files (x86)\I - Cinema\c7e225d9-e592-4799-a023-7acaa225b91d-5.exe <==== ATTENTION
Task: {66C4AE2B-593C-4B5D-AC6E-978797C4601A} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Thomas-PC-Thomas Thomas-PC => C:\Program Files (x86)\Microsoft Office\Office15\MsoSync.exe [2014-11-12] (Microsoft Corporation)
Task: {6AC17DBC-C98E-47A7-BFCE-41CEBB46015D} - System32\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-1 => C:\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-codedownloader.exe <==== ATTENTION
Task: {7CA8209E-CB95-452E-B7D0-6D6A4C50A62D} - System32\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-1 => C:\Program Files (x86)\I - Cinema\I - Cinema-codedownloader.exe <==== ATTENTION
Task: {9A6DB46C-DE41-4E12-A6C0-F257B6F0AA01} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {A6AA64DD-6C0F-4E6C-8D5C-0CC82990C121} - System32\Tasks\PostPoneInstall => C:\Users\Thomas\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe [2015-01-09] (C.L.A.R.A) <==== ATTENTION
Task: {B11602B9-1519-44B4-80B1-423A74825373} - System32\Tasks\{E8B03A25-D220-416C-B78D-6D25B6F82365} => I:\TECDOC_CD\2_2014\pb\tof.exe
Task: {C56C77DD-BACE-4C5D-AF26-48B210BE8037} - System32\Tasks\Update Service HitsBlender => C:\Program Files (x86)\HitsBlenderUpdater\HitsBlenderUpdater.exe
Task: {D8F18997-315C-4420-BC38-565B960776FE} - System32\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5 => C:\Program Files (x86)\ClickMovie1-Downloaderv10\57c01995-efd5-4f2e-96df-983449831ddc-5.exe <==== ATTENTION
Task: {EDD2C7E7-179B-43C3-8125-FEFC1D1EF66A} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: {EE1BC51D-F046-4EB2-95D3-B1C238EB781B} - System32\Tasks\{0B71CE26-2C2E-44F7-9576-05AA21F78FD3} => H:\Die Sims 3\Inselparadies\Game\Bin\Sims3Launcher.exe
Task: {F20177EC-29FD-4536-8AF6-31A885A46214} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-25] (Google Inc.)
Task: C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-1.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\57c01995-efd5-4f2e-96df-983449831ddc-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5_user.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\57c01995-efd5-4f2e-96df-983449831ddc-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-1.job => C:\Program Files (x86)\I - Cinema\I - Cinema-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5.job => C:\Program Files (x86)\I - Cinema\c7e225d9-e592-4799-a023-7acaa225b91d-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5_user.job => C:\Program Files (x86)\I - Cinema\c7e225d9-e592-4799-a023-7acaa225b91d-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-08-26 17:59 - 2014-10-02 14:47 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\txmlutil.dll
2014-08-26 17:59 - 2013-09-03 13:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdmetrics.dll
2014-08-26 18:02 - 2014-06-30 12:26 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\UI\accessl.ui
2014-08-26 18:01 - 2012-10-29 14:22 - 00152816 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdfwcore.dll
2014-08-26 18:11 - 2014-08-26 18:11 - 00780592 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00047_002\ashttpbr.mdl
2014-08-26 18:11 - 2014-08-26 18:11 - 00568400 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00047_002\ashttpdsp.mdl
2014-08-26 18:11 - 2014-08-26 18:11 - 02602680 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00047_002\ashttpph.mdl
2014-08-26 18:11 - 2014-08-26 18:11 - 01323408 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00047_002\ashttprbl.mdl
2013-05-04 19:17 - 2014-10-16 15:11 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-09-10 08:29 - 2011-12-06 15:55 - 00020480 _____ () I:\Neuer\Apache.exe
2013-03-22 13:10 - 2013-03-22 13:10 - 00222544 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSVSSSvr.exe
2010-09-03 12:11 - 2010-09-03 12:11 - 00520295 _____ () C:\Program Files (x86)\Samsung\PC Auto Backup\http_ss_win_pro.exe
2014-05-01 15:13 - 2014-05-01 15:13 - 00470016 _____ () C:\ProgramData\MEGAsync\ShellExtX64.dll
2014-05-01 20:29 - 2014-05-01 20:29 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2013-05-09 08:39 - 2010-03-15 10:28 - 00166400 _____ () C:\Program Files\WinRAR\rarext.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00473352 _____ () C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe
2013-05-04 19:05 - 2012-08-09 11:55 - 00078480 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2013-05-04 19:05 - 2012-08-09 11:55 - 00386192 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 00374840 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
2014-07-30 10:38 - 2014-07-30 10:38 - 00121363 _____ () C:\Program Files\VideoLAN\VLC\libvlc.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 02524691 _____ () C:\Program Files\VideoLAN\VLC\libvlccore.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00713235 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libdshow_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00031251 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_output\libdirectsound_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00034323 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 12501523 _____ () C:\Program Files\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 01470995 _____ () C:\Program Files\VideoLAN\VLC\plugins\misc\libxml_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00070163 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirectdraw_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 02376211 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00106515 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00263699 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00080915 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00051219 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00063507 _____ () C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libsmooth_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00608275 _____ () C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libhttplive_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 01022995 _____ () C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libdash_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00125459 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libzip_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00043539 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00017427 _____ () C:\Program Files\VideoLAN\VLC\plugins\stream_filter\librecord_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00140307 _____ () C:\Program Files\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 02218003 _____ () C:\Program Files\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00318995 _____ () C:\Program Files\VideoLAN\VLC\plugins\lua\liblua_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00058387 _____ () C:\Program Files\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00043027 _____ () C:\Program Files\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00190995 _____ () C:\Program Files\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00091667 _____ () C:\Program Files\VideoLAN\VLC\plugins\demux\libavi_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00039955 _____ () C:\Program Files\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00123923 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00341011 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libpng_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00021523 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 01505811 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00023059 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libdts_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00330771 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00417811 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00230931 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libflac_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00029715 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libg711_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00019475 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 01745427 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00192019 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00025619 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00833555 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00022035 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00031763 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00218643 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libopus_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00023059 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\liba52_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00023059 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 11244051 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00857107 _____ () C:\Program Files\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00040467 _____ () C:\Program Files\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00028179 _____ () C:\Program Files\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00701459 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00121875 _____ () C:\Program Files\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00032787 _____ () C:\Program Files\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00024083 _____ () C:\Program Files\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00057363 _____ () C:\Program Files\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00023059 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00019475 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00038419 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00024083 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00027667 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00023059 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00018451 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00018451 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00017427 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00072211 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00017427 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\libfloat_mixer_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00023059 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00139795 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00186387 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00081939 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 01506835 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00025619 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00016915 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00017939 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00017939 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00017427 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00018963 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll
2014-07-30 10:38 - 2014-07-30 10:38 - 00029715 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll
2014-08-27 13:57 - 2014-11-24 15:29 - 00467448 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdidntconp.dll
2014-10-15 13:56 - 2014-11-24 15:29 - 00184832 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\ui\bdidntconp.ui
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-09-10 08:29 - 2011-12-06 15:55 - 00299008 _____ () I:\Neuer\ApacheCore.dll
2013-03-22 12:59 - 2013-03-22 12:59 - 00293200 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\sqlite3.dll
2013-03-22 13:00 - 2013-03-22 13:00 - 00080208 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\zlib125.dll
2013-03-22 13:00 - 2013-03-22 13:00 - 00016720 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSMui.dll
2013-05-26 12:28 - 2009-10-06 13:36 - 00205312 _____ () C:\Program Files (x86)\StarMoney 7.0\ouservice\PATCHW32.dll
2010-04-30 13:02 - 2010-04-30 13:02 - 00057344 _____ () C:\Program Files (x86)\Samsung\PC Auto Backup\lang.dll
2014-01-06 10:52 - 2014-01-06 10:52 - 03244032 _____ () C:\Users\Thomas\AppData\Local\Programs\Google\Google+ Auto Backup\gpuploader_i18n.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00046080 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_thread-vc90-mt-1_39.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00045056 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_date_time-vc90-mt-1_39.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00545032 _____ () C:\Program Files (x86)\Audials\Audials 11\StreamingClient.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00012800 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_system-vc90-mt-1_39.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00068360 _____ () C:\Program Files (x86)\Audials\Audials 11\CrashRpt.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00409352 _____ () C:\Program Files (x86)\Audials\Audials 11\SQLite3.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00614912 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_regex-vc90-mt-1_39.dll
2014-10-16 02:23 - 2014-10-16 02:23 - 00290304 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Utils\65caba6fdb77ed17123be2746c441efc\Utils.ni.dll
2014-10-16 02:23 - 2014-10-16 02:23 - 00585216 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ManagedInterfaces\7cd297f92be83270ed007373b97bbe42\ManagedInterfaces.ni.dll
2014-11-12 03:09 - 2014-11-12 03:09 - 02950656 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\AudialsComponents\b883e8c49918945b0ae5f4780b281bcf\AudialsComponents.ni.dll
2014-10-16 02:23 - 2014-10-16 02:23 - 00178688 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\fastJSON\dd7cfc6548a6267386e0761f678b647f\fastJSON.ni.dll
2014-11-02 14:58 - 2014-11-02 14:58 - 00081056 _____ () C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\LoggingPlatform.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 36966968 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\libcef.dll
2014-10-16 10:15 - 2014-10-16 10:15 - 00035328 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00091648 _____ () C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00892416 _____ () C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll
2015-01-09 18:36 - 2015-01-09 18:36 - 00011264 _____ () C:\Users\Thomas\AppData\Local\Temp\nsf58CA.tmp\System.dll
2012-09-23 19:43 - 2012-09-23 19:43 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu
2015-01-09 17:36 - 2014-12-06 02:50 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libglesv2.dll
2015-01-09 17:36 - 2014-12-06 02:50 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libegl.dll
2014-06-21 14:48 - 2009-02-27 15:38 - 00139264 ____N () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-01-09 17:36 - 2014-12-06 02:50 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll
2015-01-09 17:36 - 2014-12-06 02:50 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll
2015-01-09 18:36 - 2015-01-09 18:36 - 00098816 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32api.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00110080 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\pywintypes27.dll
2015-01-09 18:36 - 2015-01-09 18:36 - 00364544 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\pythoncom27.dll
2015-01-09 18:36 - 2015-01-09 18:36 - 00045568 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\_socket.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 01160704 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\_ssl.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00320512 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32com.shell.shell.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00713216 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\_hashlib.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 01175040 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\wx._core_.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00805888 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\wx._gdi_.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00811008 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\wx._windows_.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 01062400 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\wx._controls_.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00735232 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\wx._misc_.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00128512 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\_elementtree.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00127488 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\pyexpat.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00557056 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\pysqlite2._sqlite.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00087552 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\_ctypes.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00119808 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32file.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00108544 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32security.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00007168 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\hashobjs_ext.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00167936 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32gui.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00018432 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32event.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00038912 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32inet.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00011264 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32crypt.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00070656 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\wx._html2.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00027136 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\_multiprocessing.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00035840 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32process.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00686080 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\unicodedata.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00122368 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\wx._wizard.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00024064 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32pipe.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00025600 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32pdh.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00525640 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\windows._lib_cacheinvalidation.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00010240 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\select.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00017408 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32profile.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00022528 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\win32ts.pyd
2015-01-09 18:36 - 2015-01-09 18:36 - 00078336 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI46682\wx._animate.pyd
2013-03-22 13:00 - 2013-03-22 13:00 - 00158032 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSMui_GER.dll
2013-03-22 13:03 - 2013-03-22 13:03 - 00252240 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSBr_nuance.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 00867896 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\ffmpegsumo.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 00886840 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\libglesv2.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 00108600 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\libegl.dll
2013-05-04 19:15 - 2012-06-25 09:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-01-09 17:36 - 2014-12-06 02:50 - 14913352 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:2683706C
AlternateDataStreams: C:\ProgramData\Temp:A303874F
AlternateDataStreams: C:\ProgramData\Temp:D5FBE8F9
AlternateDataStreams: C:\ProgramData\Temp:FC595E85

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-64129086-1818121567-326312414-500 - Administrator - Disabled)
Gast (S-1-5-21-64129086-1818121567-326312414-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-64129086-1818121567-326312414-1011 - Limited - Enabled)
Thomas (S-1-5-21-64129086-1818121567-326312414-1000 - Administrator - Enabled) => C:\Users\Thomas

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: VirtualBox Host-Only Ethernet Adapter
Description: VirtualBox Host-Only Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Oracle Corporation
Service: VBoxNetAdp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/09/2015 06:36:42 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder

Error: (01/09/2015 06:36:42 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder

Error: (01/09/2015 06:36:36 PM) (Source: BBGate) (EventID: 110) (User: NT-AUTORITÄT)
Description: Critical Error: BBGate(C:\_E_\srv_apps\BBGate\1.3.1.2\SOURCE\ElsaGate.cpp, 4637): Connection to aktive partner server failed. Klasse nicht registriert

Error: (01/09/2015 06:29:24 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (01/09/2015 06:29:19 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe -Embedding; Beschreibung = Entfernt TECDOC CD; Fehler = 0x800706be).

Error: (01/09/2015 05:47:50 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder

Error: (01/09/2015 05:47:50 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder

Error: (01/09/2015 05:35:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.17496, Zeitstempel: 0x546fddcc
Name des fehlerhaften Moduls: I - Cinema-bho.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x54af61e3
Ausnahmecode: 0xc0000005
Fehleroffset: 0x02f2cab2
ID des fehlerhaften Prozesses: 0x2b78
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (01/09/2015 05:31:30 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder

Error: (01/09/2015 05:31:30 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder


System errors:
=============
Error: (01/09/2015 06:37:42 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (01/09/2015 06:37:40 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)

Error: (01/09/2015 06:36:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "ZoneAlarm Privacy Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (01/09/2015 06:36:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Util Box Rock" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (01/09/2015 06:36:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Update Box Rock" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (01/09/2015 06:29:19 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F32D97DF-E3E5-4CB9-9E3E-0EB5B4E49801}

Error: (01/09/2015 05:48:44 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (01/09/2015 05:48:42 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)

Error: (01/09/2015 05:47:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "ZoneAlarm Privacy Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (01/09/2015 05:47:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Util Box Rock" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================
Error: (01/09/2015 06:36:42 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder

Error: (01/09/2015 06:36:42 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder

Error: (01/09/2015 06:36:36 PM) (Source: BBGate) (EventID: 110) (User: NT-AUTORITÄT)
Description: BBGate(C:\_E_\srv_apps\BBGate\1.3.1.2\SOURCE\ElsaGate.cpp, 4637): Connection to aktive partner server failed. Klasse nicht registriert

Error: (01/09/2015 06:29:24 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (01/09/2015 06:29:19 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe -EmbeddingEntfernt TECDOC CD0x800706be

Error: (01/09/2015 05:47:50 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder

Error: (01/09/2015 05:47:50 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder

Error: (01/09/2015 05:35:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE11.0.9600.17496546fddccI - Cinema-bho.dll_unloaded0.0.0.054af61e3c000000502f2cab22b7801d02c2a02cb14f1C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEI - Cinema-bho.dll7ec67519-981d-11e4-93af-94de80005579

Error: (01/09/2015 05:31:30 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder

Error: (01/09/2015 05:31:30 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3570 CPU @ 3.40GHz
Percentage of memory in use: 50%
Total physical RAM: 8147.35 MB
Available physical RAM: 4040.5 MB
Total Pagefile: 16292.88 MB
Available Pagefile: 11622.53 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:119.14 GB) (Free:13.55 GB) NTFS
Drive d: (622010_DDS) (CDROM) (Total:0.17 GB) (Free:0 GB) CDFS
Drive f: () (Fixed) (Total:465.54 GB) (Free:107.7 GB) NTFS
Drive h: () (Fixed) (Total:931.51 GB) (Free:788.11 GB) NTFS
Drive i: (Volume) (Fixed) (Total:1863.01 GB) (Free:118.64 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 313C1AE6)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119.1 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 4DBD6351)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=OF Extended)

========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: DDC41BD8)

Partition: GPT Partition Type.

========================================================
Disk: 3 (Size: 1863 GB) (Disk ID: 6EA0882C)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== End Of Log ============================

--- --- ---

winniwinkel · 09.01.2015, 20:29

Hier nach Deinstallation.

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015
Ran by Thomas (administrator) on THOMAS-PC on 09-01-2015 20:26:22
Running from I:\Daten von Thomas\Desstop
Loaded Profile: Thomas (Available profiles: Thomas)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(VOLKSWAGEN AG) I:\Neuer\BBGate.exe
() I:\Neuer\Apache.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() I:\Neuer\Apache.exe
(CrypKey (Canada) Ltd.) C:\Windows\System32\Crypserv.exe
(FileZilla Project) C:\Program Files (x86)\FileZilla Server\FileZilla server.exe
(Gladinet, INC) C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSVSSSvr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Samsung) C:\Program Files (x86)\Samsung\PC Auto Backup\WiselinkPro.exe
() C:\Program Files (x86)\Samsung\PC Auto Backup\http_ss_win_pro.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Google Inc.) C:\Users\Thomas\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe
() C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(Spotify Ltd) C:\Users\Thomas\AppData\Roaming\Spotify\spotify.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwtxapps.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Samsung) C:\Program Files (x86)\Samsung\PC Auto Backup\AutoBackup.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(PS3 Media Server) C:\Program Files (x86)\PS3 Media Server\pms.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFGuage.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFRealTimeD.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFTimerD.exe
(Oracle Corporation) C:\Program Files (x86)\PS3 Media Server\jre\bin\javaw.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(FileZilla Project) C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Create 8\PdfCreate8Hook.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Professional 7\PdfPro7Hook.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxcr.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxcon.exe
(Gladinet, INC) C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladinetClient.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\OFFICE15\CSISYNCCLIENT.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\MSOSYNC.EXE


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1626752 2014-11-24] (Bitdefender)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5263504 2012-08-09] (VIA)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3498728 2014-12-03] (Adobe Systems Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [FileZilla Server Interface] => C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe [1044480 2013-12-16] (FileZilla Project)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2068856 2011-10-12] (Flexera Software LLC.)
HKLM-x32\...\Run: [OmniPage Preload] => C:\Program Files (x86)\Nuance\OmniPage19\OmniPage19.exe [2922824 2013-04-22] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [Nuance OmniPage Ultimate-reminder] => C:\Program Files (x86)\Nuance\OmniPage19\Ereg\Ereg.exe [334152 2013-01-14] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFCreHook] => C:\Program Files (x86)\Nuance\PDF Create 8\pdfcreate8hook.exe [1029960 2013-03-12] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDF8 Registry Controller] => C:\Program Files (x86)\Nuance\PDF Create 8\RegistryController.exe [180040 2013-03-12] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [36168 2013-04-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [18248 2013-04-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFProHook] => C:\Program Files (x86)\Nuance\PDF Professional 7\pdfpro7hook.exe [641864 2013-03-20] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1679360 2012-02-28] (Wondershare)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [Google+ Auto Backup] => C:\Users\Thomas\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3619096 2014-01-06] (Google Inc.)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe [473352 2014-02-14] ()
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790344 2014-11-24] (Bitdefender)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [SkyDrive] => C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [277672 2014-11-02] (Microsoft Corporation)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [Spotify] => C:\Users\Thomas\AppData\Roaming\Spotify\Spotify.exe [6737976 2014-12-30] (Spotify Ltd)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [GoogleChromeAutoLaunch_D1D0AD69A13928375769191006ADC5F6] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\MountPoints2: {56b64bd4-bf07-11e2-ae08-806e6f6e6963} - D:\Start.exe
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\MountPoints2: {d1bea689-8b2c-11e3-b140-94de80005579} - K:\pushinst.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-05-05] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [GladinetIconOverlay] -> {3C3DC57A-7535-48AF-BB9E-C3576A4F34D0} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIcon.dll (Gladinet, INC)
ShellIconOverlayIdentifiers: [GladinetUploading] -> {959A18D3-9CC9-41e8-B76F-34ED9A89D4EA} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIconU.dll (Gladinet, INC)
ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [GladinetIconOverlay] -> {3C3DC57A-7535-48AF-BB9E-C3576A4F34D0} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIcon32.dll (Gladinet, INC)
ShellIconOverlayIdentifiers-x32: [GladinetUploading] -> {959A18D3-9CC9-41e8-B76F-34ED9A89D4EA} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIconU32.dll (Gladinet, INC)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-64129086-1818121567-326312414-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-64129086-1818121567-326312414-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-64129086-1818121567-326312414-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKU\S-1-5-21-64129086-1818121567-326312414-1000 -> {C97E1300-5067-4D6F-8A64-3F5DB9CBD664} URL = hxxp://yandex.ru/yandsearch?win=78&clid=1989707&text={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Box Rock 1.0.0.6 -> {464deeb8-b74f-4117-b8ec-e42f4028f3d1} -> C:\Program Files (x86)\Box Rock\BoxRockBHO.dll No File
BHO-x32: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files (x86)\Nuance\PDF Professional 7\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: ZeonIEEventHelper Class -> {C7DA0384-42AA-428c-B832-88AC343DE1A8} -> C:\Program Files (x86)\Nuance\PDF Create 8\Bin\GZeonIEFavClient.dll (Zeon Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll (Bitdefender)
Toolbar: HKLM-x32 - Nuance PDF - {BCCE15AE-AC7E-4bc9-94AF-2A714A412BCB} - C:\Program Files (x86)\Nuance\PDF Create 8\Bin\GZeonIEFavClient.dll (Zeon Corporation)
Toolbar: HKU\S-1-5-21-64129086-1818121567-326312414-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: HKLM-x32 {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} hxxp://download.gigabyte.com.tw/object/Dldrv.ocx
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default
FF SelectedSearchEngine: Яндекс
FF Homepage: hxxp://www.yandex.ru/?win=78&clid=1989706
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Professional 7\bin\nppdf.dll (Zeon Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yandex.ru-183920.xml
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext
FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2014-08-26]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-05-07]
FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff [2014-08-26]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext

Chrome: 
=======
CHR HomePage: Default -> 
CHR StartupUrls: Default -> "https://mail.google.com/mail/?hl=de&shva=1#inbox"
CHR Profile: C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-09]
CHR Extension: (Angry Birds) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2015-01-09]
CHR Extension: (Google Docs) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-09]
CHR Extension: (SuperMegaBest.com) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aonedlchkbicmhepimiahfalheedjgbh [2015-01-09]
CHR Extension: (Google Drive) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-09]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-09]
CHR Extension: (YouTube) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-09]
CHR Extension: (HelloFax: 50 Free Fax Pages) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bocmleclimfnadgmcdgecijlblfcmfnm [2015-01-09]
CHR Extension: (Adblock Plus) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-09]
CHR Extension: (Pushbullet) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2015-01-09]
CHR Extension: (Google-Suche) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-09]
CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2015-01-09]
CHR Extension: (Bitdefender Wallet) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabcmochhfpldjekobfaaggijgohadih [2015-01-09]
CHR Extension: (Google Tabellen) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-09]
CHR Extension: (Cr!Box) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjodchcocbnbhfkjeapbdoflbiibnapp [2015-01-09]
CHR Extension: (Google Kalender (von Google)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbgaklkmjakoegficnlkhebmhkjfich [2015-01-09]
CHR Extension: (Google Notizen – Notizen & Listen) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2015-01-09]
CHR Extension: (WEB.DE MailCheck) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2015-01-09]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-01-09]
CHR Extension: (Google Input Tools) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mclkkofklkfljcocdinagocijmpgbhab [2015-01-09]
CHR Extension: (Google Mail-Checker) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2015-01-09]
CHR Extension: (Erweiterung \) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlbjncdgjeocebhnmkbbbdekmmmcbfjd [2015-01-09]
CHR Extension: (Google Wallet) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-09]
CHR Extension: (Google Chrome to Phone Extension) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadboiipflhobonjjffjbfekfjcgkhco [2015-01-09]
CHR Extension: (Any.do) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocgddccilgpeepgglnlpchkpgamkgmld [2015-01-09]
CHR Extension: (LEO Wörterbuchsuche) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojniiiidjmoaiehegaedmfdclmgmmpdp [2015-01-09]
CHR Extension: (Google Calendar Checker (by Google)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookhcbgokankfmjafalglpofmolfopek [2015-01-09]
CHR Extension: (Evernote Web Clipper) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-01-09]
CHR Extension: (Google Mail) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-09]
CHR Extension: (Tapatalk Notifier) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\plfhcjljnfjpfcbjpgnflfofmahljkjj [2015-01-09]
CHR HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Thomas\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-07-23]
CHR HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - No Path
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-12-03]
CHR HKLM-x32\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 BBGate; I:\Neuer\BBGate.exe [532480 2011-12-06] (VOLKSWAGEN AG) [File not signed]
R2 BBGate-HTTPD; I:\Neuer\Apache.exe [20480 2011-12-06] () [File not signed]
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [78144 2014-11-24] (Bitdefender)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
S2 c7522d84; c:\Program Files (x86)\Optimizer Pro 3.27\OptProMon.dll [2462800 2015-01-09] ()
R2 Crypkey License; C:\Windows\system32\crypserv.exe [122880 2008-05-08] (CrypKey (Canada) Ltd.) [File not signed]
R2 FileZilla Server; C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe [613376 2013-12-16] (FileZilla Project) [File not signed]
R2 GladFileMonSvc; C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe [30032 2013-03-22] (Gladinet, INC)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [77640 2013-04-05] (Nuance Communications, Inc.)
S4 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 StarMoney 7.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [67320 2014-11-24] (Bitdefender)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27792 2012-08-03] (VIA Technologies, Inc.)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1527360 2014-11-24] (Bitdefender)
R2 WiselinkPro; C:\Program Files (x86)\Samsung\PC Auto Backup\WiselinkPro.exe [7274561 2013-02-18] (Samsung) [File not signed]
S2 Update Box Rock; "C:\Program Files (x86)\Box Rock\updateBoxRock.exe" [X]
S2 Util Box Rock; "C:\Program Files (x86)\Box Rock\bin\utilBoxRock.exe" [X]
S2 ZAPrivacyService; "C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1288472 2014-11-24] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [263032 2014-11-24] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [647752 2014-08-27] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-11-13] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107080 2012-10-29] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2014-08-27] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2014-08-27] (BitDefender)
S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-07-20] (DT Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [110744 2012-07-19] (Qualcomm Atheros Co., Ltd.)
R1 NetworkX; C:\Windows\system32\ckldrv.sys [28664 2008-03-17] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-10-07] (Audials AG)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [452040 2014-11-24] (BitDefender S.R.L.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [106256 2013-04-12] (Oracle Corporation)
R2 webinstrNHK; C:\Windows\system32\Drivers\webinstrNHK.sys [56432 2015-01-09] (Corsica)
S3 WsAudioDevice_383S(1); C:\Windows\System32\drivers\WsAudioDevice_383S(1).sys [29288 2014-07-31] (Wondershare)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-09 18:08 - 2015-01-09 18:08 - 00000168 _____ () C:\Users\Thomas\defogger_reenable
2015-01-09 17:58 - 2015-01-09 20:26 - 00000000 ____D () C:\FRST
2015-01-09 17:47 - 2015-01-09 17:47 - 00000000 ____D () C:\Users\Thomas\AppData\Local\CrashRpt
2015-01-09 17:44 - 2015-01-09 17:46 - 00000000 ____D () C:\AdwCleaner
2015-01-09 17:36 - 2015-01-09 17:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-01-09 16:53 - 2015-01-09 17:31 - 00002770 _____ () C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5_user.job
2015-01-09 16:53 - 2015-01-09 17:31 - 00002770 _____ () C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5.job
2015-01-09 16:53 - 2015-01-09 16:53 - 00005800 _____ () C:\Windows\System32\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5
2015-01-09 16:51 - 2015-01-09 17:31 - 00003424 _____ () C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-1.job
2015-01-09 16:51 - 2015-01-09 16:51 - 00006454 _____ () C:\Windows\System32\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-1
2015-01-09 16:50 - 2015-01-09 16:50 - 00003788 _____ () C:\Windows\System32\Tasks\PostPoneInstall
2015-01-09 16:36 - 2015-01-09 16:36 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 3.27
2015-01-09 16:35 - 2015-01-09 17:31 - 00002456 _____ () C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5_user.job
2015-01-09 16:35 - 2015-01-09 17:31 - 00002456 _____ () C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5.job
2015-01-09 16:35 - 2015-01-09 16:35 - 00056432 _____ (Corsica) C:\Windows\system32\Drivers\webinstrNHK.sys
2015-01-09 16:35 - 2015-01-09 16:35 - 00005486 _____ () C:\Windows\System32\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5
2015-01-09 16:35 - 2015-01-09 16:35 - 00002119 _____ () C:\Windows\patsearch.bin
2015-01-09 16:35 - 2015-01-09 16:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNHK_01009.Wdf
2015-01-09 16:33 - 2015-01-09 17:31 - 00003484 _____ () C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-1.job
2015-01-09 16:33 - 2015-01-09 16:33 - 00006514 _____ () C:\Windows\System32\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-1
2015-01-09 16:27 - 2015-01-09 16:27 - 00003110 _____ () C:\Windows\System32\Tasks\Update Service HitsBlender
2015-01-09 13:44 - 2015-01-09 16:31 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Wondershare
2015-01-09 13:44 - 2015-01-09 16:31 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2015-01-09 13:44 - 2015-01-09 13:44 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Wondershare
2015-01-09 13:44 - 2014-07-31 15:55 - 00029288 _____ (Wondershare) C:\Windows\system32\Drivers\WsAudioDevice_383S(1).sys
2015-01-08 15:24 - 2015-01-08 15:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic MP3 Tagger
2015-01-08 15:24 - 2015-01-08 15:24 - 00000000 ____D () C:\Program Files (x86)\Magic MP3 Tagger
2015-01-07 09:00 - 2015-01-07 09:00 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\GHISLER
2014-12-30 18:28 - 2014-12-30 18:39 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Apowersoft
2014-12-30 18:20 - 2015-01-08 03:42 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Spotify
2014-12-30 18:18 - 2015-01-09 20:24 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Spotify
2014-12-30 10:01 - 2015-01-09 20:24 - 00000000 ____D () C:\ProgramData\PMS
2014-12-30 10:01 - 2015-01-02 14:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PS3 Media Server
2014-12-30 10:01 - 2014-12-30 10:01 - 00000000 ____D () C:\Program Files (x86)\PS3 Media Server
2014-12-26 18:51 - 2014-12-26 18:51 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2014-12-26 18:37 - 2014-12-26 18:37 - 00002091 _____ () C:\Users\Thomas\AppData\Local\2AE5D5AFBC8142c2AB89DCD9CB41C9AF.Layout2.lbx
2014-12-26 18:34 - 2014-12-26 18:34 - 00000000 __SHD () C:\Users\Thomas\AppData\Local\EmieBrowserModeList
2014-12-25 18:15 - 2014-12-25 18:15 - 00000000 ____D () C:\ProgramData\TVersity
2014-12-25 18:15 - 2014-12-25 18:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xiph.Org
2014-12-25 18:15 - 2014-12-25 18:15 - 00000000 ____D () C:\Program Files (x86)\Xiph.Org
2014-12-25 18:15 - 2014-12-25 18:15 - 00000000 ____D () C:\Program Files (x86)\TVersity Codec Pack
2014-12-18 04:13 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-18 04:13 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-15 03:27 - 2014-12-15 03:27 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-15 03:01 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-15 03:01 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-14 14:06 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-14 14:06 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-14 14:06 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-14 14:06 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-14 14:06 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-14 14:06 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-14 14:06 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-14 14:06 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-14 14:06 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-14 14:06 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-14 14:06 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-14 14:06 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-14 14:06 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-14 14:06 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-14 14:06 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-14 14:06 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-14 14:06 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-14 14:06 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-14 14:06 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-14 14:06 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-14 14:06 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-14 14:06 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-14 14:06 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-14 14:06 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-14 14:06 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-14 14:06 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-14 14:06 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-14 14:06 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-14 14:06 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-14 14:06 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-14 14:06 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-14 14:06 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-14 14:06 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-14 14:06 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-14 14:06 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-14 14:06 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-14 14:06 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-14 14:06 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-14 14:06 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-14 14:06 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-14 14:06 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-14 14:06 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-14 14:06 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-14 14:06 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-14 14:06 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-14 14:06 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-14 14:06 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-14 14:06 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-14 14:06 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-14 14:06 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-14 14:06 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-14 14:06 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-14 14:06 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-14 14:06 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-10 10:25 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-10 10:25 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-10 10:25 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-10 10:25 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 10:25 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 10:25 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-10 10:17 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-10 10:17 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-10 10:17 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-10 10:17 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-10 10:17 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-10 10:17 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-10 10:17 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-10 10:17 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-10 10:17 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-10 10:17 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-10 10:17 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-10 10:17 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-10 10:17 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-10 10:17 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-09 20:26 - 2013-11-27 19:34 - 00000000 ____D () C:\Users\Thomas\AppData\Local\gladinet
2015-01-09 20:24 - 2014-11-02 15:00 - 00005140 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for Thomas-PC-Thomas Thomas-PC
2015-01-09 20:24 - 2013-12-21 17:56 - 00013144 _____ () C:\Windows\error.log
2015-01-09 20:24 - 2013-12-21 17:56 - 00002996 _____ () C:\Windows\errord.log
2015-01-09 20:24 - 2013-12-09 19:29 - 00000000 ___RD () C:\Users\Thomas\Google Drive
2015-01-09 20:24 - 2013-05-12 12:51 - 00000000 ____D () C:\ProgramData\Temp
2015-01-09 20:24 - 2013-05-04 19:17 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-09 20:24 - 2013-05-04 19:13 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-09 20:24 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-09 20:24 - 2009-07-14 05:51 - 00053744 _____ () C:\Windows\setupact.log
2015-01-09 20:23 - 2013-05-04 18:54 - 01675366 _____ () C:\Windows\WindowsUpdate.log
2015-01-09 20:15 - 2013-05-04 19:13 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-09 20:05 - 2013-07-06 16:01 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-09 18:43 - 2009-07-14 05:45 - 00023056 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-09 18:43 - 2009-07-14 05:45 - 00023056 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-09 18:42 - 2009-07-14 18:58 - 00705002 _____ () C:\Windows\system32\perfh007.dat
2015-01-09 18:42 - 2009-07-14 18:58 - 00151346 _____ () C:\Windows\system32\perfc007.dat
2015-01-09 18:42 - 2009-07-14 06:13 - 01629708 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-09 18:39 - 2013-05-04 18:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-09 18:38 - 2014-05-07 18:25 - 05890850 _____ () C:\ProgramData\OfflineCatalogue_2_2014_TECDOC_CD.log
2015-01-09 18:38 - 2014-05-07 18:25 - 00000000 ____D () C:\ProgramData\TECDOC_CD
2015-01-09 18:22 - 2014-09-10 08:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsaWin
2015-01-09 18:22 - 2014-06-22 13:51 - 00000270 _____ () C:\Windows\ODBC.INI
2015-01-09 18:08 - 2013-05-04 18:54 - 00000000 ____D () C:\Users\Thomas
2015-01-09 17:47 - 2013-05-04 19:23 - 00404454 _____ () C:\Windows\PFRO.log
2015-01-09 17:45 - 2009-07-14 03:34 - 00000601 _____ () C:\Windows\win.ini
2015-01-09 17:36 - 2013-05-04 19:13 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Google
2015-01-09 17:29 - 2013-05-10 09:38 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\vlc
2015-01-07 08:46 - 2013-05-04 19:40 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Dropbox
2015-01-06 11:15 - 2013-05-07 18:13 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\FileZilla
2015-01-02 11:20 - 2014-11-16 12:47 - 00000000 ____D () C:\Users\Thomas\AppData\Local\JDownloader v2.0
2014-12-28 13:09 - 2013-05-07 18:07 - 00002453 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat XI Pro.lnk
2014-12-28 13:09 - 2013-05-07 18:07 - 00002210 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe FormsCentral.lnk
2014-12-28 13:09 - 2013-05-07 18:07 - 00002049 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller XI.lnk
2014-12-28 13:08 - 2013-05-27 19:09 - 00001458 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
2014-12-25 19:06 - 2013-07-06 16:01 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-25 19:06 - 2013-07-06 16:01 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-25 19:06 - 2013-05-12 19:00 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-20 12:49 - 2014-06-20 12:53 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Brother
2014-12-16 02:15 - 2014-09-07 17:35 - 00000000 ____D () C:\ProgramData\MEGAsync
2014-12-15 07:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-15 06:17 - 2013-06-13 11:25 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-15 06:15 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-12-15 03:53 - 2014-09-11 03:06 - 00000000 ____D () C:\Windows\rescache
2014-12-15 03:33 - 2013-05-26 12:27 - 00000000 ____D () C:\Program Files (x86)\StarMoney 7.0
2014-12-15 03:27 - 2014-05-07 02:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-15 03:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-15 03:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-15 03:11 - 2013-09-10 17:44 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-12-15 03:11 - 2013-05-04 19:46 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-15 03:09 - 2013-08-15 02:01 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-15 03:04 - 2013-05-05 10:54 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-14 12:46 - 2014-12-07 16:48 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\DVDVideoSoft
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_SusX70p3.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_InjX83P2.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_InjX70P3.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_Dacia.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_AbAC4VLL.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000008 _____ () C:\Windows\5800Hard.ini
2014-12-14 12:45 - 2014-11-02 13:53 - 00247786 _____ () C:\Clip_err.txt
2014-12-14 12:45 - 2014-11-02 13:53 - 00001928 _____ () C:\Clip.txt
2014-12-14 12:45 - 2014-10-31 18:11 - 00000383 _____ () C:\Autoformation CLIP.TXT
2014-12-14 12:45 - 2014-06-22 13:51 - 00000141 _____ () C:\Trace.ini
2014-12-14 12:45 - 2013-05-05 17:51 - 00000000 ____D () C:\ProgramData\InstallShield

Some content of TEMP:
====================
C:\Users\Thomas\AppData\Local\Temp\130606118584661085.exe
C:\Users\Thomas\AppData\Local\Temp\13060611860670120558.exe
C:\Users\Thomas\AppData\Local\Temp\1jr1aoxu.dll
C:\Users\Thomas\AppData\Local\Temp\AF0C55FA-A41B-46F6-0170-EB50554B3274.exe
C:\Users\Thomas\AppData\Local\Temp\AF126BA6-3872-EC0C-B96F-F742E50C11E6.dll
C:\Users\Thomas\AppData\Local\Temp\AskPIP_FF_.exe
C:\Users\Thomas\AppData\Local\Temp\AutoRun.exe
C:\Users\Thomas\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Thomas\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe
C:\Users\Thomas\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyorbfh.dll
C:\Users\Thomas\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Thomas\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Thomas\AppData\Local\Temp\Execute2App.exe
C:\Users\Thomas\AppData\Local\Temp\FreeAudioCDBurner.exe
C:\Users\Thomas\AppData\Local\Temp\GdiPlus.dll
C:\Users\Thomas\AppData\Local\Temp\GsLXh1E3NY.exe
C:\Users\Thomas\AppData\Local\Temp\hfh4yhxx.dll
C:\Users\Thomas\AppData\Local\Temp\InstallerMessageBox.exe
C:\Users\Thomas\AppData\Local\Temp\jna1874070241583102263.dll
C:\Users\Thomas\AppData\Local\Temp\jna3670992309178468449.dll
C:\Users\Thomas\AppData\Local\Temp\jna634067639659423862.dll
C:\Users\Thomas\AppData\Local\Temp\jna9019976945229357317.dll
C:\Users\Thomas\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Thomas\AppData\Local\Temp\L1Y8Ufulh8.exe
C:\Users\Thomas\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Thomas\AppData\Local\Temp\msvcp90.dll
C:\Users\Thomas\AppData\Local\Temp\msvcr90.dll
C:\Users\Thomas\AppData\Local\Temp\NPSInstallerProxy.exe
C:\Users\Thomas\AppData\Local\Temp\NPSInstallerProxyMessageBoxHookDll.dll
C:\Users\Thomas\AppData\Local\Temp\nsf7E51.exe
C:\Users\Thomas\AppData\Local\Temp\nsnC1F6.exe
C:\Users\Thomas\AppData\Local\Temp\nsnD74E.exe
C:\Users\Thomas\AppData\Local\Temp\nssD54A.exe
C:\Users\Thomas\AppData\Local\Temp\nsxC011.exe
C:\Users\Thomas\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Thomas\AppData\Local\Temp\nvStInst.exe
C:\Users\Thomas\AppData\Local\Temp\optprosetup.exe
C:\Users\Thomas\AppData\Local\Temp\ose00001.exe
C:\Users\Thomas\AppData\Local\Temp\PidGenX.dll
C:\Users\Thomas\AppData\Local\Temp\proxy_vole7398810760119204713.dll
C:\Users\Thomas\AppData\Local\Temp\Quarantine.exe
C:\Users\Thomas\AppData\Local\Temp\Runner.exe
C:\Users\Thomas\AppData\Local\Temp\Runner2.exe
C:\Users\Thomas\AppData\Local\Temp\Runner4.exe
C:\Users\Thomas\AppData\Local\Temp\ScanProfilesBackup.dll
C:\Users\Thomas\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Thomas\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Thomas\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Thomas\AppData\Local\Temp\sfextra.dll
C:\Users\Thomas\AppData\Local\Temp\smarter.exe
C:\Users\Thomas\AppData\Local\Temp\sp-downloader.exe
C:\Users\Thomas\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\Thomas\AppData\Local\Temp\sqlite3.dll
C:\Users\Thomas\AppData\Local\Temp\Util.dll
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.1-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.2-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.3-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.4-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.5-win64.exe
C:\Users\Thomas\AppData\Local\Temp\VP6Install.exe
C:\Users\Thomas\AppData\Local\Temp\VP6VFW.dll
C:\Users\Thomas\AppData\Local\Temp\YourFileDownloaderf1Cv0E6zGO.exe
C:\Users\Thomas\AppData\Local\Temp\YourFileDownloaderGiIB8VtIkL.exe
C:\Users\Thomas\AppData\Local\Temp\zyqEnLZxVY.exe
C:\Users\Thomas\AppData\Local\Temp\_is19F6.exe
C:\Users\Thomas\AppData\Local\Temp\_isBDD3.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-04 00:59

==================== End Of Log ============================

--- --- ---

FRST Additions Logfile:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-01-2015
Ran by Thomas at 2015-01-09 20:26:44
Running from I:\Daten von Thomas\Desstop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Bitdefender Antivirus (Disabled - Out of date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D}
AS: Bitdefender Spyware-Schutz (Disabled - Out of date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Disabled) {A23392FD-84B9-F933-2C71-81E751F6EF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.10 - Adobe Systems)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5 64-bit (HKLM\...\{6C1A010F-9108-4162-A26F-9FEC4AC0F0F0}) (Version: 5.0.1 - Adobe)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version:  3.0 - )
Amazon Cloud Drive (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\23ab716f18849b6f) (Version: 2.1.2013.1340 - Amazon)
Amazon.com Kindle Fire (HKLM\...\Kindle Fire Drivers) (Version:  - )
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.)
Audials (HKLM-x32\...\{3C07AF26-8705-4DF5-96C7-51432E0C9F03}) (Version: 11.0.51201.100 - Audials AG)
AVS Audio Converter 7 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 7.0.5.510 - Online Media Technologies Ltd.)
AVS Audio Editor 7.1 (HKLM-x32\...\AVS Audio Editor_is1) (Version: 7.1.5.479 - Online Media Technologies Ltd.)
AVS Audio Recorder version 4.0 (HKLM-x32\...\AVS Audio Recorder_is1) (Version: 4.0.1.21 - Online Media Technologies Ltd.)
AVS Cover Editor 2.0.1.3 (HKLM-x32\...\AVSCoverEditor2_is1) (Version: 2.0.1.3 - Online Media Technologies Ltd.)
AVS Disc Creator 5 (HKLM-x32\...\AVS Disc Creator_is1) (Version: 5.0.6.520 - Online Media Technologies Ltd.)
AVS Document Converter 2.2.5 (HKLM-x32\...\AVS Document Converter_is1) (Version: 2.2.5.218 - Online Media Technologies Ltd.)
AVS DVD Copy 4.1.2.283 (HKLM-x32\...\AVS DVD Copy_is1) (Version: 4.1.2.283 - Online Media Technologies Ltd.)
AVS Image Converter 2.3.2.248 (HKLM-x32\...\AVS Image Converter_is1) (Version: 2.3.2.248 - Online Media Technologies Ltd.)
AVS Media Player 4.1.10.99 (HKLM-x32\...\AVS Media Player_is1) (Version: 4.1.10.99 - Online Media Technologies Ltd.)
AVS Photo Editor (HKLM-x32\...\AVS Photo Editor_is1) (Version: 2.0.8.128 - Online Media Technologies Ltd.)
AVS Registry Cleaner version 2.2 (HKLM-x32\...\AVSRegistryCleaner_is1) (Version: 2.2.3.236 - Online Media Technologies Ltd.)
AVS Ringtone Maker version 1.6 (HKLM-x32\...\AVS Ringtone Maker 1.6_is1) (Version: 1.6.1.140 - Online Media Technologies Ltd.)
AVS Video Converter 8 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 8.3.2.533 - Online Media Technologies Ltd.)
AVS Video Editor 6 (HKLM-x32\...\AVS Video Editor_is1) (Version: 6.3.2.234 - Online Media Technologies Ltd.)
AVS Video Recorder 2.5 (HKLM-x32\...\AVS Video Recorder_is1) (Version: 2.5.3.83 - Online Media Technologies Ltd.)
AVS Video ReMaker 4.1.3.149 (HKLM-x32\...\AVS Video ReMaker_is1) (Version: 4.1.3.149 - Online Media Technologies Ltd.)
Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
Bitdefender Total Security 2015 (HKLM\...\Bitdefender) (Version: 18.11.0.872 - Bitdefender)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite MFC-J4610DW (HKLM-x32\...\{DD98C438-D769-4677-AA87-3481FA32D20C}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
Brother P-touch Address Book 1.2 (HKLM-x32\...\{71410B72-3DA8-4330-BC05-7380FDE09410}) (Version: 1.2.0010 - Brother Industries, Ltd.)
Brother P-touch Editor 5.1 (HKLM-x32\...\{39270390-A851-4E4B-94A9-D5C468216ED3}) (Version: 5.1.0200 - Brother Industries, Ltd.)
Brother QL-Series Software User's Guide (HKLM-x32\...\InstallShield_{A242CAB2-870C-4AC9-8AFE-34379D9383CD}) (Version: 1.00.0000 - Brother Industries, Ltd.)
Brother QL-Series Software User's Guide (x32 Version: 1.00.0000 - Brother Industries, Ltd.) Hidden
calibre (HKLM-x32\...\{17429B3C-DC4B-4ED8-BBEA-CF14BD6203C5}) (Version: 1.28.0 - Kovid Goyal)
CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)
CloneDVDmobile (HKLM-x32\...\CloneDVDmobile) (Version: 1.9.0.1 - SlySoft)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
Dropbox (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.2.13992 - Landesfinanzdirektion Thüringen)
FileZilla Client 3.9.0.6 (HKLM-x32\...\FileZilla Client) (Version: 3.9.0.6 - Tim Kosse)
FileZilla Server (HKLM-x32\...\FileZilla Server) (Version: beta 0.9.42 - FileZilla Project)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Drive (HKLM-x32\...\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java 7 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417040FF}) (Version: 7.0.400 - Oracle)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.670 - Oracle)
Java SE Development Kit 7 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170250}) (Version: 1.7.0.250 - Oracle)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Joe (HKLM-x32\...\{F8C986EA-13F8-4B39-91C3-A6B9A851CD34}) (Version: 4.01.0000 - Wirth IT Design)
KFZ-Faktura (HKLM-x32\...\KFZ-Faktura_is1) (Version: 13 - Nürenberg IT-Service)
Magic MP3 Tagger 2.2.6 (HKLM-x32\...\uniquemagicmp3taggerappid_is1) (Version:  - Mathias Kunter)
MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Access database engine 2010 (German) (HKLM-x32\...\{90140000-00D1-0407-0000-0000000FF1CE}) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\OneDriveSetup.exe) (Version: 17.3.1229.0918 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{2C303EE0-A595-3543-A71A-931C7AC40EDE}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{14297226-E0A0-3781-8911-E9D529552663}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4048 (HKLM\...\{91415F19-4C22-3609-A105-92ED3522D83C}) (Version: 9.0.30729.4048 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 (HKLM-x32\...\{5B1F2843-B379-3FF2-B0D3-64DD143ED53A}) (Version: 9.0.30729.4048 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\MyFreeCodec) (Version:  - )
NirSoft ProduKey (HKLM-x32\...\NirSoft ProduKey) (Version:  - )
Nuance Cloud Connector (HKLM-x32\...\{4C99EAAA-A846-4029-B500-312C5937D714}) (Version: 3.2.1026 - Nuance Communications, Inc.)
Nuance OmniPage Ultimate (HKLM-x32\...\{419512F9-D5E7-4ED2-BF99-E7F2C0176B6A}) (Version: 19.00.0000 - Nuance Communications, Inc.)
Nuance PaperPort 14 (HKLM-x32\...\{B2E8EFDC-E4FF-42A8-B305-FE06D29BB33C}) (Version: 14.5.0000 - Nuance Communications, Inc.)
Nuance PDF Create 8 (HKLM\...\{D8AD8411-A273-4560-B756-A418ED4910AD}) (Version: 8.10.6293 - Nuance Communications, Inc.)
Nuance PDF Create 8 (HKLM-x32\...\{D8AD8411-A273-4560-B756-A418ED4910AD}) (Version: 8.10.6293 - Nuance Communications, Inc.)
Nuance PDF Viewer Plus (HKLM-x32\...\{5B28CD4A-ADCF-4B39-BB67-F2F398818F2F}) (Version: 7.20.3208 - Nuance Communications, Inc.)
NVIDIA 3D Vision Controller-Treiber 344.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.46 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.48 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation)
Oracle VM VirtualBox 4.3.12 (HKLM\...\{B5121457-0126-4E62-BCBF-6DC7C73D9E4A}) (Version: 4.3.12 - Oracle Corporation)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PaperPort Image Printer 64-bit (HKLM\...\{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}) (Version: 14.00.0001 - Nuance Communications, Inc.)
PC Auto Backup (HKLM-x32\...\InstallShield_{662548BC-3506-4843-B7AA-F44D352F76A8}) (Version: 1.1.1.21 - Samsung Electronics Co,. Ltd.)
PC Auto Backup (x32 Version: 1.1.1.21 - Samsung Electronics Co,. Ltd.) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
PS3 Media Server (HKLM-x32\...\PS3 Media Server) (Version: 1.90.1 - PS3 Media Server) <==== ATTENTION!
QPST 2.7 (HKLM-x32\...\{8035964D-75EB-4463-91DC-3F02EE9CF103}) (Version: 2.7.378 - Qualcomm)
Rosetta Stone Version 3 (HKLM-x32\...\{99011A6E-5200-11DE-BDB8-7ACD56D89593}) (Version: 3.4.5.0 - Rosetta Stone Ltd.)
Samsung Auto Backup (HKLM-x32\...\{821D6F49-1B20-4809-8C73-286CFC52B1B1}) (Version: 4.1.371.0 - Clarus)
Samsung i-Launcher 1.0.1.54 (HKLM-x32\...\Samsung i-Launcher) (Version: 1.0.1.54 - Samsung Electronics Co., Ltd.)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.1.13105_7 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.1.13105_7 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.) Hidden
Samsung RAW Converter 4 (HKLM-x32\...\InstallShield_{D09E159D-0264-4597-B200-A9B4C0866F25}) (Version: 4 - Ichikawa Soft Laboratory)
Samsung RAW Converter 4 (x32 Version: 4 - Ichikawa Soft Laboratory) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
SanDisk SSD Toolkit 1.0.0.1 (HKLM-x32\...\{26326B5B-3D62-4C12-8841-6B55A19B552D}_is1) (Version: 1.0.0.1 - SanDisk Corporation)
Scansoft PDF Professional (x32 Version:  - ) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version:  - Microsoft)
SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spotify (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
StarMoney (x32 Version: 2.0 - StarFinanz) Hidden
StarMoney 7.0  (HKLM-x32\...\{79917F09-8405-48E0-AE82-6E2F17CB0A34}) (Version: 7.0 - Star Finanz GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
TVersity Codec Pack 1.7 (HKLM-x32\...\TVersity Codec Pack) (Version: 1.7 - TVersity Inc.)
UltraISO Premium V9.62 (HKLM-x32\...\UltraISO_is1) (Version:  - )
Update Service HitsBlender (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Update Service HitsBlender) (Version: 2.14.52 - hxxp://www.hitsblender.com)
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows-Treiberpaket - Amazon.com (WinUSB) KindleFireUsbDeviceClass  (08/20/2012 1.0.0000.00000) (HKLM\...\289137531F7C014BF296EFFBFC7E3748A293FEE9) (Version: 08/20/2012 1.0.0000.00000 - Amazon.com)
WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
XMedia Recode Version 3.1.3.7 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.3.7 - XMedia Recode)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points  =========================

09-01-2015 18:37:46 Entfernt TECDOC CD

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2015-01-09 20:20 - 00000826 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {09CD44EE-85CD-4735-ACB9-31E2E7366AF5} - System32\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5 => C:\Program Files (x86)\I - Cinema\c7e225d9-e592-4799-a023-7acaa225b91d-5.exe <==== ATTENTION
Task: {114AF372-8B94-499A-BDD3-B8718F70E7D8} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {1E924CA3-EB37-4C20-AF75-BE99320A5C55} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-25] (Adobe Systems Incorporated)
Task: {2079835D-A26F-42BB-8AD8-5FB4989E7FEF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {21BB1D1C-FBEF-4CA5-8FE0-2E4E43617F27} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-25] (Google Inc.)
Task: {465E2225-6B2C-4D43-BB75-DCCD56FFFEE2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {4680E46B-2405-4506-8408-EBF37817CD55} - System32\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5_user => C:\Program Files (x86)\ClickMovie1-Downloaderv10\57c01995-efd5-4f2e-96df-983449831ddc-5.exe <==== ATTENTION
Task: {54AC37B8-EA9A-4B2E-B4D7-0E8A830B7D7C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {64178EAD-F705-4C16-A9C5-859F884B1D04} - System32\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5_user => C:\Program Files (x86)\I - Cinema\c7e225d9-e592-4799-a023-7acaa225b91d-5.exe <==== ATTENTION
Task: {66C4AE2B-593C-4B5D-AC6E-978797C4601A} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Thomas-PC-Thomas Thomas-PC => C:\Program Files (x86)\Microsoft Office\Office15\MsoSync.exe [2014-11-12] (Microsoft Corporation)
Task: {6AC17DBC-C98E-47A7-BFCE-41CEBB46015D} - System32\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-1 => C:\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-codedownloader.exe <==== ATTENTION
Task: {7CA8209E-CB95-452E-B7D0-6D6A4C50A62D} - System32\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-1 => C:\Program Files (x86)\I - Cinema\I - Cinema-codedownloader.exe <==== ATTENTION
Task: {9A6DB46C-DE41-4E12-A6C0-F257B6F0AA01} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {A6AA64DD-6C0F-4E6C-8D5C-0CC82990C121} - System32\Tasks\PostPoneInstall => C:\Users\Thomas\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe [2015-01-09] (C.L.A.R.A) <==== ATTENTION
Task: {B11602B9-1519-44B4-80B1-423A74825373} - System32\Tasks\{E8B03A25-D220-416C-B78D-6D25B6F82365} => I:\TECDOC_CD\2_2014\pb\tof.exe
Task: {C56C77DD-BACE-4C5D-AF26-48B210BE8037} - System32\Tasks\Update Service HitsBlender => C:\Program Files (x86)\HitsBlenderUpdater\HitsBlenderUpdater.exe
Task: {D8F18997-315C-4420-BC38-565B960776FE} - System32\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5 => C:\Program Files (x86)\ClickMovie1-Downloaderv10\57c01995-efd5-4f2e-96df-983449831ddc-5.exe <==== ATTENTION
Task: {EDD2C7E7-179B-43C3-8125-FEFC1D1EF66A} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: {EE1BC51D-F046-4EB2-95D3-B1C238EB781B} - System32\Tasks\{0B71CE26-2C2E-44F7-9576-05AA21F78FD3} => H:\Die Sims 3\Inselparadies\Game\Bin\Sims3Launcher.exe
Task: {F20177EC-29FD-4536-8AF6-31A885A46214} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-25] (Google Inc.)
Task: C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-1.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\57c01995-efd5-4f2e-96df-983449831ddc-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\57c01995-efd5-4f2e-96df-983449831ddc-5_user.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\57c01995-efd5-4f2e-96df-983449831ddc-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-1.job => C:\Program Files (x86)\I - Cinema\I - Cinema-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5.job => C:\Program Files (x86)\I - Cinema\c7e225d9-e592-4799-a023-7acaa225b91d-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\c7e225d9-e592-4799-a023-7acaa225b91d-5_user.job => C:\Program Files (x86)\I - Cinema\c7e225d9-e592-4799-a023-7acaa225b91d-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-08-26 17:59 - 2014-10-02 14:47 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\txmlutil.dll
2014-08-26 17:59 - 2013-09-03 13:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdmetrics.dll
2014-08-26 18:02 - 2014-06-30 12:26 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\UI\accessl.ui
2014-08-26 18:01 - 2012-10-29 14:22 - 00152816 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdfwcore.dll
2013-05-04 19:17 - 2014-10-16 15:11 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-09-10 08:29 - 2011-12-06 15:55 - 00020480 _____ () I:\Neuer\Apache.exe
2013-03-22 13:10 - 2013-03-22 13:10 - 00222544 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSVSSSvr.exe
2010-09-03 12:11 - 2010-09-03 12:11 - 00520295 _____ () C:\Program Files (x86)\Samsung\PC Auto Backup\http_ss_win_pro.exe
2014-05-01 15:13 - 2014-05-01 15:13 - 00470016 _____ () C:\ProgramData\MEGAsync\ShellExtX64.dll
2014-05-01 20:29 - 2014-05-01 20:29 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2013-05-09 08:39 - 2010-03-15 10:28 - 00166400 _____ () C:\Program Files\WinRAR\rarext.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00473352 _____ () C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe
2013-05-04 19:05 - 2012-08-09 11:55 - 00078480 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2013-05-04 19:05 - 2012-08-09 11:55 - 00386192 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 00374840 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-09-10 08:29 - 2011-12-06 15:55 - 00299008 _____ () I:\Neuer\ApacheCore.dll
2013-03-22 12:59 - 2013-03-22 12:59 - 00293200 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\sqlite3.dll
2013-03-22 13:00 - 2013-03-22 13:00 - 00080208 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\zlib125.dll
2013-03-22 13:00 - 2013-03-22 13:00 - 00016720 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSMui.dll
2013-05-26 12:28 - 2009-10-06 13:36 - 00205312 _____ () C:\Program Files (x86)\StarMoney 7.0\ouservice\PATCHW32.dll
2010-04-30 13:02 - 2010-04-30 13:02 - 00057344 _____ () C:\Program Files (x86)\Samsung\PC Auto Backup\lang.dll
2014-01-06 10:52 - 2014-01-06 10:52 - 03244032 _____ () C:\Users\Thomas\AppData\Local\Programs\Google\Google+ Auto Backup\gpuploader_i18n.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00046080 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_thread-vc90-mt-1_39.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00045056 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_date_time-vc90-mt-1_39.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00545032 _____ () C:\Program Files (x86)\Audials\Audials 11\StreamingClient.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00012800 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_system-vc90-mt-1_39.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00068360 _____ () C:\Program Files (x86)\Audials\Audials 11\CrashRpt.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00409352 _____ () C:\Program Files (x86)\Audials\Audials 11\SQLite3.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00614912 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_regex-vc90-mt-1_39.dll
2014-10-16 02:23 - 2014-10-16 02:23 - 00290304 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Utils\65caba6fdb77ed17123be2746c441efc\Utils.ni.dll
2014-10-16 02:23 - 2014-10-16 02:23 - 00585216 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ManagedInterfaces\7cd297f92be83270ed007373b97bbe42\ManagedInterfaces.ni.dll
2014-11-12 03:09 - 2014-11-12 03:09 - 02950656 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\AudialsComponents\b883e8c49918945b0ae5f4780b281bcf\AudialsComponents.ni.dll
2014-10-16 02:23 - 2014-10-16 02:23 - 00178688 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\fastJSON\dd7cfc6548a6267386e0761f678b647f\fastJSON.ni.dll
2014-11-02 14:58 - 2014-11-02 14:58 - 00081056 _____ () C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\LoggingPlatform.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 36966968 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\libcef.dll
2015-01-09 20:24 - 2015-01-09 20:24 - 00011264 _____ () C:\Users\Thomas\AppData\Local\Temp\nsp55AE.tmp\System.dll
2012-09-23 19:43 - 2012-09-23 19:43 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu
2015-01-09 17:36 - 2014-12-06 02:50 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libglesv2.dll
2015-01-09 17:36 - 2014-12-06 02:50 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libegl.dll
2015-01-09 17:36 - 2014-12-06 02:50 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll
2015-01-09 17:36 - 2014-12-06 02:50 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll
2014-06-21 14:48 - 2009-02-27 15:38 - 00139264 ____N () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-01-09 20:24 - 2015-01-09 20:24 - 00098816 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\win32api.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00110080 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\pywintypes27.dll
2015-01-09 20:24 - 2015-01-09 20:24 - 00364544 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\pythoncom27.dll
2015-01-09 20:24 - 2015-01-09 20:24 - 00045568 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\_socket.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 01160704 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\_ssl.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00320512 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\win32com.shell.shell.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00713216 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\_hashlib.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 01175040 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\wx._core_.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00805888 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\wx._gdi_.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00811008 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\wx._windows_.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 01062400 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\wx._controls_.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00735232 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\wx._misc_.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00128512 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\_elementtree.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00127488 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\pyexpat.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00557056 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\pysqlite2._sqlite.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00087552 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\_ctypes.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00119808 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\win32file.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00108544 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\win32security.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00007168 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\hashobjs_ext.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00167936 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\win32gui.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00018432 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\win32event.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00038912 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\win32inet.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00011264 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\win32crypt.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00070656 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\wx._html2.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00027136 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\_multiprocessing.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00035840 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\win32process.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00686080 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\unicodedata.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00122368 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\wx._wizard.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00024064 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\win32pipe.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00025600 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\win32pdh.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00525640 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\windows._lib_cacheinvalidation.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00010240 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\select.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00017408 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\win32profile.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00022528 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\win32ts.pyd
2015-01-09 20:24 - 2015-01-09 20:24 - 00078336 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45642\wx._animate.pyd
2013-03-22 13:00 - 2013-03-22 13:00 - 00158032 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSMui_GER.dll
2013-03-22 13:03 - 2013-03-22 13:03 - 00252240 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSBr_nuance.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 00867896 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\ffmpegsumo.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 00886840 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\libglesv2.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 00108600 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\libegl.dll
2013-05-04 19:15 - 2012-06-25 09:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:2683706C
AlternateDataStreams: C:\ProgramData\Temp:A303874F
AlternateDataStreams: C:\ProgramData\Temp:D5FBE8F9
AlternateDataStreams: C:\ProgramData\Temp:FC595E85

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-64129086-1818121567-326312414-500 - Administrator - Disabled)
Gast (S-1-5-21-64129086-1818121567-326312414-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-64129086-1818121567-326312414-1011 - Limited - Enabled)
Thomas (S-1-5-21-64129086-1818121567-326312414-1000 - Administrator - Enabled) => C:\Users\Thomas

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: VirtualBox Host-Only Ethernet Adapter
Description: VirtualBox Host-Only Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Oracle Corporation
Service: VBoxNetAdp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/09/2015 08:24:25 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder

Error: (01/09/2015 08:24:25 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder

Error: (01/09/2015 08:24:21 PM) (Source: BBGate) (EventID: 110) (User: NT-AUTORITÄT)
Description: Critical Error: BBGate(C:\_E_\srv_apps\BBGate\1.3.1.2\SOURCE\ElsaGate.cpp, 4637): Connection to aktive partner server failed. Klasse nicht registriert

Error: (01/09/2015 08:23:33 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (01/09/2015 06:36:42 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder

Error: (01/09/2015 06:36:42 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder

Error: (01/09/2015 06:36:36 PM) (Source: BBGate) (EventID: 110) (User: NT-AUTORITÄT)
Description: Critical Error: BBGate(C:\_E_\srv_apps\BBGate\1.3.1.2\SOURCE\ElsaGate.cpp, 4637): Connection to aktive partner server failed. Klasse nicht registriert

Error: (01/09/2015 06:29:24 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (01/09/2015 06:29:19 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe -Embedding; Beschreibung = Entfernt TECDOC CD; Fehler = 0x800706be).

Error: (01/09/2015 05:47:50 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: COM error at HTTP post for WorkshopOrder


System errors:
=============
Error: (01/09/2015 08:25:26 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (01/09/2015 08:25:25 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)

Error: (01/09/2015 08:24:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "ZoneAlarm Privacy Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (01/09/2015 08:24:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Util Box Rock" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (01/09/2015 08:24:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Update Box Rock" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (01/09/2015 06:37:42 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (01/09/2015 06:37:40 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)

Error: (01/09/2015 06:36:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "ZoneAlarm Privacy Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (01/09/2015 06:36:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Util Box Rock" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (01/09/2015 06:36:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Update Box Rock" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================
Error: (01/09/2015 08:24:25 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder

Error: (01/09/2015 08:24:25 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder

Error: (01/09/2015 08:24:21 PM) (Source: BBGate) (EventID: 110) (User: NT-AUTORITÄT)
Description: BBGate(C:\_E_\srv_apps\BBGate\1.3.1.2\SOURCE\ElsaGate.cpp, 4637): Connection to aktive partner server failed. Klasse nicht registriert

Error: (01/09/2015 08:23:33 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (01/09/2015 06:36:42 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder

Error: (01/09/2015 06:36:42 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder

Error: (01/09/2015 06:36:36 PM) (Source: BBGate) (EventID: 110) (User: NT-AUTORITÄT)
Description: BBGate(C:\_E_\srv_apps\BBGate\1.3.1.2\SOURCE\ElsaGate.cpp, 4637): Connection to aktive partner server failed. Klasse nicht registriert

Error: (01/09/2015 06:29:24 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (01/09/2015 06:29:19 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe -EmbeddingEntfernt TECDOC CD0x800706be

Error: (01/09/2015 05:47:50 PM) (Source: BBGate) (EventID: 151) (User: NT-AUTORITÄT)
Description: WorkshopOrder


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3570 CPU @ 3.40GHz
Percentage of memory in use: 34%
Total physical RAM: 8147.35 MB
Available physical RAM: 5344.61 MB
Total Pagefile: 16292.88 MB
Available Pagefile: 13174.39 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:119.14 GB) (Free:13.46 GB) NTFS
Drive d: (622010_DDS) (CDROM) (Total:0.17 GB) (Free:0 GB) CDFS
Drive f: () (Fixed) (Total:465.54 GB) (Free:107.7 GB) NTFS
Drive h: () (Fixed) (Total:931.51 GB) (Free:788.11 GB) NTFS
Drive i: (Volume) (Fixed) (Total:1863.01 GB) (Free:118.64 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 313C1AE6)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119.1 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 4DBD6351)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=OF Extended)

========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: DDC41BD8)

Partition: GPT Partition Type.

========================================================
Disk: 3 (Size: 1863 GB) (Disk ID: 6EA0882C)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== End Of Log ============================

--- --- ---

cosinus · 10.01.2015, 12:40

Bitte ein Log mit MBAR:

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

winniwinkel · 10.01.2015, 13:46

hier die Log Dateien.

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.08.2.1001
www.malwarebytes.org

Database version: v2015.01.10.10

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.17501
Thomas :: THOMAS-PC [administrator]

10.01.2015 13:12:51
mbar-log-2015-01-10 (13-12-51).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 374372
Time elapsed: 6 minute(s), 30 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\Windows\System32\drivers\webinstrNHK.sys (PUP.Optional.Webinstr.A) -> Delete on reboot. [3b130f4fb69cb7312d03332d4dc42c6e]
C:\Windows\System32\drivers\Msft_Kernel_webinstrNHK_01009.Wdf (PUP.Optional.WebInstr.A) -> Delete on reboot. []

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Hier die Zweite

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.08.2.1001
www.malwarebytes.org

Database version: v2015.01.10.11

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.17501
Thomas :: THOMAS-PC [administrator]

10.01.2015 13:35:59
mbar-log-2015-01-10 (13-35-59).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 374135
Time elapsed: 6 minute(s), 7 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Nun Öffnet sich auch nichts mehr selbständig.
Danke für die 'Unterstützung.
Eine Frage noch.
Hätte mein Bitdefender nicht Alarm schlagen müssen?

cosinus · 10.01.2015, 13:50

Zitat:

Hätte mein Bitdefender nicht Alarm schlagen müssen?

Womit man beim Thema wäre: ja, ein Virenscanner sollte Schädlinge finden. Tur er aber nicht immer, weil kein Virenscanner 100%ige Zuverlässigkeit bietet.

Adware/Junkware/Toolbars entfernen

(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!)

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

winniwinkel · 10.01.2015, 14:19

Hier die Logs
AdwCleaner[R0]
AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v4.106 - Bericht erstellt am 09/01/2015 um 17:44:56
# Aktualisiert 21/12/2014 von Xplode
# Database : 2015-01-03.1 [Live]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Thomas - THOMAS-PC
# Gestartet von : I:\Daten von Thomas\Downloads\adwcleaner_4.106.exe
# Option : Suchen

***** [ Dienste ] *****

Dienst Gefunden : ClaraUpdater

***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage
Datei Gefunden : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage-journal
Datei Gefunden : C:\Users\Thomas\AppData\Local\Temp\Uninstall.exe
Datei Gefunden : I:\Daten von Thomas\Desstop\Optimizer Pro.lnk
Ordner Gefunden : C:\Program Files (x86)\Box Rock
Ordner Gefunden : C:\Program Files (x86)\ClickMovie1-Downloaderv10
Ordner Gefunden : C:\Program Files (x86)\ClickMovie1-Downloaderv10
Ordner Gefunden : C:\Program Files (x86)\Common Files\ClaraUpdater
Ordner Gefunden : C:\Program Files (x86)\HitsBlenderUpdater
Ordner Gefunden : C:\Program Files (x86)\I - Cinema
Ordner Gefunden : C:\Program Files (x86)\ver8BetterMarkIt
Ordner Gefunden : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2
Ordner Gefunden : C:\Users\Thomas\AppData\Local\cool_mirage
Ordner Gefunden : C:\Users\Thomas\AppData\Local\CrashRpt
Ordner Gefunden : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aonedlchkbicmhepimiahfalheedjgbh
Ordner Gefunden : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgdnblnolcinnndenjnollpiplgkbjcn
Ordner Gefunden : C:\Users\Thomas\AppData\Local\HitsBlender
Ordner Gefunden : C:\Users\Thomas\AppData\Local\Temp\Box Rock
Ordner Gefunden : C:\Users\Thomas\AppData\LocalLow\ClickMovie1-Downloaderv10
Ordner Gefunden : C:\Users\Thomas\AppData\LocalLow\ClickMovie1-Downloaderv10
Ordner Gefunden : C:\Users\Thomas\AppData\Roaming\OpenCandy
Ordner Gefunden : C:\Users\Thomas\AppData\Roaming\Optimizer Pro
Ordner Gefunden : I:\\Optimizer Pro
Ordner Gefunden : I:\\Optimizer Pro

***** [ Tasks ] *****

Task Gefunden : Optimizer Pro Schedule
Task Gefunden : YourFileDownloader Installer Starter
Task Gefunden : 57c01995-efd5-4f2e-96df-983449831ddc-1
Task Gefunden : 57c01995-efd5-4f2e-96df-983449831ddc-5
Task Gefunden : 57c01995-efd5-4f2e-96df-983449831ddc-5_user
Task Gefunden : c7e225d9-e592-4799-a023-7acaa225b91d-1
Task Gefunden : c7e225d9-e592-4799-a023-7acaa225b91d-5
Task Gefunden : c7e225d9-e592-4799-a023-7acaa225b91d-5_user

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\1ClickDownload
Schlüssel Gefunden : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\BetterMarkIt
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\ClickMovie1-Downloaderv10
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\ClickMovie1-Downloaderv10
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\I - Cinema
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\I - Cinema
Schlüssel Gefunden : HKCU\Software\BoBrowser
Schlüssel Gefunden : HKCU\Software\Box Rock
Schlüssel Gefunden : HKCU\Software\Conduit_Search_Protect
Schlüssel Gefunden : HKCU\Software\InstallCore
Schlüssel Gefunden : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gefunden : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\sweet-page.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.sweet-page.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110611131165}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110611331117}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110611131165}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110611331117}
Schlüssel Gefunden : HKCU\Software\Myfree Codec
Schlüssel Gefunden : HKCU\Software\Optimizer Pro
Schlüssel Gefunden : HKCU\Software\powerpack
Schlüssel Gefunden : HKCU\Software\Softonic
Schlüssel Gefunden : [x64] HKCU\Software\1ClickDownload
Schlüssel Gefunden : [x64] HKCU\Software\BoBrowser
Schlüssel Gefunden : [x64] HKCU\Software\Box Rock
Schlüssel Gefunden : [x64] HKCU\Software\Conduit_Search_Protect
Schlüssel Gefunden : [x64] HKCU\Software\InstallCore
Schlüssel Gefunden : [x64] HKCU\Software\InstalledBrowserExtensions
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : [x64] HKCU\Software\Myfree Codec
Schlüssel Gefunden : [x64] HKCU\Software\Optimizer Pro
Schlüssel Gefunden : [x64] HKCU\Software\powerpack
Schlüssel Gefunden : [x64] HKCU\Software\Softonic
Schlüssel Gefunden : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gefunden : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gefunden : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Schlüssel Gefunden : HKLM\SOFTWARE\Box Rock
Schlüssel Gefunden : HKLM\SOFTWARE\Clara
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{06DEB529-DE09-43EC-B6E2-451AAB0FF000}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611131165}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611331117}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622132265}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622332217}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{28C02550-6572-401a-A2AE-5BC703C9BBA6}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{987D9269-F8A1-408F-BF62-4397D2F5363E}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{A1CCCE0D-AE21-42A2-BE58-8E6109410995}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{CD4D7B0F-45C6-4bb2-A1E7-54D1754E7FC5}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E0722BEB-FDA1-4AA1-A2A8-15A74A5B3F70}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{F1963E76-845B-474C-8C7F-D69A96D8AA34}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655135565}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655335517}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666136665}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666336617}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644134465}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644134465}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644334417}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644334417}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Schlüssel Gefunden : HKLM\SOFTWARE\ClickMovie1-Downloaderv10
Schlüssel Gefunden : HKLM\SOFTWARE\ClickMovie1-Downloaderv10
Schlüssel Gefunden : HKLM\SOFTWARE\I - Cinema
Schlüssel Gefunden : HKLM\SOFTWARE\I - Cinema
Schlüssel Gefunden : HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{24a5135a-8214-4b1f-aa2b-dd05d73946e3}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{50580f98-fc8a-405e-aad0-c28a9e97f83f}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{536edad4-3917-469a-8c42-01972aeb55ba}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8745814b-db68-4a23-8570-cd3803379281}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8dea9749-0fd0-40b1-a811-4a36f76b0d8f}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a92770a7-70cc-444d-a911-b531fdaf82b1}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611131165}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611331117}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\3B34E0B7-996F-8EF0-D182-783DFF261C03
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ClickMovie1-Downloaderv10
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ClickMovie1-Downloaderv10
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\I - Cinema
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\I - Cinema
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
Schlüssel Gefunden : HKLM\SOFTWARE\Myfree Codec
Schlüssel Gefunden : HKLM\SOFTWARE\sweet-pageSoftware
Schlüssel Gefunden : HKLM\SOFTWARE\YourFileDownloader
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611131165}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611331117}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622132265}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622332217}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655135565}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655335517}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666136665}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666336617}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{24a5135a-8214-4b1f-aa2b-dd05d73946e3}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{50580f98-fc8a-405e-aad0-c28a9e97f83f}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{536edad4-3917-469a-8c42-01972aeb55ba}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8745814b-db68-4a23-8570-cd3803379281}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8dea9749-0fd0-40b1-a811-4a36f76b0d8f}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a92770a7-70cc-444d-a911-b531fdaf82b1}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611131165}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611331117}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Box Rock
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [bobrowser]
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Optimizer Pro]

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Mozilla Firefox v


-\\ Google Chrome v39.0.2171.95


-\\ Chromium v


*************************

AdwCleaner[R0].txt - [16090 octets] - [09/01/2015 17:44:56]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [16151 octets] ##########

--- --- ---

[/CODE]

AdwCleaner[R1]
AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v4.107 - Bericht erstellt am 10/01/2015 um 13:53:11
# Aktualisiert 07/01/2015 von Xplode
# Database : 2015-01-03.1 [Live]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Thomas - THOMAS-PC
# Gestartet von : I:\Daten von Thomas\Desstop\AdwCleaner_4.107.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage
Datei Gefunden : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage-journal
Ordner Gefunden : C:\Users\Thomas\AppData\Local\CrashRpt
Ordner Gefunden : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aonedlchkbicmhepimiahfalheedjgbh

***** [ Tasks ] *****

Task Gefunden : 57c01995-efd5-4f2e-96df-983449831ddc-1
Task Gefunden : 57c01995-efd5-4f2e-96df-983449831ddc-5
Task Gefunden : 57c01995-efd5-4f2e-96df-983449831ddc-5_user
Task Gefunden : c7e225d9-e592-4799-a023-7acaa225b91d-1
Task Gefunden : c7e225d9-e592-4799-a023-7acaa225b91d-5
Task Gefunden : c7e225d9-e592-4799-a023-7acaa225b91d-5_user

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Mozilla Firefox v


-\\ Google Chrome v39.0.2171.95


-\\ Chromium v


*************************

AdwCleaner[R0].txt - [16380 octets] - [09/01/2015 17:44:56]
AdwCleaner[R1].txt - [1665 octets] - [10/01/2015 13:53:11]
AdwCleaner[S0].txt - [14478 octets] - [09/01/2015 17:46:14]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [1786 octets] ##########

--- --- ---

AdwCleaner[S0]

AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v4.106 - Bericht erstellt am 09/01/2015 um 17:46:14
# Aktualisiert 21/12/2014 von Xplode
# Database : 2015-01-03.1 [Live]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Thomas - THOMAS-PC
# Gestartet von : I:\Daten von Thomas\Downloads\adwcleaner_4.106.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : ClaraUpdater

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2
Ordner Gelöscht : C:\Program Files (x86)\Box Rock
Ordner Gelöscht : C:\Program Files (x86)\HitsBlenderUpdater
Ordner Gelöscht : C:\Program Files (x86)\ClickMovie1-Downloaderv10
Ordner Gelöscht : C:\Program Files (x86)\I - Cinema
Ordner Gelöscht : C:\Program Files (x86)\ver8BetterMarkIt
Ordner Gelöscht : C:\Program Files (x86)\Common Files\ClaraUpdater
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\Temp\Box Rock
Ordner Gelöscht : I:\\Optimizer Pro
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\cool_mirage
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\CrashRpt
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\HitsBlender
Ordner Gelöscht : C:\Users\Thomas\AppData\LocalLow\ClickMovie1-Downloaderv10
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\Optimizer Pro
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgdnblnolcinnndenjnollpiplgkbjcn
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aonedlchkbicmhepimiahfalheedjgbh
Datei Gelöscht : C:\Users\Thomas\AppData\Local\Temp\Uninstall.exe
Datei Gelöscht : I:\Daten von Thomas\Desstop\Optimizer Pro.lnk
Datei Gelöscht : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage
Datei Gelöscht : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage-journal

***** [ Tasks ] *****

Task Gelöscht : Optimizer Pro Schedule
Task Gelöscht : YourFileDownloader Installer Starter

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Optimizer Pro]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [bobrowser]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{06DEB529-DE09-43EC-B6E2-451AAB0FF000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{987D9269-F8A1-408F-BF62-4397D2F5363E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E0722BEB-FDA1-4AA1-A2A8-15A74A5B3F70}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F1963E76-845B-474C-8C7F-D69A96D8AA34}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{28C02550-6572-401a-A2AE-5BC703C9BBA6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A1CCCE0D-AE21-42A2-BE58-8E6109410995}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD4D7B0F-45C6-4bb2-A1E7-54D1754E7FC5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611131165}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611331117}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622132265}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622332217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655135565}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655335517}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666136665}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666336617}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644134465}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644334417}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611131165}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611331117}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110611131165}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110611331117}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110611131165}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110611331117}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{24a5135a-8214-4b1f-aa2b-dd05d73946e3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{536edad4-3917-469a-8c42-01972aeb55ba}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8dea9749-0fd0-40b1-a811-4a36f76b0d8f}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a92770a7-70cc-444d-a911-b531fdaf82b1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{50580f98-fc8a-405e-aad0-c28a9e97f83f}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8745814b-db68-4a23-8570-cd3803379281}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611131165}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611331117}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622132265}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622332217}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655135565}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655335517}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666136665}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666336617}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611131165}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611331117}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{24a5135a-8214-4b1f-aa2b-dd05d73946e3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{536edad4-3917-469a-8c42-01972aeb55ba}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8dea9749-0fd0-40b1-a811-4a36f76b0d8f}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a92770a7-70cc-444d-a911-b531fdaf82b1}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{50580f98-fc8a-405e-aad0-c28a9e97f83f}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8745814b-db68-4a23-8570-cd3803379281}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\Conduit_Search_Protect
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\Myfree Codec
Schlüssel Gelöscht : HKCU\Software\Optimizer Pro
Schlüssel Gelöscht : HKCU\Software\powerpack
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\BoBrowser
Schlüssel Gelöscht : HKCU\Software\Box Rock
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\I - Cinema
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\BetterMarkIt
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ClickMovie1-Downloaderv10
Schlüssel Gelöscht : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : HKLM\SOFTWARE\Myfree Codec
Schlüssel Gelöscht : HKLM\SOFTWARE\sweet-pageSoftware
Schlüssel Gelöscht : HKLM\SOFTWARE\YourFileDownloader
Schlüssel Gelöscht : HKLM\SOFTWARE\I - Cinema
Schlüssel Gelöscht : HKLM\SOFTWARE\Clara
Schlüssel Gelöscht : HKLM\SOFTWARE\Box Rock
Schlüssel Gelöscht : HKLM\SOFTWARE\ClickMovie1-Downloaderv10
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\I - Cinema
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ClickMovie1-Downloaderv10
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\3B34E0B7-996F-8EF0-D182-783DFF261C03
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Box Rock
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\sweet-page.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.sweet-page.com

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Mozilla Firefox v


-\\ Google Chrome v39.0.2171.95


-\\ Chromium v


*************************

AdwCleaner[R0].txt - [16380 octets] - [09/01/2015 17:44:56]
AdwCleaner[S0].txt - [14232 octets] - [09/01/2015 17:46:14]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [14293 octets] ##########

--- --- ---

[/CODE]
AdwCleaner[S1]
AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v4.107 - Bericht erstellt am 10/01/2015 um 13:55:22
# Aktualisiert 07/01/2015 von Xplode
# Database : 2015-01-03.1 [Live]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Thomas - THOMAS-PC
# Gestartet von : I:\Daten von Thomas\Desstop\AdwCleaner_4.107.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Thomas\AppData\Local\CrashRpt
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aonedlchkbicmhepimiahfalheedjgbh
Datei Gelöscht : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage
Datei Gelöscht : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage-journal

***** [ Tasks ] *****

Task Gelöscht : 57c01995-efd5-4f2e-96df-983449831ddc-1
Task Gelöscht : 57c01995-efd5-4f2e-96df-983449831ddc-5
Task Gelöscht : 57c01995-efd5-4f2e-96df-983449831ddc-5_user
Task Gelöscht : c7e225d9-e592-4799-a023-7acaa225b91d-1
Task Gelöscht : c7e225d9-e592-4799-a023-7acaa225b91d-5
Task Gelöscht : c7e225d9-e592-4799-a023-7acaa225b91d-5_user

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Mozilla Firefox v


-\\ Google Chrome v39.0.2171.95


-\\ Chromium v


*************************

AdwCleaner[R0].txt - [16380 octets] - [09/01/2015 17:44:56]
AdwCleaner[R1].txt - [1866 octets] - [10/01/2015 13:53:11]
AdwCleaner[S0].txt - [14478 octets] - [09/01/2015 17:46:14]
AdwCleaner[S1].txt - [1787 octets] - [10/01/2015 13:55:22]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1847 octets] ##########

--- --- ---

[/CODE]
JRT

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.1 (12.28.2014:1)
OS: Windows 7 Home Premium x64
Ran by Thomas on 10.01.2015 at 14:00:15,54
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Thomas\AppData\Roaming\getrighttogo"
Successfully deleted: [Folder] "C:\Program Files (x86)\myfree codec"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 10.01.2015 at 14:03:28,32
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015
Ran by Thomas (administrator) on THOMAS-PC on 10-01-2015 14:07:19
Running from I:\Daten von Thomas\Desstop
Loaded Profile: Thomas (Available profiles: Thomas)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(VOLKSWAGEN AG) I:\Neuer\BBGate.exe
() I:\Neuer\Apache.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() I:\Neuer\Apache.exe
(CrypKey (Canada) Ltd.) C:\Windows\System32\Crypserv.exe
(FileZilla Project) C:\Program Files (x86)\FileZilla Server\FileZilla server.exe
(Gladinet, INC) C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSVSSSvr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Samsung) C:\Program Files (x86)\Samsung\PC Auto Backup\WiselinkPro.exe
() C:\Program Files (x86)\Samsung\PC Auto Backup\http_ss_win_pro.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Users\Thomas\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe
() C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe
(Microsoft Corporation) C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwtxapps.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Spotify Ltd) C:\Users\Thomas\AppData\Roaming\Spotify\spotify.exe
(Samsung) C:\Program Files (x86)\Samsung\PC Auto Backup\AutoBackup.exe
(PS3 Media Server) C:\Program Files (x86)\PS3 Media Server\pms.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFGuage.exe
(Oracle Corporation) C:\Program Files (x86)\PS3 Media Server\jre\bin\javaw.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFRealTimeD.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFTimerD.exe
(FileZilla Project) C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Create 8\PdfCreate8Hook.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Professional 7\PdfPro7Hook.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Gladinet, INC) C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladinetClient.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\OFFICE15\CSISYNCCLIENT.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxcr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1626752 2014-11-24] (Bitdefender)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5263504 2012-08-09] (VIA)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3498728 2014-12-03] (Adobe Systems Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [FileZilla Server Interface] => C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe [1044480 2013-12-16] (FileZilla Project)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2068856 2011-10-12] (Flexera Software LLC.)
HKLM-x32\...\Run: [OmniPage Preload] => C:\Program Files (x86)\Nuance\OmniPage19\OmniPage19.exe [2922824 2013-04-22] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [Nuance OmniPage Ultimate-reminder] => C:\Program Files (x86)\Nuance\OmniPage19\Ereg\Ereg.exe [334152 2013-01-14] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFCreHook] => C:\Program Files (x86)\Nuance\PDF Create 8\pdfcreate8hook.exe [1029960 2013-03-12] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDF8 Registry Controller] => C:\Program Files (x86)\Nuance\PDF Create 8\RegistryController.exe [180040 2013-03-12] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [36168 2013-04-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [18248 2013-04-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFProHook] => C:\Program Files (x86)\Nuance\PDF Professional 7\pdfpro7hook.exe [641864 2013-03-20] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1679360 2012-02-28] (Wondershare)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [Google+ Auto Backup] => C:\Users\Thomas\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3619096 2014-01-06] (Google Inc.)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe [473352 2014-02-14] ()
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790344 2014-11-24] (Bitdefender)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [SkyDrive] => C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [277672 2014-11-02] (Microsoft Corporation)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [Spotify] => C:\Users\Thomas\AppData\Roaming\Spotify\Spotify.exe [6737976 2014-12-30] (Spotify Ltd)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Run: [GoogleChromeAutoLaunch_D1D0AD69A13928375769191006ADC5F6] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.)
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\MountPoints2: {56b64bd4-bf07-11e2-ae08-806e6f6e6963} - D:\Start.exe
HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\MountPoints2: {d1bea689-8b2c-11e3-b140-94de80005579} - K:\pushinst.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-05-05] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [GladinetIconOverlay] -> {3C3DC57A-7535-48AF-BB9E-C3576A4F34D0} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIcon.dll (Gladinet, INC)
ShellIconOverlayIdentifiers: [GladinetUploading] -> {959A18D3-9CC9-41e8-B76F-34ED9A89D4EA} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIconU.dll (Gladinet, INC)
ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [GladinetIconOverlay] -> {3C3DC57A-7535-48AF-BB9E-C3576A4F34D0} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIcon32.dll (Gladinet, INC)
ShellIconOverlayIdentifiers-x32: [GladinetUploading] -> {959A18D3-9CC9-41e8-B76F-34ED9A89D4EA} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIconU32.dll (Gladinet, INC)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-64129086-1818121567-326312414-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-64129086-1818121567-326312414-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-64129086-1818121567-326312414-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKU\S-1-5-21-64129086-1818121567-326312414-1000 -> {C97E1300-5067-4D6F-8A64-3F5DB9CBD664} URL = hxxp://yandex.ru/yandsearch?win=78&clid=1989707&text={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Box Rock 1.0.0.6 -> {464deeb8-b74f-4117-b8ec-e42f4028f3d1} -> C:\Program Files (x86)\Box Rock\BoxRockBHO.dll No File
BHO-x32: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files (x86)\Nuance\PDF Professional 7\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: ZeonIEEventHelper Class -> {C7DA0384-42AA-428c-B832-88AC343DE1A8} -> C:\Program Files (x86)\Nuance\PDF Create 8\Bin\GZeonIEFavClient.dll (Zeon Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll (Bitdefender)
Toolbar: HKLM-x32 - Nuance PDF - {BCCE15AE-AC7E-4bc9-94AF-2A714A412BCB} - C:\Program Files (x86)\Nuance\PDF Create 8\Bin\GZeonIEFavClient.dll (Zeon Corporation)
Toolbar: HKU\S-1-5-21-64129086-1818121567-326312414-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: HKLM-x32 {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} hxxp://download.gigabyte.com.tw/object/Dldrv.ocx
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default
FF SelectedSearchEngine: Яндекс
FF Homepage: hxxp://www.yandex.ru/?win=78&clid=1989706
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Professional 7\bin\nppdf.dll (Zeon Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yandex.ru-183920.xml
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext
FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2014-08-26]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-05-07]
FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff [2014-08-26]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext

Chrome: 
=======
CHR HomePage: Default -> 
CHR StartupUrls: Default -> "https://mail.google.com/mail/?hl=de&shva=1#inbox"
CHR Profile: C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-09]
CHR Extension: (Angry Birds) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2015-01-09]
CHR Extension: (Google Docs) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-09]
CHR Extension: (SuperMegaBest.com) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aonedlchkbicmhepimiahfalheedjgbh [2015-01-10]
CHR Extension: (Google Drive) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-09]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-09]
CHR Extension: (YouTube) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-09]
CHR Extension: (HelloFax: 50 Free Fax Pages) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bocmleclimfnadgmcdgecijlblfcmfnm [2015-01-09]
CHR Extension: (Adblock Plus) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-09]
CHR Extension: (Pushbullet) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2015-01-09]
CHR Extension: (Google-Suche) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-09]
CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2015-01-09]
CHR Extension: (Bitdefender Wallet) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabcmochhfpldjekobfaaggijgohadih [2015-01-09]
CHR Extension: (Google Tabellen) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-09]
CHR Extension: (Cr!Box) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjodchcocbnbhfkjeapbdoflbiibnapp [2015-01-09]
CHR Extension: (Google Kalender (von Google)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbgaklkmjakoegficnlkhebmhkjfich [2015-01-09]
CHR Extension: (Google Notizen – Notizen & Listen) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2015-01-09]
CHR Extension: (WEB.DE MailCheck) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2015-01-09]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-01-09]
CHR Extension: (Google Input Tools) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mclkkofklkfljcocdinagocijmpgbhab [2015-01-09]
CHR Extension: (Google Mail-Checker) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2015-01-09]
CHR Extension: (Erweiterung \) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlbjncdgjeocebhnmkbbbdekmmmcbfjd [2015-01-09]
CHR Extension: (Google Wallet) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-09]
CHR Extension: (Google Chrome to Phone Extension) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadboiipflhobonjjffjbfekfjcgkhco [2015-01-09]
CHR Extension: (Any.do) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocgddccilgpeepgglnlpchkpgamkgmld [2015-01-09]
CHR Extension: (LEO Wörterbuchsuche) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojniiiidjmoaiehegaedmfdclmgmmpdp [2015-01-09]
CHR Extension: (Google Calendar Checker (by Google)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookhcbgokankfmjafalglpofmolfopek [2015-01-09]
CHR Extension: (Evernote Web Clipper) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-01-09]
CHR Extension: (Google Mail) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-09]
CHR Extension: (Tapatalk Notifier) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\plfhcjljnfjpfcbjpgnflfofmahljkjj [2015-01-09]
CHR HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Thomas\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-07-23]
CHR HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - No Path
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-12-03]
CHR HKLM-x32\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 BBGate; I:\Neuer\BBGate.exe [532480 2011-12-06] (VOLKSWAGEN AG) [File not signed]
R2 BBGate-HTTPD; I:\Neuer\Apache.exe [20480 2011-12-06] () [File not signed]
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [78144 2014-11-24] (Bitdefender)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
S2 c7522d84; c:\Program Files (x86)\Optimizer Pro 3.27\OptProMon.dll [2462800 2015-01-09] ()
R2 Crypkey License; C:\Windows\system32\crypserv.exe [122880 2008-05-08] (CrypKey (Canada) Ltd.) [File not signed]
R2 FileZilla Server; C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe [613376 2013-12-16] (FileZilla Project) [File not signed]
R2 GladFileMonSvc; C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe [30032 2013-03-22] (Gladinet, INC)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [77640 2013-04-05] (Nuance Communications, Inc.)
S4 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 StarMoney 7.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [67320 2014-11-24] (Bitdefender)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27792 2012-08-03] (VIA Technologies, Inc.)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1527360 2014-11-24] (Bitdefender)
R2 WiselinkPro; C:\Program Files (x86)\Samsung\PC Auto Backup\WiselinkPro.exe [7274561 2013-02-18] (Samsung) [File not signed]
S2 Update Box Rock; "C:\Program Files (x86)\Box Rock\updateBoxRock.exe" [X]
S2 Util Box Rock; "C:\Program Files (x86)\Box Rock\bin\utilBoxRock.exe" [X]
S2 ZAPrivacyService; "C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1288472 2014-11-24] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [263032 2014-11-24] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [647752 2014-08-27] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-11-13] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107080 2012-10-29] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2014-08-27] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2014-08-27] (BitDefender)
S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-07-20] (DT Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [110744 2012-07-19] (Qualcomm Atheros Co., Ltd.)
R1 NetworkX; C:\Windows\system32\ckldrv.sys [28664 2008-03-17] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-10-07] (Audials AG)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [452040 2014-11-24] (BitDefender S.R.L.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [106256 2013-04-12] (Oracle Corporation)
S3 WsAudioDevice_383S(1); C:\Windows\System32\drivers\WsAudioDevice_383S(1).sys [29288 2014-07-31] (Wondershare)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S2 webinstrNHK; \??\C:\Windows\system32\Drivers\webinstrNHK.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-10 14:00 - 2015-01-10 14:00 - 00000000 ____D () C:\Windows\ERUNT
2015-01-10 13:56 - 2015-01-10 13:56 - 00000000 ____D () C:\Users\Thomas\AppData\Local\CrashRpt
2015-01-10 13:12 - 2015-01-10 13:56 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-01-10 13:12 - 2015-01-10 13:35 - 00135384 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-10 13:12 - 2015-01-10 13:12 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-10 13:11 - 2015-01-10 13:35 - 00096472 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-01-09 20:31 - 2015-01-09 20:31 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2015-01-09 20:31 - 2015-01-09 20:31 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2015-01-09 20:31 - 2015-01-09 20:31 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2015-01-09 20:31 - 2015-01-09 20:31 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-09 18:08 - 2015-01-09 18:08 - 00000168 _____ () C:\Users\Thomas\defogger_reenable
2015-01-09 17:58 - 2015-01-10 14:07 - 00000000 ____D () C:\FRST
2015-01-09 17:44 - 2015-01-10 13:55 - 00000000 ____D () C:\AdwCleaner
2015-01-09 17:36 - 2015-01-09 17:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-01-09 16:50 - 2015-01-09 16:50 - 00003788 _____ () C:\Windows\System32\Tasks\PostPoneInstall
2015-01-09 16:36 - 2015-01-09 16:36 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 3.27
2015-01-09 16:35 - 2015-01-09 16:35 - 00002119 _____ () C:\Windows\patsearch.bin
2015-01-09 16:27 - 2015-01-09 16:27 - 00003110 _____ () C:\Windows\System32\Tasks\Update Service HitsBlender
2015-01-09 13:44 - 2015-01-09 16:31 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Wondershare
2015-01-09 13:44 - 2015-01-09 16:31 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2015-01-09 13:44 - 2015-01-09 13:44 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Wondershare
2015-01-09 13:44 - 2014-07-31 15:55 - 00029288 _____ (Wondershare) C:\Windows\system32\Drivers\WsAudioDevice_383S(1).sys
2015-01-08 15:24 - 2015-01-08 15:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic MP3 Tagger
2015-01-08 15:24 - 2015-01-08 15:24 - 00000000 ____D () C:\Program Files (x86)\Magic MP3 Tagger
2015-01-07 09:00 - 2015-01-07 09:00 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\GHISLER
2014-12-30 18:28 - 2014-12-30 18:39 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Apowersoft
2014-12-30 18:20 - 2015-01-08 03:42 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Spotify
2014-12-30 18:18 - 2015-01-10 13:56 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Spotify
2014-12-30 10:01 - 2015-01-10 13:56 - 00000000 ____D () C:\ProgramData\PMS
2014-12-30 10:01 - 2015-01-02 14:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PS3 Media Server
2014-12-30 10:01 - 2014-12-30 10:01 - 00000000 ____D () C:\Program Files (x86)\PS3 Media Server
2014-12-26 18:51 - 2014-12-26 18:51 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2014-12-26 18:37 - 2014-12-26 18:37 - 00002091 _____ () C:\Users\Thomas\AppData\Local\2AE5D5AFBC8142c2AB89DCD9CB41C9AF.Layout2.lbx
2014-12-26 18:34 - 2014-12-26 18:34 - 00000000 __SHD () C:\Users\Thomas\AppData\Local\EmieBrowserModeList
2014-12-25 18:15 - 2014-12-25 18:15 - 00000000 ____D () C:\ProgramData\TVersity
2014-12-25 18:15 - 2014-12-25 18:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xiph.Org
2014-12-25 18:15 - 2014-12-25 18:15 - 00000000 ____D () C:\Program Files (x86)\Xiph.Org
2014-12-25 18:15 - 2014-12-25 18:15 - 00000000 ____D () C:\Program Files (x86)\TVersity Codec Pack
2014-12-18 04:13 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-18 04:13 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-15 03:27 - 2014-12-15 03:27 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-15 03:01 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-15 03:01 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-14 14:06 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-14 14:06 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-14 14:06 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-14 14:06 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-14 14:06 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-14 14:06 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-14 14:06 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-14 14:06 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-14 14:06 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-14 14:06 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-14 14:06 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-14 14:06 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-14 14:06 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-14 14:06 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-14 14:06 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-14 14:06 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-14 14:06 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-14 14:06 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-14 14:06 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-14 14:06 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-14 14:06 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-14 14:06 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-14 14:06 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-14 14:06 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-14 14:06 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-14 14:06 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-14 14:06 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-14 14:06 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-14 14:06 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-14 14:06 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-14 14:06 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-14 14:06 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-14 14:06 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-14 14:06 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-14 14:06 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-14 14:06 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-14 14:06 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-14 14:06 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-14 14:06 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-14 14:06 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-14 14:06 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-14 14:06 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-14 14:06 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-14 14:06 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-14 14:06 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-14 14:06 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-14 14:06 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-14 14:06 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-14 14:06 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-14 14:06 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-14 14:06 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-14 14:06 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-14 14:06 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-14 14:06 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-10 14:06 - 2014-11-02 15:00 - 00005140 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for Thomas-PC-Thomas Thomas-PC
2015-01-10 14:05 - 2013-07-06 16:01 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-10 14:03 - 2013-05-04 18:54 - 01748726 _____ () C:\Windows\WindowsUpdate.log
2015-01-10 14:03 - 2009-07-14 05:45 - 00023056 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-10 14:03 - 2009-07-14 05:45 - 00023056 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-10 14:02 - 2009-07-14 18:58 - 00705002 _____ () C:\Windows\system32\perfh007.dat
2015-01-10 14:02 - 2009-07-14 18:58 - 00151346 _____ () C:\Windows\system32\perfc007.dat
2015-01-10 14:02 - 2009-07-14 06:13 - 01629708 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-10 13:58 - 2013-11-27 19:34 - 00000000 ____D () C:\Users\Thomas\AppData\Local\gladinet
2015-01-10 13:56 - 2013-12-21 17:56 - 00013516 _____ () C:\Windows\error.log
2015-01-10 13:56 - 2013-12-21 17:56 - 00003080 _____ () C:\Windows\errord.log
2015-01-10 13:56 - 2013-12-09 19:29 - 00000000 ___RD () C:\Users\Thomas\Google Drive
2015-01-10 13:56 - 2013-05-12 12:51 - 00000000 ____D () C:\ProgramData\Temp
2015-01-10 13:56 - 2013-05-04 19:23 - 00405276 _____ () C:\Windows\PFRO.log
2015-01-10 13:56 - 2013-05-04 19:17 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-10 13:56 - 2013-05-04 19:13 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-10 13:56 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-10 13:56 - 2009-07-14 05:51 - 00054248 _____ () C:\Windows\setupact.log
2015-01-10 13:15 - 2013-05-04 19:13 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-09 21:14 - 2013-05-10 09:38 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\vlc
2015-01-09 20:31 - 2014-07-05 14:53 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-09 20:31 - 2013-07-24 18:19 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-09 18:39 - 2013-05-04 18:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-09 18:38 - 2014-05-07 18:25 - 05890850 _____ () C:\ProgramData\OfflineCatalogue_2_2014_TECDOC_CD.log
2015-01-09 18:38 - 2014-05-07 18:25 - 00000000 ____D () C:\ProgramData\TECDOC_CD
2015-01-09 18:22 - 2014-09-10 08:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsaWin
2015-01-09 18:22 - 2014-06-22 13:51 - 00000270 _____ () C:\Windows\ODBC.INI
2015-01-09 18:08 - 2013-05-04 18:54 - 00000000 ____D () C:\Users\Thomas
2015-01-09 17:45 - 2009-07-14 03:34 - 00000601 _____ () C:\Windows\win.ini
2015-01-09 17:36 - 2013-05-04 19:13 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Google
2015-01-07 08:46 - 2013-05-04 19:40 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Dropbox
2015-01-06 11:15 - 2013-05-07 18:13 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\FileZilla
2015-01-02 11:20 - 2014-11-16 12:47 - 00000000 ____D () C:\Users\Thomas\AppData\Local\JDownloader v2.0
2014-12-28 13:09 - 2013-05-07 18:07 - 00002453 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat XI Pro.lnk
2014-12-28 13:09 - 2013-05-07 18:07 - 00002210 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe FormsCentral.lnk
2014-12-28 13:09 - 2013-05-07 18:07 - 00002049 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller XI.lnk
2014-12-28 13:08 - 2013-05-27 19:09 - 00001458 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
2014-12-25 19:06 - 2013-07-06 16:01 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-25 19:06 - 2013-07-06 16:01 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-25 19:06 - 2013-05-12 19:00 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-20 12:49 - 2014-06-20 12:53 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Brother
2014-12-16 02:15 - 2014-09-07 17:35 - 00000000 ____D () C:\ProgramData\MEGAsync
2014-12-15 07:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-15 06:17 - 2013-06-13 11:25 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-15 06:15 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-12-15 03:53 - 2014-09-11 03:06 - 00000000 ____D () C:\Windows\rescache
2014-12-15 03:33 - 2013-05-26 12:27 - 00000000 ____D () C:\Program Files (x86)\StarMoney 7.0
2014-12-15 03:27 - 2014-05-07 02:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-15 03:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-15 03:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-15 03:11 - 2013-09-10 17:44 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-12-15 03:11 - 2013-05-04 19:46 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-15 03:09 - 2013-08-15 02:01 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-15 03:04 - 2013-05-05 10:54 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-14 12:46 - 2014-12-07 16:48 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\DVDVideoSoft
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_SusX70p3.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_InjX83P2.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_InjX70P3.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_Dacia.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000026 _____ () C:\Windows\Asde_AbAC4VLL.ini
2014-12-14 12:45 - 2014-11-02 13:57 - 00000008 _____ () C:\Windows\5800Hard.ini
2014-12-14 12:45 - 2014-11-02 13:53 - 00247786 _____ () C:\Clip_err.txt
2014-12-14 12:45 - 2014-11-02 13:53 - 00001928 _____ () C:\Clip.txt
2014-12-14 12:45 - 2014-10-31 18:11 - 00000383 _____ () C:\Autoformation CLIP.TXT
2014-12-14 12:45 - 2014-06-22 13:51 - 00000141 _____ () C:\Trace.ini
2014-12-14 12:45 - 2013-05-05 17:51 - 00000000 ____D () C:\ProgramData\InstallShield

Some content of TEMP:
====================
C:\Users\Thomas\AppData\Local\Temp\130606118584661085.exe
C:\Users\Thomas\AppData\Local\Temp\13060611860670120558.exe
C:\Users\Thomas\AppData\Local\Temp\1jr1aoxu.dll
C:\Users\Thomas\AppData\Local\Temp\AF0C55FA-A41B-46F6-0170-EB50554B3274.exe
C:\Users\Thomas\AppData\Local\Temp\AF126BA6-3872-EC0C-B96F-F742E50C11E6.dll
C:\Users\Thomas\AppData\Local\Temp\AskPIP_FF_.exe
C:\Users\Thomas\AppData\Local\Temp\AutoRun.exe
C:\Users\Thomas\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Thomas\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe
C:\Users\Thomas\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyorbfh.dll
C:\Users\Thomas\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Thomas\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Thomas\AppData\Local\Temp\Execute2App.exe
C:\Users\Thomas\AppData\Local\Temp\FreeAudioCDBurner.exe
C:\Users\Thomas\AppData\Local\Temp\GdiPlus.dll
C:\Users\Thomas\AppData\Local\Temp\GsLXh1E3NY.exe
C:\Users\Thomas\AppData\Local\Temp\hfh4yhxx.dll
C:\Users\Thomas\AppData\Local\Temp\InstallerMessageBox.exe
C:\Users\Thomas\AppData\Local\Temp\jna1874070241583102263.dll
C:\Users\Thomas\AppData\Local\Temp\jna3670992309178468449.dll
C:\Users\Thomas\AppData\Local\Temp\jna5888147752373309458.dll
C:\Users\Thomas\AppData\Local\Temp\jna8690533639057384422.dll
C:\Users\Thomas\AppData\Local\Temp\jna9019976945229357317.dll
C:\Users\Thomas\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Thomas\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Thomas\AppData\Local\Temp\L1Y8Ufulh8.exe
C:\Users\Thomas\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Thomas\AppData\Local\Temp\msvcp90.dll
C:\Users\Thomas\AppData\Local\Temp\msvcr90.dll
C:\Users\Thomas\AppData\Local\Temp\NPSInstallerProxy.exe
C:\Users\Thomas\AppData\Local\Temp\NPSInstallerProxyMessageBoxHookDll.dll
C:\Users\Thomas\AppData\Local\Temp\nsf7E51.exe
C:\Users\Thomas\AppData\Local\Temp\nsnC1F6.exe
C:\Users\Thomas\AppData\Local\Temp\nsnD74E.exe
C:\Users\Thomas\AppData\Local\Temp\nssD54A.exe
C:\Users\Thomas\AppData\Local\Temp\nsxC011.exe
C:\Users\Thomas\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Thomas\AppData\Local\Temp\nvStInst.exe
C:\Users\Thomas\AppData\Local\Temp\optprosetup.exe
C:\Users\Thomas\AppData\Local\Temp\ose00001.exe
C:\Users\Thomas\AppData\Local\Temp\PidGenX.dll
C:\Users\Thomas\AppData\Local\Temp\proxy_vole7398810760119204713.dll
C:\Users\Thomas\AppData\Local\Temp\Quarantine.exe
C:\Users\Thomas\AppData\Local\Temp\Runner.exe
C:\Users\Thomas\AppData\Local\Temp\Runner2.exe
C:\Users\Thomas\AppData\Local\Temp\Runner4.exe
C:\Users\Thomas\AppData\Local\Temp\ScanProfilesBackup.dll
C:\Users\Thomas\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Thomas\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Thomas\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Thomas\AppData\Local\Temp\sfextra.dll
C:\Users\Thomas\AppData\Local\Temp\smarter.exe
C:\Users\Thomas\AppData\Local\Temp\sp-downloader.exe
C:\Users\Thomas\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\Thomas\AppData\Local\Temp\sqlite3.dll
C:\Users\Thomas\AppData\Local\Temp\Util.dll
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.1-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.2-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.3-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.4-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.5-win64.exe
C:\Users\Thomas\AppData\Local\Temp\VP6Install.exe
C:\Users\Thomas\AppData\Local\Temp\VP6VFW.dll
C:\Users\Thomas\AppData\Local\Temp\YourFileDownloaderf1Cv0E6zGO.exe
C:\Users\Thomas\AppData\Local\Temp\YourFileDownloaderGiIB8VtIkL.exe
C:\Users\Thomas\AppData\Local\Temp\zyqEnLZxVY.exe
C:\Users\Thomas\AppData\Local\Temp\_is19F6.exe
C:\Users\Thomas\AppData\Local\Temp\_isBDD3.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-04 00:59

==================== End Of Log ============================

--- --- ---

winniwinkel · 10.01.2015, 14:20

Addition

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-01-2015
Ran by Thomas at 2015-01-10 14:07:41
Running from I:\Daten von Thomas\Desstop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Bitdefender Antivirus (Enabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {A23392FD-84B9-F933-2C71-81E751F6EF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.10 - Adobe Systems)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5 64-bit (HKLM\...\{6C1A010F-9108-4162-A26F-9FEC4AC0F0F0}) (Version: 5.0.1 - Adobe)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version:  3.0 - )
Amazon Cloud Drive (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\23ab716f18849b6f) (Version: 2.1.2013.1340 - Amazon)
Amazon.com Kindle Fire (HKLM\...\Kindle Fire Drivers) (Version:  - )
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.)
Audials (HKLM-x32\...\{3C07AF26-8705-4DF5-96C7-51432E0C9F03}) (Version: 11.0.51201.100 - Audials AG)
AVS Audio Converter 7 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 7.0.5.510 - Online Media Technologies Ltd.)
AVS Audio Editor 7.1 (HKLM-x32\...\AVS Audio Editor_is1) (Version: 7.1.5.479 - Online Media Technologies Ltd.)
AVS Audio Recorder version 4.0 (HKLM-x32\...\AVS Audio Recorder_is1) (Version: 4.0.1.21 - Online Media Technologies Ltd.)
AVS Cover Editor 2.0.1.3 (HKLM-x32\...\AVSCoverEditor2_is1) (Version: 2.0.1.3 - Online Media Technologies Ltd.)
AVS Disc Creator 5 (HKLM-x32\...\AVS Disc Creator_is1) (Version: 5.0.6.520 - Online Media Technologies Ltd.)
AVS Document Converter 2.2.5 (HKLM-x32\...\AVS Document Converter_is1) (Version: 2.2.5.218 - Online Media Technologies Ltd.)
AVS DVD Copy 4.1.2.283 (HKLM-x32\...\AVS DVD Copy_is1) (Version: 4.1.2.283 - Online Media Technologies Ltd.)
AVS Image Converter 2.3.2.248 (HKLM-x32\...\AVS Image Converter_is1) (Version: 2.3.2.248 - Online Media Technologies Ltd.)
AVS Media Player 4.1.10.99 (HKLM-x32\...\AVS Media Player_is1) (Version: 4.1.10.99 - Online Media Technologies Ltd.)
AVS Photo Editor (HKLM-x32\...\AVS Photo Editor_is1) (Version: 2.0.8.128 - Online Media Technologies Ltd.)
AVS Registry Cleaner version 2.2 (HKLM-x32\...\AVSRegistryCleaner_is1) (Version: 2.2.3.236 - Online Media Technologies Ltd.)
AVS Ringtone Maker version 1.6 (HKLM-x32\...\AVS Ringtone Maker 1.6_is1) (Version: 1.6.1.140 - Online Media Technologies Ltd.)
AVS Video Converter 8 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 8.3.2.533 - Online Media Technologies Ltd.)
AVS Video Editor 6 (HKLM-x32\...\AVS Video Editor_is1) (Version: 6.3.2.234 - Online Media Technologies Ltd.)
AVS Video Recorder 2.5 (HKLM-x32\...\AVS Video Recorder_is1) (Version: 2.5.3.83 - Online Media Technologies Ltd.)
AVS Video ReMaker 4.1.3.149 (HKLM-x32\...\AVS Video ReMaker_is1) (Version: 4.1.3.149 - Online Media Technologies Ltd.)
Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
Bitdefender Total Security 2015 (HKLM\...\Bitdefender) (Version: 18.11.0.872 - Bitdefender)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite MFC-J4610DW (HKLM-x32\...\{DD98C438-D769-4677-AA87-3481FA32D20C}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
Brother P-touch Address Book 1.2 (HKLM-x32\...\{71410B72-3DA8-4330-BC05-7380FDE09410}) (Version: 1.2.0010 - Brother Industries, Ltd.)
Brother P-touch Editor 5.1 (HKLM-x32\...\{39270390-A851-4E4B-94A9-D5C468216ED3}) (Version: 5.1.0200 - Brother Industries, Ltd.)
Brother QL-Series Software User's Guide (HKLM-x32\...\InstallShield_{A242CAB2-870C-4AC9-8AFE-34379D9383CD}) (Version: 1.00.0000 - Brother Industries, Ltd.)
Brother QL-Series Software User's Guide (x32 Version: 1.00.0000 - Brother Industries, Ltd.) Hidden
calibre (HKLM-x32\...\{17429B3C-DC4B-4ED8-BBEA-CF14BD6203C5}) (Version: 1.28.0 - Kovid Goyal)
CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)
CloneDVDmobile (HKLM-x32\...\CloneDVDmobile) (Version: 1.9.0.1 - SlySoft)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
Dropbox (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.2.13992 - Landesfinanzdirektion Thüringen)
FileZilla Client 3.9.0.6 (HKLM-x32\...\FileZilla Client) (Version: 3.9.0.6 - Tim Kosse)
FileZilla Server (HKLM-x32\...\FileZilla Server) (Version: beta 0.9.42 - FileZilla Project)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Drive (HKLM-x32\...\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java 7 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417040FF}) (Version: 7.0.400 - Oracle)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Java SE Development Kit 7 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170250}) (Version: 1.7.0.250 - Oracle)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Joe (HKLM-x32\...\{F8C986EA-13F8-4B39-91C3-A6B9A851CD34}) (Version: 4.01.0000 - Wirth IT Design)
KFZ-Faktura (HKLM-x32\...\KFZ-Faktura_is1) (Version: 13 - Nürenberg IT-Service)
Magic MP3 Tagger 2.2.6 (HKLM-x32\...\uniquemagicmp3taggerappid_is1) (Version:  - Mathias Kunter)
MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Access database engine 2010 (German) (HKLM-x32\...\{90140000-00D1-0407-0000-0000000FF1CE}) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\OneDriveSetup.exe) (Version: 17.3.1229.0918 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{2C303EE0-A595-3543-A71A-931C7AC40EDE}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{14297226-E0A0-3781-8911-E9D529552663}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4048 (HKLM\...\{91415F19-4C22-3609-A105-92ED3522D83C}) (Version: 9.0.30729.4048 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 (HKLM-x32\...\{5B1F2843-B379-3FF2-B0D3-64DD143ED53A}) (Version: 9.0.30729.4048 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\MyFreeCodec) (Version:  - )
NirSoft ProduKey (HKLM-x32\...\NirSoft ProduKey) (Version:  - )
Nuance Cloud Connector (HKLM-x32\...\{4C99EAAA-A846-4029-B500-312C5937D714}) (Version: 3.2.1026 - Nuance Communications, Inc.)
Nuance OmniPage Ultimate (HKLM-x32\...\{419512F9-D5E7-4ED2-BF99-E7F2C0176B6A}) (Version: 19.00.0000 - Nuance Communications, Inc.)
Nuance PaperPort 14 (HKLM-x32\...\{B2E8EFDC-E4FF-42A8-B305-FE06D29BB33C}) (Version: 14.5.0000 - Nuance Communications, Inc.)
Nuance PDF Create 8 (HKLM\...\{D8AD8411-A273-4560-B756-A418ED4910AD}) (Version: 8.10.6293 - Nuance Communications, Inc.)
Nuance PDF Create 8 (HKLM-x32\...\{D8AD8411-A273-4560-B756-A418ED4910AD}) (Version: 8.10.6293 - Nuance Communications, Inc.)
Nuance PDF Viewer Plus (HKLM-x32\...\{5B28CD4A-ADCF-4B39-BB67-F2F398818F2F}) (Version: 7.20.3208 - Nuance Communications, Inc.)
NVIDIA 3D Vision Controller-Treiber 344.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.46 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.48 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation)
Oracle VM VirtualBox 4.3.12 (HKLM\...\{B5121457-0126-4E62-BCBF-6DC7C73D9E4A}) (Version: 4.3.12 - Oracle Corporation)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PaperPort Image Printer 64-bit (HKLM\...\{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}) (Version: 14.00.0001 - Nuance Communications, Inc.)
PC Auto Backup (HKLM-x32\...\InstallShield_{662548BC-3506-4843-B7AA-F44D352F76A8}) (Version: 1.1.1.21 - Samsung Electronics Co,. Ltd.)
PC Auto Backup (x32 Version: 1.1.1.21 - Samsung Electronics Co,. Ltd.) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
PS3 Media Server (HKLM-x32\...\PS3 Media Server) (Version: 1.90.1 - PS3 Media Server) <==== ATTENTION!
QPST 2.7 (HKLM-x32\...\{8035964D-75EB-4463-91DC-3F02EE9CF103}) (Version: 2.7.378 - Qualcomm)
Rosetta Stone Version 3 (HKLM-x32\...\{99011A6E-5200-11DE-BDB8-7ACD56D89593}) (Version: 3.4.5.0 - Rosetta Stone Ltd.)
Samsung Auto Backup (HKLM-x32\...\{821D6F49-1B20-4809-8C73-286CFC52B1B1}) (Version: 4.1.371.0 - Clarus)
Samsung i-Launcher 1.0.1.54 (HKLM-x32\...\Samsung i-Launcher) (Version: 1.0.1.54 - Samsung Electronics Co., Ltd.)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.1.13105_7 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.1.13105_7 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.) Hidden
Samsung RAW Converter 4 (HKLM-x32\...\InstallShield_{D09E159D-0264-4597-B200-A9B4C0866F25}) (Version: 4 - Ichikawa Soft Laboratory)
Samsung RAW Converter 4 (x32 Version: 4 - Ichikawa Soft Laboratory) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
SanDisk SSD Toolkit 1.0.0.1 (HKLM-x32\...\{26326B5B-3D62-4C12-8841-6B55A19B552D}_is1) (Version: 1.0.0.1 - SanDisk Corporation)
Scansoft PDF Professional (x32 Version:  - ) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version:  - Microsoft)
SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spotify (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
StarMoney (x32 Version: 2.0 - StarFinanz) Hidden
StarMoney 7.0  (HKLM-x32\...\{79917F09-8405-48E0-AE82-6E2F17CB0A34}) (Version: 7.0 - Star Finanz GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
TVersity Codec Pack 1.7 (HKLM-x32\...\TVersity Codec Pack) (Version: 1.7 - TVersity Inc.)
UltraISO Premium V9.62 (HKLM-x32\...\UltraISO_is1) (Version:  - )
Update Service HitsBlender (HKU\S-1-5-21-64129086-1818121567-326312414-1000\...\Update Service HitsBlender) (Version: 2.14.52 - hxxp://www.hitsblender.com)
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows-Treiberpaket - Amazon.com (WinUSB) KindleFireUsbDeviceClass  (08/20/2012 1.0.0000.00000) (HKLM\...\289137531F7C014BF296EFFBFC7E3748A293FEE9) (Version: 08/20/2012 1.0.0000.00000 - Amazon.com)
WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
XMedia Recode Version 3.1.3.7 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.3.7 - XMedia Recode)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-64129086-1818121567-326312414-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Thomas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points  =========================

09-01-2015 18:37:46 Entfernt TECDOC CD
09-01-2015 20:30:56 Installed Java 7 Update 71
10-01-2015 13:32:11 Malwarebytes Anti-Rootkit Restore Point

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2015-01-09 20:20 - 00000826 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {114AF372-8B94-499A-BDD3-B8718F70E7D8} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {1E924CA3-EB37-4C20-AF75-BE99320A5C55} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-25] (Adobe Systems Incorporated)
Task: {2079835D-A26F-42BB-8AD8-5FB4989E7FEF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {21BB1D1C-FBEF-4CA5-8FE0-2E4E43617F27} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-25] (Google Inc.)
Task: {465E2225-6B2C-4D43-BB75-DCCD56FFFEE2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {54AC37B8-EA9A-4B2E-B4D7-0E8A830B7D7C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {66C4AE2B-593C-4B5D-AC6E-978797C4601A} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Thomas-PC-Thomas Thomas-PC => C:\Program Files (x86)\Microsoft Office\Office15\MsoSync.exe [2014-11-12] (Microsoft Corporation)
Task: {9A6DB46C-DE41-4E12-A6C0-F257B6F0AA01} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {A6AA64DD-6C0F-4E6C-8D5C-0CC82990C121} - System32\Tasks\PostPoneInstall => C:\Users\Thomas\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe [2015-01-09] (C.L.A.R.A) <==== ATTENTION
Task: {B11602B9-1519-44B4-80B1-423A74825373} - System32\Tasks\{E8B03A25-D220-416C-B78D-6D25B6F82365} => I:\TECDOC_CD\2_2014\pb\tof.exe
Task: {C56C77DD-BACE-4C5D-AF26-48B210BE8037} - System32\Tasks\Update Service HitsBlender => C:\Program Files (x86)\HitsBlenderUpdater\HitsBlenderUpdater.exe
Task: {EDD2C7E7-179B-43C3-8125-FEFC1D1EF66A} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: {EE1BC51D-F046-4EB2-95D3-B1C238EB781B} - System32\Tasks\{0B71CE26-2C2E-44F7-9576-05AA21F78FD3} => H:\Die Sims 3\Inselparadies\Game\Bin\Sims3Launcher.exe
Task: {F20177EC-29FD-4536-8AF6-31A885A46214} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-25] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-08-26 17:59 - 2014-10-02 14:47 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\txmlutil.dll
2014-08-26 17:59 - 2013-09-03 13:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdmetrics.dll
2014-08-26 18:02 - 2014-06-30 12:26 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\UI\accessl.ui
2014-08-26 18:01 - 2012-10-29 14:22 - 00152816 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdfwcore.dll
2014-08-26 18:11 - 2014-08-26 18:11 - 00780592 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00047_002\ashttpbr.mdl
2014-08-26 18:11 - 2014-08-26 18:11 - 00568400 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00047_002\ashttpdsp.mdl
2014-08-26 18:11 - 2014-08-26 18:11 - 02602680 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00047_002\ashttpph.mdl
2014-08-26 18:11 - 2014-08-26 18:11 - 01323408 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00047_002\ashttprbl.mdl
2013-05-04 19:17 - 2014-10-16 15:11 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-09-10 08:29 - 2011-12-06 15:55 - 00020480 _____ () I:\Neuer\Apache.exe
2013-03-22 13:10 - 2013-03-22 13:10 - 00222544 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSVSSSvr.exe
2010-09-03 12:11 - 2010-09-03 12:11 - 00520295 _____ () C:\Program Files (x86)\Samsung\PC Auto Backup\http_ss_win_pro.exe
2014-02-14 10:18 - 2014-02-14 10:18 - 00473352 _____ () C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe
2013-05-04 19:05 - 2012-08-09 11:55 - 00078480 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2013-05-04 19:05 - 2012-08-09 11:55 - 00386192 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 00374840 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
2014-05-01 15:13 - 2014-05-01 15:13 - 00470016 _____ () C:\ProgramData\MEGAsync\ShellExtX64.dll
2014-05-01 20:29 - 2014-05-01 20:29 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2013-05-09 08:39 - 2010-03-15 10:28 - 00166400 _____ () C:\Program Files\WinRAR\rarext.dll
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-09-10 08:29 - 2011-12-06 15:55 - 00299008 _____ () I:\Neuer\ApacheCore.dll
2013-03-22 12:59 - 2013-03-22 12:59 - 00293200 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\sqlite3.dll
2013-03-22 13:00 - 2013-03-22 13:00 - 00080208 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\zlib125.dll
2013-03-22 13:00 - 2013-03-22 13:00 - 00016720 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSMui.dll
2013-05-26 12:28 - 2009-10-06 13:36 - 00205312 _____ () C:\Program Files (x86)\StarMoney 7.0\ouservice\PATCHW32.dll
2010-04-30 13:02 - 2010-04-30 13:02 - 00057344 _____ () C:\Program Files (x86)\Samsung\PC Auto Backup\lang.dll
2014-01-06 10:52 - 2014-01-06 10:52 - 03244032 _____ () C:\Users\Thomas\AppData\Local\Programs\Google\Google+ Auto Backup\gpuploader_i18n.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00046080 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_thread-vc90-mt-1_39.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00045056 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_date_time-vc90-mt-1_39.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00545032 _____ () C:\Program Files (x86)\Audials\Audials 11\StreamingClient.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00012800 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_system-vc90-mt-1_39.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00068360 _____ () C:\Program Files (x86)\Audials\Audials 11\CrashRpt.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00409352 _____ () C:\Program Files (x86)\Audials\Audials 11\SQLite3.dll
2014-02-14 10:18 - 2014-02-14 10:18 - 00614912 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_regex-vc90-mt-1_39.dll
2014-10-16 02:23 - 2014-10-16 02:23 - 00290304 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Utils\65caba6fdb77ed17123be2746c441efc\Utils.ni.dll
2014-10-16 02:23 - 2014-10-16 02:23 - 00585216 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ManagedInterfaces\7cd297f92be83270ed007373b97bbe42\ManagedInterfaces.ni.dll
2014-11-12 03:09 - 2014-11-12 03:09 - 02950656 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\AudialsComponents\b883e8c49918945b0ae5f4780b281bcf\AudialsComponents.ni.dll
2014-10-16 02:23 - 2014-10-16 02:23 - 00178688 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\fastJSON\dd7cfc6548a6267386e0761f678b647f\fastJSON.ni.dll
2014-11-02 14:58 - 2014-11-02 14:58 - 00081056 _____ () C:\Users\Thomas\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\LoggingPlatform.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 36966968 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\libcef.dll
2015-01-10 13:56 - 2015-01-10 13:56 - 00011264 _____ () C:\Users\Thomas\AppData\Local\Temp\nsa537D.tmp\System.dll
2012-09-23 19:43 - 2012-09-23 19:43 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu
2014-06-21 14:48 - 2009-02-27 15:38 - 00139264 ____N () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-01-10 13:56 - 2015-01-10 13:56 - 00098816 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\win32api.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00110080 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\pywintypes27.dll
2015-01-10 13:56 - 2015-01-10 13:56 - 00364544 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\pythoncom27.dll
2015-01-10 13:56 - 2015-01-10 13:56 - 00045568 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\_socket.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 01160704 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\_ssl.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00320512 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\win32com.shell.shell.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00713216 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\_hashlib.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 01175040 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\wx._core_.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00805888 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\wx._gdi_.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00811008 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\wx._windows_.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 01062400 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\wx._controls_.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00735232 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\wx._misc_.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00128512 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\_elementtree.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00127488 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\pyexpat.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00557056 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\pysqlite2._sqlite.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00087552 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\_ctypes.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00119808 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\win32file.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00108544 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\win32security.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00007168 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\hashobjs_ext.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00167936 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\win32gui.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00018432 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\win32event.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00038912 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\win32inet.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00011264 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\win32crypt.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00070656 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\wx._html2.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00027136 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\_multiprocessing.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00035840 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\win32process.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00686080 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\unicodedata.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00122368 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\wx._wizard.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00024064 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\win32pipe.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00025600 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\win32pdh.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00525640 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\windows._lib_cacheinvalidation.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00010240 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\select.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00017408 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\win32profile.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00022528 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\win32ts.pyd
2015-01-10 13:56 - 2015-01-10 13:56 - 00078336 _____ () C:\Users\Thomas\AppData\Local\Temp\_MEI45162\wx._animate.pyd
2013-03-22 13:00 - 2013-03-22 13:00 - 00158032 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSMui_GER.dll
2013-03-22 13:03 - 2013-03-22 13:03 - 00252240 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSBr_nuance.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 00867896 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\ffmpegsumo.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 00886840 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\libglesv2.dll
2014-12-30 18:20 - 2014-12-30 18:20 - 00108600 _____ () C:\Users\Thomas\AppData\Roaming\Spotify\Data\libegl.dll
2013-05-04 19:15 - 2012-06-25 09:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-10-16 10:15 - 2014-10-16 10:15 - 00035328 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00091648 _____ () C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00892416 _____ () C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll
2015-01-09 17:36 - 2014-12-06 02:50 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libglesv2.dll
2015-01-09 17:36 - 2014-12-06 02:50 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libegl.dll
2015-01-09 17:36 - 2014-12-06 02:50 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll
2015-01-09 17:36 - 2014-12-06 02:50 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:2683706C
AlternateDataStreams: C:\ProgramData\Temp:A303874F
AlternateDataStreams: C:\ProgramData\Temp:D5FBE8F9
AlternateDataStreams: C:\ProgramData\Temp:FC595E85

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-64129086-1818121567-326312414-500 - Administrator - Disabled)
Gast (S-1-5-21-64129086-1818121567-326312414-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-64129086-1818121567-326312414-1011 - Limited - Enabled)
Thomas (S-1-5-21-64129086-1818121567-326312414-1000 - Administrator - Enabled) => C:\Users\Thomas

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: webinstrNHK
Description: webinstrNHK
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: webinstrNHK
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: VirtualBox Host-Only Ethernet Adapter
Description: VirtualBox Host-Only Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Oracle Corporation
Service: VBoxNetAdp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3570 CPU @ 3.40GHz
Percentage of memory in use: 41%
Total physical RAM: 8147.35 MB
Available physical RAM: 4798.75 MB
Total Pagefile: 16292.88 MB
Available Pagefile: 12571.7 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:119.14 GB) (Free:12.49 GB) NTFS
Drive d: (622010_DDS) (CDROM) (Total:0.17 GB) (Free:0 GB) CDFS
Drive f: () (Fixed) (Total:465.54 GB) (Free:107.7 GB) NTFS
Drive h: () (Fixed) (Total:931.51 GB) (Free:788.11 GB) NTFS
Drive i: (Volume) (Fixed) (Total:1863.01 GB) (Free:118.15 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 313C1AE6)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119.1 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 4DBD6351)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=OF Extended)

========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: DDC41BD8)

Partition: GPT Partition Type.

========================================================
Disk: 3 (Size: 1863 GB) (Disk ID: 6EA0882C)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== End Of Log ============================

cosinus · 10.01.2015, 14:39

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-64129086-1818121567-326312414-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
S2 c7522d84; c:\Program Files (x86)\Optimizer Pro 3.27\OptProMon.dll [2462800 2015-01-09] ()
S2 ZAPrivacyService; "C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe" [X]
AlternateDataStreams: C:\ProgramData\Temp:2683706C
AlternateDataStreams: C:\ProgramData\Temp:A303874F
AlternateDataStreams: C:\ProgramData\Temp:D5FBE8F9
AlternateDataStreams: C:\ProgramData\Temp:FC595E85
c:\Program Files (x86)\Optimizer Pro 3.27
C:\Users\Thomas\AppData\Local\Temp\130606118584661085.exe
C:\Users\Thomas\AppData\Local\Temp\13060611860670120558.exe
C:\Users\Thomas\AppData\Local\Temp\1jr1aoxu.dll
C:\Users\Thomas\AppData\Local\Temp\AF0C55FA-A41B-46F6-0170-EB50554B3274.exe
C:\Users\Thomas\AppData\Local\Temp\AF126BA6-3872-EC0C-B96F-F742E50C11E6.dll
C:\Users\Thomas\AppData\Local\Temp\AskPIP_FF_.exe
C:\Users\Thomas\AppData\Local\Temp\AutoRun.exe
C:\Users\Thomas\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Thomas\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe
C:\Users\Thomas\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyorbfh.dll
C:\Users\Thomas\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Thomas\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Thomas\AppData\Local\Temp\Execute2App.exe
C:\Users\Thomas\AppData\Local\Temp\FreeAudioCDBurner.exe
C:\Users\Thomas\AppData\Local\Temp\GdiPlus.dll
C:\Users\Thomas\AppData\Local\Temp\GsLXh1E3NY.exe
C:\Users\Thomas\AppData\Local\Temp\hfh4yhxx.dll
C:\Users\Thomas\AppData\Local\Temp\InstallerMessageBox.exe
C:\Users\Thomas\AppData\Local\Temp\jna1874070241583102263.dll
C:\Users\Thomas\AppData\Local\Temp\jna3670992309178468449.dll
C:\Users\Thomas\AppData\Local\Temp\jna5888147752373309458.dll
C:\Users\Thomas\AppData\Local\Temp\jna8690533639057384422.dll
C:\Users\Thomas\AppData\Local\Temp\jna9019976945229357317.dll
C:\Users\Thomas\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Thomas\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Thomas\AppData\Local\Temp\L1Y8Ufulh8.exe
C:\Users\Thomas\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Thomas\AppData\Local\Temp\msvcp90.dll
C:\Users\Thomas\AppData\Local\Temp\msvcr90.dll
C:\Users\Thomas\AppData\Local\Temp\NPSInstallerProxy.exe
C:\Users\Thomas\AppData\Local\Temp\NPSInstallerProxyMessageBoxHookDll.dll
C:\Users\Thomas\AppData\Local\Temp\nsf7E51.exe
C:\Users\Thomas\AppData\Local\Temp\nsnC1F6.exe
C:\Users\Thomas\AppData\Local\Temp\nsnD74E.exe
C:\Users\Thomas\AppData\Local\Temp\nssD54A.exe
C:\Users\Thomas\AppData\Local\Temp\nsxC011.exe
C:\Users\Thomas\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Thomas\AppData\Local\Temp\nvStInst.exe
C:\Users\Thomas\AppData\Local\Temp\optprosetup.exe
C:\Users\Thomas\AppData\Local\Temp\ose00001.exe
C:\Users\Thomas\AppData\Local\Temp\PidGenX.dll
C:\Users\Thomas\AppData\Local\Temp\proxy_vole7398810760119204713.dll
C:\Users\Thomas\AppData\Local\Temp\Quarantine.exe
C:\Users\Thomas\AppData\Local\Temp\Runner.exe
C:\Users\Thomas\AppData\Local\Temp\Runner2.exe
C:\Users\Thomas\AppData\Local\Temp\Runner4.exe
C:\Users\Thomas\AppData\Local\Temp\ScanProfilesBackup.dll
C:\Users\Thomas\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Thomas\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Thomas\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Thomas\AppData\Local\Temp\sfextra.dll
C:\Users\Thomas\AppData\Local\Temp\smarter.exe
C:\Users\Thomas\AppData\Local\Temp\sp-downloader.exe
C:\Users\Thomas\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\Thomas\AppData\Local\Temp\sqlite3.dll
C:\Users\Thomas\AppData\Local\Temp\Util.dll
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.1-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.2-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.3-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.4-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.5-win64.exe
C:\Users\Thomas\AppData\Local\Temp\VP6Install.exe
C:\Users\Thomas\AppData\Local\Temp\VP6VFW.dll
C:\Users\Thomas\AppData\Local\Temp\YourFileDownloaderf1Cv0E6zGO.exe
C:\Users\Thomas\AppData\Local\Temp\YourFileDownloaderGiIB8VtIkL.exe
C:\Users\Thomas\AppData\Local\Temp\zyqEnLZxVY.exe
C:\Users\Thomas\AppData\Local\Temp\_is19F6.exe
C:\Users\Thomas\AppData\Local\Temp\_isBDD3.exe
EmptyTemp:
Hosts:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

winniwinkel · 10.01.2015, 14:47

Fixlog

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-01-2015
Ran by Thomas at 2015-01-10 14:42:30 Run:1
Running from I:\Daten von Thomas\Desstop
Loaded Profile: Thomas (Available profiles: Thomas)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-64129086-1818121567-326312414-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
S2 c7522d84; c:\Program Files (x86)\Optimizer Pro 3.27\OptProMon.dll [2462800 2015-01-09] ()
S2 ZAPrivacyService; "C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe" [X]
AlternateDataStreams: C:\ProgramData\Temp:2683706C
AlternateDataStreams: C:\ProgramData\Temp:A303874F
AlternateDataStreams: C:\ProgramData\Temp:D5FBE8F9
AlternateDataStreams: C:\ProgramData\Temp:FC595E85
c:\Program Files (x86)\Optimizer Pro 3.27
C:\Users\Thomas\AppData\Local\Temp\130606118584661085.exe
C:\Users\Thomas\AppData\Local\Temp\13060611860670120558.exe
C:\Users\Thomas\AppData\Local\Temp\1jr1aoxu.dll
C:\Users\Thomas\AppData\Local\Temp\AF0C55FA-A41B-46F6-0170-EB50554B3274.exe
C:\Users\Thomas\AppData\Local\Temp\AF126BA6-3872-EC0C-B96F-F742E50C11E6.dll
C:\Users\Thomas\AppData\Local\Temp\AskPIP_FF_.exe
C:\Users\Thomas\AppData\Local\Temp\AutoRun.exe
C:\Users\Thomas\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Thomas\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe
C:\Users\Thomas\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyorbfh.dll
C:\Users\Thomas\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Thomas\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Thomas\AppData\Local\Temp\Execute2App.exe
C:\Users\Thomas\AppData\Local\Temp\FreeAudioCDBurner.exe
C:\Users\Thomas\AppData\Local\Temp\GdiPlus.dll
C:\Users\Thomas\AppData\Local\Temp\GsLXh1E3NY.exe
C:\Users\Thomas\AppData\Local\Temp\hfh4yhxx.dll
C:\Users\Thomas\AppData\Local\Temp\InstallerMessageBox.exe
C:\Users\Thomas\AppData\Local\Temp\jna1874070241583102263.dll
C:\Users\Thomas\AppData\Local\Temp\jna3670992309178468449.dll
C:\Users\Thomas\AppData\Local\Temp\jna5888147752373309458.dll
C:\Users\Thomas\AppData\Local\Temp\jna8690533639057384422.dll
C:\Users\Thomas\AppData\Local\Temp\jna9019976945229357317.dll
C:\Users\Thomas\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Thomas\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Thomas\AppData\Local\Temp\L1Y8Ufulh8.exe
C:\Users\Thomas\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Thomas\AppData\Local\Temp\msvcp90.dll
C:\Users\Thomas\AppData\Local\Temp\msvcr90.dll
C:\Users\Thomas\AppData\Local\Temp\NPSInstallerProxy.exe
C:\Users\Thomas\AppData\Local\Temp\NPSInstallerProxyMessageBoxHookDll.dll
C:\Users\Thomas\AppData\Local\Temp\nsf7E51.exe
C:\Users\Thomas\AppData\Local\Temp\nsnC1F6.exe
C:\Users\Thomas\AppData\Local\Temp\nsnD74E.exe
C:\Users\Thomas\AppData\Local\Temp\nssD54A.exe
C:\Users\Thomas\AppData\Local\Temp\nsxC011.exe
C:\Users\Thomas\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Thomas\AppData\Local\Temp\nvStInst.exe
C:\Users\Thomas\AppData\Local\Temp\optprosetup.exe
C:\Users\Thomas\AppData\Local\Temp\ose00001.exe
C:\Users\Thomas\AppData\Local\Temp\PidGenX.dll
C:\Users\Thomas\AppData\Local\Temp\proxy_vole7398810760119204713.dll
C:\Users\Thomas\AppData\Local\Temp\Quarantine.exe
C:\Users\Thomas\AppData\Local\Temp\Runner.exe
C:\Users\Thomas\AppData\Local\Temp\Runner2.exe
C:\Users\Thomas\AppData\Local\Temp\Runner4.exe
C:\Users\Thomas\AppData\Local\Temp\ScanProfilesBackup.dll
C:\Users\Thomas\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Thomas\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Thomas\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Thomas\AppData\Local\Temp\sfextra.dll
C:\Users\Thomas\AppData\Local\Temp\smarter.exe
C:\Users\Thomas\AppData\Local\Temp\sp-downloader.exe
C:\Users\Thomas\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\Thomas\AppData\Local\Temp\sqlite3.dll
C:\Users\Thomas\AppData\Local\Temp\Util.dll
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.1-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.2-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.3-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.4-win64.exe
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.5-win64.exe
C:\Users\Thomas\AppData\Local\Temp\VP6Install.exe
C:\Users\Thomas\AppData\Local\Temp\VP6VFW.dll
C:\Users\Thomas\AppData\Local\Temp\YourFileDownloaderf1Cv0E6zGO.exe
C:\Users\Thomas\AppData\Local\Temp\YourFileDownloaderGiIB8VtIkL.exe
C:\Users\Thomas\AppData\Local\Temp\zyqEnLZxVY.exe
C:\Users\Thomas\AppData\Local\Temp\_is19F6.exe
C:\Users\Thomas\AppData\Local\Temp\_isBDD3.exe
EmptyTemp:
Hosts:
         
*****************

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKU\S-1-5-21-64129086-1818121567-326312414-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
c7522d84 => Service deleted successfully.
ZAPrivacyService => Service deleted successfully.
C:\ProgramData\Temp => ":2683706C" ADS removed successfully.
C:\ProgramData\Temp => ":A303874F" ADS removed successfully.
C:\ProgramData\Temp => ":D5FBE8F9" ADS removed successfully.
C:\ProgramData\Temp => ":FC595E85" ADS removed successfully.
c:\Program Files (x86)\Optimizer Pro 3.27 => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\130606118584661085.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\13060611860670120558.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\1jr1aoxu.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\AF0C55FA-A41B-46F6-0170-EB50554B3274.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\AF126BA6-3872-EC0C-B96F-F742E50C11E6.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\AskPIP_FF_.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\AutoRun.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\AutoRunGUI.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyorbfh.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\DseShExt-x64.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\DseShExt-x86.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\Execute2App.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\FreeAudioCDBurner.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\GdiPlus.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\GsLXh1E3NY.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\hfh4yhxx.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\InstallerMessageBox.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\jna1874070241583102263.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\jna3670992309178468449.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\jna5888147752373309458.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\jna8690533639057384422.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\jna9019976945229357317.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\L1Y8Ufulh8.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\MSETUP4.EXE => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\msvcp90.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\msvcr90.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\NPSInstallerProxy.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\NPSInstallerProxyMessageBoxHookDll.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\nsf7E51.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\nsnC1F6.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\nsnD74E.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\nssD54A.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\nsxC011.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\nvSCPAPI.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\nvStInst.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\optprosetup.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\ose00001.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\PidGenX.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\proxy_vole7398810760119204713.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\Runner.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\Runner2.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\Runner4.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\ScanProfilesBackup.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\SDShelEx-win32.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\SDShelEx-x64.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\sfamcc00001.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\sfextra.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\smarter.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\sp-downloader.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\sqlite3.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\Util.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.1-win64.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.2-win64.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.3-win64.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.4-win64.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.5-win64.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\VP6Install.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\VP6VFW.dll => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\YourFileDownloaderf1Cv0E6zGO.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\YourFileDownloaderGiIB8VtIkL.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\zyqEnLZxVY.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\_is19F6.exe => Moved successfully.
C:\Users\Thomas\AppData\Local\Temp\_isBDD3.exe => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 9 GB temporary data.


The system needed a reboot. 

==== End of Fixlog 14:43:26 ====

cosinus · 11.01.2015, 14:22

Okay, dann Kontrollscans mit MBAM und ESET bitte:

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

winniwinkel · 12.01.2015, 18:07

mbam

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Protection, 11.01.2015 14:41:13, SYSTEM, THOMAS-PC, Protection, Malware Protection, Starting, 
Protection, 11.01.2015 14:41:13, SYSTEM, THOMAS-PC, Protection, Malware Protection, Started, 
Protection, 11.01.2015 14:41:13, SYSTEM, THOMAS-PC, Protection, Malicious Website Protection, Starting, 
Protection, 11.01.2015 14:41:14, SYSTEM, THOMAS-PC, Protection, Malicious Website Protection, Started, 
Update, 11.01.2015 14:41:33, SYSTEM, THOMAS-PC, Manual, Remediation Database, 2013.10.16.1, 2014.12.6.1, 
Update, 11.01.2015 14:41:33, SYSTEM, THOMAS-PC, Manual, Rootkit Database, 2014.11.18.1, 2015.1.7.1, 
Update, 11.01.2015 14:42:39, SYSTEM, THOMAS-PC, Manual, Malware Database, 2014.11.20.6, 2015.1.11.6, 
Protection, 11.01.2015 14:42:39, SYSTEM, THOMAS-PC, Protection, Refresh, Starting, 
Protection, 11.01.2015 14:42:39, SYSTEM, THOMAS-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 11.01.2015 14:42:39, SYSTEM, THOMAS-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 11.01.2015 14:42:43, SYSTEM, THOMAS-PC, Protection, Refresh, Success, 
Protection, 11.01.2015 14:42:43, SYSTEM, THOMAS-PC, Protection, Malicious Website Protection, Starting, 
Protection, 11.01.2015 14:42:43, SYSTEM, THOMAS-PC, Protection, Malicious Website Protection, Started, 
Scan, 11.01.2015 14:47:34, SYSTEM, THOMAS-PC, Manual, Start: % 1 "% 2", Dauer: % 1 min 4 Sekunden, Bedrohungs-Suchlauf, Abgeschlossen, 0 Malwareerkennung, 11-Malwareerkennung, 
Protection, 11.01.2015 14:49:29, SYSTEM, THOMAS-PC, Protection, Malware Protection, Starting, 
Protection, 11.01.2015 14:49:29, SYSTEM, THOMAS-PC, Protection, Malware Protection, Started, 
Protection, 11.01.2015 14:49:29, SYSTEM, THOMAS-PC, Protection, Malicious Website Protection, Starting, 
Protection, 11.01.2015 14:49:30, SYSTEM, THOMAS-PC, Protection, Malicious Website Protection, Started, 

(end)

log.txt

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=882e27e7eca64c40b2a13cefc1d68059
# engine=21911
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-01-12 02:52:31
# local_time=2015-01-12 03:52:31 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Bitdefender Antivirus'
# compatibility_mode=2065 16777213 100 100 50239 124876460 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 11959776 172661001 0 0
# scanned=658241
# found=83
# cleaned=0
# scan_time=46413
sh=943C7646335DF6C905925A6224BEB266717D598F ft=1 fh=512a35105d562382 vn="Variante von Win32/BrowseFox.O evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\BoxRockBHO.dll.vir"
sh=FF0E06BA3AA0EE6236F4FAEB096D846F94265D68 ft=1 fh=e9fb6b04620c0d4b vn="Win32/BrowseFox.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\BoxRockUninstall.exe.vir"
sh=FC17A6CC7DF3AC0952F596EF455F560F8682623C ft=0 fh=0000000000000000 vn="Win32/BrowseFox.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\poabkkfnneidicegjefhfhomoeohbkme.crx.vir"
sh=F3A0BFA326C0909BC584A29F38A6AE04862075D2 ft=1 fh=34055f05ddfb95e6 vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\updateBoxRock.exe.vir"
sh=FD3E99CE978EC75BAE5783B1A1EE353A18B5A204 ft=1 fh=06f8cf49740d272a vn="Variante von Win32/BrowseFox.N evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\bin\0560c2c7b36f426fa359.dll.vir"
sh=86C09D9B4D3D4C4BD5B1457727D1A9A721DA546D ft=1 fh=a1db046e2c6c56b0 vn="Variante von Win64/BrowseFox.CI evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\bin\0560c2c7b36f426fa35964.dll.vir"
sh=D2CAD4D8B2CA8B9BF3E21BA65A267616F2241A1C ft=1 fh=631bc635fa718a72 vn="Variante von Win64/BrowseFox.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\bin\BoxRock.BrowserAdapter64.exe.vir"
sh=0CFEB19AEE83100708E6A87CAE7E8C0DD94FC468 ft=1 fh=1a91464ef2036598 vn="Variante von Win32/BrowseFox.AA evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\bin\BoxRock.expext.exe.vir"
sh=F24C3C5115648E784DF2AD59691E590CFEC78D8E ft=1 fh=fe6f43716273a0a0 vn="Variante von Win64/BrowseFox.CJ evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\bin\BoxRock.expextdll.dll.vir"
sh=E7D7555D171484A90B3BF06787D40B04642D0150 ft=1 fh=20675c74cd810380 vn="Variante von Win64/BrowseFox.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\bin\BoxRock.PurBrowse64.exe.vir"
sh=1027742F4F8E54F2966AE009C695C6014D5E9FF1 ft=1 fh=6b99bed4d094c75f vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\bin\tmp3DCB.tmp.vir"
sh=F3A0BFA326C0909BC584A29F38A6AE04862075D2 ft=1 fh=34055f05ddfb95e6 vn="Variante von MSIL/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\bin\utilBoxRock.exe.vir"
sh=A798681E512D9C8C409381C4185E1F0336642D6B ft=1 fh=2a250afe362091ca vn="Variante von Win32/BrowseFox.M evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\bin\{0560c2c7-b36f-426f-a359-b736008b85a6}.dll.vir"
sh=2EC1801343EAB9D6986A7D3E3F33D65730E07108 ft=1 fh=9388518792d80873 vn="Variante von Win64/BrowseFox.CH evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\bin\{0560c2c7-b36f-426f-a359-b736008b85a6}64.dll.vir"
sh=CE3A30B676579339E735B69C6FEEABC1D58E8A02 ft=1 fh=8b63977655c1e7f1 vn="Variante von MSIL/BrowseFox.L evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\bin\plugins\BoxRock.BrowserAdapter.dll.vir"
sh=0D38E4ED9AC6E8D294D993F785094363BA11FCDE ft=1 fh=9db7ce6b30efe153 vn="Variante von MSIL/BrowseFox.L evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\bin\plugins\BoxRock.ExpExt.dll.vir"
sh=C04C29B74C2FD1212E9F7501478059F94EDEC7DF ft=1 fh=4156d7982ee3f9e3 vn="Variante von MSIL/BrowseFox.L evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\bin\plugins\BoxRock.FFUpdate.dll.vir"
sh=FF17532D5390C64EAFDDB901AFF7C9E306BA046E ft=1 fh=cdf729557c3ed2fc vn="Variante von MSIL/BrowseFox.L evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\bin\plugins\BoxRock.GCUpdate.dll.vir"
sh=7437C19A134027D019F232CDFA5D9FA3C6876056 ft=1 fh=aef31da101fb3ab5 vn="Variante von MSIL/BrowseFox.L evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\bin\plugins\BoxRock.IEUpdate.dll.vir"
sh=3AA4B6D7D26C94B727D11298F4121B1058273925 ft=1 fh=da42576eae95e9f6 vn="Variante von MSIL/BrowseFox.L evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Box Rock\bin\plugins\BoxRock.PurBrowseG.dll.vir"
sh=DAFDA028833491960BD91C00B05F23FD1D67BFB8 ft=1 fh=fc5c7a5edeaf47c3 vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\ClickMovie1-Downloaderv10\57c01995-efd5-4f2e-96df-983449831ddc-5.exe.vir"
sh=F226349376FD77C032BF1B0A9EC5D5E24C632898 ft=1 fh=d80a2eb8e3a0100b vn="Variante von Win32/Toolbar.CrossRider.BA evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-bg.exe.vir"
sh=AE032DA556B06A6103419C1002972C82BF20DCA3 ft=1 fh=f75de212f28c6b19 vn="Variante von Win32/Toolbar.CrossRider.BA evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-bho.dll.vir"
sh=27B36212F7DE52C6C511775DCB4D2ED54BE1E029 ft=1 fh=6b7ccdffe8205eaf vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-bho64.dll.vir"
sh=F8311955BA5C60A64B827B2EDF3784BB8BEA884C ft=1 fh=dbab01f0dd381745 vn="Variante von Win32/Toolbar.CrossRider.BD evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-buttonutil.dll.vir"
sh=3D572132CECD3607D35439140C778D741587B0A9 ft=1 fh=e232f43b189ef943 vn="Variante von Win32/Toolbar.CrossRider.BO evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-buttonutil.exe.vir"
sh=E5E2963FF6421DB5A6B7D4172E812DF15230938E ft=1 fh=09dbcb4314523e10 vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-buttonutil64.dll.vir"
sh=DAF6C686AE30F825406F64AEAE52510FC555FE89 ft=1 fh=b8676a440e0fa80f vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-buttonutil64.exe.vir"
sh=9BB2C130D92EB400B5A712325B6C31504603B864 ft=1 fh=126d9776f74cc341 vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-codedownloader.exe.vir"
sh=6F1F4E0DCE10A6F7998C79EF2704D79C850A54B8 ft=1 fh=75d2cce3efa6b2b3 vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\ClickMovie1-Downloaderv10\Uninstall.exe.vir"
sh=5E8CF2EC9F9ACE101A984793890F61B640D34A19 ft=1 fh=7d5ebd25cd557d78 vn="Win32/Packed.VMDetector.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\ClickMovie1-Downloaderv10\utils.exe.vir"
sh=100F91055291E0EF8BA4DB4F2A3C53F7902670B9 ft=1 fh=542ef431715bbe86 vn="Variante von Win32/ExpressDownloader.K evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HitsBlenderUpdater\Uninstall.exe.vir"
sh=3C075A9B55392C613B0829ED316AA664580DA57A ft=1 fh=6ba07fa46c63cf07 vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\I - Cinema\c7e225d9-e592-4799-a023-7acaa225b91d-5.exe.vir"
sh=293FB73883184BFCF0712CA93B2262E16F016622 ft=1 fh=d1a7c62a7573304f vn="Variante von Win32/Toolbar.CrossRider.BA evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\I - Cinema\I - Cinema-bg.exe.vir"
sh=F608E7887BCD1C7C32B24C3EFE42E3BAA4C13A7E ft=1 fh=f403f7511ed7e832 vn="Variante von Win32/Toolbar.CrossRider.BA evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\I - Cinema\I - Cinema-bho.dll.vir"
sh=7C6B8699199A78118AB67C9DA7CAE79278D2DBEF ft=1 fh=1579e5606e39ec17 vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\I - Cinema\I - Cinema-bho64.dll.vir"
sh=D8729EA340D8FCAECDA894025E6AC486E3D3F81A ft=1 fh=bdb8f8d4116a2f60 vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\I - Cinema\I - Cinema-codedownloader.exe.vir"
sh=B6254A537987BA4B8C2F28EF3F0DB592331A0FBB ft=1 fh=d64c20224bdbdccc vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\I - Cinema\Uninstall.exe.vir"
sh=6C38D4768E37F02E7CA06645B4ACA0CE809B7660 ft=1 fh=0af267e999a11c8e vn="Win32/Packed.VMDetector.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\I - Cinema\utils.exe.vir"
sh=7E04C0D4830B285F9FC4A7A37D9C9B5D0E8EEDDB ft=1 fh=925ea49ee03a9b53 vn="Win64/Adware.AddLyrics.F Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\ver8BetterMarkIt\x64\webinstrNHK.sys.vir"
sh=98FCF260C8C676E33DA77173AB222BA6B0142116 ft=1 fh=e0b1efaf129489ac vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Thomas\AppData\Roaming\OpenCandy\C2B456E933954EE38C760CF082D15B89\zafwSetupWeb_131_211_000.exe.vir"
sh=A15C9536148CE02615132AE1DB1A6BF8F873A726 ft=1 fh=41c25fe63c7f6257 vn="Win32/Installium.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Thomas\AppData\Roaming\OpenCandy\D7E213DFA4814D8B902F0FDC581C2B46\search_protect_global.exe.vir"
sh=71296DAE02D12E79D22FA318FE2B5CA2F2157170 ft=1 fh=387839a7ebda2124 vn="Variante von Win32/SpeedingUpMyPC Anwendung" ac=I fn="C:\FRST\Quarantine\C\Program Files (x86)\Optimizer Pro 3.27\OptimizerPro.exe"
sh=30B9CB5F27285867D7CA883A0EBF09E66C1342D9 ft=1 fh=8c733ddd14959e72 vn="Variante von Win32/Adware.SpeedingUpMyPC.C Anwendung" ac=I fn="C:\FRST\Quarantine\C\Program Files (x86)\Optimizer Pro 3.27\OptProSmartScan.exe"
sh=6B8D79E3A39FF53224B789A80BD4282ABDF4DAEB ft=1 fh=4823312e1ed4c4e3 vn="Variante von Win32/InstallCore.TS evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Thomas\AppData\Local\Temp\13060611860670120558.exe.xBAD"
sh=100F91055291E0EF8BA4DB4F2A3C53F7902670B9 ft=1 fh=542ef431715bbe86 vn="Variante von Win32/ExpressDownloader.K evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Thomas\AppData\Local\Temp\GsLXh1E3NY.exe.xBAD"
sh=9C8F1EF5D28A2B48F10AC5D9233BB2CAF782512F ft=1 fh=b71307dc4c1e11fc vn="Win32/BrowseFox.C evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Thomas\AppData\Local\Temp\L1Y8Ufulh8.exe.xBAD"
sh=805E562D2DD87C4DF01D8D43A9F7E8CDB8ADCA71 ft=1 fh=db1c32a40a21ca6b vn="Win32/Conduit.SearchProtect.V evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Thomas\AppData\Local\Temp\nsf7E51.exe.xBAD"
sh=805E562D2DD87C4DF01D8D43A9F7E8CDB8ADCA71 ft=1 fh=db1c32a40a21ca6b vn="Win32/Conduit.SearchProtect.V evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Thomas\AppData\Local\Temp\nsnC1F6.exe.xBAD"
sh=805E562D2DD87C4DF01D8D43A9F7E8CDB8ADCA71 ft=1 fh=db1c32a40a21ca6b vn="Win32/Conduit.SearchProtect.V evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Thomas\AppData\Local\Temp\nsnD74E.exe.xBAD"
sh=805E562D2DD87C4DF01D8D43A9F7E8CDB8ADCA71 ft=1 fh=db1c32a40a21ca6b vn="Win32/Conduit.SearchProtect.V evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Thomas\AppData\Local\Temp\nssD54A.exe.xBAD"
sh=805E562D2DD87C4DF01D8D43A9F7E8CDB8ADCA71 ft=1 fh=db1c32a40a21ca6b vn="Win32/Conduit.SearchProtect.V evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Thomas\AppData\Local\Temp\nsxC011.exe.xBAD"
sh=8005113F03131ABB3B78AA1AC1E578AEF6C99714 ft=1 fh=b88a5e41aaab6e20 vn="Variante von Win32/OptimizerEliteMax.C evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Thomas\AppData\Local\Temp\optprosetup.exe.xBAD"
sh=FDC9CAA4BCEFA4F11CAB8639F4633262CC911B57 ft=1 fh=81144e54ed5ad944 vn="Win32/Adware.1ClickDownload.AJ Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Thomas\AppData\Local\Temp\smarter.exe.xBAD"
sh=C4420C6E94B8CAACCB3811384280D8A93CB0A37D ft=1 fh=25f111c507a31a21 vn="Win32/Toolbar.Conduit.R evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Thomas\AppData\Local\Temp\sp-downloader.exe.xBAD"
sh=DBF3AB28A8B71F02DCA6EE384CCE410B62E72EB4 ft=1 fh=8292212f6f20284f vn="Variante von Win32/ExpressDownloader.K evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Thomas\AppData\Local\Temp\YourFileDownloaderf1Cv0E6zGO.exe.xBAD"
sh=DBF3AB28A8B71F02DCA6EE384CCE410B62E72EB4 ft=1 fh=8292212f6f20284f vn="Variante von Win32/ExpressDownloader.K evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Thomas\AppData\Local\Temp\YourFileDownloaderGiIB8VtIkL.exe.xBAD"
sh=E34AEF2DBC380FC5150965AAD096BE9B98493DC2 ft=1 fh=881d206ec0efb182 vn="Win32/Toolbar.SearchSuite evtl. unerwünschte Anwendung" ac=I fn="F:\festplatte c\Users\Thomas Büro\Downloads\FreeVideoConverterSetup.exe"
sh=B1FF43BEA0288147B9ADBB959EA94F37D1E74D69 ft=1 fh=ce9ac73255956468 vn="Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung" ac=I fn="F:\festplatte c\Users\Thomas Büro\Downloads\SoftonicDownloader_fuer_easeus-data-recovery-wizard.exe"
sh=97A8D5A809D94A3B9277FEF9BE2C4D5632F269A8 ft=1 fh=44f8bd7df555246f vn="Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung" ac=I fn="F:\festplatte c\Users\Thomas Büro\Downloads\SoftonicDownloader_fuer_testdisk.exe"
sh=A3EE5A885218CDE90149053F58265070DBD18CFB ft=1 fh=c559b28ba4624bdd vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="F:\festplatte c\Users\Thomas Büro\Downloads\TVersityProSetup_2_3.exe"
sh=71AC3C5AB2BF92D13CD74E6743DC08167F503785 ft=0 fh=0000000000000000 vn="Win32/Toolbar.Zugo evtl. unerwünschte Anwendung" ac=I fn="F:\festplatte c\Users\Thomas Büro\Downloads\Xili204BluRaCre (1).rar"
sh=71AC3C5AB2BF92D13CD74E6743DC08167F503785 ft=0 fh=0000000000000000 vn="Win32/Toolbar.Zugo evtl. unerwünschte Anwendung" ac=I fn="F:\festplatte c\Users\Thomas Büro\Downloads\Xili204BluRaCre.rar"
sh=301F9F7FF517E11FA79F4373765A0CA073E43DE3 ft=0 fh=0000000000000000 vn="HTML/ScrInject.B.Gen Virus" ac=I fn="F:\festplatte c\Users\Thomas Büro\Downloads\Linkcrypt.ws    Key-Captcha_files\log.php"
sh=C5684A6368A813CFC065BF4585F93B995EED868C ft=1 fh=230168b5c3838b2e vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="F:\Meine Daten\Downloads\tsMuxeR-1.10.6.exe"
sh=FB9A60F19354270D739A43DF307D800C1AB843CA ft=0 fh=0000000000000000 vn="Variante von Android/AdDisplay.AppsGeyser.B evtl. unerwünschte Anwendung" ac=I fn="F:\Note 3\Rom\[PART4]_Super.Fast&Famous_Full.S5_ND5_signed.zip"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="Win32/DownWare.L evtl. unerwünschte Anwendung" ac=I fn="H:\$RECYCLE.BIN\S-1-5-21-64129086-1818121567-326312414-1000\$RBVN9LF.rar"
sh=FBBE31F08E493A8B0702FE72F3ABA6DF996E20C6 ft=1 fh=1055b3d0ea15ac02 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="H:\Neuer Ordner (3)\can clip v 140\Renault.can.clip140\Renault.can.clip140\Update 140\Update CLIP V139 TO V140 ENGLISH\Utilities\PDFCreator-1_7_2_setup.exe"
sh=FBBE31F08E493A8B0702FE72F3ABA6DF996E20C6 ft=1 fh=1055b3d0ea15ac02 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="H:\Neuer Ordner (3)\can clip v 140\Renault.can.clip140\Renault.can.clip140\Update 140\Update CLIP V139 TO V140 FRENCH\Update CLIP V139 to V140\Utilities\PDFCreator-1_7_2_setup.exe"
sh=FBBE31F08E493A8B0702FE72F3ABA6DF996E20C6 ft=1 fh=1055b3d0ea15ac02 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="I:\can clip v 140\Renault.can.clip140\Renault.can.clip140\Update 140\Update CLIP V139 TO V140 ENGLISH\Utilities\PDFCreator-1_7_2_setup.exe"
sh=FBBE31F08E493A8B0702FE72F3ABA6DF996E20C6 ft=1 fh=1055b3d0ea15ac02 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="I:\can clip v 140\Renault.can.clip140\Renault.can.clip140\Update 140\Update CLIP V139 TO V140 FRENCH\Update CLIP V139 to V140\Utilities\PDFCreator-1_7_2_setup.exe"
sh=690C37EAC749E826500192379156316857C0D86A ft=0 fh=0000000000000000 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="I:\Daten von Thomas\Downloads\Tversity Meida Server Pro 2-4 Upload by Sheytan.rar"
sh=465AF2B18BF70E5CC1176FEA2369D91797C313B6 ft=1 fh=b55d4597353a7a7a vn="Win32/Adware.1ClickDownload.AJ Anwendung" ac=I fn="I:\Daten von Thomas\Downloads\wondershare_streaming_audio_recorder_2.0.2.0___serial_-_bidjan.exe"
sh=DBF3AB28A8B71F02DCA6EE384CCE410B62E72EB4 ft=1 fh=8292212f6f20284f vn="Variante von Win32/ExpressDownloader.K evtl. unerwünschte Anwendung" ac=I fn="I:\Daten von Thomas\Downloads\wondershare_streaming_audio_recorder_2.1.0_crack_downloader.exe"
sh=8BED1E2D2077FF0261B5094EBF24B2496262E295 ft=1 fh=b095e9304cb25d54 vn="Variante von Win32/Kryptik.CUXP Trojaner" ac=I fn="I:\Daten von Thomas\Downloads\Wondershare_Streaming_Audio_Recorder_2_0_0_21_keygen.exe"
sh=2429E5A5A0FA061FA81F1071E3F990B3DC95D0F1 ft=0 fh=0000000000000000 vn="Variante von Win32/Kryptik.CUXP Trojaner" ac=I fn="I:\Daten von Thomas\Downloads\Wondershare_Streaming_Audio_Recorder_2_0_0_21_keygen.zip"
sh=070A30D95788682ED95E275637F96FEE47FDB826 ft=1 fh=96dde93980c9f97f vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="I:\Daten von Thomas\Downloads\Tversity Meida Server Pro 2-4 Upload by Sheytan\Tversity Meida Server Pro 2-4 Upload by Sheytan\TVersityProSetup_2_4.exe"
sh=8BED1E2D2077FF0261B5094EBF24B2496262E295 ft=1 fh=b095e9304cb25d54 vn="Variante von Win32/Kryptik.CUXP Trojaner" ac=I fn="I:\Daten von Thomas\Downloads\Wondershare_Streaming_Audio_Recorder_2_0_0_21_keygen\Wondershare_Streaming_Audio_Recorder_2_0_0_21_keygen.exe"
sh=E5C81E3F5F0B76B2E411CD78CF44E60F59772654 ft=1 fh=38c39ef1d05a6f6c vn="Win32/OutBrowse.G evtl. unerwünschte Anwendung" ac=I fn="I:\Download\setup.exe"
sh=0FA2D7DC27E4D5BD18B0DA19FE74A666368A4298 ft=0 fh=0000000000000000 vn="Variante von Win32/Packed.VMProtect.ABD Trojaner" ac=I fn="I:\Download\AnyDVD HD v7.4.6.0\AnyDVD HD v7.4.6.0\Crack.rar"
sh=8738D9542C2E25375AC8F14A19F5E5F3D389AEDC ft=0 fh=0000000000000000 vn="Variante von Android/AdDisplay.AppFlood.A evtl. unerwünschte Anwendung" ac=I fn="I:\KFFirstAide\boat\app\com.boatbrowser.free-1.apk"
sh=8EC3A309BB72B512D47E4A302294160551129125 ft=0 fh=0000000000000000 vn="Variante von Android/AdDisplay.Waps.H evtl. unerwünschte Anwendung" ac=I fn="I:\KFFirstAide\lsystem\app\mobi.lockscreen.magiclocker-1.apk"
sh=F5E9083C997BA4D5A27BE8999D37F8FE1B8453EB ft=0 fh=0000000000000000 vn="JS/Agent.NMI Trojaner" ac=I fn="I:\note 3\Famous\apps\YouTube\app\Movietube.apk"

Google Chrome viel werbung und Neue Tabs werden mit Malware geöfnet

Log-Analyse und Auswertung: Google Chrome viel werbung und Neue Tabs werden mit Malware geöfnet