Es öffnen sich immer tabs

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-01-2015
Ran by Dom (administrator) on DOM-PC on 20-01-2015 21:47:28
Running from C:\Users\Dom\Desktop
Loaded Profiles: Dom (Available profiles: Dom)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Realtek) C:\Program Files (x86)\Hama\Wireless LAN RTL8192SU\RtlService.exe
() C:\Program Files (x86)\65CF66DC-5268-40F3-A63A-3DA446B5FAAA\SupraSavingsService64.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(SkypEmoticons) C:\Users\Dom\AppData\Roaming\SkypEmoticons\SE.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(GamersFirst) C:\Users\Dom\AppData\Local\GamersFirst\LIVE!\Live.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
() C:\Program Files (x86)\Verbindungsassistent\WTGService.exe
(hxxp://lucky-tab.com/) C:\Program Files (x86)\LuckyTab\LuckyTab.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Hama\Wireless LAN RTL8192SU\RtWLan.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_257.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_257.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7191768 2013-06-27] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3838800 2014-12-13] (LogMeIn Inc.)
HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\...\Run: [Akamai NetSession Interface] => "C:\Users\Dom\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\...\Run: [XNeat Windows Manager] => C:\Program Files (x86)\XNeat Windows Manager\xnViewer.exe /h
HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\...\Run: [SE] => C:\Users\Dom\AppData\Roaming\SkypEmoticons\SE.exe [5679008 2014-08-01] (SkypEmoticons)
HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\...\MountPoints2: {2f549f8c-db8f-11e3-b61a-814079d3f350} - I:\AutoRun.exe
HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\...\MountPoints2: {2f549f91-db8f-11e3-b61a-814079d3f350} - I:\AutoRun.exe
HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\...\MountPoints2: {84d4a212-dc2f-11e3-bd61-eff50463775c} - I:\AutoRun.exe
HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\...\MountPoints2: {84d4a219-dc2f-11e3-bd61-eff50463775c} - I:\AutoRun.exe
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
AppInit_DLLs-x32: C:\PROGRA~2\SupTab\SEARCH~1.DLL => "C:\PROGRA~2\SupTab\SEARCH~1.DLL" File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Packer.exe.lnk
ShortcutTarget: Packer.exe.lnk -> C:\Users\Dom\AppData\Local\Temp\Phx1F24\Packer.exe (No File)
Startup: C:\Users\Dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GamersFirst LIVE!.lnk
ShortcutTarget: GamersFirst LIVE!.lnk -> C:\Users\Dom\AppData\Local\GamersFirst\LIVE!\Live.exe (GamersFirst)
Startup: C:\Users\Dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:50173;https=127.0.0.1:50173
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StKZmhdFMQ5NhCfKoItf6XvwT60786OsN2fRsWr7MwcQfriQdo5Jm3v51X92Z1fMSvdQkbVoUr4GwxlNee9iO6qND74x7BpaTFDHozoLonnO3QO2eENrFHcsD5FSMIwdkC52BXSX8qIOCqrOhBe-gFvfU5dHjiSPgqEvIa730tvRmt6hvS6eZm9fFLXq3eQUZmgijV-4ScU87-8A,,&q={searchTerms}
HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.gboxapp.com/
HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1401115984&from=tugs&uid=ST1000DM003-1CH162_S1DGCFYMXXXXS1DGCFYM
HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StKZmhdFMQ5NhCfKoItf6XvwT60786OsN2fRsWr7MwcQfriQdo5Jm3v51X92Z1fMSvdQkbVoUr4GwxlNee9iO6qND74x7BpaTFDHozoLonnO3QO2eENrFHcsD5FSMIwdkC52BXSX8qIOCqrOhBe-gFvfU5dHjiSPgqEvIa730tvRmt6hvS6eZm9fFLXq3eQUZmgijV-4ScU87-8A,,&q={searchTerms}
HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/androidnews/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1401115984&from=tugs&uid=ST1000DM003-1CH162_S1DGCFYMXXXXS1DGCFYM
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StKZmhdFMQ5NhCfKoItf6XvwT60786OsN2fRsWr7MwcQfriQdo5Jm3v51X92Z1fMSvdQkbVoUr4GwxlNee9iO6qND74x7BpaTFDHozoLonnO3QO2eENrFHcsD5FSMIwdkC52BXSX8qIOCqrOhBe-gFvfU5dHjiSPgqEvIa730tvRmt6hvS6eZm9fFLXq3eRpe5aMx1njmhCbTGCw,,&q={searchTerms}
SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StKZmhdFMQ5NhCfKoItf6XvwT60786OsN2fRsWr7MwcQfriQdo5Jm3v51X92Z1fMSvdQkbVoUr4GwxlNee9iO6qND74x7BpaTFDHozoLonnO3QO2eENrFHcsD5FSMIwdkC52BXSX8qIOCqrOhBe-gFvfU5dHjiSPgqEvIa730tvRmt6hvS6eZm9fFLXq3eRpe5aMx1njmhCbTGCw,,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1918647982-3898249224-2887807137-1000 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StKZmhdFMQ5NhCfKoItf6XvwT60786OsN2fRsWr7MwcQfriQdo5Jm3v51X92Z1fMSvdQkbVoUr4GwxlNee9iO6qND74x7BpaTFDHozoLonnO3QO2eENrFHcsD5FSMIwdkC52BXSX8qIOCqrOhBe-gFvfU5dHjiSPgqEvIa730tvRmt6hvS6eZm9fFLXq3eQUZmgijV-4ScU87-8A,,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1918647982-3898249224-2887807137-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StKZmhdFMQ5NhCfKoItf6XvwT60786OsN2fRsWr7MwcQfriQdo5Jm3v51X92Z1fMSvdQkbVoUr4GwxlNee9iO6qND74x7BpaTFDHozoLonnO3QO2eENrFHcsD5FSMIwdkC52BXSX8qIOCqrOhBe-gFvfU5dHjiSPgqEvIa730tvRmt6hvS6eZm9fFLXq3eQUZmgijV-4ScU87-8A,,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1918647982-3898249224-2887807137-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3323924&octid=EB_ORIGINAL_CTID&ISID=M797CA29C-A7BA-4E0A-801B-E99293F3A8A5&SearchSource=58&CUI=&UM=6&UP=SP579F24F7-37BB-483B-A368-1F8079EEAE00&q={searchTerms}&SSPV=
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: No Name -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} ->  No File
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: FlowSurf -> {E3F1CA13-EA0E-4617-8D03-3EAA6A94A7E0} -> C:\Program Files (x86)\Flowsurf\FlowSurf.dll (FlowSurf Inc.)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\7yqld4wp.default
FF Homepage: https://www.google.de/webhp?tab=ww&ei=PbpzU8qfEe-ZyQPPgYHgCw&ved=0CBEQ1S4
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF user.js: detected! => C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\7yqld4wp.default\user.js
FF SearchPlugin: C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\7yqld4wp.default\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\7yqld4wp.default\searchplugins\google-maps.xml
FF SearchPlugin: C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\7yqld4wp.default\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\7yqld4wp.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\webssearches.xml
FF Extension: Battlefield Play4Free - C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\7yqld4wp.default\Extensions\battlefieldplay4free@ea.com [2014-10-19]
FF Extension: {1b60a595-3b3d-41a5-8b34-99860bc0ac43} - C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\7yqld4wp.default\Extensions\{1b60a595-3b3d-41a5-8b34-99860bc0ac43}.xpi [2014-11-16]
FF Extension: Skype Notifier - C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\7yqld4wp.default\Extensions\{90072288-4b8f-4d84-8ad2-51e7ba46ee9c}.xpi [2014-11-23]
FF Extension: Adblock Plus - C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\7yqld4wp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-28]
FF HKLM\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\7yqld4wp.default\extensions\quick_start@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF HKLM-x32\...\Firefox\Extensions: [jid1-tofUlNEIFlkUIA@jetpack] - C:\Program Files (x86)\Flowsurf\jid1-tofUlNEIFlkUIA@jetpack
FF Extension: FlowSurf - C:\Program Files (x86)\Flowsurf\jid1-tofUlNEIFlkUIA@jetpack [2014-08-31]
FF HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-11-20]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Website and SEO Analysis) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajkomeiemllejmopbbjjngpmmikfedad [2014-06-11]
CHR Extension: (PCCpnApp) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdmoljnbajpehogniobakooeelbackab [2014-08-01]
CHR Extension: (PageRank) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfcdbaimlghobbjcnedilbjalppkblik [2014-07-10]
CHR Extension: (No Name) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\ceenmgoldhkkegcnlieacjjhndklllkp [2014-05-26]
CHR Extension: (MediaPlayer+) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\dejnaecmjmpnajcpbhkelomfdnjdfgfe [2014-05-26]
CHR Extension: (Lookup Companion for Wikipedia) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhgpkiiipkgmckicafkhcihkcldbdeej [2014-05-17]
CHR Extension: (savE nEt) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehehieojhddcpcebkpnafijofgeabmbn [2014-05-17]
CHR Extension: (Hide Porn Pro - Protect your children for Porn sit) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnekoclofbckijjfldbebkajlclgdcop [2014-06-10]
CHR Extension: (YoutubeAdblocker) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfjchhnjccjjpnefcmljamdieibpfcca [2014-05-17]
CHR Extension: (Post to WordPress) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhmhfcfbheceghfbfjgkjnlhooadpnej [2014-07-16]
CHR Extension: (RioboSSaaver) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjhllnnnghoilbgnmnmldkakiiidcdmf [2014-06-08]
CHR Extension: (DaealsFiNdeRRPreo) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\iepnikcppecmdmnjfmdlegpacimfmfjm [2014-06-10]
CHR Extension: (Boost) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\igckfjdcbkimejmjmpmebffdjjjgncfn [2014-08-23]
CHR Extension: (Facebook Invite Them All) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\jladghljinmlokelojmdmblikkifabea [2014-06-10]
CHR Extension: (Wikipedia Quick Hints) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldnhgfghebflgcndlbppfanbchpgmkna [2014-06-24]
CHR Extension: (CoupExtension) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkcmficdnmneacbgakbbjipdoghgfnbb [2014-06-08]
CHR Extension: (SaveMoaess) - C:\ProgramData\cdkinboglghnebllikdmbbjihlkjdofl\ [2014-06-08]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-09-05] (Adobe Systems) [File not signed]
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-28] (Advanced Micro Devices, Inc.) [File not signed]
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-17] (Avira Operations GmbH & Co. KG)
S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-14] (Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [610688 2014-10-30] ()
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [174624 2014-11-23] (EasyAntiCheat Ltd)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2014-12-02] (LogMeIn, Inc.)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2015-01-10] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-10-21] ()
R2 Realtek11nSU; C:\Program Files (x86)\Hama\Wireless LAN RTL8192SU\RtlService.exe [36864 2010-04-16] (Realtek) [File not signed]
R2 SupraSavingsService64; C:\Program Files (x86)\65CF66DC-5268-40F3-A63A-3DA446B5FAAA\SupraSavingsService64.exe [172544 2014-06-25] () [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WTGService; C:\Program Files (x86)\Verbindungsassistent\WTGService.exe [296400 2009-03-03] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-01] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-01] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-23] (Avira Operations GmbH & Co. KG)
S3 hwdatacard; C:\Windows\SysWOW64\DRIVERS\ewusbmdm.sys [115328 2008-07-24] (Huawei Technologies Co., Ltd.)
R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [46376 2014-06-12] (NetFilterSDK.com)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-20 21:47 - 2015-01-20 21:47 - 00022450 _____ () C:\Users\Dom\Desktop\FRST.txt
2015-01-20 21:47 - 2015-01-20 21:47 - 00000000 ____D () C:\FRST
2015-01-20 21:46 - 2015-01-20 21:46 - 02126848 _____ (Farbar) C:\Users\Dom\Desktop\FRST64.exe
2015-01-20 18:37 - 2015-01-20 18:37 - 00002057 _____ () C:\Users\Dom2\Hama Wireless LAN Utility.lnk
2015-01-20 18:37 - 2015-01-20 18:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hama Wireless LAN
2015-01-20 18:37 - 2015-01-20 18:37 - 00000000 ____D () C:\Program Files (x86)\Cisco
2015-01-20 18:36 - 2015-01-20 18:36 - 00000000 ____D () C:\Program Files (x86)\Hama
2015-01-20 18:36 - 2012-11-12 15:08 - 00692768 ____R (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\rtl8192su.sys
2015-01-20 18:36 - 2009-04-02 10:27 - 00188416 _____ (Realtek Semiconductor Corp. ) C:\Windows\SysWOW64\RTLExtUI.dll
2015-01-20 18:36 - 2009-03-31 14:31 - 00380928 _____ (Realtek) C:\Windows\RtlUI2.exe
2015-01-20 18:36 - 2009-01-05 20:31 - 00000901 _____ () C:\Windows\RtlUI2.exe.manifest
2015-01-20 18:36 - 2008-07-01 12:31 - 00614400 _____ (Realtek Semiconductor Corp. ) C:\Windows\SysWOW64\Rtlihvs.dll
2015-01-17 21:17 - 2015-01-17 21:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-15 17:00 - 2015-01-15 17:00 - 00000000 ____D () C:\Users\Dom\Documents\FIFA World
2015-01-14 19:19 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 19:19 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 19:19 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 19:19 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-01-14 19:19 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-01-14 19:19 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-01-14 19:19 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-14 19:19 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-14 19:19 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-01-14 19:19 - 2014-12-11 18:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 19:19 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 19:19 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-14 19:19 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-14 18:27 - 2015-01-14 18:27 - 00000000 ____D () C:\Users\Dom\Documents\Ghost Games
2015-01-14 18:26 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2015-01-10 19:57 - 2015-01-10 19:58 - 00000000 ____D () C:\Users\Dom\AppData\Local\Arma 3 Launcher
2015-01-10 19:57 - 2015-01-10 19:57 - 00000000 ____D () C:\Users\Dom\AppData\Local\Bohemia_Interactive
2015-01-10 18:46 - 2015-01-10 18:46 - 07718224 _____ (TeamViewer GmbH) C:\Users\Dom\Downloads\TeamViewer36897_Setup_de.exe
2015-01-10 13:42 - 2015-01-10 13:42 - 365494194 _____ () C:\Windows\MEMORY.DMP
2015-01-10 13:42 - 2015-01-10 13:42 - 00000000 ____D () C:\Windows\Minidump
2015-01-08 14:20 - 2015-01-09 18:28 - 00000000 ____D () C:\Users\Dom\Downloads\@BreakingPoint
2015-01-08 14:15 - 2015-01-08 14:15 - 00000847 _____ () C:\Users\Dom2\µTorrent.lnk
2015-01-08 14:14 - 2015-01-08 14:14 - 01688656 _____ (BitTorrent Inc.) C:\Users\Dom\Downloads\uTorrent_3.4.2b37594.exe
2015-01-05 01:43 - 2015-01-10 18:47 - 00001408 _____ () C:\Users\Dom\AppData\Roaming\BreakingPoint_Options.ini
2015-01-05 01:40 - 2015-01-10 17:10 - 00000296 _____ () C:\Users\Dom\AppData\Roaming\BreakingPoint_Login.ini
2015-01-05 01:30 - 2015-01-09 18:32 - 00000000 ____D () C:\Breaking Point
2015-01-05 01:30 - 2015-01-05 01:30 - 00000703 _____ () C:\Users\Dom2\Breaking Point.lnk
2015-01-03 21:37 - 2015-01-03 21:37 - 00329216 _____ (Acer) C:\Users\Dom\Downloads\NFS World Speed Boost Generator by SKIDROWELITE.COM.exe
2015-01-03 05:19 - 2015-01-03 05:19 - 00000000 ___SH () C:\Users\Dom\AppData\Local\LumaEmu
2015-01-03 04:59 - 2015-01-03 05:20 - 00000000 ____D () C:\Program Files (x86)\Keen Software House
2015-01-03 04:37 - 2015-01-03 04:49 - 500998659 _____ (Keen Software House a. s. ) C:\Users\Dom\Downloads\SpaceEngineers_v01.025.020.exe
2015-01-03 04:32 - 2015-01-03 04:33 - 00067481 _____ () C:\Users\Dom\Downloads\New folder.zip
2015-01-03 04:15 - 2015-01-03 04:15 - 00000000 ____D () C:\Users\Dom\AppData\Roaming\SpaceEngineersDedicated
2015-01-02 22:58 - 2015-01-15 19:41 - 00000000 ____D () C:\Users\Dom\AppData\Roaming\SpaceEngineers
2015-01-02 21:38 - 2015-01-10 20:19 - 00000000 ____D () C:\Users\Dom\AppData\Local\Arma 3
2015-01-02 21:38 - 2015-01-04 04:31 - 00000000 ____D () C:\Users\Dom\Documents\Arma 3
2015-01-02 21:38 - 2015-01-02 21:38 - 00000000 ____D () C:\ProgramData\Bohemia Interactive
2014-12-31 05:39 - 2014-12-31 05:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-12-26 18:27 - 2014-12-26 18:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-12-26 18:27 - 2014-12-26 18:27 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-20 21:29 - 2013-05-08 22:54 - 01409548 _____ () C:\Windows\WindowsUpdate.log
2015-01-20 21:05 - 2014-05-14 20:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-20 19:23 - 2014-06-26 20:26 - 00000000 ____D () C:\Program Files\SupraSavings
2015-01-20 19:19 - 2014-08-29 23:18 - 00000000 ____D () C:\ProgramData\Origin
2015-01-20 19:18 - 2014-08-29 23:18 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-01-20 19:11 - 2014-11-02 19:56 - 00009509 _____ () C:\Windows\setupact.log
2015-01-20 18:51 - 2014-05-15 14:01 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-01-20 18:51 - 2009-07-14 05:45 - 00028912 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-20 18:51 - 2009-07-14 05:45 - 00028912 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-20 18:44 - 2014-08-21 11:02 - 00000000 ____D () C:\Users\Dom\AppData\Local\LogMeIn Hamachi
2015-01-20 18:44 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-01-20 18:43 - 2014-08-31 19:58 - 00000000 ____D () C:\Program Files (x86)\Flowsurf
2015-01-20 18:43 - 2014-05-26 15:52 - 00000382 _____ () C:\Windows\Tasks\NewPlayer Update.job
2015-01-20 18:43 - 2014-05-26 15:52 - 00000372 _____ () C:\Windows\Tasks\NewPlayer_wd.job
2015-01-20 18:43 - 2014-05-17 17:11 - 00000448 ____H () C:\Windows\Tasks\SW_Booster-S-131859869.job
2015-01-20 18:42 - 2014-11-17 16:41 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2015-01-20 18:42 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-20 18:40 - 2014-05-16 20:23 - 00000000 ____D () C:\Users\Dom2
2015-01-20 18:38 - 2014-11-02 22:07 - 00009560 _____ () C:\Windows\PFRO.log
2015-01-19 20:15 - 2014-06-21 21:36 - 00000000 ____D () C:\Users\Dom\AppData\Roaming\.minecraft
2015-01-18 21:01 - 2014-05-15 14:29 - 00000000 ____D () C:\Users\Dom\AppData\Roaming\TS3Client
2015-01-18 13:06 - 2014-10-29 23:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-17 22:04 - 2014-10-18 15:13 - 00000000 ____D () C:\Users\Dom\Desktop\Dom
2015-01-17 21:58 - 2014-05-18 19:18 - 00000000 ____D () C:\Users\Dom\Documents\Euro Truck Simulator 2
2015-01-17 00:13 - 2014-11-17 17:32 - 00000000 ____D () C:\Program Files (x86)\OpenVPN
2015-01-15 01:59 - 2014-08-24 22:21 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-15 01:55 - 2014-08-24 22:21 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-15 01:17 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-01-15 01:16 - 2014-11-09 03:37 - 00052311 _____ () C:\Windows\DirectX.log
2015-01-15 00:19 - 2014-08-29 23:21 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2015-01-14 18:27 - 2014-08-29 23:20 - 00000000 ____D () C:\Users\Dom\AppData\Local\Origin
2015-01-14 18:27 - 2014-05-19 16:04 - 00000000 ____D () C:\ProgramData\Electronic Arts
2015-01-14 16:05 - 2014-05-14 20:07 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-14 16:05 - 2014-05-14 20:07 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-14 16:05 - 2014-05-14 20:07 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-01-11 14:44 - 2014-11-21 18:40 - 00000000 ____D () C:\Users\Dom\AppData\Roaming\uTorrent
2015-01-10 20:10 - 2011-04-12 08:43 - 00699150 _____ () C:\Windows\system32\perfh007.dat
2015-01-10 20:10 - 2011-04-12 08:43 - 00149290 _____ () C:\Windows\system32\perfc007.dat
2015-01-10 20:10 - 2009-07-14 06:13 - 01619528 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-10 18:47 - 2014-09-03 22:49 - 00000000 ____D () C:\Users\Dom\AppData\Roaming\TeamViewer
2015-01-10 15:55 - 2014-08-29 23:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-01-06 15:43 - 2014-05-17 16:11 - 00000000 ____D () C:\Users\Dom\AppData\Roaming\Skype
2015-01-03 05:07 - 2014-05-14 18:36 - 00000000 ____D () C:\Users\Dom\AppData\Local\VirtualStore
2015-01-02 21:37 - 2014-08-21 11:16 - 00000000 ____D () C:\ProgramData\Package Cache
2014-12-31 05:39 - 2014-05-17 16:11 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-12-31 05:39 - 2014-05-17 16:11 - 00000000 ____D () C:\ProgramData\Skype
2014-12-26 18:48 - 2014-07-18 12:21 - 00000000 ____D () C:\Users\Dom2\Anderes Zeug
2014-12-23 11:39 - 2014-09-05 22:41 - 00000000 ____D () C:\Users\Dom\AppData\Local\Adobe
2014-12-22 15:20 - 2014-10-21 21:43 - 00347464 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-12-22 15:20 - 2014-06-08 21:42 - 00347464 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-12-22 00:14 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

==================== Files in the root of some directories =======
2015-01-05 01:40 - 2015-01-10 17:10 - 0000296 _____ () C:\Users\Dom\AppData\Roaming\BreakingPoint_Login.ini
2015-01-05 01:43 - 2015-01-10 18:47 - 0001408 _____ () C:\Users\Dom\AppData\Roaming\BreakingPoint_Options.ini
2014-05-17 17:12 - 2014-05-17 17:13 - 0000872 _____ () C:\Users\Dom\AppData\Roaming\LiveSupport.exe_log.txt
2014-05-17 17:12 - 2014-05-17 17:14 - 0000092 _____ () C:\Users\Dom\AppData\Roaming\regsvr32.exe_log.txt
2015-01-03 05:19 - 2015-01-03 05:19 - 0000000 ___SH () C:\Users\Dom\AppData\Local\LumaEmu
2014-08-31 20:10 - 2014-08-31 20:10 - 0301608 _____ (VuuPC Limited) C:\Users\Dom\AppData\Local\nsm3812.tmp

Files to move or delete:
====================
C:\Users\Dom2\DXTBmp.exe


Some content of TEMP:
====================
C:\Users\Dom\AppData\Local\Temp\100scooter.exe
C:\Users\Dom\AppData\Local\Temp\3C4AB238-5544-98D7-269D-E7E54ADC4293.dll
C:\Users\Dom\AppData\Local\Temp\avgnt.exe
C:\Users\Dom\AppData\Local\Temp\bbccabebbccb.exe
C:\Users\Dom\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\Dom\AppData\Local\Temp\drm_dyndata_7410004.dll
C:\Users\Dom\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Dom\AppData\Local\Temp\nAOdBHnHfj.exe
C:\Users\Dom\AppData\Local\Temp\QvfuYYyGTK.exe
C:\Users\Dom\AppData\Local\Temp\Reporter.exe
C:\Users\Dom\AppData\Local\Temp\sdan.exe
C:\Users\Dom\AppData\Local\Temp\sdapk.exe
C:\Users\Dom\AppData\Local\Temp\sdaspwn.exe
C:\Users\Dom\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite10299.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite11026.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite14912.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite15948.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite16109.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite16137.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite20833.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite21460.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite25843.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite28232.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite30396.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite35636.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite39555.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite39899.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite40494.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite43896.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite43971.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite44565.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite44804.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite45157.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite48090.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite49276.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite49483.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite52161.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite58102.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite58857.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite60599.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite67580.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite69833.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite70726.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite76518.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite76732.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite78765.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite82281.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite84111.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite85100.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite88821.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite90649.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite91977.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite94171.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite94421.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite96548.dll
C:\Users\Dom\AppData\Local\Temp\System.Data.SQLite98472.dll
C:\Users\Dom\AppData\Local\Temp\tmd_34011372.exe
C:\Users\Dom\AppData\Local\Temp\tmd_34011810.exe
C:\Users\Dom\AppData\Local\Temp\tmd_34011966.exe
C:\Users\Dom\AppData\Local\Temp\tmd_34011988.exe
C:\Users\Dom\AppData\Local\Temp\tmd_34012118.exe
C:\Users\Dom\AppData\Local\Temp\tmd_34014254.exe
C:\Users\Dom\AppData\Local\Temp\tmd_34016514.exe
C:\Users\Dom\AppData\Local\Temp\VuPC.exe
C:\Users\Dom\AppData\Local\Temp\YourFileDownloaderhp5wu6gph5.exe
C:\Users\Dom\AppData\Local\Temp\YourFileDownloaderiq4v5Q6YQD.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-15 21:40

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-01-2015
Ran by Dom at 2015-01-20 21:48:14
Running from C:\Users\Dom\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7 Days to Die (HKLM-x32\...\Steam App 251570) (Version:  - The Fun Pimps)
A.V.A - Alliance of Valiant Arms (HKLM-x32\...\Steam App 102700) (Version:  - RED DUCK Inc.)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.257 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.257 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
AdPunisher (HKLM-x32\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version:  - AdPunisher) <==== ATTENTION
Agricultural Simulator 2013 Steam Edition (HKLM-x32\...\Steam App 236790) (Version:  - Actalogic)
AMD Catalyst Install Manager (HKLM\...\{9AB0D5B6-4779-8C4F-CA91-A1FEDB56D7EC}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
Another Life Client 1.8 (HKLM-x32\...\{4CCFFF4C-C6D0-48CC-909D-85DD50BEA69D}}_is1) (Version: 1.8 - Tim Witschel Serververmietung)
APB Reloaded (HKLM-x32\...\Steam App 113400) (Version:  - Reloaded Productions)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
Avira (HKLM-x32\...\{df495620-2ba9-412d-828d-b27f020d9fc8}) (Version: 1.1.18.28431 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.18.28431 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Awesomium Redistributable (HKLM-x32\...\{5BCB064B-9F65-4E15-BAFB-669E72E54FD9}) (Version: 1.7.4.2 - SIX Networks GmbH)
Battlefield Play4Free (Dom) (HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\...\{87686C21-8A15-4b4d-A3F1-11141D9BE094}) (Version:  - EA Digital illusions)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version:  - )
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
Bully: Scholarship Edition (HKLM-x32\...\Steam App 12200) (Version:  - Rockstar New England)
Burnout Paradise: The Ultimate Box (HKLM-x32\...\Steam App 24740) (Version:  - Criterion Games)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version:  - Cheat Engine)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
DayZ Commander (HKLM-x32\...\{D4BA1D6D-DACD-4411-9DEC-6BEE3793277E}) (Version: 0.92.95 - Dotjosh Studios)
Dead Island (HKLM-x32\...\Steam App 91310) (Version:  - Techland)
Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.631 - Electronic Arts)
EA SPORTS FIFA World (HKLM-x32\...\{8F9AC744-EEF6-43DB-A4B6-FA1A18F1C640}) (Version: 9.3.0.58666 - Electronic Arts, Inc.)
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
Far Cry 4 (HKLM-x32\...\Steam App 298110) (Version:  - Ubisoft Montreal, Red Storm, Shanghai, Toronto, Kiev)
Fast And Safe (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{64af91bf}) (Version:  - GTgroup) <==== ATTENTION
FL Studio 11 (HKLM-x32\...\FL Studio 11) (Version:  - Image-Line)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free YouTube to MP3 Converter version 3.12.50.1111 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.50.1111 - DVDVideoSoft Ltd.)
GamersFirst LIVE! (HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\...\GamersFirst LIVE!) (Version:  - GamersFirst)
Grand Theft Auto IV (HKLM-x32\...\Steam App 12210) (Version:  - Rockstar North)
Grand Theft Auto: Episodes from Liberty City (HKLM-x32\...\Steam App 12220) (Version:  - Rockstar North / Toronto)
Grand Theft Auto: San Andreas (HKLM-x32\...\Steam App 12120) (Version:  - Rockstar Games)
Hama Wireless LAN Adapter (HKLM-x32\...\{9C049499-055C-4a0c-A916-1D8CA1FF45EB}) (Version: 1.00.0159 - Hama GmbH & Co KG)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Killing Floor (HKLM-x32\...\Steam App 1250) (Version:  - Tripwire Interactive)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.291 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.291 - LogMeIn, Inc.) Hidden
Mafia II (HKLM-x32\...\Steam App 50130) (Version:  - 2K Czech)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 35.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 35.0 (x86 de)) (Version: 35.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.2 - Mozilla)
Need for Speed: Undercover (HKLM-x32\...\Steam App 17430) (Version:  - EA Black Box)
Need for Speed™ Rivals (HKLM-x32\...\{E0A32336-AA27-4053-99B2-C3380B7B95AC}) (Version: 1.4.0.0 - Electronic Arts)
Need For Speed™ World (HKLM-x32\...\{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1) (Version: 1.0.0.659 - Electronic Arts)
Nero 12 Kwik Burn Express Essentials (HKLM-x32\...\{0D343606-1662-45F7-BB3B-F7FC068BA0C5}) (Version: 12.1.00200 - Nero AG)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.21.2812 - Electronic Arts, Inc.)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
PAYDAY: The Heist (HKLM-x32\...\Steam App 24240) (Version:  - OVERKILL Software)
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
PLDS OEM Content (x32 Version: 12.0.0004 - Nero AG) Hidden
PremiumSoft Navicat Lite 10.0 (HKLM-x32\...\PremiumSoft Navicat Lite_is1) (Version:  - PremiumSoft CyberTech Ltd.)
Prerequisite installer (x32 Version: 12.0.0002 - Nero AG) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.0.2 r2161 - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6959 - Realtek Semiconductor Corp.)
Saints Row IV (HKLM-x32\...\Steam App 206420) (Version:  - Deep Silver Volition)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Space Engineers (HKLM-x32\...\Steam App 244850) (Version:  - Keen Software House)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Street Racing Syndicate (HKLM-x32\...\Steam App 292410) (Version:  - Eutechnyx)
SW_Sustainer 1.80 (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{3e9deaca}) (Version:  - Certified Publisher) <==== ATTENTION
TeamSpeak 3 Client (HKU\S-1-5-21-1918647982-3898249224-2887807137-1000\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)
Uplay (HKLM-x32\...\Uplay) (Version: 4.9 - Ubisoft)
Verbindungsassistent (HKLM-x32\...\Verbindungsassistent) (Version: 2.1 - Verbindungsassistent) <==== ATTENTION!
Virtual Audio Cable 4.10 (HKLM\...\Virtual Audio Cable 4.10) (Version:  - )
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
World of Guns: Gun Disassembly (HKLM-x32\...\Steam App 262410) (Version:  - Noble Empire Corp.)
XAMPP (HKLM-x32\...\xampp) (Version: 1.8.3-5 - Bitnami)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

11-01-2015 19:00:06 Windows-Sicherung
14-01-2015 18:25:39 DirectX wurde installiert
15-01-2015 01:15:50 DirectX wurde installiert
15-01-2015 01:55:27 Windows Update
18-01-2015 19:00:06 Windows-Sicherung
20-01-2015 18:36:19 Installiert Hama Wireless LAN Adapter

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {14664E55-B48A-4DFD-9665-C3E6B3C7FA28} - System32\Tasks\{B6698931-54CE-437B-B693-A036B852ED25} => pcalua.exe -a C:\ProgramData\AdPunisher\AdPunisher.exe -c /progname=AdPunisher /progver=3.4.2 /progpub=AdPunisher /proguninstallurl=asdahjka.com /deleteappfolder=0 /deletefile1="C:\Users\Dom\AppData\RoamingappdataFr2.bin" /VERYSILENT
Task: {150E266A-5D75-4AF1-B73B-3CBCFF543907} - System32\Tasks\LuckyTab => C:\Program Files (x86)\LuckyTab\LuckyTab.exe [2014-11-18] (hxxp://lucky-tab.com/) <==== ATTENTION
Task: {75BAAA57-E706-48D4-8598-41AC781AAD34} - System32\Tasks\NewPlayer_wd => C:\Program Files (x86)\NewPlayer\NewPlayerLwruQw.exe
Task: {7DB46EE0-A3C0-4835-A3FF-A05D76355D1A} - System32\Tasks\SW_Booster-S-131859869 => c:\programdata\allaboutapp\sw_booster\SW_Booster.exe <==== ATTENTION
Task: {957356EA-F497-41A9-BD43-CD08A3C316FE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-14] (Adobe Systems Incorporated)
Task: {CC209FAC-FE97-4867-907D-10C7E9215848} - System32\Tasks\fsupdate => C:\Program Files (x86)\Flowsurf\fsupd.exe [2014-04-15] () <==== ATTENTION
Task: {EE312B07-7D1E-4455-BEB3-E6816F686FC7} - System32\Tasks\NewPlayer Update => C:\Program Files (x86)\NewPlayer\NewPlayerLwr.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\NewPlayer Update.job => C:\Program Files (x86)\NewPlayer\NewPlayerLwr.exe
Task: C:\Windows\Tasks\NewPlayer_wd.job => C:\Program Files (x86)\NewPlayer\NewPlayerLwruQw.exe
Task: C:\Windows\Tasks\SW_Booster-S-131859869.job => c:\programdata\allaboutapp\sw_booster\SW_Booster.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2013-03-28 21:31 - 2013-03-28 21:31 - 00210944 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2012-09-23 12:53 - 2012-09-23 12:53 - 00748544 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2012-09-23 12:53 - 2012-09-23 12:53 - 03645952 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2013-03-28 21:30 - 2013-03-28 21:30 - 00073728 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-10-21 21:43 - 2014-10-21 22:27 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-06-25 18:58 - 2014-06-25 18:58 - 00172544 _____ () C:\Program Files (x86)\65CF66DC-5268-40F3-A63A-3DA446B5FAAA\SupraSavingsService64.exe
2014-06-12 20:05 - 2014-06-12 20:05 - 00110080 _____ () C:\Program Files (x86)\65CF66DC-5268-40F3-A63A-3DA446B5FAAA\nfapi.dll
2014-06-12 20:05 - 2014-06-12 20:05 - 00456192 _____ () C:\Program Files (x86)\65CF66DC-5268-40F3-A63A-3DA446B5FAAA\ProtocolFilters.dll
2013-10-29 21:45 - 2013-10-29 21:45 - 00036536 _____ () C:\Program Files\Rainmeter\Rainmeter.exe
2013-10-29 21:45 - 2013-10-29 21:45 - 00798392 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2013-10-29 21:41 - 2013-10-29 21:41 - 00012800 _____ () C:\Program Files\Rainmeter\Plugins\PerfMon.dll
2013-10-29 21:41 - 2013-10-29 21:41 - 00011776 _____ () C:\Program Files\Rainmeter\Plugins\RecycleManager.dll
2014-05-14 19:00 - 2009-03-03 11:45 - 00296400 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGService.exe
2013-03-28 21:30 - 2013-03-28 21:30 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-08-25 11:05 - 2014-07-14 15:49 - 00049744 _____ () C:\Users\Dom\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2012-04-26 23:38 - 2012-04-26 23:38 - 20758016 _____ () C:\Users\Dom\AppData\Local\GamersFirst\LIVE!\libcef.dll
2015-01-20 18:36 - 2009-12-09 21:20 - 00126976 _____ () C:\Program Files (x86)\Hama\Wireless LAN RTL8192SU\EnumDevLib.dll
2014-08-29 19:54 - 2014-12-01 22:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2014-08-29 19:54 - 2014-12-01 22:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2014-08-29 19:54 - 2014-12-01 22:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2014-08-29 19:54 - 2014-12-01 22:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2014-05-15 14:08 - 2014-11-11 19:47 - 00774656 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-01-20 18:51 - 2014-12-02 01:29 - 05002752 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-01-20 18:51 - 2014-12-02 01:29 - 01612800 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-01-20 18:51 - 2014-12-02 01:29 - 01210368 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2014-05-23 21:26 - 2015-01-19 19:49 - 02227904 _____ () C:\Program Files (x86)\Steam\video.dll
2014-08-29 19:54 - 2014-12-01 22:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2014-05-15 14:08 - 2015-01-19 19:49 - 00696000 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-05-15 14:08 - 2015-01-16 00:42 - 34641288 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-08-14 22:25 - 2015-01-16 00:42 - 01709960 _____ () C:\Program Files (x86)\Steam\bin\ffmpegsumo.dll
2014-08-29 23:20 - 2015-01-10 15:55 - 01007104 _____ () C:\Program Files (x86)\Origin\platforms\qwindows.dll
2014-08-29 23:20 - 2015-01-10 15:55 - 00023552 _____ () C:\Program Files (x86)\Origin\imageformats\qgif.dll
2014-08-29 23:20 - 2015-01-10 15:55 - 00024576 _____ () C:\Program Files (x86)\Origin\imageformats\qico.dll
2014-08-29 23:20 - 2015-01-10 15:55 - 00216576 _____ () C:\Program Files (x86)\Origin\imageformats\qjpeg.dll
2014-08-29 23:20 - 2015-01-10 15:55 - 00261120 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll
2014-08-29 23:20 - 2015-01-10 15:55 - 00019456 _____ () C:\Program Files (x86)\Origin\imageformats\qtga.dll
2014-08-29 23:20 - 2015-01-10 15:55 - 00337408 _____ () C:\Program Files (x86)\Origin\imageformats\qtiff.dll
2014-08-29 23:20 - 2015-01-10 15:55 - 00018944 _____ () C:\Program Files (x86)\Origin\imageformats\qwbmp.dll
2015-01-10 15:55 - 2015-01-10 15:55 - 00060928 _____ () C:\Program Files (x86)\Origin\audio\qtaudio_windows.dll
2015-01-17 21:17 - 2015-01-17 21:17 - 03925104 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2015-01-14 16:05 - 2015-01-14 16:05 - 16844464 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-1918647982-3898249224-2887807137-500 - Administrator - Disabled)
Dom (S-1-5-21-1918647982-3898249224-2887807137-1000 - Administrator - Enabled) => C:\Users\Dom
Gast (S-1-5-21-1918647982-3898249224-2887807137-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1918647982-3898249224-2887807137-1003 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/20/2015 06:44:35 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/20/2015 06:40:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/20/2015 06:27:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/20/2015 06:19:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/20/2015 06:06:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/19/2015 06:41:44 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/18/2015 01:45:20 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Origin.exe, Version 9.5.3.636 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2c8

Startzeit: 01d0331810cf7fa2

Endzeit: 10

Anwendungspfad: C:\Program Files (x86)\Origin\Origin.exe

Berichts-ID: d841a03e-9f0f-11e4-a9dc-d43d7ef4c665

Error: (01/18/2015 01:08:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/17/2015 02:25:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/16/2015 07:07:53 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (01/20/2015 06:51:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/20/2015 06:51:44 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (01/20/2015 06:43:54 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.

Error: (01/20/2015 06:43:30 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Realtek11nSU erreicht.

Error: (01/20/2015 06:37:16 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "Realtek11nSU" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (01/20/2015 06:26:04 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Realtek11nSU erreicht.

Error: (01/20/2015 06:05:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "LogMeIn Hamachi Tunneling Engine" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/17/2015 11:14:46 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (01/16/2015 07:07:04 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Realtek11nSU erreicht.

Error: (01/15/2015 04:50:08 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Realtek11nSU erreicht.


Microsoft Office Sessions:
=========================
Error: (01/20/2015 06:44:35 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/20/2015 06:40:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/20/2015 06:27:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/20/2015 06:19:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/20/2015 06:06:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/19/2015 06:41:44 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/18/2015 01:45:20 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Origin.exe9.5.3.6362c801d0331810cf7fa210C:\Program Files (x86)\Origin\Origin.exed841a03e-9f0f-11e4-a9dc-d43d7ef4c665

Error: (01/18/2015 01:08:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/17/2015 02:25:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/16/2015 07:07:53 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2014-08-11 14:15:10.746
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-08-11 14:15:10.696
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Processor: AMD FX(tm)-4130 Quad-Core Processor 
Percentage of memory in use: 51%
Total physical RAM: 4095.18 MB
Available physical RAM: 1977.76 MB
Total Pagefile: 8188.54 MB
Available Pagefile: 5658.38 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:592.35 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F8C768AF)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================