Hey, ich habe mir einen lästigen Virus eingefangen namens "Positive Finds Ads".
Ich habe schon versucht ihn mit Windows Defender zu deinstallieren aber Windows Defender hat gar nichts gefunden auf meinem Rechner, dann habe ich mir Malwarebytes Anti-Malware geholt das auch ein paar Sachen zu Positive Finds Ads gefunden hat aber nach dem ich alles gelöscht habe und den PC neugestartet habe war der Virus noch immer auf meinem Rechner.

Dies stand in dem Log File von MBAW:

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Scan Date: 12.02.2015
Scan Time: 18:20:21
Logfile: bb.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.02.12.04
Rootkit Database: v2015.02.03.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: tobimc6

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 504108
Time Elapsed: 45 min, 24 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 16
PUP.Optional.FindPositive.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{30c85a3d-1d96-4589-b63f-91fb7ef45a41}, Quarantined, [f0a4b06dfe8c34029d6e738dac577090], 
PUP.Optional.FindPositive.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{63c63464-1423-4fdb-ba5d-6f75f491c63e}, Quarantined, [f0a4b06dfe8c34029d6e738dac577090], 
PUP.Optional.FindPositive.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{50F60937-910A-4C05-8E36-FE4E299191CF}, Quarantined, [f0a4b06dfe8c34029d6e738dac577090], 
PUP.Optional.FindPositive.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{50F60937-910A-4C05-8E36-FE4E299191CF}, Quarantined, [f0a4b06dfe8c34029d6e738dac577090], 
PUP.Optional.FindPositive.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{63c63464-1423-4fdb-ba5d-6f75f491c63e}, Quarantined, [f0a4b06dfe8c34029d6e738dac577090], 
PUP.Optional.FindPositive.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{30C85A3D-1D96-4589-B63F-91FB7EF45A41}, Quarantined, [f0a4b06dfe8c34029d6e738dac577090], 
PUP.Optional.Snapdo.T, HKU\S-1-5-21-1166193647-1869122605-558368504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, Quarantined, [ace877a67614a1950ef4f052b35033cd], 
PUP.Optional.Snapdo.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}, Quarantined, [ace877a67614a1950ef4f052b35033cd], 
PUP.Optional.PositiveFinds.A, HKLM\SOFTWARE\WOW6432NODE\PositiveFinds, Quarantined, [3c581508dab0989eba3194f660a3e51b], 
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\Wajam, Quarantined, [395b3ce1107a1422addda263b84d41bf], 
PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-1166193647-1869122605-558368504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, Quarantined, [c6ce8d9024664fe78a029d4fde265fa1], 
PUP.Optional.PriceGong.A, HKU\S-1-5-21-1166193647-1869122605-558368504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, Quarantined, [d6be6eafb3d7e65032d34d4cd92ad52b], 
PUP.Optional.LookThisUp.A, HKU\S-1-5-21-1166193647-1869122605-558368504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\LOOKTHISUP, Quarantined, [3c5853cac3c71422bfe0416239ca728e], 
PUP.Optional.Linkury.A, HKU\S-1-5-21-1166193647-1869122605-558368504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SMARTBAR, Quarantined, [276dbf5ec9c10a2c71e83771b64de719], 
PUP.Optional.Wajam.A, HKU\S-1-5-21-1166193647-1869122605-558368504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WAJAM, Quarantined, [a3f173aa65252511b7d032bc05ff7d83], 
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Wajam, Quarantined, [41536fae0288f541e3897fd3669d649c], 

Registry Values: 5
PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, Quarantined, [9202ec31a6e41422053fb3f249baa65a]
PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, Quarantined, [d6beb06ded9dfb3b22227c29d82b2bd5]
PUP.Optional.LookThisUp.A, HKU\S-1-5-21-1166193647-1869122605-558368504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\LOOKTHISUP|Cohort, 20141024, Quarantined, [3c5853cac3c71422bfe0416239ca728e]
PUP.Optional.Linkury.A, HKU\S-1-5-21-1166193647-1869122605-558368504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SMARTBAR|publisher, YahooCV, Quarantined, [276dbf5ec9c10a2c71e83771b64de719]
PUP.Optional.Wajam.A, HKU\S-1-5-21-1166193647-1869122605-558368504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WAJAM|affiliate_id, 6364, Quarantined, [a3f173aa65252511b7d032bc05ff7d83]

Registry Data: 6
PUP.Optional.HelperBar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolwkCoFEtV9h8HxjHizbXUQsQPxRA7rpUQ3Y9Z6yWCJfD_GeLxYs_iFsSMyPAOdK6NKGwVkvlAlYhWX0TDZ2neiWQu1nsB8HuE7xziwFo6Wtzzk_BfJ7Mqk8VzVdxpawWu1G783RKJrXyuU5hGtYYXB4-XsFsbIasjAYDuRDZ8pWiJVaq8A,,&q={searchTerms}, Good: (www.google.com), Bad: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolwkCoFEtV9h8HxjHizbXUQsQPxRA7rpUQ3Y9Z6yWCJfD_GeLxYs_iFsSMyPAOdK6NKGwVkvlAlYhWX0TDZ2neiWQu1nsB8HuE7xziwFo6Wtzzk_BfJ7Mqk8VzVdxpawWu1G783RKJrXyuU5hGtYYXB4-XsFsbIasjAYDuRDZ8pWiJVaq8A,,&q={searchTerms}),Replaced,[e4b0829b0684082ee30c09a9699c60a0]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-1166193647-1869122605-558368504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolwkCoFEtV9h8HxjHizbXUQsQPxRA7rpUQ3Y9Z6yWCJfD_GeLxYs_iFsSMyPAOdK6NKGwVkvlAlYhWX0TDZ2neiWQu1nsB8HuE7xziwFo6Wtzzk_BfJ7Mqk8VzVdxpawWu1G783RKJrXyuU5hGtYYXB4-XsFsbIar76X-xg4SPHHURRVudg,,&q={searchTerms}, Good: (www.google.com), Bad: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolwkCoFEtV9h8HxjHizbXUQsQPxRA7rpUQ3Y9Z6yWCJfD_GeLxYs_iFsSMyPAOdK6NKGwVkvlAlYhWX0TDZ2neiWQu1nsB8HuE7xziwFo6Wtzzk_BfJ7Mqk8VzVdxpawWu1G783RKJrXyuU5hGtYYXB4-XsFsbIar76X-xg4SPHHURRVudg,,&q={searchTerms}),Replaced,[61339687fe8ce84e29c96e445fa60af6]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-1166193647-1869122605-558368504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolwkCoFEtV9h8HxjHizbXUQsQPxRA7rpUQ3Y9Z6yWCJfD_GeLxYs_iFsSMyPAOdK6NKGwVkvlAlYhWX0TDZ2neiWQu1nsB8HuE7xziwFo6Wtzzk_BfJ7Mqk8VzVdxpawWu1G783RKJrXyuU5hGtYYXB4-XsFsbIar76X-xg4SPHHURRVudg,,&q={searchTerms}, Good: (www.google.com), Bad: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolwkCoFEtV9h8HxjHizbXUQsQPxRA7rpUQ3Y9Z6yWCJfD_GeLxYs_iFsSMyPAOdK6NKGwVkvlAlYhWX0TDZ2neiWQu1nsB8HuE7xziwFo6Wtzzk_BfJ7Mqk8VzVdxpawWu1G783RKJrXyuU5hGtYYXB4-XsFsbIar76X-xg4SPHHURRVudg,,&q={searchTerms}),Replaced,[d9bb2af3e5a560d614ddedc57f86cc34]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-1166193647-1869122605-558368504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolwkCoFEtV9h8HxjHizbXUQsQPxRA7rpUQ3Y9Z6yWCJfD_GeLxYs_iFsSMyPAOdK6NKGwVkvlAlYhWX0TDZ2neiWQu1nsB8HuE7xziwFo6Wtzzk_BfJ7Mqk8VzVdxpawWu1G783RKJrXyuU5hGtYYXB4-XsFsbIar76X-xg4SPHHURRVudg,,&q={searchTerms}, Good: (www.google.com), Bad: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolwkCoFEtV9h8HxjHizbXUQsQPxRA7rpUQ3Y9Z6yWCJfD_GeLxYs_iFsSMyPAOdK6NKGwVkvlAlYhWX0TDZ2neiWQu1nsB8HuE7xziwFo6Wtzzk_BfJ7Mqk8VzVdxpawWu1G783RKJrXyuU5hGtYYXB4-XsFsbIar76X-xg4SPHHURRVudg,,&q={searchTerms}),Replaced,[f79d001dcfbb69cde4103c760bfab050]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-1166193647-1869122605-558368504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolwkCoFEtV9h8HxjHizbXUQsQPxRA7rpUQ3Y9Z6yWCJfD_GeLxYs_iFsSMyPAOdK6NKGwVkvlAlYhWX0TDZ2neiWQu1nsB8HuE7xziwFo6Wtzzk_BfJ7Mqk8VzVdxpawWu1G783RKJrXyuU5hGtYYXB4-XsFsbIar76X-xg4SPHHURRVudg,,&q={searchTerms}, Good: (www.google.com), Bad: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolwkCoFEtV9h8HxjHizbXUQsQPxRA7rpUQ3Y9Z6yWCJfD_GeLxYs_iFsSMyPAOdK6NKGwVkvlAlYhWX0TDZ2neiWQu1nsB8HuE7xziwFo6Wtzzk_BfJ7Mqk8VzVdxpawWu1G783RKJrXyuU5hGtYYXB4-XsFsbIar76X-xg4SPHHURRVudg,,&q={searchTerms}),Replaced,[42528c914248df572cc9219102037c84]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-1166193647-1869122605-558368504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolwkCoFEtV9h8HxjHizbXUQsQPxRA7rpUQ3Y9Z6yWCJfD_GeLxYs_iFsSMyPAOdK6NKGwVkvlAlYhWX0TDZ2neiWQu1nsB8HuE7xziwFo6Wtzzk_BfJ7Mqk8VzVdxpawWu1G783RKJrXyuU5hGtYYXB4-XsFsbIar76X-xg4SPHHURRVudg,,&q={searchTerms}, Good: (www.google.com), Bad: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolwkCoFEtV9h8HxjHizbXUQsQPxRA7rpUQ3Y9Z6yWCJfD_GeLxYs_iFsSMyPAOdK6NKGwVkvlAlYhWX0TDZ2neiWQu1nsB8HuE7xziwFo6Wtzzk_BfJ7Mqk8VzVdxpawWu1G783RKJrXyuU5hGtYYXB4-XsFsbIar76X-xg4SPHHURRVudg,,&q={searchTerms}),Replaced,[ace82df0721830067b75e3cf64a1f50b]

Folders: 18
PUP.Optional.LookThisUp.A, C:\Users\tobimc6\AppData\Roaming\LookThisUp, Quarantined, [cec688957911f640bee0148f8a79f60a], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Resources, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
Rogue.Multiple, C:\ProgramData\374311380, Quarantined, [6a2a54c9a4e60432c93f64dfd42f50b0], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Wajam Internet Enhancer, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.OpenCandy, C:\Users\tobimc6\AppData\Roaming\OpenCandy, Quarantined, [0f85031a56342c0a781fbd9517ec43bd], 
PUP.Optional.OpenCandy, C:\Users\tobimc6\AppData\Roaming\OpenCandy\OpenCandy_611C885857AF41F4995E9FEDDA5AED3B, Quarantined, [0f85031a56342c0a781fbd9517ec43bd], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Search, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Uninstall Wajam, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.PriceGong.A, C:\Users\tobimc6\AppData\LocalLow\PriceGong, Quarantined, [b7dd100d0882ae882eceb79eca39966a], 
PUP.Optional.PlayNowRadio.A, C:\Users\tobimc6\AppData\Local\playnowradio, Quarantined, [deb698852f5bd0665aa58eed30d330d0], 
PUP.Optional.PlayNowRadio.A, C:\Users\tobimc6\AppData\Local\playnowradio\playnowradio, Quarantined, [deb698852f5bd0665aa58eed30d330d0], 
PUP.Optional.PositiveFinds.A, C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602, Quarantined, [92020617dfab3ef8003a41494db642be], 

Files: 126
PUP.Optional.VeriStaff, C:\Program Files (x86)\LPT\LPTInstaller.msi, Quarantined, [c6ce21fc8208979f2267be9fdc246f91], 
PUP.Optional.SmartBar, C:\Program Files (x86)\LPT\Smartbar.Monetization.Proxy.ProxyRemover.exe, Quarantined, [088c30ed6129f244dfa6acb1f20ef907], 
PUP.Optional.VeriStaff, C:\Program Files (x86)\LPT\srptm.exe, Quarantined, [a4f07ba27119c5713950a3ba40c0fc04], 
PUP.Optional.VeriStaff, C:\Program Files (x86)\LPT\srptsl.exe, Quarantined, [9df71d00fd8d979f1373f4694db30cf4], 
PUP.Optional.PlayNowRadio.A, C:\Users\tobimc6\AppData\Local\Temp\playsetup.exe, Quarantined, [c1d399846d1d90a68781cc927b85d42c], 
PUP.Optional.PayByAds.A, C:\Users\tobimc6\AppData\Local\Temp\res.dll, Quarantined, [deb60f0e82085fd731aaaa465ea7b44c], 
PUP.Optional.ClientConnect, C:\Users\tobimc6\AppData\Local\Temp\ct1561552\ieLogic.exe, Quarantined, [8113ba6354362c0af4b9d7ef8d748878], 
PUP.Optional.Conduit.A, C:\Users\tobimc6\AppData\Local\Temp\ct1561552\statisticsStub.exe, Quarantined, [f59f6bb2c2c8d75fdd339c925ea348b8], 
PUP.Adware.Agent, C:\Users\tobimc6\AppData\Local\Temp\PositiveFinds\Setup.exe, Quarantined, [e0b42cf199f18aacc307f70fe917de22], 
PUP.Optional.ClientConnect, C:\Users\tobimc6\AppData\Local\Temp\Hotspot_Shield\tbHots.dll, Quarantined, [a5ef021b3b4f38fe604db511e71af60a], 
PUP.Optional.Giga, C:\Users\tobimc6\Downloads\Bluestacks-App-Player-lnstall.exe, Quarantined, [ade7e23b8bfff4422c3f772d5fa6cb35], 
PUP.Optional.Downloader, C:\Users\tobimc6\Downloads\HDVidCodec.exe, Quarantined, [7e1634e9fe8c072fa7fe2d7c2bda847c], 
PUP.Optional.ClientConnect, C:\Users\tobimc6\AppData\Local\Tbccint\Community Alerts\Alert.dll, Quarantined, [ddb728f556344cea3974dde907faed13], 
PUP.Optional.VeriStaff, C:\Windows\Installer\1fb643f.msi, Quarantined, [fa9abf5e7f0bf442abde57068d73a65a], 
PUP.Optional.LookThisUp.A, C:\Users\tobimc6\AppData\Roaming\LookThisUp\RootCert.cer, Quarantined, [cec688957911f640bee0148f8a79f60a], 
PUP.Optional.LookThisUp.A, C:\Users\tobimc6\AppData\Roaming\LookThisUp\makecert.exe, Quarantined, [cec688957911f640bee0148f8a79f60a], 
PUP.Optional.LookThisUp.A, C:\Users\tobimc6\AppData\Roaming\LookThisUp\storage.bin, Quarantined, [cec688957911f640bee0148f8a79f60a], 
PUP.Optional.Wajam.A, C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.wajam.com_0.localstorage, Quarantined, [deb63fde7a1078be7dda922d877cdc24], 
PUP.Optional.Wajam.A, C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.wajam.com_0.localstorage-journal, Quarantined, [6d27dd40cdbd072f98bf378806fd718f], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\PublisherSettings.xml, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Community.CsharpSqlite.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Community.CsharpSqlite.SQLiteClient.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\linmsl.exe, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\linmsl.exe.config, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\lrrot.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\NewConfig.txt, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Newtonsoft.Json.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Proxy.Lib.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\ProxySettings.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Common.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Communication.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Communication.NamedPipe.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Infrastructure.Utilities.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Monetization.Proxy.ProxyService.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Personalization.Common.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Resources.HistoryAndStatsWrapper.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\smia.exe, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\smia.exe.config, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\smia64.exe, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\smia64.exe.config, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\sppsm.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\spusm.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srbs.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srbu.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\sreu.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srpdm.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srprl.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srpt.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srptc.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srptm.exe.config, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srpts.exe, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srpts.exe.config, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srptsl.exe.config, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srut.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\UserSettings.xml, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\XMLOperations.xml, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs\BrowserSettings.xml, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs\LPTMapping.xml, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs\Timers.xml, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Resources\crdli.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Resources\crdli64.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Resources\crdliL.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Resources\crdliL64.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Resources\LPT.xml, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Resources\ntdis_32.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Resources\ntdis_64.dll, Quarantined, [494b3fde6c1ea4922380943b28db0af6], 
PUP.Optional.Conduit.A, C:\Users\tobimc6\AppData\Local\Temp\conduitinstaller.exe, Quarantined, [4054e23b45459c9a1fa9a367778ebf41], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\uninstall.exe, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\amazon.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\argos.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\ask.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\bestbuy.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\ebay.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\etsy.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\facebook.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\favicon.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\google.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\homedepot.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\ikea.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\imdb.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\lowes.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\mercado.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\mysearchweb.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\myshopping.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\searchresult.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\sears.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\setting.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\settings.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\shopping.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\target.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\tesco.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\tripadvisor.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\twitter.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\wajam.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\walmart.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\wiki.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\yahoo.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos\zalando.ico, Quarantined, [41536fae0288f541e3897fd3669d649c], 
PUP.Optional.OpenCandy, C:\Users\tobimc6\AppData\Roaming\OpenCandy\OpenCandy_611C885857AF41F4995E9FEDDA5AED3B\setup0116.exe, Quarantined, [0f85031a56342c0a781fbd9517ec43bd], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Settings.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\SignIn with Facebook.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\SignIn with Twitter.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Wajam Website.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Search\Ask.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Search\Google.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Search\IMDb.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Search\Shopping.com.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Search\TripAdvisor.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Search\Wikipedia.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Search\Yahoo!.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping\Amazon.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping\Argos.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping\Ebay.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping\Etsy.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping\HomeDepot.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping\Ikea.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping\Lowe's.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping\Mercadolivre.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping\MyShopping.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping\Sears.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping\Target.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping\Tesco.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping\Walmart.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping\Zalando.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Uninstall Wajam\uninstall.lnk, Quarantined, [0c8857c64842f93d7a86252f976caa56], 
PUP.Optional.PositiveFinds.A, C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\temp, Quarantined, [92020617dfab3ef8003a41494db642be], 

Physical Sectors: 0
(No malicious items detected)


(end)
         

Würde mich freuen wenn mir jemand helfen könnte!

LG Tobi

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST.txt


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-02-2015
Ran by tobimc6 (administrator) on TOBIAS on 13-02-2015 22:58:34
Running from C:\Users\tobimc6\Downloads
Loaded Profiles: tobimc6 (Available profiles: tobimc6)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Steganos Software GmbH) C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(Pokki) C:\Users\tobimc6\AppData\Local\Pokki\Engine\HostAppServiceUpdater.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(sDesign) C:\Users\tobimc6\Desktop\Tobias\MySig.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.2.0.17\Lightshot.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
() C:\Program Files (x86)\WhatPulse2\whatpulse.exe
() C:\Program Files (x86)\WhatPulse2\whatpulse-watchdog.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Pokki) C:\Users\tobimc6\AppData\Local\Pokki\Engine\HostAppService.exe
(Pokki) C:\Users\tobimc6\AppData\Local\Pokki\Engine\HostAppService.exe
(Pokki) C:\Users\tobimc6\AppData\Local\Pokki\Engine\StartMenuIndexer.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(TeamSpeak Systems GmbH) C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7573208 2014-04-22] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [SimplePass] => C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [3962936 2014-03-28] (Hewlett-Packard)
HKLM\...\Run: [OPBHOBroker] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [415288 2014-03-28] (Hewlett-Packard)
HKLM\...\Run: [OPBHOBrokerDesktop] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [415288 2014-03-28] (Hewlett-Packard)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2811120 2014-03-13] (Synaptics Incorporated)
HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc)
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [126240 2014-02-13] (Hewlett-Packard Company)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [475448 2014-03-26] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [843480 2014-10-08] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\Run: [Pokki] => "%LOCALAPPDATA%\Pokki\Engine\HostAppServiceUpdater.exe" /LOGON
HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6482200 2014-09-26] (Piriform Ltd)
HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\Run: [WhatPulse] => C:\Program Files (x86)\WhatPulse2\whatpulse.exe [3563520 2014-12-08] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ISCTSystray.lnk
ShortcutTarget: ISCTSystray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk
ShortcutTarget: LOLRecorder.lnk -> C:\Program Files (x86)\LOLReplay\LOLRecorder.exe (LOL Replay)
Startup: C:\Users\tobimc6\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MySig.lnk
ShortcutTarget: MySig.lnk -> C:\Users\tobimc6\Desktop\Tobias\MySig.exe (sDesign)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1166193647-1869122605-558368504-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:51984;https=127.0.0.1:51984
ProxyServer: [S-1-5-21-1166193647-1869122605-558368504-1001] => http=127.0.0.1:63529;https=127.0.0.1:63529
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT14/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT14/4
HKU\S-1-5-21-1166193647-1869122605-558368504-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT14/4
HKU\S-1-5-21-1166193647-1869122605-558368504-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/androidnews/
HKU\S-1-5-21-1166193647-1869122605-558368504-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?ocid=iehp
SearchScopes: HKLM -> {19F23DF0-46C9-4C7B-900A-D0D7D2770637} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {7F3AD80B-5B2C-4B7F-BD00-459665872AB3} URL = 
SearchScopes: HKU\S-1-5-21-1166193647-1869122605-558368504-1001 -> DefaultScope {7F3AD80B-5B2C-4B7F-BD00-459665872AB3} URL = hxxp://trovi.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1561552&CUI=UN34832767181120822&UM=8
SearchScopes: HKU\S-1-5-21-1166193647-1869122605-558368504-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1166193647-1869122605-558368504-1001 -> {7F3AD80B-5B2C-4B7F-BD00-459665872AB3} URL = hxxp://trovi.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1561552&CUI=UN34832767181120822&UM=8
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Hotspot Shield Toolbar - {C95A4E8E-816D-4655-8C79-D736DA1ADB6D} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=10.76.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.76.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\tobimc6\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin HKU\S-1-5-21-1166193647-1869122605-558368504-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\tobimc6\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.de/
CHR StartupUrls: Default -> "https://www.google.com/"
CHR Profile: C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-24]
CHR Extension: (Google Docs) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-24]
CHR Extension: (Google Drive) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-24]
CHR Extension: (OkayFreedom) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckipplcmnfhblnpibpbehenelnkpecd [2014-12-24]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-24]
CHR Extension: (YouTube) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-24]
CHR Extension: (Adblock Plus) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-10-24]
CHR Extension: (Google-Suche) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-24]
CHR Extension: (Google Tabellen) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-24]
CHR Extension: (Calculator) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhgccgjmilgadndgigplchopkfhfcphj [2014-11-27]
CHR Extension: (Tab Renamer) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfkmkfkllgjihelfoflhnkaphiobfkcp [2014-10-24]
CHR Extension: (Google Wallet) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-24]
CHR Extension: (Abios eSports Match Ticker) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\opaikbihdaombgcfglhnmpjjpmjmglnm [2015-01-29]
CHR Extension: (Google Mail) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-24]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 ArcService; C:\Program Files (x86)\Arc\ArcService.exe [88400 2015-02-09] (Perfect World Entertainment Inc)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2013-11-13] (Broadcom Corporation.)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-10-08] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-08] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [782040 2014-10-08] (BlueStack Systems, Inc.)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-01-28] (WildTangent)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation)
R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-01-12] (Hi-Rez Studios) [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2014-01-13] (Hewlett-Packard Company) [File not signed]
R2 HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [469304 2014-03-26] (Hewlett-Packard Development Company, L.P.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-08] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-10] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [200168 2013-12-04] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2631456 2014-12-10] (IObit)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation)
R2 OkayFreedom VPN Starter Service; C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe [324024 2014-12-12] (Steganos Software GmbH)
R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [88064 2014-03-28] (Softex Inc.) [File not signed]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2014-12-30] (Electronic Arts)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [190704 2014-03-13] (Synaptics Incorporated)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-04-02] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-11-13] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7532760 2014-08-07] (Broadcom Corporation)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-10-08] (BlueStack Systems)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
S3 BtwSerialBus; C:\Windows\System32\drivers\BtwSerialBus.sys [150744 2013-09-09] (Broadcom Corporation.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2014-12-22] (REALiX(tm))
R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21408 2013-08-13] ()
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21920 2013-08-13] ()
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [29088 2013-08-13] ()
R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-08-13] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-13] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
U5 RTSPER; C:\Windows\System32\Drivers\RTSPER.sys [466136 2014-01-14] (Realsil Semiconductor Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2014-03-13] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-03-13] (Synaptics Incorporated)
R3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
R3 t_mouse.sys; C:\Windows\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] ()
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)
U3 McAPExe; No ImagePath
U3 McMPFSvc; No ImagePath
U3 McNaiAnn; No ImagePath
U3 mcpltsvc; No ImagePath
U3 mfecore; No ImagePath
U3 MSK80Service; No ImagePath
S3 X6va028; \??\C:\Windows\SysWOW64\Drivers\X6va028 [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-13 22:58 - 2015-02-13 22:59 - 00026196 _____ () C:\Users\tobimc6\Downloads\FRST.txt
2015-02-13 22:57 - 2015-02-13 22:58 - 00000000 ____D () C:\FRST
2015-02-13 22:57 - 2015-02-13 22:57 - 02134016 _____ (Farbar) C:\Users\tobimc6\Downloads\FRST64.exe
2015-02-13 22:44 - 2015-02-13 22:45 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\Arc
2015-02-13 22:39 - 2015-02-13 22:39 - 00001624 _____ () C:\Users\Public\Desktop\Neverwinter.lnk
2015-02-13 22:39 - 2015-02-13 22:39 - 00001600 _____ () C:\Users\Public\Desktop\Arc.lnk
2015-02-13 22:39 - 2015-02-13 22:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
2015-02-13 22:37 - 2015-02-13 22:38 - 00996456 _____ (Perfect World Entertainment) C:\Users\tobimc6\Downloads\Neverwinter_ArcSetup (1).exe
2015-02-13 17:49 - 2015-02-13 17:49 - 00000000 ____D () C:\Users\Public\Documents\Arc
2015-02-13 17:46 - 2015-02-13 22:45 - 00000000 ____D () C:\Program Files (x86)\Arc
2015-02-13 17:44 - 2015-02-13 22:38 - 00000000 ____D () C:\Users\tobimc6\Downloads\Log
2015-02-13 17:44 - 2015-01-09 20:42 - 10308984 _____ (Perfect World Entertainment) C:\Users\tobimc6\Downloads\ArcInstall_NW_20150108.exe
2015-02-13 17:43 - 2015-02-13 17:43 - 00996456 _____ (Perfect World Entertainment) C:\Users\tobimc6\Downloads\Neverwinter_ArcSetup.exe
2015-02-13 16:05 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-13 16:05 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-13 03:32 - 2015-02-13 03:32 - 00000222 _____ () C:\Users\tobimc6\Desktop\ORION Prelude.url
2015-02-12 23:14 - 2015-02-12 23:17 - 00000000 ____D () C:\AdwCleaner
2015-02-12 23:13 - 2015-02-12 23:14 - 02112512 _____ () C:\Users\tobimc6\Downloads\adwcleaner_4.110 (1).exe
2015-02-12 18:16 - 2015-02-13 21:24 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-12 18:16 - 2015-02-12 18:16 - 00001121 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-02-12 18:16 - 2015-02-12 18:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-02-12 18:16 - 2015-02-12 18:16 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-12 18:16 - 2015-02-12 18:16 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-02-12 18:16 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-02-12 18:16 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-02-12 18:16 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-02-12 18:14 - 2015-02-12 18:14 - 01203488 _____ () C:\Users\tobimc6\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
2015-02-12 17:07 - 2015-02-12 17:07 - 00047484 _____ () C:\Users\tobimc6\Documents\cc_20150212_170658.reg
2015-02-12 06:15 - 2015-02-12 06:16 - 00000000 ____D () C:\Users\tobimc6\Downloads\SMF
2015-02-12 06:13 - 2015-02-12 06:13 - 00019145 _____ () C:\Users\tobimc6\Downloads\[kickass.to]spore.with.expansions.cracks.patches.torrent
2015-02-12 06:01 - 2015-02-12 06:01 - 00000000 ____D () C:\Users\tobimc6\Downloads\Portal.2.Crack.Fix-SKIDROW
2015-02-12 06:00 - 2015-02-12 06:00 - 00002568 _____ () C:\Users\tobimc6\Downloads\[kickass.to]portal.2.crack.fix.skidrow.torrent
2015-02-12 05:49 - 2015-02-05 22:01 - 32106640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-02-12 05:49 - 2015-02-05 22:01 - 24768144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-02-12 05:49 - 2015-02-05 22:01 - 18575880 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-02-12 05:49 - 2015-02-05 22:01 - 16017040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-02-12 05:49 - 2015-02-05 22:01 - 13294528 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-02-12 05:49 - 2015-02-05 22:01 - 10773704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-02-12 05:49 - 2015-02-05 22:01 - 10284872 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-02-12 05:48 - 2015-02-05 22:01 - 25460880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 20466496 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 17253848 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 14119744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 13208200 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 10713256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 03610768 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 03247248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 01895240 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434752.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434752.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 00969872 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 00943760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 00929936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 00908104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 00496272 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 00399504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 00390472 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 00345744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 00177624 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 00164752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-02-12 05:48 - 2015-02-05 22:01 - 00027441 _____ () C:\Windows\system32\nvinfo.pb
2015-02-12 05:42 - 2015-02-12 16:58 - 00000000 ____D () C:\Users\tobimc6\Downloads\Far Cry 4 - Gold Edition [Update 7] (2014) PC RePack by R.G. Freedom
2015-02-12 05:38 - 2015-02-12 05:40 - 00000535 _____ () C:\Windows\eReg.dat
2015-02-12 05:28 - 2015-02-12 05:28 - 00000000 ____D () C:\ProgramData\Steam
2015-02-12 05:24 - 2015-02-12 05:24 - 00000295 _____ () C:\Users\tobimc6\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papierkorb.lnk
2015-02-12 05:23 - 2015-02-12 05:52 - 00001213 _____ () C:\Users\tobimc6\Desktop\The Forest.lnk
2015-02-12 05:18 - 2015-02-12 05:18 - 00036584 _____ () C:\Users\tobimc6\Downloads\[kickass.to]far.cry.4.gold.edition.update.7.v.1.7.all.dlc.repack.r.g.freedom.torrent
2015-02-12 05:15 - 2015-02-12 05:30 - 1068963517 ____R () C:\Users\tobimc6\Downloads\SC4 Deluxe.rar
2015-02-12 05:15 - 2015-02-12 05:15 - 00020999 _____ () C:\Users\tobimc6\Downloads\[kickass.to]sim.city.4.deluxe.editon.crack.english.pc.torrent
2015-02-12 05:11 - 2015-02-12 05:21 - 714300945 ____R () C:\Users\tobimc6\Downloads\TheForest_v0.12.zip
2015-02-12 05:11 - 2015-02-12 05:11 - 00014347 _____ () C:\Users\tobimc6\Downloads\[kickass.to]the.forest.v0.12.windows.viruz (2).torrent
2015-02-12 05:11 - 2015-02-12 05:11 - 00000000 ____D () C:\Users\tobimc6\Downloads\Sour Soul Bundle
2015-02-12 05:10 - 2015-02-12 17:15 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\uTorrent
2015-02-12 05:10 - 2015-02-12 05:10 - 00000868 _____ () C:\Users\tobimc6\Desktop\µTorrent.lnk
2015-02-12 05:10 - 2015-02-12 05:10 - 00000000 ____D () C:\ProgramData\APN
2015-02-12 05:09 - 2015-02-12 05:09 - 01740880 _____ (BitTorrent Inc.) C:\Users\tobimc6\Downloads\uTorrent.exe
2015-02-12 05:09 - 2015-02-12 05:09 - 00014347 _____ () C:\Users\tobimc6\Downloads\[kickass.to]the.forest.v0.12.windows.viruz (1).torrent
2015-02-12 05:08 - 2015-02-12 05:08 - 00014347 _____ () C:\Users\tobimc6\Downloads\[kickass.to]the.forest.v0.12.windows.viruz.torrent
2015-02-12 04:56 - 2015-02-12 04:56 - 00000000 ____D () C:\Users\tobimc6\Documents\Camtasia Studio
2015-02-12 04:56 - 2015-02-12 04:56 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\TechSmith
2015-02-12 04:56 - 2015-02-12 04:56 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\TechSmith
2015-02-12 04:54 - 2015-02-12 04:54 - 00001191 _____ () C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2015-02-12 04:54 - 2015-02-12 04:54 - 00000000 ____D () C:\ProgramData\regid.1995-08.com.techsmith
2015-02-12 04:54 - 2015-02-12 04:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2015-02-12 04:54 - 2015-02-12 04:54 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2015-02-12 04:53 - 2015-02-12 04:53 - 00000000 ____D () C:\ProgramData\TechSmith
2015-02-12 04:53 - 2015-02-12 04:53 - 00000000 ____D () C:\Program Files (x86)\TechSmith
2015-02-12 04:50 - 2015-02-12 04:51 - 00140796 _____ () C:\Users\tobimc6\Downloads\CamtasiaStudio8.zip
2015-02-12 04:49 - 2015-02-12 04:52 - 257705272 _____ () C:\Users\tobimc6\Downloads\camtasiade844.exe
2015-02-12 04:40 - 2015-02-12 04:40 - 00002125 _____ () C:\Users\Public\Desktop\Saints Row Gat out of Hell.lnk
2015-02-12 04:39 - 2015-02-12 04:41 - 108122535 _____ () C:\Users\tobimc6\Downloads\Photoshop CS6 13.0.1.1 64 Bit.rar
2015-02-12 04:38 - 2015-02-12 04:46 - 00001997 _____ () C:\Users\tobimc6\Desktop\Photoshop.lnk
2015-02-12 04:38 - 2015-02-12 04:38 - 00003502 _____ () C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-Tobias-tobimc6
2015-02-12 04:38 - 2015-02-12 04:38 - 00000112 ____H () C:\ABF7A91AEAFD
2015-02-12 04:38 - 2015-02-12 04:38 - 00000040 ____H () C:\76C423EA71BC
2015-02-12 04:38 - 2015-02-12 04:38 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2015-02-12 04:37 - 2015-02-12 04:38 - 00000000 ____D () C:\ProgramData\Adobe
2015-02-12 04:33 - 2015-02-12 04:34 - 109007566 _____ () C:\Users\tobimc6\Downloads\PhotoShop CS6.rar
2015-02-12 04:28 - 2015-02-12 04:41 - 00000000 ____D () C:\Program Files (x86)\Saints Row Gat out of Hell
2015-02-12 04:24 - 2015-02-12 04:24 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\Publish Providers
2015-02-12 04:22 - 2015-02-12 04:22 - 00006088 _____ () C:\Windows\system32\--traceoff
2015-02-12 04:22 - 2015-02-12 04:22 - 00001061 _____ () C:\Users\Public\Desktop\Vegas Pro 13.0.lnk
2015-02-12 04:22 - 2015-02-12 04:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-02-12 04:22 - 2015-02-12 04:22 - 00000000 _____ () C:\Windows\system32\--debugoff
2015-02-12 04:21 - 2015-02-12 04:24 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\Sony
2015-02-12 04:21 - 2015-02-12 04:21 - 00000000 ____D () C:\ProgramData\Sony
2015-02-12 04:21 - 2015-02-12 04:21 - 00000000 ____D () C:\Program Files\Sony
2015-02-12 04:21 - 2015-02-12 04:21 - 00000000 ____D () C:\Program Files (x86)\Sony
2015-02-12 04:19 - 2015-02-12 04:24 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\Sony
2015-02-12 04:16 - 2015-02-12 04:17 - 361795390 _____ () C:\Users\tobimc6\Downloads\Sony Vegas Pro 13.0.zip
2015-02-12 04:11 - 2015-02-12 04:15 - 486135020 _____ () C:\Users\tobimc6\Downloads\Saints Row Gat out of Hell.zip
2015-02-12 04:05 - 2015-02-12 04:05 - 02777920 _____ (Beepa Pty Ltd) C:\Users\tobimc6\Downloads\Fraps_v3.5.9_Setup.exe
2015-02-12 04:05 - 2015-02-12 04:05 - 00000577 _____ () C:\Users\Public\Desktop\Fraps.lnk
2015-02-12 04:05 - 2015-02-12 04:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2015-02-12 04:05 - 2015-02-12 04:05 - 00000000 ____D () C:\Fraps
2015-02-12 00:21 - 2015-02-12 00:48 - 00001408 _____ () C:\Users\tobimc6\Desktop\CINEMA 4D.lnk
2015-02-12 00:19 - 2015-02-12 00:48 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\MAXON
2015-02-12 00:13 - 2015-02-12 00:17 - 135961374 _____ () C:\Users\tobimc6\Downloads\Cinema 4D R13 by Intel.rar
2015-02-11 23:32 - 2015-02-11 23:32 - 00001772 _____ () C:\Users\tobimc6\Desktop\Stranded Deep.lnk
2015-02-11 23:31 - 2015-02-11 23:31 - 00000000 ____D () C:\Games
2015-02-11 19:57 - 2015-02-11 19:57 - 158422548 _____ () C:\Users\tobimc6\Downloads\Stranded Deep.zip
2015-02-11 15:52 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 15:52 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 15:52 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-02-11 15:52 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-02-11 15:52 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 15:52 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 15:52 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 15:52 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-02-11 15:52 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-02-11 15:52 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 15:52 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 15:52 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 15:52 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 15:52 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 15:52 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 15:52 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 15:52 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 15:52 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-02-11 15:52 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-02-11 15:52 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-02-11 15:52 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 15:52 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-02-11 15:52 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-02-11 15:52 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-02-11 15:52 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-02-11 15:52 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-02-11 15:51 - 2015-02-04 00:38 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 15:51 - 2015-02-04 00:08 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 15:51 - 2015-02-04 00:08 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 15:51 - 2015-02-03 00:11 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 15:51 - 2015-02-03 00:11 - 00894464 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 15:51 - 2015-02-03 00:11 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 15:51 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2015-02-11 15:51 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 15:51 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 15:51 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 15:51 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 15:51 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-02-11 15:51 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 15:51 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 15:51 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 15:51 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 15:51 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 15:51 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 15:51 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-02-11 15:51 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-02-11 15:51 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-02-11 15:51 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 15:51 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 15:51 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 15:51 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 15:51 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 15:51 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 15:51 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-02-11 15:51 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-02-11 15:51 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-02-11 15:51 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 15:51 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-02-11 15:51 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 15:51 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 15:51 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 15:51 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 15:51 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 15:51 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 15:51 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 15:51 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 15:51 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 15:51 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 15:51 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 15:51 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 15:51 - 2014-12-09 00:12 - 00391526 _____ () C:\Windows\system32\ApnDatabase.xml
2015-02-10 21:53 - 2015-02-10 21:53 - 00893594 _____ () C:\Users\tobimc6\Downloads\OptiFine_1.8.1_HD_U_C7.jar
2015-02-09 07:04 - 2015-02-09 07:04 - 00013044 _____ () C:\Users\tobimc6\Documents\cc_20150209_070400.reg
2015-02-06 23:10 - 2015-02-06 23:10 - 00005895 _____ () C:\Users\tobimc6\Downloads\LOL_OPGG_Observer_1733611120_replay (2).bat
2015-02-06 09:35 - 2015-02-06 09:44 - 205843862 _____ () C:\Users\tobimc6\Downloads\Beatmap Pack #391.rar
2015-02-06 00:31 - 2015-02-06 03:34 - 00003732 _____ () C:\Users\tobimc6\FreeYTVDownloader.xml
2015-02-06 00:31 - 2015-02-06 00:31 - 00000008 _____ () C:\Users\tobimc6\FreeYTVDownloader.xml.lck
2015-02-06 00:09 - 2015-02-06 03:34 - 00000758 _____ () C:\Users\tobimc6\updhelper.xml
2015-02-06 00:09 - 2015-02-06 00:09 - 00001459 _____ () C:\Users\Public\Desktop\Free YouTube Download.lnk
2015-02-06 00:09 - 2015-02-06 00:09 - 00000008 _____ () C:\Users\tobimc6\updhelper.xml.lck
2015-02-06 00:09 - 2015-02-06 00:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-02-06 00:09 - 2015-02-06 00:09 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2015-02-06 00:08 - 2015-02-06 00:09 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2015-02-06 00:07 - 2015-02-06 00:09 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\DVDVideoSoft
2015-02-06 00:06 - 2015-02-06 00:06 - 03533024 _____ (DVDVideoSoft Ltd. ) C:\Users\tobimc6\Downloads\FreeYouTube53Download.exe
2015-02-06 00:04 - 2015-02-06 00:04 - 06725288 _____ () C:\Users\tobimc6\Downloads\Ultimate Blaze Farm By impulseSV.zip
2015-02-05 23:43 - 2015-02-05 23:44 - 00000000 ____D () C:\Program Files (x86)\Minecraft
2015-02-05 23:43 - 2015-02-05 23:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
2015-02-05 23:40 - 2015-02-05 23:41 - 02314240 _____ () C:\Users\tobimc6\Downloads\MinecraftInstaller.msi
2015-02-05 22:20 - 2015-02-05 22:20 - 00000004 _____ () C:\Users\tobimc6\Downloads\498316 (1).flv
2015-02-02 22:37 - 2015-02-02 22:54 - 316623516 _____ () C:\Users\tobimc6\Downloads\3523106_hd.flv
2015-02-02 22:36 - 2015-02-08 21:09 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\FLV and Media Player
2015-02-02 22:35 - 2015-02-02 22:35 - 00001348 _____ () C:\Users\Public\Desktop\FLV and Media Player.lnk
2015-02-02 22:35 - 2015-02-02 22:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Applian Technologies
2015-02-02 22:35 - 2015-02-02 22:35 - 00000000 ____D () C:\Program Files (x86)\Applian Technologies
2015-02-02 22:34 - 2015-02-02 22:34 - 23750568 _____ () C:\Users\tobimc6\Downloads\FLVPlayer4211Install.exe
2015-02-02 22:16 - 2015-02-02 22:16 - 00000000 ____D () C:\Windows\Sun
2015-02-02 22:15 - 2015-02-02 22:14 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-02-02 22:14 - 2015-02-02 22:14 - 00000000 ____D () C:\Program Files (x86)\Java
2015-02-02 22:10 - 2015-02-02 22:10 - 00639400 _____ (Oracle Corporation) C:\Users\tobimc6\Downloads\chromeinstall-8u31.exe
2015-01-31 15:21 - 2015-01-31 15:21 - 00093604 _____ () C:\Users\tobimc6\Documents\cc_20150131_152111.reg
2015-01-31 14:44 - 2015-01-31 14:44 - 00000000 ____D () C:\Users\tobimc6\Documents\Klei
2015-01-27 20:41 - 2015-01-27 20:41 - 00064742 _____ () C:\Users\tobimc6\Documents\ts3_clientui-win64-1407159763-2015-01-27 20_41_12.443293.dmp
2015-01-27 20:27 - 2015-01-27 20:27 - 00000000 ____D () C:\Users\tobimc6\Documents\CyberLink
2015-01-27 20:27 - 2015-01-27 20:27 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\CyberLink
2015-01-26 15:47 - 2015-02-02 22:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-26 15:47 - 2015-01-26 15:46 - 00320424 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-01-26 15:47 - 2015-01-26 15:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-01-26 15:47 - 2015-01-26 15:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-01-26 15:47 - 2015-01-26 15:46 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-01-26 15:46 - 2015-01-26 15:46 - 00000000 ____D () C:\Program Files\Java
2015-01-25 16:36 - 2015-01-25 16:36 - 00000219 _____ () C:\Users\tobimc6\Desktop\Counter-Strike Global Offensive.url
2015-01-25 01:18 - 2015-01-25 01:18 - 00061142 _____ () C:\Users\tobimc6\Documents\ts3_clientui-win64-1407159763-2015-01-25 01_18_32.666797.dmp
2015-01-23 14:14 - 2015-01-10 09:07 - 01895240 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434725.dll
2015-01-23 14:14 - 2015-01-10 09:07 - 01556808 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434725.dll
2015-01-15 07:30 - 2015-01-16 06:53 - 00000731 _____ () C:\Users\tobimc6\Desktop\ATLauncher.lnk
2015-01-15 07:28 - 2015-01-27 15:33 - 00000092 _____ () C:\Users\tobimc6\.atl.properties
2015-01-14 01:03 - 2015-01-14 01:03 - 00001350 _____ () C:\Users\tobimc6\Downloads\BR1_451168197.bat

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-13 22:59 - 2014-11-03 18:27 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\whatpulse
2015-02-13 22:53 - 2014-10-26 06:37 - 00000000 ___RD () C:\Users\tobimc6\Desktop\Tobias
2015-02-13 22:48 - 2014-10-24 21:29 - 00001132 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-13 22:47 - 2014-10-29 17:35 - 00000406 _____ () C:\Windows\Tasks\update-sys.job
2015-02-13 22:44 - 2014-10-24 09:58 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1166193647-1869122605-558368504-1001
2015-02-13 22:39 - 2014-05-07 09:41 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-13 22:29 - 2014-10-24 11:41 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{BEEC1C59-833B-4D70-AD37-0DB72CB5D743}
2015-02-13 22:27 - 2014-10-28 09:07 - 01399337 _____ () C:\Windows\WindowsUpdate.log
2015-02-13 22:15 - 2014-10-24 21:46 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\.minecraft
2015-02-13 22:02 - 2014-10-28 09:21 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-13 22:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2015-02-13 21:49 - 2014-10-24 20:20 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\TS3Client
2015-02-13 21:16 - 2014-10-29 17:35 - 00000406 _____ () C:\Windows\Tasks\update-S-1-5-21-1166193647-1869122605-558368504-1001.job
2015-02-13 21:16 - 2014-10-24 22:03 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-02-13 21:14 - 2014-10-24 09:54 - 00000000 ____D () C:\Users\tobimc6\Documents\Youcam
2015-02-13 21:12 - 2014-10-24 21:29 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-13 21:11 - 2014-10-28 09:06 - 00012933 _____ () C:\Windows\setupact.log
2015-02-13 21:11 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-13 21:10 - 2014-11-04 18:54 - 00771002 _____ () C:\Windows\PFRO.log
2015-02-13 21:09 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-02-13 02:33 - 2014-10-24 09:51 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\Pokki
2015-02-12 19:27 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-02-12 18:07 - 2014-10-25 02:59 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-02-12 05:51 - 2014-05-20 12:22 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-12 05:41 - 2014-05-20 12:35 - 00000000 ____D () C:\ProgramData\CyberLink
2015-02-12 04:55 - 2014-10-24 09:51 - 00000000 ____D () C:\Users\tobimc6
2015-02-12 04:38 - 2014-10-25 03:24 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\Adobe
2015-02-12 04:38 - 2014-10-24 09:53 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\Adobe
2015-02-12 03:34 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-02-12 03:22 - 2013-08-22 15:44 - 00354344 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-12 03:19 - 2014-12-11 20:02 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-12 03:19 - 2014-10-26 09:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-12 03:18 - 2014-10-26 07:53 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-12 03:09 - 2014-10-26 07:53 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-10 18:57 - 2014-12-22 09:20 - 00000000 ____D () C:\ProgramData\ProductData
2015-02-10 02:36 - 2014-11-01 20:09 - 00003172 _____ () C:\Windows\System32\Tasks\HPCeeScheduleFortobimc6
2015-02-10 02:36 - 2014-11-01 20:09 - 00000354 _____ () C:\Windows\Tasks\HPCeeScheduleFortobimc6.job
2015-02-09 22:48 - 2014-10-28 11:47 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2015-02-09 22:47 - 2014-10-28 11:45 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\Battle.net
2015-02-09 06:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-08 21:01 - 2014-11-04 14:18 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\osu!
2015-02-08 19:59 - 2014-10-24 14:04 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\CrashDumps
2015-02-08 18:33 - 2014-05-07 18:54 - 00801992 _____ () C:\Windows\system32\perfh007.dat
2015-02-08 18:33 - 2014-05-07 18:54 - 00174994 _____ () C:\Windows\system32\perfc007.dat
2015-02-08 18:33 - 2014-03-18 10:53 - 01924576 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-08 18:27 - 2014-10-29 17:36 - 00000000 ____D () C:\Users\tobimc6\Documents\Lightshot
2015-02-08 00:02 - 2014-10-28 11:45 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2015-02-07 20:27 - 2014-11-01 20:09 - 00000166 _____ () C:\Windows\SysWOW64\DOErrors.log
2015-02-06 09:43 - 2014-10-24 21:29 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-06 09:43 - 2014-10-24 21:29 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-05 22:02 - 2014-10-28 09:21 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-05 22:01 - 2014-12-23 20:11 - 02902784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-02-05 22:01 - 2014-05-20 12:21 - 03299512 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-02-05 20:07 - 2014-05-20 12:22 - 06861128 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-02-05 20:07 - 2014-05-20 12:22 - 03517584 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-02-05 20:07 - 2014-05-20 12:22 - 02558792 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-02-05 20:07 - 2014-05-20 12:22 - 00935056 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-02-05 20:07 - 2014-05-20 12:22 - 00062792 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-02-05 20:06 - 2014-05-20 12:22 - 01098384 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2015-02-05 20:06 - 2014-05-20 12:22 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-02-05 20:06 - 2014-05-20 12:22 - 00074896 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2015-02-05 13:50 - 2014-05-20 12:22 - 04236870 _____ () C:\Windows\system32\nvcoproc.bin
2015-02-03 20:31 - 2014-10-26 09:23 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2014-10-26 09:23 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-27 20:48 - 2014-10-25 05:36 - 00000000 ____D () C:\Users\tobimc6\Documents\My Games
2015-01-27 20:27 - 2014-10-24 09:54 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\CyberLink
2015-01-27 20:27 - 2014-05-20 13:15 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2015-01-25 18:38 - 2014-10-30 20:24 - 00052516 _____ () C:\Windows\DirectX.log
2015-01-16 07:41 - 2014-12-16 18:57 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-01-16 07:41 - 2014-12-16 18:57 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-01-16 07:41 - 2014-05-20 12:23 - 01514528 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-01-16 07:41 - 2014-05-20 12:23 - 01278920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-01-14 22:45 - 2014-10-28 12:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live

==================== Files in the root of some directories =======

2014-10-24 20:28 - 2014-10-24 20:28 - 0000040 _____ () C:\Program Files (x86)\errorlog.txt
2006-03-29 05:29 - 2008-08-14 19:43 - 0057344 _____ () C:\Program Files (x86)\MySigUpdater.exe
2014-10-24 20:28 - 2014-10-24 22:31 - 0000306 _____ () C:\Program Files (x86)\setup.ini
2014-10-29 17:35 - 2014-10-29 17:35 - 0000003 _____ () C:\Users\tobimc6\AppData\Local\updater.log
2014-10-29 17:35 - 2014-12-18 17:28 - 0000425 _____ () C:\Users\tobimc6\AppData\Local\UserProducts.xml

Files to move or delete:
====================
C:\Users\tobimc6\jagex_cl_runescape_LIVE.dat
C:\Users\tobimc6\random.dat


Some content of TEMP:
====================
C:\Users\tobimc6\AppData\Local\Temp\amazonicon_v10.exe
C:\Users\tobimc6\AppData\Local\Temp\amazoninstallernircmdc.exe
C:\Users\tobimc6\AppData\Local\Temp\AutoRun.exe
C:\Users\tobimc6\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\tobimc6\AppData\Local\Temp\bdfilters.dll
C:\Users\tobimc6\AppData\Local\Temp\BlueStacks_0.9.6.exe
C:\Users\tobimc6\AppData\Local\Temp\COMAP.EXE
C:\Users\tobimc6\AppData\Local\Temp\FreeYouTubeDownload.exe
C:\Users\tobimc6\AppData\Local\Temp\HssInstaller64.exe
C:\Users\tobimc6\AppData\Local\Temp\oct21D1.tmp.exe
C:\Users\tobimc6\AppData\Local\Temp\oct4A5B.tmp.exe
C:\Users\tobimc6\AppData\Local\Temp\oct6C0F.tmp.exe
C:\Users\tobimc6\AppData\Local\Temp\octD3DE.tmp.exe
C:\Users\tobimc6\AppData\Local\Temp\octEAD5.tmp.exe
C:\Users\tobimc6\AppData\Local\Temp\sdan.exe
C:\Users\tobimc6\AppData\Local\Temp\sdapk.exe
C:\Users\tobimc6\AppData\Local\Temp\sdaspwn.exe
C:\Users\tobimc6\AppData\Local\Temp\utt8251.tmp.exe
C:\Users\tobimc6\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-08 15:53

==================== End Of Log ============================
         

--- --- ---



Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-02-2015
Ran by tobimc6 at 2015-02-13 23:01:01
Running from C:\Users\tobimc6\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\uTorrent) (Version: 3.4.2.38656 - BitTorrent Inc.)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.4.144 - Adobe Systems, Inc.)
Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - Bandisoft.com)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
BigMacroTool 1.5 (HKLM-x32\...\{620CAD2D-0757-43A9-AA5F-C8D48A1E4D85}_is1) (Version:  - TLProd)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.4.4079 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{8DCCC556-265B-478A-8B32-C12DA988BA74}) (Version: 0.9.4.4079 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 6.223.215.5 - Broadcom Corporation)
Broadcom Bluetooth Drivers (HKLM\...\{0A1B4690-E176-4533-8058-939480AEE1D0}) (Version: 12.0.0.9130 - Broadcom Corporation)
Build-a-lot (x32 Version: 2.2.0.98 - WildTangent) Hidden
Building the Great Wall of China Collector's Edition (x32 Version: 3.0.2.48 - WildTangent) Hidden
Camtasia Studio 8 (HKLM-x32\...\{6BED66AA-1DC6-474B-AC70-205CC3A68A39}) (Version: 8.4.4.1859 - TechSmith Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
CPUID HWMonitor 1.25 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
Crazy Chicken Soccer (x32 Version: 2.2.0.110 - WildTangent) Hidden
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.6.3728 - CyberLink Corp.)
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.4.4824 - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.6.3821 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.6.3604 - CyberLink Corp.)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.3709 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.3.3907 - CyberLink Corp.)
DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden
Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Dragon's Prophet (HKLM-x32\...\{C31556D7-F2B9-4787-B223-F7A035067E89}_is1) (Version: 2.2.1473.30 - Infernum Productions AG)
Energy Star (HKLM\...\{465CA2B6-98AF-4E77-BE22-A908C34BB9EC}) (Version: 1.0.9 - Hewlett-Packard Company)
Farm Frenzy (x32 Version: 2.2.0.98 - WildTangent) Hidden
FLV and Media Player 4.2.1.1 (HKLM-x32\...\FLV and Media Player) (Version: 4.2.1.1 - Applian Technologies)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free YouTube Download version 3.2.53.128 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.53.128 - DVDVideoSoft Ltd.)
Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)
Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Host App Service (HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\Pokki) (Version: 0.269.5.375 - Pokki)
HP 3D DriveGuard (HKLM-x32\...\{F90A86C9-7779-47DD-AC06-8EE832C55F55}) (Version: 6.0.18.1 - Hewlett-Packard Company)
HP CoolSense (HKLM-x32\...\{E2C8D0C2-1C97-4C05-939A-5B13A0FE655C}) (Version: 2.20.31 - Hewlett-Packard Company)
HP Documentation (HKLM-x32\...\{082B1425-0F24-43FA-9B64-E8F617B0AD3B}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.7493.4758 - Hewlett-Packard)
HP SimplePass (HKLM-x32\...\InstallShield_{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.01.11 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{8C696B4B-6AB1-44BC-9416-96EAC474CABE}) (Version: 7.5.2.12 - Hewlett-Packard Company)
HP System Event Utility (HKLM-x32\...\{DEF23826-DB71-4654-BC00-D5D6C20802EA}) (Version: 1.1.4 - Hewlett-Packard Company)
HP Utility Center (HKLM\...\{36F80C5F-DC0D-4DF4-AF09-DC1867F0EB0A}) (Version: 2.4.4 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)
Inst5675 (Version: 8.01.11 - Softex Inc.) Hidden
Inst5676 (Version: 8.01.11 - Softex Inc.) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.9.1000 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{8B4EA042-9E21-46FB-8286-225F4D51CC52}) (Version: 4.2.41.2710 - Intel Corporation)
Java 7 Update 76 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417076FF}) (Version: 7.0.760 - Oracle)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Lightshot-5.2.0.17 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.2.0.17 - Skillbrains)
LIMBO (HKLM-x32\...\Steam App 48000) (Version:  - Playdead)
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.20 - www.leaguereplays.com)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
MySig 1.44.40.1  (HKLM-x32\...\MySig) (Version: 1.44.40.1 - sDesign)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.52 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OkayFreedom (HKLM-x32\...\{3F3FB10C-7175-4D38-9335-3488B89C12AF}) (Version: 1.4.1 - Steganos Software GmbH)
Origin (HKLM-x32\...\Origin) (Version: 9.5.3.636 - Electronic Arts, Inc.)
ORION: Prelude (HKLM-x32\...\Steam App 104900) (Version:  - Spiral Game Studios)
osu! (HKLM-x32\...\{cdecc544-edb4-441a-85e9-3036ffc2a7ba}) (Version: latest - ppy Pty Ltd)
Path of Exile (HKLM-x32\...\{90A4562F-D4A1-4B65-906D-41F236CF6902}) (Version: 1.2.4.37002 - Grinding Gear Games)
Plants vs. Zombies - Game of the Year (x32 Version: 3.0.2.51 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
RaidCall (HKLM-x32\...\RaidCall) (Version: 7.3.6-1.0.12972.94 - raidcall.com)
Ranch Rush 2 - Premium Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.273.40 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.24.1218.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7231 - Realtek Semiconductor Corp.)
Saints Row Gat out of Hell (HKLM-x32\...\Saints Row Gat out of Hell_is1) (Version: 1.0 - Релиз от R.G. Steamgames)
SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 1.0.2531.0 - Hi-Rez Studios)
Start Menu (HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\Pokki_Start_Menu) (Version: 0.269.5.375 - Pokki)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Strife (HKLM-x32\...\Strife) (Version:  - S2 Games)
Super Meat Boy (HKLM-x32\...\Steam App 40800) (Version:  - Team Meat)
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 18.1.5.2 - Synaptics Incorporated)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
TERA (HKLM-x32\...\{A2F166A0-F031-4E27-A057-C69733219434}_is1) (Version: 28 - Gameforge Productions GmbH)
Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)
Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden
Unity Web Player (HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\UnityWebPlayer) (Version: 4.6.0f2 - Unity Technologies ApS)
Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Vacation Quest™ - Australia (x32 Version: 3.0.2.32 - WildTangent) Hidden
Vegas Pro 13.0 (64-bit) (HKLM\...\{D0360940-CCC6-11E3-B9C6-F04DA23A5C58}) (Version: 13.0.310 - Sony)
Virtual Families (x32 Version: 2.2.0.98 - WildTangent) Hidden
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
WhatPulse version 2.4.1 (HKLM-x32\...\{95CC8D5F-90A1-4285-9B2D-8D0FBCFD8D0D}_is1) (Version: 2.4.1 - WhatPulse)
WildTangent Games App für HP (x32 Version: 4.0.11.2 - WildTangent) Hidden
WildTangent-Spiele (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Youda Jewel Shop (x32 Version: 3.0.2.51 - WildTangent) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1166193647-1869122605-558368504-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points  =========================

29-01-2015 17:00:38 Windows Update
31-01-2015 14:54:05 DirectX wurde installiert
05-02-2015 23:41:57 Installed Minecraft
12-02-2015 03:08:16 Windows Update
13-02-2015 17:45:49 Installiert Arc

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2015-02-12 04:55 - 00001553 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0059AC97-50F5-4DE0-9A49-DEA868644CAA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {178EC412-C43D-411F-A137-2FFB201A4518} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-02-12] (Microsoft Corporation)
Task: {2E2235D0-E2E4-47EC-B015-1F2AA3F6AE00} - System32\Tasks\{72D2B265-7AFD-4904-B856-F553BCA8184A} => pcalua.exe -a C:\Users\tobimc6\AppData\Local\Unity\WebPlayer\Uninstall.exe -c /CurrentUser
Task: {458970BC-E8BC-4F22-8647-274B2507C471} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-24] (Google Inc.)
Task: {490E7082-3977-4378-B569-6BDE3B426D43} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-24] (Google Inc.)
Task: {56E8E625-6603-41C7-8119-AAB9680923FB} - System32\Tasks\{22EEE64C-D840-44A1-A7F3-49CC0EAB5C0D} => pcalua.exe -a "C:\Program Files (x86)\Z8Games\CrossFire\CF_G4box.exe" -d "C:\Program Files (x86)\Z8Games\CrossFire"
Task: {57775F9D-AFB7-489B-B1FD-3FF1E8656E51} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2013-11-01] (Hewlett-Packard Development Company, L.P.)
Task: {71BDBEAC-84F2-4B53-AD05-728C2D744307} - System32\Tasks\HPCeeScheduleFortobimc6 => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {7DD44CDF-36D9-4C1F-92DD-B2A02EDBC99D} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] ()
Task: {899FD794-B27D-4470-9CBB-76DFD02D1680} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-01-13] (Hewlett-Packard Company)
Task: {98462573-5D68-4F2F-9B4B-8FFC8DEE1D26} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-10-21] (Hewlett-Packard)
Task: {9A67B9BF-E3CF-4633-9958-A33E27782FD0} - System32\Tasks\Driver Booster SkipUAC (tobimc6) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {A7D760E0-5FF2-4493-BE8A-D04147F5137C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-01-13] (Hewlett-Packard Company)
Task: {B8DEF522-56D1-4355-A99B-530BFCE9AA61} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {BE2192DA-BE72-491B-93D5-1B5B8269AF59} - System32\Tasks\AdobeAAMUpdater-1.0-Tobias-tobimc6 => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
Task: {C7D76A6E-CAFD-4E99-B691-B8A475F20C00} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2014-03-07] (CyberLink Corp.)
Task: {C84A2F11-F1AE-4B71-8269-D9B5AEE6A454} - System32\Tasks\update-S-1-5-21-1166193647-1869122605-558368504-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] ()
Task: {E0426ECA-E7F2-42EA-849D-CDE36E9178F5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-10-21] (Hewlett-Packard)
Task: {EE6FC511-4366-43B3-8379-680CA7317910} - System32\Tasks\Uninstaller_SkipUac_tobimc6 => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {F07B103B-48AA-49EC-AB58-67E35858FE18} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-09-26] (Piriform Ltd)
Task: {F10A4340-3408-4FDA-B94A-EEE6AE85CD0D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleFortobimc6.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\Uninstaller_SkipUac_Administrator.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: C:\Windows\Tasks\Uninstaller_SkipUac_tobimc6.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: C:\Windows\Tasks\update-S-1-5-21-1166193647-1869122605-558368504-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Loaded Modules (whitelisted) ==============

2014-05-20 12:22 - 2015-02-05 20:07 - 00117576 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-03-28 12:31 - 2014-03-28 12:31 - 02110464 _____ () C:\Program Files\Hewlett-Packard\SimplePass\autheng.dll
2014-03-28 12:27 - 2014-03-28 12:27 - 00021504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\cryptodll.dll
2014-03-28 12:27 - 2014-03-28 12:27 - 00035328 _____ () C:\Program Files\Hewlett-Packard\SimplePass\ssplogon.dll
2014-03-28 12:27 - 2014-03-28 12:27 - 00055296 _____ () C:\Program Files\Hewlett-Packard\SimplePass\RandomPass.dll
2014-03-28 12:48 - 2014-03-28 12:48 - 00367504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\mstrpwd.dll
2014-03-28 12:48 - 2014-03-28 12:48 - 00712080 _____ () C:\Program Files\Hewlett-Packard\SimplePass\GraphicalPwd.dll
2013-12-04 07:44 - 2013-12-04 07:44 - 00200168 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2013-12-04 07:44 - 2013-12-04 07:44 - 00054760 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2013-12-04 07:44 - 2013-12-04 07:44 - 00034792 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll
2014-03-28 12:36 - 2014-03-28 12:36 - 00065024 _____ () C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
2014-11-03 18:26 - 2014-12-08 14:55 - 03563520 _____ () C:\Program Files (x86)\WhatPulse2\whatpulse.exe
2014-11-03 18:26 - 2014-09-27 16:24 - 00664064 _____ () C:\Program Files (x86)\WhatPulse2\whatpulse-watchdog.exe
2014-02-28 10:14 - 2014-02-28 10:14 - 00173568 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\quazip.dll
2014-02-27 15:51 - 2014-02-27 15:51 - 01080832 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\platforms\qwindows.dll
2014-02-27 15:51 - 2014-02-27 15:51 - 00833024 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\sqldrivers\qsqlite.dll
2014-08-04 14:43 - 2014-08-04 14:43 - 00102344 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2014-08-04 14:43 - 2014-08-04 14:43 - 00108488 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2014-02-27 15:51 - 2014-02-27 15:51 - 00030208 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\imageformats\qgif.dll
2014-02-27 15:51 - 2014-02-27 15:51 - 00233984 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\imageformats\qjpeg.dll
2014-08-04 14:46 - 2014-08-04 14:46 - 00563656 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2014-08-04 14:46 - 2014-08-04 14:46 - 00579016 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-02-27 15:51 - 2014-02-27 15:51 - 00159232 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll
2014-11-03 18:26 - 2013-04-08 09:34 - 00039936 _____ () C:\Program Files (x86)\WhatPulse2\CrashRpt1402.dll
2014-11-03 18:26 - 2014-09-03 22:26 - 00875520 _____ () C:\Program Files (x86)\WhatPulse2\platforms\qwindows.dll
2014-05-20 12:12 - 2013-12-10 16:27 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-01-04 05:06 - 2015-01-04 05:06 - 00569856 _____ () C:\Users\tobimc6\AppData\Local\Pokki\Engine\ppGoogleNaClPluginChrome.dll
2015-01-04 05:06 - 2015-01-04 05:06 - 01400846 _____ () C:\Users\tobimc6\AppData\Local\Pokki\Engine\avcodec-54.dll
2015-01-04 05:06 - 2015-01-04 05:06 - 00151054 _____ () C:\Users\tobimc6\AppData\Local\Pokki\Engine\avutil-51.dll
2015-01-04 05:06 - 2015-01-04 05:06 - 00222734 _____ () C:\Users\tobimc6\AppData\Local\Pokki\Engine\avformat-54.dll
2015-02-06 23:56 - 2015-02-04 10:02 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libglesv2.dll
2015-02-06 23:56 - 2015-02-04 10:02 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libegl.dll
2015-02-06 23:56 - 2015-02-04 10:02 - 09170760 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\pdf.dll
2015-02-06 23:56 - 2015-02-04 10:02 - 14965064 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1166193647-1869122605-558368504-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\tobimc6\Pictures\fe76PZi.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\StartupFolder: => "LOLRecorder.lnk"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\StartupApproved\Run: => "Optimizer Pro"
HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\StartupApproved\Run: => "Browser Infrastructure Helper"
HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\StartupApproved\Run: => "OKAYFREEDOM_Agent"

==================== Accounts: =============================

Administrator (S-1-5-21-1166193647-1869122605-558368504-500 - Administrator - Disabled)
Gast (S-1-5-21-1166193647-1869122605-558368504-501 - Limited - Disabled)
tobimc6 (S-1-5-21-1166193647-1869122605-558368504-1001 - Administrator - Enabled) => C:\Users\tobimc6

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/13/2015 04:05:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8156

Error: (02/13/2015 04:05:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8156

Error: (02/13/2015 04:05:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/13/2015 04:05:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6750

Error: (02/13/2015 04:05:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6750

Error: (02/13/2015 04:05:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/13/2015 04:05:27 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5406

Error: (02/13/2015 04:05:27 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5406

Error: (02/13/2015 04:05:27 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/13/2015 04:05:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4046


System errors:
=============
Error: (02/13/2015 09:09:00 PM) (Source: DCOM) (EventID: 10010) (User: Tobias)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (02/13/2015 09:09:00 PM) (Source: DCOM) (EventID: 10010) (User: Tobias)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (02/13/2015 09:08:49 PM) (Source: DCOM) (EventID: 10010) (User: Tobias)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (02/13/2015 09:08:49 PM) (Source: DCOM) (EventID: 10010) (User: Tobias)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (02/13/2015 09:08:49 PM) (Source: DCOM) (EventID: 10010) (User: Tobias)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (02/13/2015 09:08:49 PM) (Source: DCOM) (EventID: 10010) (User: Tobias)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (02/12/2015 08:23:20 PM) (Source: DCOM) (EventID: 10010) (User: Tobias)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (02/12/2015 08:22:49 PM) (Source: DCOM) (EventID: 10010) (User: Tobias)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (02/12/2015 06:18:03 AM) (Source: DCOM) (EventID: 10010) (User: Tobias)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (02/12/2015 06:18:03 AM) (Source: DCOM) (EventID: 10010) (User: Tobias)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}


Microsoft Office Sessions:
=========================
Error: (02/13/2015 04:05:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8156

Error: (02/13/2015 04:05:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8156

Error: (02/13/2015 04:05:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/13/2015 04:05:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6750

Error: (02/13/2015 04:05:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6750

Error: (02/13/2015 04:05:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/13/2015 04:05:27 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5406

Error: (02/13/2015 04:05:27 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5406

Error: (02/13/2015 04:05:27 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/13/2015 04:05:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4046


CodeIntegrity Errors:
===================================
  Date: 2015-02-12 20:25:34.238
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-01-23 15:41:09.390
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Percentage of memory in use: 51%
Total physical RAM: 8122.15 MB
Available physical RAM: 3940.19 MB
Total Pagefile: 9402.15 MB
Available Pagefile: 4602 MB
Total Virtual: 131072 MB
Available Virtual: 131071.8 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:910.62 GB) (Free:648.24 GB) NTFS
Drive d: (RECOVERY) (Fixed) (Total:19.87 GB) (Free:1.97 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 9AF1B1A5)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hallo wollte mich zurück melden da ich mich ja lange nicht mehr gemeldet habe.
der Grund weil ich mich nicht mehr gemeldet habe war das ich keinen PC mehr hatte für einen Monat.
Na ja, aber komischer Weise ist der Virus jetzt verschwunden, dass heißt ich benötige keine Hilfe mehr, trotzdem vielen Dank!

ok.