Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: WIN7 - PC langsam, Internetabbrüche, viele Befunde

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 21.03.2015, 17:08   #1
NoLove
 
WIN7 - PC langsam, Internetabbrüche, viele Befunde - Standard

WIN7 - PC langsam, Internetabbrüche, viele Befunde



Hallo, hatte die letzten Tage vermehrt Probleme mit dem PC.
Der PC war sehr langsam / hat keine Leistung gebracht, die Internet-Verbindung wurde ohne ersichtlichen Grund getrennt (WPA-Schlüssel musste neu eingegeben werden) oder die Windows-Anmeldung hat erst nach der 3. Passwort-Eingabe funktioniert.

Hatte zuerst Malewarebytes durchlaufen lassen und dann alles wie im Anleitungs-Thread.
Hoffe mir kann jemand helfen.

Logs waren für den Thread zu lang, also hab ich sie hochgeladen.
Angehängte Dateien
Dateityp: txt Addition.txt (65,6 KB, 123x aufgerufen)
Dateityp: log gmerlog.log (38,2 KB, 72x aufgerufen)

Alt 21.03.2015, 17:11   #2
schrauber
/// the machine
/// TB-Ausbilder
 

WIN7 - PC langsam, Internetabbrüche, viele Befunde - Standard

WIN7 - PC langsam, Internetabbrüche, viele Befunde



Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________

Alt 21.03.2015, 17:16   #3
NoLove
 
WIN7 - PC langsam, Internetabbrüche, viele Befunde - Standard

WIN7 - PC langsam, Internetabbrüche, viele Befunde



Alles klar

Malewarebytes:

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 21.03.2015
Suchlauf-Zeit: 13:39:07
Logdatei: MalewarebytesLog.txt
Administrator: Ja

Version: 2.00.4.1028
Malware Datenbank: v2015.03.21.04
Rootkit Datenbank: v2015.02.25.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Jibi

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 381232
Verstrichene Zeit: 23 Min, 26 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Warnen
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 97
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\APPID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}, , [8f997bcd4941c07672662dfe1ce757a9], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}, , [8f997bcd4941c07672662dfe1ce757a9], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [d652ed5b2e5c92a4e4e4bba37e851be5], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [d652ed5b2e5c92a4e4e4bba37e851be5], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1631550F-191D-4826-B069-D9439253D926}, , [0028ab9d6426fc3a2fd28b9c06fd8e72], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D2A2595C-4FE4-4315-AA9B-19DBD6271B71}, , [0028ab9d6426fc3a2fd28b9c06fd8e72], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{8B3372D0-09F0-41A5-8D9B-134E148672FB}, , [0028ab9d6426fc3a2fd28b9c06fd8e72], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{8B3372D0-09F0-41A5-8D9B-134E148672FB}, , [0028ab9d6426fc3a2fd28b9c06fd8e72], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\PriceGongIE.PriceGongCtrl.1, , [0028ab9d6426fc3a2fd28b9c06fd8e72], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\PriceGongIE.PriceGongCtrl, , [0028ab9d6426fc3a2fd28b9c06fd8e72], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PriceGongIE.PriceGongCtrl, , [0028ab9d6426fc3a2fd28b9c06fd8e72], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PriceGongIE.PriceGongCtrl.1, , [0028ab9d6426fc3a2fd28b9c06fd8e72], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\PriceFactorIE.PriceGongBHO.1, , [0028ab9d6426fc3a2fd28b9c06fd8e72], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\PriceFactorIE.PriceGongBHO, , [0028ab9d6426fc3a2fd28b9c06fd8e72], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PriceFactorIE.PriceGongBHO, , [0028ab9d6426fc3a2fd28b9c06fd8e72], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{1631550F-191D-4826-B069-D9439253D926}, , [0028ab9d6426fc3a2fd28b9c06fd8e72], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PriceFactorIE.PriceGongBHO.1, , [0028ab9d6426fc3a2fd28b9c06fd8e72], 
PUP.Optional.PriceGong.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{1631550F-191D-4826-B069-D9439253D926}, , [0028ab9d6426fc3a2fd28b9c06fd8e72], 
PUP.Optional.PriceGong.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1631550F-191D-4826-B069-D9439253D926}, , [0028ab9d6426fc3a2fd28b9c06fd8e72], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}, , [bd6bdb6d692154e2a07538f41be8639d], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{39CB8175-E224-4446-8746-00566302DF8D}, , [bd6bdb6d692154e2a07538f41be8639d], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{39CB8175-E224-4446-8746-00566302DF8D}, , [bd6bdb6d692154e2a07538f41be8639d], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\esrv.deltaESrvc.1, , [bd6bdb6d692154e2a07538f41be8639d], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\esrv.deltaESrvc, , [bd6bdb6d692154e2a07538f41be8639d], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.deltaESrvc, , [bd6bdb6d692154e2a07538f41be8639d], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.deltaESrvc.1, , [bd6bdb6d692154e2a07538f41be8639d], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [7fa9e068f892bf77e4e4c29b61a2f50b], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\delta.deltadskBnd.1, , [7fa9e068f892bf77e4e4c29b61a2f50b], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\delta.deltadskBnd, , [7fa9e068f892bf77e4e4c29b61a2f50b], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltadskBnd, , [7fa9e068f892bf77e4e4c29b61a2f50b], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltadskBnd.1, , [7fa9e068f892bf77e4e4c29b61a2f50b], 
PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [7fa9e068f892bf77e4e4c29b61a2f50b], 
PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [7fa9e068f892bf77e4e4c29b61a2f50b], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [32f61335602a6ec89f2863faa55eeb15], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}, , [32f61335602a6ec89f2863faa55eeb15], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\delta.deltaHlpr.1, , [32f61335602a6ec89f2863faa55eeb15], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\delta.deltaHlpr, , [32f61335602a6ec89f2863faa55eeb15], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltaHlpr, , [32f61335602a6ec89f2863faa55eeb15], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [32f61335602a6ec89f2863faa55eeb15], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltaHlpr.1, , [32f61335602a6ec89f2863faa55eeb15], 
PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [32f61335602a6ec89f2863faa55eeb15], 
PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [32f61335602a6ec89f2863faa55eeb15], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{4599D05A-D545-4069-BB42-5895B4EAE05B}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{1231839B-064E-4788-B865-465A1B5266FD}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{2DAC2231-CC35-482B-97C5-CED1D4185080}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{57C91446-8D81-4156-A70E-624551442DE9}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{97DD820D-2E20-40AD-B01E-6730B2FCE630}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B177446D-54A4-4869-BABC-8566110B4BE0}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{F05B12E1-ADE8-4485-B45B-898748B53C37}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1231839B-064E-4788-B865-465A1B5266FD}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2DAC2231-CC35-482B-97C5-CED1D4185080}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{57C91446-8D81-4156-A70E-624551442DE9}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{97DD820D-2E20-40AD-B01E-6730B2FCE630}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B177446D-54A4-4869-BABC-8566110B4BE0}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F05B12E1-ADE8-4485-B45B-898748B53C37}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{4599D05A-D545-4069-BB42-5895B4EAE05B}, , [88a0e1672e5cf54100c7aab43dc6d62a], 
PUP.Optional.Babylon.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [d85005431872f046d38b2ff67c875ea2], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}, , [7fa9a8a0beccc2744c70b1adce35b34d], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PriceGong, , [04242028bfcbf244c8c85d2ed92860a0], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Delta Chrome Toolbar, , [45e3aa9ed0ba2d098c749a9ca36203fd], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\APPID\PriceGongIE.DLL, , [dd4bdf697218c47234c65ca88282a858], 
PUP.Optional.MeinGutscheincode.A, HKLM\SOFTWARE\WOW6432NODE\Mein Gutscheincode, , [3deb3d0be6a488aeb88e2dd0b152669a], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\PriceGongIE.DLL, , [2dfb0f399af045f128d203013bc92fd1], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\DELTA\DELTA\Instl, , [ae7ac484dbafea4cf56524f90ff6ae52], 
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\bkomkajifikmkfnjgphkjcfeepbnojok, , [ea3e69dfbfcb42f430cca0643dc755ab], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\eooncjejnppfjjklapaamhcdmjbilmde, , [33f54008543633034bb812bf61a2d927], 
PUP.Optional.DataMngr.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, , [69bf97b11c6e72c478b0f5236e97af51], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [c06815331a70e74f521c50dcbf46758b], 
PUP.Optional.PriceGong.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, , [6dbb99af9af0a88ec9806c5aed16e61a], 
PUP.Optional.Babylon.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BABSOLUTION\Updater, , [b0787fc9206a5adc4ce0b564d13453ad], 
PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA, , [80a848008efc55e112b9ab6bf411728e], 
PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA\IESTRG, , [bd6baf997e0c71c5eb2a38e713f28f71], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [4bdd62e61b6f55e160ec07118085b44c], 
PUP.Optional.BProtector.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings, , [39ef0d3b2c5e9f9786e95fbc947148b8], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}, , [2cfc69dfdfabf2443898175b4ab9aa56], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\delta.deltaappCore.1, , [2cfc69dfdfabf2443898175b4ab9aa56], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\delta.deltaappCore, , [2cfc69dfdfabf2443898175b4ab9aa56], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltaappCore, , [2cfc69dfdfabf2443898175b4ab9aa56], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltaappCore.1, , [2cfc69dfdfabf2443898175b4ab9aa56], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}, , [2cfc69dfdfabf2443898175b4ab9aa56], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\d, , [2cfc69dfdfabf2443898175b4ab9aa56], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\d, , [2cfc69dfdfabf2443898175b4ab9aa56], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\delta, , [2cfc69dfdfabf2443898175b4ab9aa56], 

Registrierungswerte: 7
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{82E1477C-B154-48D3-9891-33D83C26BCD3}, Delta Toolbar, , [7fa9e068f892bf77e4e4c29b61a2f50b]
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [0f19fa4e46440d29e2e6203d857ea858], 
PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA|tlbrSrchUrl, , [80a848008efc55e112b9ab6bf411728e], 
PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA|lastB, hxxp://search.babylon.com/?affID=110819&babsrc=HP_ss&mntrId=a0ed2c59000000000000002586dcea82, , [38f02a1edfab76c0d046aa75e4219868]
PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA\IESTRG|tlbrsrchurl, , [bd6baf997e0c71c5eb2a38e713f28f71], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0D1N1N1B1K1L1JtG0ZtH1O, , [4bdd62e61b6f55e160ec07118085b44c]
PUP.BProtector, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, , [e24684c4c0cad6602208938509fca759], 

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 27
PUP.Optional.SpeedTestAnalysis.A, C:\Users\Jibi\AppData\Roaming\SpeedTestAnalysis, , [e048e266f49683b31cfb16ea74904fb1], 
PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\Delta, , [a58368e0a9e1ae88ae1ec650ad58b54b], 
PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\BabSolution\Shared, , [45e3aa9ed0ba2d098c749a9ca36203fd], 
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5, , [2cfc69dfdfabf2443898175b4ab9aa56], 
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5\bh, , [2cfc69dfdfabf2443898175b4ab9aa56], 
PUP.Optional.OpenCandy, C:\Users\Jibi\AppData\Roaming\OpenCandy, , [cb5d7ecaccbed95d8f6fd49e54af7987], 
PUP.Optional.OpenCandy, C:\Users\Jibi\AppData\Roaming\OpenCandy\5BFA656A60EF4BFD8C8C354C21065D98, , [cb5d7ecaccbed95d8f6fd49e54af7987], 
PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Local\Temp\mt_ffx\Delta, , [b37555f3deac0d290e0dfd76da296799], 
PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Local\Temp\mt_ffx\Delta\delta, , [b37555f3deac0d290e0dfd76da296799], 
PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Local\Temp\mt_ffx\Delta\delta\1.8.21.5, , [b37555f3deac0d290e0dfd76da296799], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\ext, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\tmp, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong, , [df49064293f75ed824478fea30d358a8], 
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Local\Temp\mt_ffx\Softonic, , [c5637bcd107ad3633bf83e3cf1127888], 
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Local\Temp\mt_ffx\Softonic\Softonic, , [c5637bcd107ad3633bf83e3cf1127888], 
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Local\Temp\mt_ffx\Softonic\Softonic\1.8.19.3, , [c5637bcd107ad3633bf83e3cf1127888], 
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\LocalLow\BabylonToolbar, , [30f8bf89a0eac76f55d4f88cb251ee12], 
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\LocalLow\BabylonToolbar\BabylonToolbar, , [30f8bf89a0eac76f55d4f88cb251ee12], 
PUP.Optional.BabSolution.A, C:\Users\Jibi\AppData\Roaming\BabSolution\CR, , [a880d375f199f541e8d571186d96bb45], 
PUP.Optional.IBUpdater.A, C:\ProgramData\IBUpdaterService, , [e4444cfcfd8dda5cf150800e3dc6ac54], 
PUP.Optional.OnlySearch, C:\Users\Jibi\AppData\Local\onlysearch, , [01272a1e8dfd1b1b9cd9b7de7c879e62], 
PUP.Optional.OnlySearch, C:\Users\Jibi\AppData\Local\onlysearch\onlysearch, , [01272a1e8dfd1b1b9cd9b7de7c879e62], 
PUP.Optional.OnlySearch, C:\Users\Jibi\AppData\Local\onlysearch\onlysearch\1.3.12.9, , [01272a1e8dfd1b1b9cd9b7de7c879e62], 
PUP.Optional.PriceGong.A, C:\Program Files (x86)\PriceGong, , [1d0b99afbfcb2d09cabffca30af9a25e], 
PUP.Optional.PriceGong.A, C:\Program Files (x86)\PriceGong\2.6.11, , [1d0b99afbfcb2d09cabffca30af9a25e], 

Dateien: 183
PUP.Optional.PriceGong.A, C:\Program Files (x86)\PriceGong\2.6.11\PriceGongIE.dll, , [0028ab9d6426fc3a2fd28b9c06fd8e72], 
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5\deltasrv.exe, , [bd6bdb6d692154e2a07538f41be8639d], 
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll, , [7fa9e068f892bf77e4e4c29b61a2f50b], 
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll, , [32f61335602a6ec89f2863faa55eeb15], 
PUP.Optional.PriceGong.A, C:\Program Files (x86)\PriceGong\uninst.exe, , [04242028bfcbf244c8c85d2ed92860a0], 
PUP.Optional.Conduit.A, C:\Users\Jibi\AppData\Local\Temp\64DE.tmp, , [230593b5c1c934024be14effd52c9070], 
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Local\Temp\Softonic_chr_1-8-19-3.exe, , [0424cb7d177368ce94e7d3251ae708f8], 
PUP.Optional.Installrex, C:\Users\Jibi\AppData\Local\Temp\UIQDb+Ek.exe.part, , [27012127d3b791a5daef84b8df22e61a], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\Local\Temp\che6DFF.tmp, , [aa7e4afef29881b5f799cfbc42bfe41c], 
PUP.Optional.Installrex, C:\Users\Jibi\AppData\Local\Temp\ugZk2I7I.exe.part, , [36f221275c2ea98d38913903c53c639d], 
PUP.Optional.MediaTech.A, C:\Users\Jibi\AppData\Local\Temp\5C0C.tmp, , [77b11731f59590a695ce7e37b4518b75], 
PUP.Optional.Conduit.A, C:\Users\Jibi\AppData\Local\Temp\ct3297265\ism.exe, , [d553ae9a6b1f6fc7b0adc8ec4ab75ca4], 
PUP.Optional.BabSolution.A, C:\Users\Jibi\AppData\Local\Temp\bus7BAC\BUSolution.dll, , [d94ffd4be7a31e18acf82d0b907158a8], 
PUP.Optional.CRX.A, C:\Users\Jibi\AppData\Local\Temp\bus8001\CrxUpdater_d.exe, , [42e6bb8d8cfe4ee8d308f998fb0aac54], 
PUP.Optional.CRX.A, C:\Users\Jibi\AppData\Local\Temp\bus839B\CrxUpdater_d.exe, , [d3552f195337bf7713c8d5bc46bfaa56], 
PUP.Optional.KeepMySearch.A, C:\Users\Jibi\AppData\Local\Temp\busB50B\join.exe, , [e34549ff3b4f50e6f00f449e3bca1ee2], 
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Local\Temp\22C3B2CA-BAB0-7891-909F-322CCFA03C67\Latest\BExternal.dll, , [3fe91a2e8bffb5813a3ac65d32cef50b], 
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Local\Temp\22C3B2CA-BAB0-7891-909F-322CCFA03C67\Latest\CrxInstaller.dll, , [e54374d4d9b1063097be1035ae5303fd], 
PUP.Optional.Delta, C:\Users\Jibi\AppData\Local\Temp\22C3B2CA-BAB0-7891-909F-322CCFA03C67\Latest\MyDeltaTB.exe, , [dd4bde6a67231125d47264d1e21fa35d], 
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Local\Temp\22C3B2CA-BAB0-7891-909F-322CCFA03C67\Latest\Setup.exe, , [1513f4546723b28477531806ef11e11f], 
PUP.Optional.Buenosearch.A, C:\Users\Jibi\AppData\Local\Temp\bus3AA8\bbjoin.ex_, , [2008e563612967cf5bd8db818f71c739], 
PUP.Optional.CRX.A, C:\Users\Jibi\AppData\Local\Temp\bus7081\CrxUpdater_d.exe, , [cb5d4ff9a8e257df4b905e3365a04ab6], 
PUP.Optional.DLClient.A, C:\Windows\System32\Tasks\dlclient Updater, , [0e1ae761503afb3b6c0fe2cff90a17e9], 
PUP.Optional.DLClient.A, C:\Windows\System32\Tasks\dlclient, , [190f3d0b503a63d3fe7fcae7a75c17e9], 
PUP.Optional.BitGuard.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\BitGuard.xml, , [38f022267c0e50e66c6f706f3fc459a7], 
PUP.Optional.BrowserDefender.A, C:\Windows\System32\Tasks\BrowserDefendert, , [1414f058ee9c3afcca7fb8284bb86e92], 
PUP.Optional.Babylon.A, C:\Windows\System32\Tasks\EPUpdater, , [a484f4545832a591cd7e756bf50ed62a], 
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\softonic.xml, , [34f47eca6c1e23139d4303f17093c33d], 
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\babylon.xml, , [36f207413456a19537956c8b0ff4cd33], 
PUP.Optional.BProtector.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\bProtector_extensions.sqlite, , [70b82e1ac1c978befeda7c7bb54e6d93], 
PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\delta.xml, , [062233156624d95d06f8b93e8083e21e], 
PUP.Optional.SpeedTestAnalysis.A, C:\Users\Jibi\AppData\Roaming\SpeedTestAnalysis\speedtestanalysis.crx, , [e048e266f49683b31cfb16ea74904fb1], 
PUP.Optional.SpeedTestAnalysis.A, C:\Users\Jibi\AppData\Roaming\SpeedTestAnalysis\DeskTopIcon.ico, , [e048e266f49683b31cfb16ea74904fb1], 
PUP.Optional.SpeedTestAnalysis.A, C:\Users\Jibi\AppData\Roaming\SpeedTestAnalysis\install_helper.exe, , [e048e266f49683b31cfb16ea74904fb1], 
PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\Delta\sqlite3.dll, , [a58368e0a9e1ae88ae1ec650ad58b54b], 
PUP.Optional.BProtector.A, C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data, , [0c1c1137800a0f276f0159c248bd6799], 
PUP.Optional.BProtector.A, C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\bProtectorPreferences, , [3cecd276c3c7290d1061869562a33ec2], 
PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\BabSolution\Shared\Delta.ico, , [45e3aa9ed0ba2d098c749a9ca36203fd], 
PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\BabSolution\Shared\BabMaint.exe, , [45e3aa9ed0ba2d098c749a9ca36203fd], 
PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\BabSolution\Shared\BUSolution.dll, , [45e3aa9ed0ba2d098c749a9ca36203fd], 
PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\BabSolution\Shared\chu.js, , [45e3aa9ed0ba2d098c749a9ca36203fd], 
PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\BabSolution\Shared\GUninstaller.exe, , [45e3aa9ed0ba2d098c749a9ca36203fd], 
PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\BabSolution\Shared\SetupParams.ini, , [45e3aa9ed0ba2d098c749a9ca36203fd], 
PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\BabSolution\Shared\sqlite3.dll, , [45e3aa9ed0ba2d098c749a9ca36203fd], 
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaApp.dll, , [2cfc69dfdfabf2443898175b4ab9aa56], 
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaEng.dll, , [2cfc69dfdfabf2443898175b4ab9aa56], 
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5\GUninstaller.exe, , [2cfc69dfdfabf2443898175b4ab9aa56], 
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5\uninstall.exe, , [2cfc69dfdfabf2443898175b4ab9aa56], 
PUP.Optional.OpenCandy, C:\Users\Jibi\AppData\Roaming\OpenCandy\5BFA656A60EF4BFD8C8C354C21065D98\Trial-14.0.1000.89_de-DE_1004732_DE-1.exe, , [cb5d7ecaccbed95d8f6fd49e54af7987], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\1.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\1728.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\17807.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\2229.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\2260.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\8130.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\a.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\b.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\c.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\d.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\e.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\f.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\g.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\h.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\i.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\j.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\k.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\l.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\m.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\mru.xml, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\n.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\o.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\p.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\q.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\r.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\s.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\t.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\u.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\v.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\w.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\wlu.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\x.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\y.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\z.txt, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\ext\ext_e.dll, , [ef396cdc1d6d152166fdd0a6030048b8], 
PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\PriceGong Contact Us.lnk, , [df49064293f75ed824478fea30d358a8], 
PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\PriceGong Help.lnk, , [df49064293f75ed824478fea30d358a8], 
PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\PriceGong Homepage.lnk, , [df49064293f75ed824478fea30d358a8], 
PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\Uninstall PriceGong.lnk, , [df49064293f75ed824478fea30d358a8], 
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Local\Temp\mt_ffx\Softonic\Softonic\1.8.19.3\softonic.xpi, , [c5637bcd107ad3633bf83e3cf1127888], 
PUP.Optional.BabSolution.A, C:\Users\Jibi\AppData\Roaming\BabSolution\CR\Delta.crx, , [a880d375f199f541e8d571186d96bb45], 
PUP.Optional.IBUpdater.A, C:\ProgramData\IBUpdaterService\repository.xml, , [e4444cfcfd8dda5cf150800e3dc6ac54], 
PUP.Optional.PriceGong.A, C:\Program Files (x86)\PriceGong\2.6.11\PriceGong.crx, , [1d0b99afbfcb2d09cabffca30af9a25e], 
PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\bProtectorPreferences, Gut: (), Schlecht: (   "homepage" : "hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=A0ED002586DCEA82&affID=120662&tsp=4931",), ,[f53311376327f046dd2c6ac69c6a05fb]
PUP.Optional.CrossRider.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossrider.bic", "13fa612b836a5abd9074469d5c7528f7");), ,[0a1ef256fa90e84e8006230cb6508f71]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.admin", false);), ,[f53332169feb10264055181727dfc63a]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences

/* Do not edit this file.
 *
 * If you m), ,[55d34cfc5d2dad89eda8260945c1738d]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences

/* Do not edit this file.
 *
 * If you), ,[ec3c9dab17734de94d48a68913f338c8]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references

/* Do not edit this file.
 *
 * If you make chan), ,[39efee5a1a7078bebfd6be71fb0bb64a]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (/* Do not edit this file.
 *
 * If you make chan), ,[b96f63e5afdb2e0899fcd956fc0a4ab6]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references

/* Do not edit this file.
 *
 * If you ), ,[ac7ce36591f9c373d6bf9f90cd395ea2]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences

/* Do not edit this file.
 *
 * If you m), ,[c2662e1af3977eb899fca38ce81e3ac6]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (eferences

/* Do not edit this file.
 *
 * If you make changes to this fil), ,[11171137f29822142372e748ed1921df]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( this file.
 *
 * If you make changes to this file whil), ,[68c0e86057339f972f6631fe8482f20e]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces

/* Do not edit this file.
 *
 * If you make ch), ,[af79c97fc4c6f83ee5b01b14c44247b9]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences

/* Do not edit this file.
 *
 * If you ), ,[9098fa4e8505ef47563fe946c2448779]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references

/* Do not edit this file.
 *
 * If you make changes to), ,[e14763e599f183b325701b1457af8f71]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (not edit this file.
 *
 * If you make changes to this fil), ,[a682bb8d94f69e98662fb27df90dd828]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (s

/* Do not edit this file.
 *
 * If you make c), ,[86a20a3e4545092d8d08af80d23443bd]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences

/* Do not edit this file.
 *
 * If you make changes to this file while the appli), ,[f434e7617614a3937a1b43ec7a8c38c8]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (
 * If you make changes to this file while the applicati), ,[e93fb593345645f18312fd3225e10bf5]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (nces

/* Do not edit this file.
 *
 * If you make changes t), ,[40e86fd9602a10268e07bd729e686799]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
 *
 * If you make changes to this ), ,[ad7b2325157535018b0ae24d679fb848]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
 *
 * If you make ch), ,[f236db6d7c0e0f27c0d584ab1aec4db3]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (Preferences

/* Do not edit this file.
 *
 * If), ,[1315e167eaa047ef2a6b66c9e81ea45c]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (eferences

/* Do not edit this file.
 *
 * If you make), ,[151300487e0c3006c1d4a58ab254dd23]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (es

/* Do not edit this file.
 *
 * If you make cha), ,[1414ea5e1b6f979f4e4799964cbac838]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences

/* Do not edit this file.
 *
 * If you make), ,[4bdd1d2b375375c1761fb47beb1bd22e]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences

/* Do not edit this file.
 *
 * If you m), ,[9593f3550a8067cf266f82ad36d059a7]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences

/* Do not edit this file.
 *
 * If you ), ,[e048e563bfcb5bdb405576b98383ff01]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (erences

/* Do not edit this file.
 *
 * If you make), ,[1315c583d2b8fa3cb7def23d8e788a76]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (nces

/* Do not edit this file.
 *
 * If you make changes to t), ,[2bfdb98fbad00d297c19ee4133d38878]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( Do not edit this file.
 *
 * If you make changes to th), ,[0127d8701a70a88eafe63df221e5aa56]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces

/* Do not edit this file.
 *
 * If you make cha), ,[a7819dab2a606cca3362c6698b7bca36]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (nces

/* Do not edit this file.
 *
 * If you mak), ,[d652b09829618ea8890c30ffdd29fe02]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences

/* Do not edit this file.
 *
 * If you make changes ), ,[e5431830cbbfa98d1b7a36f96d99bf41]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( Do not edit this file.
 *
 * If you make changes to this file while the applicati), ,[e24668e0afdb67cf266fc16e10f6b34d]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (file.
 *
 * If you make changes to this file while the application is running,), ,[0028d870642635010c89ba75b55119e7]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (his file.
 *
 * If you make changes to this file while th), ,[03257bcd2367a195f1a4a28dee1841bf]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (s

/* Do not edit this file.
 *
 * If you make change), ,[ad7b22264941ee48cec70a2525e1e21e]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces

/* Do not edit this file.
 *
 * If you make c), ,[41e7ba8ea7e33df952431e11cd3930d0]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences

/* Do not edit this file.
 *
 * If you make changes to this file while the application is running,
 * the changes will be overwritten ), ,[71b744041b6fad8974218fa08a7cb947]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ation is running,
 * the changes will be overwritten when the ap), ,[c4640e3ac8c21a1c30657fb0e81e2cd4]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (* Do not edit this file.
 *
 * If you make changes to this), ,[1e0ae0686d1d63d33263e14e0bfb59a7]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (

/* Do not edit this file.
 *
 * If you make changes), ,[77b1ae9a9febd4622273dc53de28b050]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences

/* Do not edit this file.
 *
 * If you make), ,[d94f4305fa9060d64b4a4fe08a7cb947]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences

/* Do not edit this file.
 *
 * If you make cha), ,[7eaa093f8efcbd7999fc37f85ea837c9]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (es

/* Do not edit this file.
 *
 * If you make changes to this ), ,[220683c53456f93da6effe312bdb51af]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (o not edit this file.
 *
 * If you make changes to this f), ,[1117da6e4446d561aaeb7ab5bb4bab55]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.admin", false);), ,[ec3c25231b6fdb5b3864919ed234b34d]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences

/* Do not edit this file.
 *
 ), ,[2ff96ade8efc48ee5844230cc73f6d93]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references

/* Do not edit this file.
 *
 * If you make changes to this file ), ,[a880470136540c2a2973fc3308fe2fd1]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (e.
 *
 * If you make changes to this file while t), ,[ed3b5debed9d50e699031718e91d53ad]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces

/* Do not edit this file.
 *
 * If you), ,[0820ee5ad3b7f2449dff002f43c3eb15]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (erences

/* Do not edit this file.
 *
 * If ), ,[2503f2564149d4623a62a28d0afc6f91]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences

/* Do not edit this file.
 *
 * If), ,[6cbcec5cb8d2ad895c40f8375aacc739]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences

/* Do not edit this file.
 *
 * If), ,[f434a5a33357f83edebe052a7d8921df]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (es

/* Do not edit this file.
 *
 * If y), ,[80a80345078367cfccd0d15ed135847c]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references

/* Do not edit this file.
 *
 * If you make changes to this file while the application is running,
 * the changes will be ove), ,[6cbc80c8e6a4b680ff9dac839f676e92]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (tion is running,
 * the changes will be overwritten when the appl), ,[0c1c56f2dcae8fa7c3d9d659cb3bb44c]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (t edit this file.
 *
 * If you make changes to this file while the app), ,[ab7d82c694f69c9a524a44eb9472f709]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( this file.
 *
 * If you make changes to this fil), ,[ea3e1b2ddcae85b14656e54ade286d93]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (

/* Do not edit this file.
 *
 * If you make changes to this file while the application is running,
 * the changes will be overwritten wh), ,[63c54305e4a60333c9d3c669f4127b85]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ion is running,
 * the changes will be overwr), ,[2404fe4adab0e74f732972bd21e523dd]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences

/* Do not edit this file.
 *
 * If you make changes to this file while the application is running,
 * the changes will be overwrit), ,[da4e79cf9febca6c465644eb986e0df3]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (n is running,
 * the changes will be overwritten w), ,[bf696adeacdee551d8c482ad7c8a639d]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces

/* Do not edit this file.
 *
 * If you make ), ,[ce5a3612711961d55349959a07ffc23e]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (s

/* Do not edit this file.
 *
 * If you m), ,[998fde6af09a043294085dd212f437c9]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (erences

/* Do not edit this file.
 *
 * If y), ,[ec3c9dab593170c6c3d938f75caad22e]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences

/* Do not edit this file.
 *
 * If you make changes to this f), ,[bb6d9aaee7a3b3834656fe31f51134cc]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( this file.
 *
 * If you make changes to this file while ), ,[c860a99f8efc7fb7465646e9d036758b]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (* Do not edit this file.
 *
 * If you make changes to this file while the application is running,
 * the changes will be overwritten when the app), ,[e24657f1741626105b41c26d6b9b02fe]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (s running,
 * the changes will be overwritten whe), ,[1c0cb7915e2caf877a2250dfdb2b3fc1]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (nces

/* Do not edit this file.
 *
 * If you make change), ,[47e1ae9ad7b3e3532a72062912f44db3]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( Do not edit this file.
 *
 * If you make changes), ,[d7512b1d09812412b3e968c78d799967]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/MOY00009/tb_v1?SearchSource=13&cc=&mi=a0ed2c59000000000000002586dcea82");), ,[2ff94701b1d954e20c983af56d990000]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (sesensitive", 1);
user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("app.update.lastUpdateTime.addon-background-update-timer", ), ,[0e1a6fd9b4d606306e36d45b15f14fb1]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ing,
 * the changes will be overwritten when the application exits.
 *
 * To make a manual change to preferences, you can visit the URL about:), ,[57d1b593e6a46bcbffa52c034fb7fd03]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (te.lastUpdateTime.addon-background-update-timer", 1426939096);
user_pref("app.update.lastUpdateTime.background-update-timer", 1426939337);
user_pr), ,[bb6d86c2c6c45adc2183240b3dc9ac54]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.babTrack", "affID=110819");), ,[b27653f55733fe38a2912f0029ddb24e]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (lbar_i.babTrack", "affID=110819");
user_pref("exten), ,[1018cf79ddad043249ea0728778f11ef]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (ons.BabylonToolbar_i.babTrack", "affID=110819");
user), ,[b474f05808827bbb0c27a48b44c253ad]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (s.BabylonToolbar_i.babTrack", "affID=110819");
user_pref("extensions.BabylonToo), ,[f038dd6b2a6058de1c17e24db25428d8]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (k", "affID=110819");
user_pref("extensions.BabylonToolbar_i.babExt", "");
user_pre), ,[ec3c5aee5e2cf4423af9e34c4db92cd4]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: ("affID=110819");
user_pref("extensions.BabylonToolbar_i.ba), ,[af792325cdbd979fbc7731fe4db9b050]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (ylonToolbar_i.babTrack", "affID=110819");
user_pref("exte), ,[df49f553ddad5cdafe354de2e81e04fc]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (bylonToolbar_i.babTrack", "affID=110819");
user_pref("exte), ,[ad7b82c60f7b3600fd36ea455aac7d83]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (ylonToolbar_i.babTrack", "affID=110819");
user_pref("extensions.Bab), ,[1e0a60e8f793a591969d6ec112f44cb4]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (ar_i.babTrack", "affID=110819");
user_pref("extensions.Baby), ,[b37592b69ded142242f1b778887e936d]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (lonToolbar_i.babTrack", "affID=110819");
user_pref("extensions.B), ,[3aee321628627eb8201344ebaa5cd729]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (olbar_i.babTrack", "affID=110819");
user_pref("extensio), ,[f63270d8a8e2ba7c3ef51718e026f30d]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (BabylonToolbar_i.babTrack", "affID=110819");
user_pref("), ,[9a8e4cfcc2c878be8da63df233d36f91]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (abylonToolbar_i.babTrack", "affID=110819");
user_pref(), ,[4ddb6eda5c2e0c2a88abac834abc31cf]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (.BabylonToolbar_i.babTrack", "affID=110819");
user_pref(), ,[9d8b3b0d6f1b979f9c974ce32ed8e61a]

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)
         

Addition
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Jibi at 2015-03-21 16:11:17
Running from C:\Users\Jibi\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (x32 Version: 9.01.513.58212 - ABBYY) Hidden
Adobe After Effects CS6 (HKLM-x32\...\{4817D846-700B-474E-A31B-80892B3E92E3}) (Version: 11 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2 - Adobe Systems Incorporated)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Photoshop CS3 (HKLM-x32\...\Adobe_5f143314a5d434c8511097393d17397) (Version: 10.0 - Adobe Systems Incorporated)
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
Akamai NetSession Interface (HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Apple Application Support (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.6.8.3 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.6.8.3 - ASUSTek COMPUTER INC.) Hidden
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.026 - ASUSTek Computer Inc.)
Avid Pro Tools SE 8.0.3 (HKLM-x32\...\{371F27A1-9502-4762-AE97-1C1938B21055}) (Version: 8.0.3 - Digidesign, ein Geschäftsbereich von Avid Technology, Inc.)
Avira (HKLM-x32\...\{d9ed6dcf-6bfc-4fbb-802e-81dd5b767d6e}) (Version: 1.1.32.25147 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.32.25147 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 15.0.8.656 - Avira)
Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C1801}) (Version: 12.24.1.234 - APN, LLC)
Bing Bar (HKLM-x32\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation)
BlueStacks Notification Center (HKLM-x32\...\{44181DF6-2751-48C7-B918-72F14508F127}) (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden
Camtasia Studio 7 (HKLM-x32\...\{DE042823-C359-4B87-B66B-308057E8B6AF}) (Version: 7.0.1 - TechSmith Corporation)
CANON iMAGE GATEWAY MyCamera Download Plugin (HKLM-x32\...\MyCamera Download Plugin) (Version: 3.1.1.2 - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.9.0.9 - Canon Inc.)
Canon MOV Decoder (HKLM-x32\...\Canon MOV Decoder) (Version: 1.8.0.7 - Canon Inc.)
Canon MOV Encoder (HKLM-x32\...\Canon MOV Encoder) (Version: 1.6.0.1 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.7.0.4 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.10 (HKLM-x32\...\DPP) (Version: 3.10.2.0 - Canon Inc.)
Canon Utilities EOS Sample Music (HKLM-x32\...\EOS Sample Music) (Version: 1.0.0.204 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.10.2.0 - Canon Inc.)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (HKLM-x32\...\EOS Video Snapshot Task) (Version: 1.0.0.10 - Canon Inc.)
Canon Utilities Movie Uploader for YouTube (HKLM-x32\...\MovieUploaderForYouTube) (Version: 1.2.0.7 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.9.0.0 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.7.0.24 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.5.0.9 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 3.24 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.4.1.3341 - CDBurnerXP)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
CPUID CPU-Z 1.71.1 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
Delta Chrome Toolbar (HKLM-x32\...\Delta Chrome Toolbar) (Version:  - Visual Tools) <==== ATTENTION
Delta toolbar   (HKLM-x32\...\delta) (Version: 1.8.21.5 - Delta) <==== ATTENTION
Druckerdeinstallation für EPSON XP-215 217 Series (HKLM\...\EPSON XP-215 217 Series) (Version:  - SEIKO EPSON Corporation)
DVD Architect Studio 5.0 (HKLM-x32\...\{04DF4A51-DE2A-11E0-9AB5-F04DA23A5C58}) (Version: 5.0.156 - Sony)
Epson Easy Photo Print 2 (HKLM-x32\...\{A02D7029-C4EF-44C1-9FD4-C0D3CA518113}) (Version: 2.2.4.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8A17C27D-0325-400C-8AA9-DAA6B16CBD74}) (Version: 2.40.0009 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON SX130 Series Printer Uninstall (HKLM\...\EPSON SX130 Series) (Version:  - SEIKO EPSON Corporation)
Epson-Handbücher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.0.0.0 - SEIKO EPSON CORPORATION)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Facebook Video Calling 1.0.0.7339 (HKLM-x32\...\{EEA5F1E7-E934-4F4E-85C8-8FEC9CCE525C}) (Version: 1.0.7339 - Skype Limited)
Facebook Video Calling 1.0.0.8953 (HKLM-x32\...\{1D7CE340-70C3-4848-BCCF-215950328A4C}) (Version: 1.0.8953 - Skype Limited)
ffdshow [rev 2975] [2009-05-28] (HKLM-x32\...\ffdshow_is1) (Version: 1.0 - )
FILSHtray (HKLM-x32\...\{0844CC2A-512E-4BA1-872B-02887E7A2672}) (Version: 0.12 - FILSH Media GmbH)
FILSHtray (HKLM-x32\...\{5928359F-BF46-4646-BF19-B64E55171EB5}) (Version: 0.12 - FILSH Media GmbH)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)
FormatFactory 3.3.2.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.2.0 - Format Factory)
Foxit Reader (HKLM-x32\...\Foxit Reader) (Version: 4.3.1.118 - Foxit Corporation)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free AVI Video Converter version 5.0.24.426 (HKLM-x32\...\Free AVI Video Converter_is1) (Version: 5.0.24.426 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.9.32 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version:  - DVDVideoSoft Limited.)
FUSSBALL MANAGER 13 (HKLM-x32\...\{80AF0300-866F-400F-A350-D53E3C3E34E0}) (Version: 1.0.3.0 - Electronic Arts)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{C77CC230-7417-3F01-B70D-52583DC9FEC9}) (Version: 5.40.2.0 - Google)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GPUTweakStreaming (HKLM-x32\...\InstallShield_{D2A41AA7-4313-43D5-AA39-7E3FBBE0556D}) (Version: 1.0.3.5 - ASUS)
GPUTweakStreaming (x32 Version: 1.0.3.5 - ASUS) Hidden
Hama Wireless LAN Adapter (HKLM-x32\...\{E91E8912-769D-42F0-8408-0E329443BABC}) (Version: 10.1.0 - Hama)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)
Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.8.13 - PACE Anti-Piracy)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 7 Update 21 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217021FF}) (Version: 7.0.210 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version:  - Last.fm)
Layer III Audio Encoder (HKLM-x32\...\Layer III Audio Encoder 1.0.70111) (Version: 1.0.70111 - Elecard)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
MAGIX Audio Cleaning Lab 2013 (HKLM-x32\...\MAGIX_{97E2116F-CC11-4EDA-B179-78CB6A89D836}) (Version: 19.0.0.10 - MAGIX AG)
MAGIX Audio Cleaning Lab 2013 (Version: 19.0.0.10 - MAGIX AG) Hidden
MAGIX Music Maker 17 Premium Download Version (HKLM-x32\...\MAGIX_MSI_mm17dlx) (Version: 17.0.0.16 - MAGIX AG)
MAGIX Music Maker 17 Premium Download Version (x32 Version: 17.0.0.16 - MAGIX AG) Hidden
MAGIX Screenshare (HKLM-x32\...\{DFDD2913-557D-4EB5-8745-47749E521760}) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Screenshare 4.3.6.1987 (D) (HKLM-x32\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Speed burnR (MSI) (HKLM-x32\...\MAGIX_{7F4DE580-F810-431C-8730-34F6CD89C4F6}) (Version: 7.0.2.6 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
M-Audio FastTrack Driver 6.0.6 (x64) (HKLM\...\{91A8C38A-0239-11E0-9658-189EDFD72085}) (Version: 6.0.6 - M-Audio)
Media Player Codec Pack 4.0.1 (HKLM-x32\...\Media Player - Codec Pack) (Version:  - Media Player Codec Pack)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.5128.5002 - Microsoft Corporation)
Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
MorphVOX Pro (HKLM-x32\...\{DB2B4DA8-595D-42A1-A1AF-8AF654C18D54}) (Version: 4.4.5 - Screaming Bee)
Mozilla Firefox 36.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0.1 (x86 de)) (Version: 36.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.5 - F.J. Wechselberger)
NetWorx 5.2.7 (HKLM\...\NetWorx_is1) (Version:  - Softperfect Research)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.1.2 - )
NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
OpenOffice.org 3.2 (HKLM-x32\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)
Origin (HKLM-x32\...\Origin) (Version: 9.0.11.77 - Electronic Arts, Inc.)
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.0 - Frank Heindörfer, Philip Chinery)
photoFXlab (HKLM-x32\...\photoFXlab) (Version: 1.2.6 - Topaz Labs)
PhotoResampling 12.1 (HKLM-x32\...\PhotoResampling_is1) (Version:  - )
Power Sound Editor Free (HKLM-x32\...\Power Sound Editor Free) (Version:  - PowerSE Studio Inc.)
PriceGong 2.6.11 (HKLM-x32\...\PriceGong) (Version: 2.6.11 - PriceGong) <==== ATTENTION
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
QuickTime Alternative 2.8.0 (HKLM-x32\...\QuicktimeAlt_is1) (Version: 2.8.0 - )
Real Alternative 1.8.4 Lite (HKLM-x32\...\RealAlt_is1) (Version: 1.8.4 - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.61.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version:  - Realtek Semiconductor Corp.)
RockMelt (HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\RockMelt) (Version: 0.16.91.483 - RockMelt, Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SHIELD Streaming (Version: 3.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.18.9 - NVIDIA Corporation) Hidden
simplitec simplicheck (HKLM-x32\...\{DF103EDA-7937-4966-8EFB-5EF5C38301F2}) (Version: 1.3.9.0 - simplitec GmbH)
SiSoftware Sandra Lite 2015x (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2496}_is1) (Version: 21.15.2015.1 - SiSoftware)
Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
Software Updater (HKLM-x32\...\{FA7EE274-7370-43B7-9A45-A39B17CCCDC5}) (Version: 4.3.3 - SEIKO EPSON CORPORATION)
Sony Ericsson Themes Creator 4.16.2.6 (HKLM-x32\...\Sony Ericsson Themes Creator) (Version: 4.16.2.6 - Sony Ericsson Mobile Communications AB)
Sound Forge Audio Studio 10.0 (HKLM-x32\...\{0AA0DA00-A1D3-11E0-B9A9-005056C00008}) (Version: 10.0.176 - Sony)
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version:  - Obsidian Entertainment)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
Topaz Adjust 5 (HKLM-x32\...\Topaz Adjust 5) (Version: 5.0.1 - Topaz Labs, LLC)
Topaz B&W Effects (HKLM-x32\...\Topaz BW Effects 2) (Version: 2.1.0 - Topaz Labs, LLC)
Topaz Clarity (HKLM-x32\...\Topaz Clarity) (Version: 1.0.0 - Topaz Labs, LLC)
Topaz Clean 3 (HKLM-x32\...\Topaz Clean 3) (Version: 3.0.2 - Topaz Labs, LLC)
Topaz DeJpeg 4 (HKLM-x32\...\Topaz DeJpeg 4) (Version: 4.0.2 - Topaz Labs, LLC)
Topaz DeNoise 5 (HKLM-x32\...\Topaz DeNoise 5) (Version: 5.0.1 - Topaz Labs, LLC)
Topaz Detail 3 (HKLM-x32\...\Topaz Detail 3) (Version: 3.1.0 - Topaz Labs, LLC)
Topaz Fusion Express 2 (HKLM-x32\...\Topaz Fusion Express 2) (Version: 2.1.3 - Topaz Labs, LLC)
Topaz InFocus (HKLM-x32\...\Topaz InFocus) (Version: 1.0.0 - Topaz Labs, LLC)
Topaz Lens Effects (HKLM-x32\...\Topaz Lens Effects) (Version: 1.2.0 - Topaz Labs, LLC)
Topaz ReMask 3 (HKLM-x32\...\Topaz ReMask 3) (Version: 3.2.1 - Topaz Labs, LLC)
Topaz Simplify 4 (HKLM-x32\...\Topaz Simplify 4) (Version: 4.0.0 - Topaz Labs, LLC)
Topaz Star Effects (HKLM-x32\...\Topaz Star Effects) (Version: 1.1.0 - Topaz Labs, LLC)
TP-LINK TL-WN821N Driver (HKLM-x32\...\{26B52E5B-1620-4676-9B46-B6C56B8105CE}) (Version: 1.2.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.2.1 - TP-LINK)
Uninstall 1.0.0.1 (HKLM-x32\...\Uninstall_is1) (Version:  - )
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vegas Movie Studio HD Platinum 11.0 (HKLM-x32\...\{DA00F140-1C03-11E1-AE47-F04DA23A5C58}) (Version: 11.0.283 - Sony)
VLC media player 1.1.5 (HKLM-x32\...\VLC media player) (Version: 1.1.5 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version:  - )
YGOPro DevPro Version 1.9.2r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.2r2 - YGOPro DevPro Online)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{67F2A879-82D5-4A6D-8CC5-FFB3C114B69D}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\program\so_activex_x64.dll ()
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\ooofiltproxy_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File

==================== Restore Points  =========================

08-03-2015 19:00:15 Windows-Sicherung
11-03-2015 15:34:17 Windows Update
15-03-2015 19:00:09 Windows-Sicherung
17-03-2015 12:18:52 Removed BlueStacks Notification Center

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2013-05-30 13:31 - 00000107 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
127.0.0.1       lmlicenses.wip4.adobe.com
127.0.0.1       lm.licenses.adobe.com


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {00BE24FB-D5E6-4414-BBD3-68D2E0B22EDE} - System32\Tasks\dlclient Updater => C:\Users\Jibi\AppData\Local\delta\delta\1.3.23.0\dlsetup.exe [2015-03-10] (Pay By Ads LTD)
Task: {0DFFC71C-2C7B-4B72-AEA2-FC3969581474} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe
Task: {148B9FF8-AD9B-4939-A971-E4651FF9C5E8} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2014-03-25] (ASUSTek Computer Inc.)
Task: {171DD9EA-6104-4384-951E-93F236216ED5} - System32\Tasks\BrowserDefendert => Sc.exe start BrowserDefendert <==== ATTENTION
Task: {1D7CE3C9-2B2A-47EB-A828-A90FDAAB8D28} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe [2014-03-05] (Google Inc.)
Task: {30973219-71E8-43B4-A613-CDB938E98CA9} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {3410C2E5-7288-4C9C-81CF-B47892E0D4D3} - System32\Tasks\{A84C457A-CCAC-4B7E-8B48-6EB6B2C86990} => pcalua.exe -a C:\Users\Jibi\Downloads\ArticGunZ_Installer_23052014.exe -d C:\Users\Jibi\Downloads
Task: {39FFD13A-E76D-4D6C-AAFC-D19A68636283} - System32\Tasks\AutoKMSCustom => C:\Windows\AutoKMS\AutoKMS.exe [2012-03-19] ()
Task: {3EAA0B57-E774-44D5-B95B-E1910FD2882C} - System32\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {51488CC2-CE57-49D5-86EC-80F29FD1177D} - System32\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {55A13CFE-6A8F-4125-B0BA-19F43534FDAE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Task: {658B65B3-BA6D-4219-A1C8-C9875740C0BE} - System32\Tasks\EPUpdater => C:\Users\Jibi\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-06-06] () <==== ATTENTION
Task: {6B44A402-03E6-49A1-AAC7-2DD228FA33DE} - System32\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {6EA3E5D7-2A3E-47F7-8A0F-145ACC00718C} - System32\Tasks\dlclient => C:\Users\Jibi\AppData\Local\delta\delta\1.3.23.0\dlclient.exe
Task: {7336D0CE-6C96-47AD-96F5-4F62EEC33A72} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-21] (Google Inc.)
Task: {75A3A52B-31A2-4BC4-A6B7-9EC07DFC5E40} - System32\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-02-04] (Google Inc.)
Task: {7E4BC6EE-C068-4C77-B407-D887AC9D29BA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-10-24] (Piriform Ltd)
Task: {8E65CF69-13EF-42C8-8CBB-7EA35F5C9DC3} - System32\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-02-04] (Google Inc.)
Task: {91DE9A25-CE2D-48F5-A26D-EAFAE27F9485} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-14] (Adobe Systems Incorporated)
Task: {965DE61A-2096-40CB-8DF5-A9E5C25CA850} - System32\Tasks\AdobeAAMUpdater-1.0-Jibi-PC-Jibi => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {CB2CEECB-52A7-4319-ABC6-5408D6B5E831} - System32\Tasks\FCBfan => C:\Users\Jibi\AppData\Roaming\FCBfan\fcbfan.exe
Task: {CF7CBD1F-0A14-4E15-8B9F-1C3EF186A44B} - System32\Tasks\{88AEA439-7C97-48A7-AA75-B6210354059D} => pcalua.exe -a C:\Users\Jibi\Downloads\ZeusProInstall.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {DE5D4799-3376-4F3C-9CAC-5E1E015429F5} - System32\Tasks\{AD781ADF-B570-4985-B48C-4E5EECEAB2AF} => pcalua.exe -a C:\Users\Jibi\AppData\Local\Temp\Temp1_animake.zip\SETUP.EXE
Task: {DF6E8E9A-8CE7-40B7-8376-72755C7A6EFA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe [2014-03-05] (Google Inc.)
Task: {E28BEE1B-F9B1-4331-8B70-79DB6480C3E0} - System32\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {EC7F474B-97F6-4C43-A443-4CEA64A39830} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-21] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE:/EXE:{35651874-80E9-4EE7-A1F0-3E21ADA902D7} /F:UpdateSYSTEM
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE:/EXE:{D45E6B82-C3DA-4F6E-9045-2208BD7865C1} /F:UpdateSYSTEM
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe
Task: C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-02-20 00:03 - 2014-07-02 19:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-02-20 18:07 - 2005-03-12 00:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll
2012-01-17 11:24 - 2012-01-17 11:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2011-01-14 05:58 - 2010-03-15 11:28 - 00052224 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2011-07-18 22:04 - 2011-07-18 22:04 - 00301568 _____ () C:\Program Files (x86)\Notepad++\NppShell_04.dll
2013-05-09 11:29 - 2011-09-17 11:12 - 00664576 _____ () C:\Program Files\NetWorx\sqlite.dll
2015-01-09 14:14 - 2012-05-14 17:40 - 00841216 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
2010-04-07 02:45 - 2010-04-07 02:45 - 00050176 _____ () C:\Program Files\Adobe\Adobe Photoshop CS5 (64 Bit)\QuickTimeGlue.dll
2011-01-20 20:02 - 2011-01-20 20:02 - 00864768 _____ () C:\Program Files (x86)\Topaz Labs\Topaz ReMask 3\Plugins_x64\TopazRemaskAutomation.8li
2014-07-14 15:25 - 2014-07-14 15:25 - 00278528 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Vender.dll
2014-06-16 17:25 - 2014-06-16 17:25 - 00053248 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Exeio.dll
2014-01-29 22:15 - 2015-02-27 11:22 - 01007104 _____ () C:\Program Files (x86)\Origin\platforms\qwindows.dll
2014-01-29 22:15 - 2015-02-27 11:22 - 00023552 _____ () C:\Program Files (x86)\Origin\imageformats\qgif.dll
2014-01-29 22:15 - 2015-02-27 11:22 - 00024576 _____ () C:\Program Files (x86)\Origin\imageformats\qico.dll
2014-01-29 22:15 - 2015-02-27 11:22 - 00216576 _____ () C:\Program Files (x86)\Origin\imageformats\qjpeg.dll
2014-01-29 22:15 - 2015-02-27 11:22 - 00261120 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll
2014-01-29 22:15 - 2015-02-27 11:22 - 00019456 _____ () C:\Program Files (x86)\Origin\imageformats\qtga.dll
2014-01-29 22:15 - 2015-02-27 11:22 - 00337408 _____ () C:\Program Files (x86)\Origin\imageformats\qtiff.dll
2014-01-29 22:15 - 2015-02-27 11:22 - 00018944 _____ () C:\Program Files (x86)\Origin\imageformats\qwbmp.dll
2011-01-11 19:18 - 2009-12-10 12:16 - 00918816 _____ () C:\Program Files (x86)\Hama\Common\RaWLAPI.dll
2015-01-09 14:14 - 2012-05-18 08:53 - 01411584 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll
2015-01-09 14:14 - 2012-05-14 17:40 - 00192512 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll
2015-01-09 14:14 - 2012-05-14 17:40 - 00293376 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJRtl.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 02145304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 07956504 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00342552 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00029208 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00128536 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2010-05-04 15:36 - 2010-05-04 15:36 - 00970752 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2010-02-22 04:50 - 2010-02-22 04:50 - 00060416 _____ () C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\zlib1.dll
2015-03-14 15:36 - 2015-03-14 15:36 - 16858288 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Microsoft:69ElgEF7iygl4sAe7O961m3q
AlternateDataStreams: C:\ProgramData\Microsoft:ZfmP3J0OhHEOv0FcWdGFrW
AlternateDataStreams: C:\Users\Jibi\Lokale Einstellungen:io0ixmDJZ5jbABAKuZ4Ktb
AlternateDataStreams: C:\Users\Jibi\Lokale Einstellungen:oVnqElZKfcCPatCKgwCPYBLEr00
AlternateDataStreams: C:\Users\Jibi\AppData\Local:io0ixmDJZ5jbABAKuZ4Ktb
AlternateDataStreams: C:\Users\Jibi\AppData\Local:oVnqElZKfcCPatCKgwCPYBLEr00
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Anwendungsdaten:io0ixmDJZ5jbABAKuZ4Ktb
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Anwendungsdaten:oVnqElZKfcCPatCKgwCPYBLEr00
AlternateDataStreams: C:\Users\Jibi\AppData\Local\DjJBtBcdu89:GDoD5RxXtm7M7QHNUX8F7tmsNA
AlternateDataStreams: C:\Users\Jibi\AppData\Local\dNJMUE2SBzD:u2YxZ8UuqYMS0BVHDHedfJM0
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Temporary Internet Files:4gSuiEdYVtWsBig0N2ymvN3aI
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Temporary Internet Files:jR4u6Rc8LPoZPKgCv8ljft

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Jibi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

7EC67C03D29E42C8B5CC (S-1-5-21-2430596823-3442958056-1693070999-1004 - Limited - Enabled)
Administrator (S-1-5-21-2430596823-3442958056-1693070999-500 - Administrator - Disabled)
Gast (S-1-5-21-2430596823-3442958056-1693070999-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2430596823-3442958056-1693070999-1002 - Limited - Enabled)
Jibi (S-1-5-21-2430596823-3442958056-1693070999-1000 - Administrator - Enabled) => C:\Users\Jibi

==================== Faulty Device Manager Devices =============

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/21/2015 04:00:55 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/21/2015 03:00:53 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/21/2015 02:01:01 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/21/2015 01:27:43 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x80072ee7. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (03/21/2015 01:26:24 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
   bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
   bei System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)

Error: (03/21/2015 01:26:14 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.SystemException: Cannot create VM ---> System.ComponentModel.Win32Exception: Der Vorgang wurde erfolgreich beendet
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (03/21/2015 01:01:00 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/21/2015 00:53:05 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/21/2015 00:49:03 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.SystemException: Cannot create VM ---> System.ComponentModel.Win32Exception: Der Vorgang wurde erfolgreich beendet
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (03/20/2015 08:00:55 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques


System errors:
=============
Error: (03/21/2015 01:26:14 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (03/21/2015 01:25:31 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (03/21/2015 00:49:03 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (03/21/2015 00:47:18 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (03/20/2015 08:13:38 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (03/19/2015 10:41:43 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/19/2015 10:41:43 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (03/19/2015 10:41:43 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (03/19/2015 10:32:13 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (03/19/2015 10:30:18 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126


Microsoft Office Sessions:
=========================
Error: (03/21/2015 04:00:55 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/21/2015 03:00:53 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/21/2015 02:01:01 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/21/2015 01:27:43 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x80072ee7. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (03/21/2015 01:26:24 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
   bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
   bei System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)

Error: (03/21/2015 01:26:14 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.SystemException: Cannot create VM ---> System.ComponentModel.Win32Exception: Der Vorgang wurde erfolgreich beendet
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (03/21/2015 01:01:00 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/21/2015 00:53:05 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/21/2015 00:49:03 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.SystemException: Cannot create VM ---> System.ComponentModel.Win32Exception: Der Vorgang wurde erfolgreich beendet
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (03/20/2015 08:00:55 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques


CodeIntegrity Errors:
===================================
  Date: 2014-03-01 15:12:01.734
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\Jibi\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-01 15:12:00.700
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\Jibi\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-01 15:11:58.985
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-01 15:11:58.130
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-04-05 11:56:10.838
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-04-05 11:56:10.730
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-02-27 14:35:22.091
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-02-27 14:35:21.993
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-02-26 14:06:13.656
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-02-26 14:06:13.571
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Processor: Intel(R) Celeron(R) CPU E3400 @ 2.60GHz
Percentage of memory in use: 59%
Total physical RAM: 4095.24 MB
Available physical RAM: 1663.02 MB
Total Pagefile: 8188.67 MB
Available Pagefile: 4626.35 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================

Drive c: (System) (Fixed) (Total:465.76 GB) (Free:78.05 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 3775115E)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
__________________

Alt 21.03.2015, 17:18   #4
NoLove
 
WIN7 - PC langsam, Internetabbrüche, viele Befunde - Standard

WIN7 - PC langsam, Internetabbrüche, viele Befunde



FRST:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Jibi (administrator) on JIBI-PC on 21-03-2015 16:10:02
Running from C:\Users\Jibi\Downloads
Loaded Profiles: Jibi (Available profiles: Jibi)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
() C:\Windows\SysWOW64\ASGT.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Avid Technology, Inc..) C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\GPUTweak.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Realtek Semiconductor) C:\Windows\RAVCpl64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(SoftPerfect Research) C:\Program Files\NetWorx\networx.exe
(Avid Technology, Inc.) C:\Windows\System32\M-AudioTaskBarIcon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Akamai Technologies, Inc.) C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILGE.EXE
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILGE.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILGE.EXE
(Akamai Technologies, Inc.) C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe
(Google Inc.) C:\Users\Jibi\AppData\Local\RockMelt\Update\1.2.189.1\RockMeltCrashHandler.exe
(Hama GmbH & Co KG) C:\Program Files (x86)\Hama\Common\RaUI.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Incorporated) C:\Program Files\Adobe\Adobe Photoshop CS5 (64 Bit)\Photoshop.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_134.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_134.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RAVCpl64.exe [6297088 2008-05-28] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [NetWorx] => C:\Program Files\NetWorx\networx.exe [4760464 2012-12-18] (SoftPerfect Research)
HKLM\...\Run: [M-Audio Taskbar Icon] => C:\Windows\system32\M-AudioTaskBarIcon.exe [798728 2010-12-07] (Avid Technology, Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-08-30] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\Video Capture Master\Filters\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [DigidesignMMERefresh] => C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe [81920 2011-08-11] (Avid Technology, Inc..)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [704512 2015-03-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1934744 2015-01-27] (APN)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [807696 2013-12-20] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [127792 2015-02-12] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [RockMelt Update] => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [136336 2012-02-04] (Google Inc.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3631448 2015-02-27] (Electronic Arts)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [Google Update] => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-03-05] (Google Inc.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EPLTarget\P0000000000000002] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EPLTarget\P0000000000000003] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
AppInit_DLLs: c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll => c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll File Not Found
AppInit_DLLs:  c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll File Not Found
AppInit_DLLs-x32:  => "" File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FILSHtray.lnk
ShortcutTarget: FILSHtray.lnk -> C:\Program Files (x86)\FILSHtray\FILSHtray.exe (FILSH Media GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hama Wireless LAN Utility.lnk
ShortcutTarget: Hama Wireless LAN Utility.lnk -> C:\Program Files (x86)\Hama\Common\RaUI.exe (Hama GmbH & Co KG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk
ShortcutTarget: simplicheck.lnk -> C:\Program Files (x86)\simplitec\simplicheck\simplicheck.exe (simplitec)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
Startup: C:\Users\Jibi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyServer: [S-1-5-21-2430596823-3442958056-1693070999-1000] => 103.10.231.110:8080
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.doko-search.com/?babsrc=HP_ss_mib2&mntrId=A0ED002586DCEA82&affID=120662&tsp=4931
SearchScopes: HKLM -> DefaultScope {93D3B8AD-132C-4F50-ABFA-62FD82DBFACC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {93D3B8AD-132C-4F50-ABFA-62FD82DBFACC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {5A39CCDF-55F5-45CB-9121-13364B8573DB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {5A39CCDF-55F5-45CB-9121-13364B8573DB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000 -> DefaultScope {318CA664-3DA3-441E-8A53-898DF41959FC} URL = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=a0ed2c59000000000000002586dcea82&r=484
SearchScopes: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.max-start.com/?q={searchTerms}&babsrc=SP_ss_mib2&mntrId=A0ED002586DCEA82&affID=120662&tsp=4931
SearchScopes: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000 -> {318CA664-3DA3-441E-8A53-898DF41959FC} URL = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=a0ed2c59000000000000002586dcea82&r=484
SearchScopes: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000 -> {5A39CCDF-55F5-45CB-9121-13364B8573DB} URL = 
BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll [2015-01-27] (APN LLC.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: PriceGong - Price Comparison -> {1631550F-191D-4826-B069-D9439253D926} -> C:\Program Files (x86)\PriceGong\2.6.11\PriceGongIE.dll [2013-03-04] (PriceGong)
BHO-x32: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll [2015-01-27] (APN LLC.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-05-25] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: delta Helper Object -> {C1AF5FA5-852C-4C90-812E-A7F75E011D87} -> C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll [2013-05-20] (Delta-search.com)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-05-25] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll [2015-01-27] (APN LLC.)
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll [2013-05-20] (Delta-search.com)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll [2015-01-27] (APN LLC.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
Toolbar: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000 -> Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll [2015-01-27] (APN LLC.)
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Winsock: Catalog9 01 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 01 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 02 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 03 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 04 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 05 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 06 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 07 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 08 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 19 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default
FF DefaultSearchEngine: Wikipedia (de)
FF SelectedSearchEngine: Wikipedia (de)
FF Homepage: hxxp://www.t-online.de/
FF NetworkProxy: "backup.ftp", "202.147.198.217"
FF NetworkProxy: "backup.ftp_port", 8080
FF NetworkProxy: "backup.socks", "202.147.198.217"
FF NetworkProxy: "backup.socks_port", 8080
FF NetworkProxy: "backup.ssl", "202.147.198.217"
FF NetworkProxy: "backup.ssl_port", 8080
FF NetworkProxy: "ftp", "202.147.198.217"
FF NetworkProxy: "ftp_port", 8888
FF NetworkProxy: "http", "202.147.198.217"
FF NetworkProxy: "http_port", 8888
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "202.147.198.217"
FF NetworkProxy: "socks_port", 8888
FF NetworkProxy: "ssl", "202.147.198.217"
FF NetworkProxy: "ssl_port", 8888
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-14] ()
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2011-02-20] (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-05-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-05-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2852 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nppl3260.dll No File
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.46 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nppl3260.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1662 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nprpjplug.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.46 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nprpjplug.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Jibi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2011-11-08] (Skype Limited)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Jibi\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @talk.google.com/O1DPlugin -> C:\Users\Jibi\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-01-27] (Google)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @us-w1.rockmelt.com/RockMelt Update;version=8 -> C:\Users\Jibi\AppData\Local\RockMelt\Update\1.2.189.1\npRockMeltOneClick8.dll [2012-02-04] (RockMelt Inc.)
FF user.js: detected! => C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js [2013-10-20]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2011-05-04] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npijjiautoinstallpluginff.dll [2010-07-27] (NHN USA Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npijjiFFPlugin1.dll [2010-07-28] (NHN USA Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Jibi\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Jibi\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-01-27] (Google)
FF SearchPlugin: C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\babylon.xml [2012-04-28]
FF SearchPlugin: C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\BitGuard.xml [2012-04-28]
FF SearchPlugin: C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\BrowserDefender.xml [2012-04-28]
FF SearchPlugin: C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\delta.xml [2013-07-02]
FF SearchPlugin: C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\softonic.xml [2013-10-20]
FF Extension: Ant Video Downloader - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\anttoolbar@ant.com [2015-03-07]
FF Extension: Firebug - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\firebug@software.joehewitt.com.xpi [2013-11-21]
FF Extension: ProxTube - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\ich@maltegoetz.de.xpi [2014-09-10]
FF Extension: ReloadEvery - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2013-04-11]
FF Extension: Pearl Crescent Page Saver Basic - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\{c151d79e-e61b-4a90-a887-5a46d38fba99}.xpi [2013-01-21]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.ver-filmes.com/
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll No File
CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\pdf.dll ()
CHR Plugin: (ijji Auto Install Plugin for Mozilla) - C:\Program Files (x86)\Mozilla Firefox\plugins\npijjiautoinstallpluginff.dll (NHN USA Inc.)
CHR Plugin: (ijji Web Launching Plugin for FF) - C:\Program Files (x86)\Mozilla Firefox\plugins\npijjiFFPlugin1.dll (NHN USA Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll No File
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Bing Bar) - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Jibi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Profile: C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-21]
CHR Extension: (Google Drive) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-21]
CHR Extension: (YouTube) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-21]
CHR Extension: (Adblock Plus) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-03-24]
CHR Extension: (Google Search) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-21]
CHR Extension: (IE Tab) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehijbfgiekmjfkfjpbkbammjbdenadd [2014-08-17]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-11]
CHR Extension: (Google Wallet) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-21]
CHR Extension: (Auto Refresh Plus) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilipfekkmncanaajkapbpancpelijih [2014-03-31]
CHR Extension: (Gmail) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-21]
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2015-02-05]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2015-02-05]
CHR HKLM-x32\...\Chrome\Extension: [bkomkajifikmkfnjgphkjcfeepbnojok] - C:\Program Files (x86)\PriceGong\2.6.11\pricegong.crx [2013-03-04]
CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\Jibi\AppData\Roaming\BabSolution\CR\Delta.crx [2013-07-02]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [992504 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [177560 2015-01-27] (APN LLC.)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [184056 2015-02-12] (Avira Operations GmbH & Co. KG)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.)
R2 DigiRefresh; C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe [81920 2011-08-11] (Avid Technology, Inc..) [File not signed]
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)
R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [152640 2013-04-30] (SEIKO EPSON CORPORATION)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2011-01-14] (Macrovision Europe Ltd.) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4208208 2010-10-21] (INCA Internet Co., Ltd.) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-02-27] (Electronic Arts)
R2 RalinkRegistryWriter; C:\Program Files (x86)\Hama\Common\RaRegistry.exe [185632 2009-12-10] (Ralink Technology, Corp.)
R2 RalinkRegistryWriter64; C:\Program Files (x86)\Hama\Common\RaRegistry64.exe [212256 2009-12-10] (Ralink Technology, Corp.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2015x\RpcAgentSrv.exe [73200 2014-12-17] (SiSoftware) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132120 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-06] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [114448 2013-12-20] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-04-30] (DT Soft Ltd)
S3 E100B; C:\Windows\System32\DRIVERS\efe5b32e.sys [192256 2009-06-10] (Intel Corporation)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2013-07-02] (ASUSTeK Computer Inc.)
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 MAUSBFASTTRACK; C:\Windows\System32\DRIVERS\MAudioFastTrack.sys [187912 2010-12-07] (Avid Technology, Inc.)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4774 2012-03-06] (INCA Internet Co., Ltd.) [File not signed]
S3 NVFLASH; C:\Windows\system32\drivers\nvflash.sys [15648 2014-01-06] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2012-05-14] (Realtek Semiconductor Corporation                           )
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2015x\WNt600x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 dump_wmimmc; \??\C:\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-21 16:10 - 2015-03-21 16:10 - 00039549 _____ () C:\Users\Jibi\Downloads\FRST.txt
2015-03-21 16:09 - 2015-03-21 16:10 - 00000000 ____D () C:\FRST
2015-03-21 16:08 - 2015-03-21 16:08 - 00000540 _____ () C:\Users\Jibi\Downloads\defogger_disable.log
2015-03-21 16:08 - 2015-03-21 16:08 - 00000168 _____ () C:\Users\Jibi\defogger_reenable
2015-03-21 14:00 - 2015-03-21 14:00 - 02095616 _____ (Farbar) C:\Users\Jibi\Downloads\FRST64.exe
2015-03-21 14:00 - 2015-03-21 14:00 - 00380416 _____ () C:\Users\Jibi\Downloads\f9lghzg5.exe
2015-03-21 13:57 - 2015-03-21 13:57 - 00050477 _____ () C:\Users\Jibi\Downloads\Defogger.exe
2015-03-19 19:16 - 2015-03-20 15:48 - 00072232 _____ () C:\Users\Jibi\Desktop\aloholtet.vf
2015-03-19 19:16 - 2015-03-20 15:29 - 00069952 _____ () C:\Users\Jibi\Desktop\aloholtet.vf.bak
2015-03-19 10:31 - 2013-07-02 16:29 - 00024824 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys
2015-03-18 19:38 - 2015-03-20 20:13 - 00000000 ____D () C:\Users\Jibi\Desktop\Alkohol Test
2015-03-17 13:07 - 2015-03-17 14:59 - 00000000 ____D () C:\Users\Jibi\Downloads\German Top 100 Single Charts 16.03.2015
2015-03-17 12:54 - 2015-03-17 13:07 - 911811482 _____ () C:\Users\Jibi\Downloads\German Top100 Single Charts 16.03.2015.rar
2015-03-16 13:25 - 2015-03-17 11:50 - 00000000 ____D () C:\Users\Jibi\Desktop\Wand
2015-03-14 18:54 - 2015-03-14 19:06 - 105310610 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.mp4
2015-03-14 18:23 - 2015-03-14 18:23 - 00000000 ____D () C:\Users\Jibi\Downloads\Neuer Ordner (2)
2015-03-14 18:05 - 2015-03-14 18:10 - 00279280 _____ () C:\Users\Jibi\Downloads\Conflikt_Beatz_-_Spiriduell_VR3_Beat_www.rappers.in.mp3.sfk
2015-03-13 12:03 - 2015-03-14 19:25 - 00069648 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.vf
2015-03-13 12:03 - 2015-03-14 18:53 - 00069648 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.vf.bak
2015-03-13 11:02 - 2015-03-13 11:05 - 00213832 _____ () C:\Users\Jibi\Desktop\jibitestetfb.MP3.sfk
2015-03-11 13:53 - 2015-02-20 05:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 13:53 - 2015-02-20 05:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 13:53 - 2015-02-20 04:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 13:53 - 2015-02-20 04:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 13:53 - 2015-02-03 04:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 13:53 - 2015-02-03 04:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 13:53 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 13:53 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 13:52 - 2015-02-03 04:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 13:52 - 2015-02-03 04:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 13:52 - 2015-02-03 04:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 13:52 - 2015-02-03 04:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 13:52 - 2015-02-03 04:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 13:52 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 13:52 - 2015-02-03 04:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 13:52 - 2015-02-03 04:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 13:52 - 2015-02-03 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 13:52 - 2015-02-03 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 13:52 - 2015-02-03 04:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 13:52 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 13:52 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 13:52 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 13:52 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 13:52 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 13:52 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 13:52 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 13:52 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 13:52 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 13:52 - 2015-02-03 03:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 13:52 - 2014-10-31 23:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 13:52 - 2014-06-28 01:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-03-11 13:52 - 2014-06-28 01:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-03-11 13:51 - 2015-03-06 06:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 13:51 - 2015-03-06 06:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 13:51 - 2015-03-06 06:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 13:51 - 2015-03-06 06:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 13:51 - 2015-03-06 06:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 13:51 - 2015-03-06 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 13:51 - 2015-03-06 06:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 13:51 - 2015-03-06 06:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 13:51 - 2015-03-06 06:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 13:51 - 2015-03-06 06:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 13:51 - 2015-03-06 06:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 13:51 - 2015-03-06 06:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 13:51 - 2015-03-06 06:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 13:51 - 2015-02-23 11:52 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 13:51 - 2015-02-23 11:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 13:51 - 2015-02-23 11:51 - 01409024 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 13:51 - 2015-02-23 11:51 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 13:51 - 2015-02-23 11:51 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 19301888 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 15410688 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 02656256 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 13:51 - 2015-02-23 11:49 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 13:51 - 2015-02-23 10:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 13:51 - 2015-02-23 09:51 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-03-11 13:51 - 2015-02-23 09:25 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2015-03-11 13:51 - 2015-02-21 06:31 - 01763328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 13:51 - 2015-02-21 06:31 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 13:51 - 2015-02-21 06:31 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 14380544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 13768704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 02864640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 13:51 - 2015-02-21 06:29 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 13:51 - 2015-02-21 06:29 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 13:51 - 2015-02-21 06:29 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 13:51 - 2015-02-21 06:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 13:51 - 2015-02-21 05:42 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-03-11 13:51 - 2015-02-21 05:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2015-03-11 13:51 - 2015-02-13 06:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 13:51 - 2015-02-13 06:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 13:51 - 2015-02-03 04:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 13:51 - 2015-02-03 04:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 13:51 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 13:51 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 13:51 - 2015-01-31 00:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 13:51 - 2015-01-17 03:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 13:51 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 13:50 - 2015-02-26 04:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 13:46 - 2015-02-04 04:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 13:46 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-10 19:16 - 2015-03-12 12:49 - 00091408 _____ () C:\Users\Jibi\Desktop\rage4.vf
2015-03-10 19:16 - 2015-03-12 12:48 - 00091408 _____ () C:\Users\Jibi\Desktop\rage4.vf.bak
2015-03-10 18:33 - 2015-03-10 18:34 - 18597681 _____ () C:\Users\Jibi\Desktop\kopfballmaster.mp4
2015-03-10 18:28 - 2015-03-12 12:21 - 00000000 ____D () C:\Users\Jibi\Desktop\Neuer Ordner (4)
2015-03-10 16:20 - 2015-03-10 16:20 - 00003462 _____ () C:\Windows\System32\Tasks\dlclient
2015-03-10 16:20 - 2015-03-10 16:20 - 00003460 _____ () C:\Windows\System32\Tasks\dlclient Updater
2015-03-10 16:20 - 2015-03-10 16:20 - 00000000 ____D () C:\Users\Jibi\AppData\Local\delta
2015-03-06 11:15 - 2015-03-06 11:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-05 14:43 - 2015-03-05 14:54 - 123529920 _____ () C:\Users\Jibi\Desktop\ytmmrz.mp4
2015-03-05 14:29 - 2015-03-05 14:29 - 00030976 _____ () C:\Users\Jibi\Desktop\outronew.mp4.sfk
2015-03-05 14:25 - 2015-03-05 14:26 - 00125584 _____ () C:\Users\Jibi\Desktop\MVI_0331.MOV.sfk
2015-03-05 14:25 - 2015-03-05 14:26 - 00042608 _____ () C:\Users\Jibi\Desktop\MVI_0330.MOV.sfk
2015-03-05 14:23 - 2015-03-05 14:19 - 475796800 ____N () C:\Users\Jibi\Desktop\MVI_0331.MOV
2015-03-05 14:23 - 2015-03-05 14:15 - 155390932 ____N () C:\Users\Jibi\Desktop\MVI_0330.MOV
2015-03-05 13:22 - 2015-03-05 14:56 - 00050552 _____ () C:\Users\Jibi\Desktop\ytmyolo.vf
2015-03-05 13:22 - 2015-03-05 14:40 - 00049784 _____ () C:\Users\Jibi\Desktop\ytmyolo.vf.bak
2015-03-05 12:57 - 2015-03-05 12:58 - 00243856 _____ () C:\Users\Jibi\Desktop\ytmnews.MP3.sfk
2015-03-05 12:57 - 2015-03-05 12:57 - 00004704 _____ () C:\Users\Jibi\Desktop\Intro.mp4.sfk
2015-03-05 00:37 - 2015-03-17 23:59 - 00000000 ____D () C:\Users\Jibi\Desktop\BeGe
2015-03-04 17:35 - 2015-03-04 17:44 - 36873627 _____ () C:\Users\Jibi\Desktop\diagpromo.mp4
2015-03-04 16:07 - 2015-03-04 16:10 - 00044240 _____ () C:\Users\Jibi\Desktop\Diagnose.MP3.sfk
2015-03-04 15:52 - 2015-03-04 15:53 - 00168296 _____ () C:\Users\Jibi\Downloads\♩♫ Epic and Dramatic Trailer Music ♪♬ - Copyright and Royalty Free.mp3.sfk
2015-03-04 14:48 - 2015-03-04 16:25 - 00000000 ____D () C:\Users\Jibi\Desktop\Neuer Ordner (3)
2015-02-25 11:19 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-25 11:19 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-23 22:20 - 2015-02-23 22:31 - 84817327 _____ () C:\Users\Jibi\Desktop\DeeEF - BBK Quali.mp4
2015-02-23 20:05 - 2015-02-23 20:06 - 00134672 _____ () C:\Users\Jibi\Downloads\DeeEF-BBK-Qualifikation.mp3.mp3.sfk
2015-02-23 03:40 - 2015-03-17 12:20 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\FCBfan
2015-02-23 03:40 - 2015-02-23 03:40 - 00003424 _____ () C:\Windows\System32\Tasks\FCBfan
2015-02-22 19:18 - 2014-12-18 18:49 - 36420117 _____ () C:\Users\Jibi\Downloads\MSIAfterburnerSetup410.exe
2015-02-22 19:16 - 2015-02-22 19:16 - 36210245 _____ () C:\Users\Jibi\Downloads\MSIAfterburnerSetup410.zip
2015-02-22 19:14 - 2015-02-22 19:15 - 01203488 _____ () C:\Users\Jibi\Downloads\MSI Afterburner - CHIP-Installer.exe
2015-02-22 15:36 - 2015-02-26 10:22 - 00000000 ____D () C:\Users\Jibi\Desktop\Dietrich Drehtag
2015-02-21 03:26 - 2014-11-22 11:46 - 00038032 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-02-21 03:26 - 2014-11-22 11:46 - 00032400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-02-20 13:50 - 2015-02-20 13:50 - 00000000 ____D () C:\Program Files (x86)\Microsoft ASP.NET
2015-02-20 02:06 - 2015-02-20 13:10 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\NVIDIA
2015-02-20 00:23 - 2015-02-20 08:36 - 00000022 _____ () C:\Windows\GPU-Z.INI
2015-02-20 00:23 - 2014-01-06 17:46 - 00015648 _____ () C:\Windows\system32\Drivers\nvflash.sys
2015-02-20 00:08 - 2015-02-20 00:08 - 00000000 ____D () C:\Windows\System32\Tasks\ASUS
2015-02-20 00:07 - 2015-02-20 00:09 - 00000032 _____ () C:\setup.log
2015-02-20 00:07 - 2015-02-20 00:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2015-02-20 00:07 - 2015-02-20 00:09 - 00000000 ____D () C:\Program Files (x86)\ASUS
2015-02-20 00:07 - 2015-02-20 00:08 - 00000000 ____D () C:\Windows\Downloaded Installations
2015-02-20 00:07 - 2015-02-20 00:07 - 00001049 _____ () C:\Users\Public\Desktop\ASUS GPU Tweak.lnk
2015-02-20 00:07 - 2015-02-20 00:07 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS
2015-02-20 00:05 - 2015-02-21 03:23 - 00000000 ____D () C:\Users\Jibi\AppData\Local\NVIDIA Corporation
2015-02-20 00:05 - 2015-02-21 03:23 - 00000000 ____D () C:\Users\Jibi\AppData\Local\NVIDIA
2015-02-20 00:05 - 2015-02-20 00:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-02-20 00:05 - 2014-12-13 01:12 - 02824504 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-02-20 00:05 - 2014-12-13 01:12 - 02210040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-02-20 00:05 - 2014-12-13 01:12 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-02-20 00:05 - 2014-12-13 01:12 - 01291464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-02-20 00:04 - 2015-03-21 13:25 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-20 00:04 - 2015-02-20 00:04 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2015-02-20 00:04 - 2014-11-22 11:46 - 00035472 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2015-02-20 00:04 - 2014-07-02 18:44 - 00609240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-02-20 00:03 - 2015-02-20 01:57 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-02-20 00:03 - 2014-07-02 22:29 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2015-02-20 00:03 - 2014-07-02 22:29 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2015-02-20 00:03 - 2014-07-02 22:29 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2015-02-20 00:03 - 2014-07-02 21:48 - 00075040 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-02-20 00:03 - 2014-07-02 21:48 - 00061912 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-02-20 00:03 - 2014-07-02 19:55 - 06783776 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-02-20 00:03 - 2014-07-02 19:55 - 03522392 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-02-20 00:03 - 2014-07-02 19:55 - 02559960 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-02-20 00:03 - 2014-07-02 19:55 - 00935368 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-02-20 00:03 - 2014-07-02 19:55 - 00386520 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-02-20 00:03 - 2014-07-02 19:55 - 00062808 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-02-20 00:03 - 2014-07-02 11:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin
2015-02-20 00:02 - 2014-07-02 21:48 - 01890080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434052.dll
2015-02-20 00:02 - 2014-07-02 21:48 - 01539928 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434052.dll
2015-02-20 00:02 - 2014-07-02 21:48 - 00026353 _____ () C:\Windows\system32\nvinfo.pb
2015-02-20 00:01 - 2014-07-02 21:48 - 31512520 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 24196896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 18626304 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 17555104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 16122344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 14498552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 13922752 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 13835208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 12866008 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-02-20 00:01 - 2014-07-02 21:48 - 11283344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 04247000 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 03989960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00965312 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00944928 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00907096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00903624 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00869152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00846832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00354016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00166568 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00146480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-02-20 00:00 - 2014-07-02 21:48 - 22994208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-02-20 00:00 - 2014-07-02 21:48 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-02-20 00:00 - 2014-07-02 21:48 - 11222048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-02-20 00:00 - 2014-07-02 21:48 - 03196816 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-02-20 00:00 - 2014-07-02 21:48 - 02814656 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-02-19 23:59 - 2015-02-21 03:26 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-02-19 13:16 - 2015-02-19 13:16 - 00298000 _____ () C:\Users\Jibi\Downloads\TAP_-_Bring_It_Back_www.rappers.in.mp3.sfk
2015-02-19 13:04 - 2015-02-19 13:07 - 00199792 _____ () C:\Users\Jibi\Downloads\Toto_Beat_Music_-_In_Da_Hood_Track_1_www.rappers.in.mp3.sfk
2015-02-19 12:56 - 2015-02-19 12:57 - 00239000 _____ () C:\Users\Jibi\Downloads\JL6_-_realhiphop_www.rappers.in.mp3.sfk
2015-02-19 12:55 - 2015-02-19 12:55 - 00303080 _____ () C:\Users\Jibi\Downloads\TAP_-_NICE_www.rappers.in.mp3.sfk
2015-02-19 12:53 - 2015-02-19 12:54 - 00285904 _____ () C:\Users\Jibi\Downloads\MurdyBautBeats_-_Palm_www.rappers.in.mp3.sfk
2015-02-19 12:45 - 2015-02-19 12:47 - 00143312 _____ () C:\Users\Jibi\Downloads\Klick_Boom_Beatz_-_VBT15_VR2_www.rappers.in.mp3.sfk

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-21 16:08 - 2011-01-08 21:30 - 00000000 ____D () C:\Users\Jibi
2015-03-21 16:04 - 2014-03-21 17:14 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-21 16:03 - 2012-02-04 11:53 - 00000924 _____ () C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job
2015-03-21 16:01 - 2015-01-21 20:01 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job
2015-03-21 16:00 - 2015-01-21 20:00 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job
2015-03-21 16:00 - 2014-03-05 20:14 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job
2015-03-21 15:59 - 2015-01-21 19:59 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job
2015-03-21 15:58 - 2015-01-21 19:58 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job
2015-03-21 15:44 - 2012-06-14 12:43 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-21 15:35 - 2012-11-25 17:39 - 00123136 _____ () C:\Windows\setupact.log
2015-03-21 15:17 - 2011-01-08 21:22 - 01529206 _____ () C:\Windows\WindowsUpdate.log
2015-03-21 14:03 - 2009-07-14 05:45 - 00023072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-21 14:03 - 2009-07-14 05:45 - 00023072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-21 13:32 - 2014-07-25 11:47 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-21 13:32 - 2014-07-25 11:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-03-21 13:32 - 2014-07-25 11:42 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-03-21 13:32 - 2012-01-17 16:40 - 00001112 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-03-21 13:31 - 2012-10-25 08:34 - 00000000 ____D () C:\ProgramData\Origin
2015-03-21 13:26 - 2014-03-21 17:14 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-21 13:25 - 2012-06-23 12:04 - 00000198 _____ () C:\Windows\Tasks\AutoKMS.job
2015-03-21 13:25 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-21 13:20 - 2012-02-21 16:49 - 00000132 _____ () C:\Users\Jibi\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-03-21 12:58 - 2011-01-11 19:31 - 00000000 ____D () C:\Users\Jibi\AppData\Local\Adobe
2015-03-20 14:51 - 2012-07-11 06:46 - 00000000 ____D () C:\Users\Jibi\Documents\Vegas Movie Studio HD Platinum 11.0 Projekte
2015-03-20 11:58 - 2012-02-04 11:53 - 00000872 _____ () C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job
2015-03-19 18:46 - 2014-09-19 13:55 - 00000524 _____ () C:\Users\Jibi\Desktop\wwe.txt
2015-03-18 11:06 - 2009-07-14 18:58 - 00699912 _____ () C:\Windows\system32\perfh007.dat
2015-03-18 11:06 - 2009-07-14 18:58 - 00149794 _____ () C:\Windows\system32\perfc007.dat
2015-03-18 11:06 - 2009-07-14 06:13 - 01622420 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-17 15:10 - 2013-01-24 14:43 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\Skype
2015-03-17 15:01 - 2011-01-13 19:55 - 00000000 ____D () C:\Users\Jibi\AppData\Local\Last.fm
2015-03-14 17:59 - 2014-12-30 02:10 - 00000000 ____D () C:\Users\Jibi\Desktop\Werbungsvideo
2015-03-14 15:37 - 2012-06-14 12:43 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-03-14 15:36 - 2012-06-14 12:43 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-03-14 15:36 - 2011-05-13 21:29 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-14 15:31 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-13 19:49 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-03-11 19:59 - 2009-07-14 05:45 - 05361848 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-11 19:56 - 2012-11-25 22:18 - 00269930 _____ () C:\Windows\PFRO.log
2015-03-11 19:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-11 19:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-11 15:53 - 2012-03-18 17:12 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-11 15:53 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2015-03-11 15:46 - 2013-08-15 01:07 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-11 15:37 - 2011-01-18 11:24 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-08 15:59 - 2012-05-31 13:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-06 13:15 - 2013-08-19 13:26 - 00001974 _____ () C:\Users\Jibi\Desktop\amer.txt
2015-03-05 11:25 - 2014-10-15 08:43 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-05 11:25 - 2013-08-21 21:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-03-05 11:25 - 2013-08-21 21:46 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-03-04 11:09 - 2013-08-21 22:03 - 00044088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-03-04 11:09 - 2013-08-21 21:46 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-03-04 11:09 - 2013-08-21 21:46 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-03-03 13:23 - 2014-08-17 22:30 - 00000000 ____D () C:\Users\Jibi\AppData\Local\IE Tab
2015-02-27 12:55 - 2013-01-28 09:46 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\TS3Client
2015-02-27 11:56 - 2012-10-25 08:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-02-27 11:56 - 2012-10-25 08:33 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-02-20 08:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2015-02-20 02:22 - 2012-03-18 17:37 - 01595764 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-02-20 00:09 - 2011-01-11 19:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-20 00:05 - 2013-09-17 22:59 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-02-20 00:04 - 2011-10-09 14:07 - 00000000 ____D () C:\temp
2015-02-20 00:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help

==================== Files in the root of some directories =======

2013-11-21 10:25 - 2013-11-21 10:25 - 4216840 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\vcredist.exe
2012-02-21 16:49 - 2015-03-21 13:20 - 0000132 _____ () C:\Users\Jibi\AppData\Roaming\Adobe PNG Format CS5 Prefs
2012-01-16 13:08 - 2012-01-16 18:46 - 0477992 _____ () C:\Users\Jibi\AppData\Roaming\m_cmon_ff_1.gif
2012-01-17 02:00 - 2012-01-18 15:47 - 0478725 _____ () C:\Users\Jibi\AppData\Roaming\m_cmon_ff_4.gif
2012-01-16 13:08 - 2012-01-16 18:46 - 0421457 _____ () C:\Users\Jibi\AppData\Roaming\m_cmon_ic_1.gif
2012-01-17 02:00 - 2012-01-18 15:47 - 0422803 _____ () C:\Users\Jibi\AppData\Roaming\m_cmon_ic_4.gif
2015-02-15 21:45 - 2014-12-12 14:11 - 14397440 _____ () C:\Users\Jibi\AppData\Roaming\Sandra.mdb
2014-04-02 11:03 - 2014-04-02 11:03 - 0001456 _____ () C:\Users\Jibi\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2012-11-26 06:55 - 2015-02-09 00:00 - 0005120 _____ () C:\Users\Jibi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Some content of TEMP:
====================
C:\Users\Jibi\AppData\Local\Temp\AskPIP_FF_.exe
C:\Users\Jibi\AppData\Local\Temp\AskSLib.dll
C:\Users\Jibi\AppData\Local\Temp\avgnt.exe
C:\Users\Jibi\AppData\Local\Temp\DWPUpgradeInstaller.exe
C:\Users\Jibi\AppData\Local\Temp\ICSharpCode.SharpZipLib.dll
C:\Users\Jibi\AppData\Local\Temp\install_helper.exe
C:\Users\Jibi\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Jibi\AppData\Local\Temp\Last.fm-2.1.30.exe
C:\Users\Jibi\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Jibi\AppData\Local\Temp\Softonic_chr_1-8-19-3.exe
C:\Users\Jibi\AppData\Local\Temp\uninst1.exe
C:\Users\Jibi\AppData\Local\Temp\YgoUpdater.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-07 13:47

==================== End Of Log ============================
         
--- --- ---

--- --- ---

Alt 21.03.2015, 17:19   #5
NoLove
 
WIN7 - PC langsam, Internetabbrüche, viele Befunde - Standard

WIN7 - PC langsam, Internetabbrüche, viele Befunde



GMER:
[CODE]
GMER Logfile:
Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-03-21 16:30:47
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2 ST3500418AS rev.CC38 465,76GB
Running: f9lghzg5.exe; Driver: C:\Users\Jibi\AppData\Local\Temp\kwtdypod.sys


---- User code sections - GMER 2.1 ----

?      C:\Windows\system32\mssprxy.dll [3056] entry point in ".rdata" section                                                                     00000000740b71e6
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17           0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17             0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17           0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42           0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                        * 9
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17              0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17       0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17              0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17       0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17             0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                  0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17           0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17             0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17             0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17           0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20       0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31       0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                     0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                       0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                     0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                     0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                        * 9
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                        0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                 0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                        0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                 0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                       0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                            0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                     0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                       0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                          0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                       0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                     0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                 0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                 0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                        0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                          0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                        0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                        0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                        * 9
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                           0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                    0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                           0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                    0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                          0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                               0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                        0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                          0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                             0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                          0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                        0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                    0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                    0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17      0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17        0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17      0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42      0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                        * 9
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17         0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17  0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17         0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17  0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17        0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17             0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17      0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17        0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17           0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17        0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17      0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20  0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31  0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                        0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                          0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                        0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                        0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                        * 9
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                           0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                    0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                           0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                    0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                          0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                               0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                        0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                          0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                             0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                          0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                        0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                    0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                    0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17        0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17          0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17        0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42        0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                        * 9
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17           0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17    0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17           0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17    0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17          0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17               0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17        0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17          0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17             0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17          0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17        0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20    0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31    0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                               0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                 0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                               0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                               0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\KERNEL32.dll
.text  ...                                                                                                                                        * 9
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                  0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                           0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                  0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                           0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                 0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                      0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                               0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                 0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                    0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                 0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                               0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                           0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                           0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                  0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                    0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                  0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                  0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                        * 9
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                     0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17              0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                     0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17              0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                    0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                         0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                  0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                    0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                       0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                    0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                  0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20              0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31              0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                  0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                    0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                  0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                  0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                        * 9
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                     0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17              0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                     0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17              0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                    0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                         0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                  0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                    0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                       0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                    0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                  0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20              0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31              0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                    0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                      0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                    0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                    0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                        * 9
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                       0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                       0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                      0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                           0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                    0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                      0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                         0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                      0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                    0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll

---- EOF - GMER 2.1 ----
         
--- --- ---


Alt 22.03.2015, 08:02   #6
schrauber
/// the machine
/// TB-Ausbilder
 

WIN7 - PC langsam, Internetabbrüche, viele Befunde - Standard

WIN7 - PC langsam, Internetabbrüche, viele Befunde



Lade Dir bitte von hier Revo Uninstaller Download Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
  • Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
  • Klicke auf Optionen und wähle als Sprache Deutsch.
  • Suche im Uninstallerfeld nach den Programmen:

    Delta Chrome Toolbar

    Delta toolbar

    PriceGong 2.6.11


  • Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
  • Wähle anschließend den Modus "Moderat" aus.
  • Reste löschen:
    Klicke auf dann auf und dann auf .

 





Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________
--> WIN7 - PC langsam, Internetabbrüche, viele Befunde

Alt 22.03.2015, 14:01   #7
NoLove
 
WIN7 - PC langsam, Internetabbrüche, viele Befunde - Standard

WIN7 - PC langsam, Internetabbrüche, viele Befunde



Erledigt

Code:
ATTFilter
Combofix Logfile:
Code:
ATTFilter
ComboFix 15-03-14.03 - Jibi 22.03.2015  13:31:28.2.2 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.4095.2769 [GMT 1:00]
ausgeführt von:: c:\users\Jibi\Downloads\ComboFix.exe
AV: Avira Desktop *Enabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Enabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\END
c:\users\Jibi\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
c:\users\Jibi\AppData\Local\Google\Chrome\User Data\Default\bProtectorPreferences
c:\users\Jibi\AppData\Local\Microsoft\Windows\Temporary Internet Files\{13AB5B03-2B2A-4476-A483-E63F94CB4DE8}.xps
c:\users\Jibi\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
c:\users\Jibi\AppData\Roaming\m_cmon_ff_1.gif
c:\users\Jibi\AppData\Roaming\m_cmon_ff_4.gif
c:\users\Jibi\AppData\Roaming\m_cmon_ic_1.gif
c:\users\Jibi\AppData\Roaming\m_cmon_ic_4.gif
.
Infizierte Kopie von c:\windows\SysWow64\userinit.exe wurde gefunden und desinfiziert 
Kopie von - c:\combofix\HarddiskVolumeShadowCopy7_!Windows!SysWOW64!userinit.exe wurde wiederhergestellt 
.
.
(((((((((((((((((((((((   Dateien erstellt von 2015-02-22 bis 2015-03-22  ))))))))))))))))))))))))))))))
.
.
2015-03-22 12:43 . 2015-03-22 12:43	--------	d-----w-	c:\users\Public\AppData\Local\temp
2015-03-22 12:43 . 2015-03-22 12:43	--------	d-----w-	c:\users\Default\AppData\Local\temp
2015-03-22 12:11 . 2015-03-22 12:11	--------	d-----w-	c:\program files (x86)\VS Revo Group
2015-03-21 15:09 . 2015-03-21 15:12	--------	d-----w-	C:\FRST
2015-03-14 19:09 . 2015-03-14 19:09	--------	d-----w-	c:\users\Jibi\AppData\Local\ElevatedDiagnostics
2015-03-11 12:52 . 2015-02-03 03:31	14632960	----a-w-	c:\windows\system32\wmp.dll
2015-03-11 12:51 . 2015-02-03 03:31	215552	----a-w-	c:\windows\system32\ubpm.dll
2015-03-11 12:50 . 2015-02-26 03:25	3204096	----a-w-	c:\windows\system32\win32k.sys
2015-03-11 12:46 . 2015-02-04 03:16	465920	----a-w-	c:\windows\system32\WMPhoto.dll
2015-03-11 12:46 . 2015-02-04 02:54	417792	----a-w-	c:\windows\SysWow64\WMPhoto.dll
2015-03-10 15:20 . 2015-03-22 12:15	--------	d-----w-	c:\users\Jibi\AppData\Local\delta
2015-02-23 02:40 . 2015-03-17 11:20	--------	d-----w-	c:\users\Jibi\AppData\Roaming\FCBfan
2015-02-21 02:26 . 2014-11-22 10:46	38032	----a-w-	c:\windows\system32\drivers\nvvad64v.sys
2015-02-21 02:26 . 2014-11-22 10:46	32400	----a-w-	c:\windows\SysWow64\nvaudcap32v.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-21 12:32 . 2014-07-25 10:47	129752	----a-w-	c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-03-14 14:36 . 2012-06-14 11:43	778928	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2015-03-14 14:36 . 2011-05-13 20:29	142512	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-03-11 14:37 . 2011-01-18 10:24	122905848	----a-w-	c:\windows\system32\MRT.exe
2015-03-04 10:09 . 2013-08-21 21:03	44088	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2015-03-04 10:09 . 2013-08-21 20:46	132120	----a-w-	c:\windows\system32\drivers\avipbb.sys
2015-03-04 10:09 . 2013-08-21 20:46	128536	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2015-02-17 14:26 . 2015-02-17 14:26	1217184	----a-w-	c:\windows\SysWow64\FM20.DLL
2015-02-17 12:30 . 2015-02-17 12:30	53248	----a-r-	c:\users\Jibi\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2015-02-04 03:16 . 2015-02-10 19:35	609280	----a-w-	c:\windows\system32\generaltel.dll
2015-02-04 03:16 . 2015-02-10 19:35	762368	----a-w-	c:\windows\system32\invagent.dll
2015-02-04 03:16 . 2015-02-10 19:35	414720	----a-w-	c:\windows\system32\devinv.dll
2015-02-04 03:16 . 2015-02-10 19:35	894976	----a-w-	c:\windows\system32\appraiser.dll
2015-02-04 03:16 . 2015-02-10 19:35	227328	----a-w-	c:\windows\system32\aepdu.dll
2015-02-04 03:16 . 2015-02-10 19:35	192000	----a-w-	c:\windows\system32\aepic.dll
2015-02-04 03:13 . 2015-02-10 19:35	1098752	----a-w-	c:\windows\system32\aeinv.dll
2015-01-27 23:36 . 2015-02-10 19:35	1239720	----a-w-	c:\windows\system32\aitstatic.exe
2015-01-09 03:14 . 2015-02-10 19:35	91136	----a-w-	c:\windows\system32\wdi.dll
2015-01-09 03:14 . 2015-02-10 19:35	950272	----a-w-	c:\windows\system32\perftrack.dll
2015-01-09 03:14 . 2015-02-10 19:35	29696	----a-w-	c:\windows\system32\powertracker.dll
2015-01-09 02:48 . 2015-02-10 19:35	76800	----a-w-	c:\windows\SysWow64\wdi.dll
2013-11-21 09:25 . 2013-11-21 09:25	4216840	----a-w-	c:\program files (x86)\Common Files\vcredist.exe
2009-09-27 07:39	369152	--sh--w-	c:\windows\SysWOW64\avisynth.dll
2005-07-14 10:31	32256	--sh--w-	c:\windows\SysWOW64\AVSredirect.dll
2004-02-22 08:11	719872	--sh--w-	c:\windows\SysWOW64\devil.dll
2004-01-24 22:00	70656	--sh--w-	c:\windows\SysWOW64\i420vfw.dll
2004-01-24 22:00	70656	--sh--w-	c:\windows\SysWOW64\yv12vfw.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}]
2015-01-27 22:49	12184	----a-w-	c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{41564952-412D-5637-00A7-7A786E7484D7}"= "c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" [2015-01-27 12184]
.
[HKEY_CLASSES_ROOT\clsid\{41564952-412d-5637-00a7-7a786e7484d7}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RockMelt Update"="c:\users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe" [2012-02-04 136336]
"EADM"="c:\program files (x86)\Origin\Origin.exe" [2015-02-27 3631448]
"Akamai NetSession Interface"="c:\users\Jibi\AppData\Local\Akamai\netsession_win.exe" [2014-10-29 4673432]
"EPLTarget\P0000000000000001"="c:\windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE" [2013-04-30 297024]
"EPLTarget\P0000000000000002"="c:\windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE" [2013-04-30 297024]
"EPLTarget\P0000000000000003"="c:\windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE" [2013-04-30 297024]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"EEventManager"="c:\program files (x86)\Epson Software\Event Manager\EEventManager.exe" [2010-08-30 979328]
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09 1073312]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"QuickTime Task"="c:\program files (x86)\Video Capture Master\Filters\QuickTime\QTTask.exe" [2013-05-01 421888]
"DigidesignMMERefresh"="c:\program files (x86)\Digidesign\Drivers\MMERefresh.exe" [2011-08-11 81920]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2015-03-19 704512]
"ApnTBMon"="c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2015-01-27 1934744]
"BlueStacks Agent"="c:\program files (x86)\BlueStacks\HD-Agent.exe" [2013-12-20 807696]
"LWS"="c:\program files (x86)\Logitech\LWS\Webcam Software\LWS.exe" [2012-09-12 204136]
"Avira Systray"="c:\program files (x86)\Avira\My Avira\Avira.OE.Systray.exe" [2015-02-12 127792]
.
c:\users\Jibi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
FILSHtray.lnk - c:\program files (x86)\FILSHtray\FILSHtray.exe [2012-4-18 594432]
Hama Wireless LAN Utility.lnk - c:\program files (x86)\Hama\Common\RaUI.exe -s [2011-1-11 1671168]
simplicheck.lnk - c:\program files (x86)\simplitec\simplicheck\simplicheck.exe -timer [2012-9-21 2936168]
TP-LINK Wireless Configuration Utility.lnk - c:\program files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe -nogui [2015-1-9 841216]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 dump_wmimmc;dump_wmimmc;c:\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys;c:\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [x]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys;c:\windows\SYSNATIVE\drivers\IntcHdmi.sys [x]
R3 lvpepf64;Volume Adapter;c:\windows\system32\DRIVERS\lv302a64.sys;c:\windows\SYSNATIVE\DRIVERS\lv302a64.sys [x]
R3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys;c:\windows\SYSNATIVE\DRIVERS\LVPr2M64.sys [x]
R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
R3 LVUVC64;Logitech HD Webcam C270(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
R3 MAUSBFASTTRACK;Service for M-Audio FastTrack;c:\windows\system32\DRIVERS\MAudioFastTrack.sys;c:\windows\SYSNATIVE\DRIVERS\MAudioFastTrack.sys [x]
R3 netr7364;RT73 USB Extensible Wireless LAN Card Driver;c:\windows\system32\DRIVERS\netr7364.sys;c:\windows\SYSNATIVE\DRIVERS\netr7364.sys [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 NVFLASH;NVFLASH;c:\windows\system32\drivers\nvflash.sys;c:\windows\SYSNATIVE\drivers\nvflash.sys [x]
R3 Origin Client Service;Origin Client Service;c:\program files (x86)\Origin\OriginClientService.exe;c:\program files (x86)\Origin\OriginClientService.exe [x]
R3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\program files\SiSoftware\SiSoftware Sandra Lite 2015x\RpcAgentSrv.exe;c:\program files\SiSoftware\SiSoftware Sandra Lite 2015x\RpcAgentSrv.exe [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [x]
S2 APNMCP;Ask Aktualisierungsdienst;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [x]
S2 ASGT;ASGT;c:\windows\SysWOW64\ASGT.exe;c:\windows\SysWOW64\ASGT.exe [x]
S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [x]
S2 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x]
S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [x]
S2 BstHdDrv;BlueStacks Hypervisor;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [x]
S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 EPSON_EB_RPCV4_04;EPSON V5 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE;c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE [x]
S2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE;c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE [x]
S2 EPSON_PM_RPCV4_06;EPSON V3 Service4(06);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE;c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [x]
S2 EpsonScanSvc;Epson Scanner Service;c:\windows\system32\EscSvc64.exe;c:\windows\SYSNATIVE\EscSvc64.exe [x]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 RalinkRegistryWriter64;Ralink Registry Writer 64;c:\program files (x86)\Hama\Common\RaRegistry64.exe;c:\program files (x86)\Hama\Common\RaRegistry64.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 LVUSBS64;Logitech USB Monitor Filter;c:\windows\system32\drivers\LVUSBS64.sys;c:\windows\SYSNATIVE\drivers\LVUSBS64.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 RTL8192cu;300Mbps Wireless USB Adapter;c:\windows\system32\DRIVERS\RTL8192cu.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8192cu.sys [x]
S3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys;c:\windows\SYSNATIVE\drivers\ScreamingBAudio64.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
S4 IOMap;IOMap;c:\windows\system32\drivers\IOMap64.sys;c:\windows\SYSNATIVE\drivers\IOMap64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-03-21 12:05	1061704	----a-w-	c:\program files (x86)\Google\Chrome\Application\41.0.2272.101\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-03-22 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-14 14:36]
.
2015-03-22 c:\windows\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job
- c:\windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2015-01-21 02:42]
.
2015-03-22 c:\windows\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job
- c:\windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2015-01-21 02:42]
.
2015-03-22 c:\windows\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job
- c:\windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2015-01-21 02:42]
.
2015-03-22 c:\windows\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job
- c:\windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2015-01-21 02:42]
.
2015-03-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-03-21 16:14]
.
2015-03-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-03-21 16:14]
.
2015-02-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job
- c:\users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe [2014-03-05 19:14]
.
2015-03-22 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job
- c:\users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe [2014-03-05 19:14]
.
2015-03-20 c:\windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job
- c:\users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-02-04 10:53]
.
2015-03-22 c:\windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job
- c:\users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-02-04 10:53]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}]
2015-01-27 22:49	13720	----a-w-	c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{41564952-412D-5637-00A7-7A786E7484D7}"= "c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" [2015-01-27 13720]
.
[HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RAVCpl64.exe" [2008-05-28 6297088]
"Skytel"="Skytel.exe" [2007-11-20 1826816]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04 446392]
"NetWorx"="c:\program files\NetWorx\networx.exe" [2012-12-18 4760464]
"M-Audio Taskbar Icon"="c:\windows\system32\M-AudioTaskBarIcon.exe" [2010-12-07 798728]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-11-16 163384]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-11-16 387640]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-11-16 418360]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-12-13 2531472]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-12-13 2824504]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.doko-search.com/?babsrc=HP_ss_mib2&mntrId=A0ED002586DCEA82&affID=120662&tsp=4931
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyServer = 103.10.231.110:8080
uInternet Settings,ProxyOverride = <local>
IE: An OneNote s&enden - c:\progra~2\MICROS~3\Office14\ONBttnIE.dll/105
IE: Free YouTube to MP3 Converter - c:\users\Jibi\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~3\Office14\EXCEL.EXE/3000
LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll
Trusted Zone: aeriagames.com
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\
FF - prefs.js: network.proxy.ftp - 202.147.198.217
FF - prefs.js: network.proxy.ftp_port - 8888
FF - prefs.js: network.proxy.http - 202.147.198.217
FF - prefs.js: network.proxy.http_port - 8888
FF - prefs.js: network.proxy.socks - 202.147.198.217
FF - prefs.js: network.proxy.socks_port - 8888
FF - prefs.js: network.proxy.ssl - 202.147.198.217
FF - prefs.js: network.proxy.ssl_port - 8888
FF - prefs.js: network.proxy.type - 0
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=110819
FF - user.js: extensions.BabylonToolbar_i.babExt - 
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar_i.id - a0ed2c59000000000000002586dcea82
FF - user.js: extensions.BabylonToolbar_i.hardId - a0ed2c59000000000000002586dcea82
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15458
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1723:52
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - tb9
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
FF - user.js: extensions.delta.tlbrSrchUrl - 
FF - user.js: extensions.delta.id - a0ed2c59000000000000002586dcea82
FF - user.js: extensions.delta.appId - {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
FF - user.js: extensions.delta.instlDay - 15888
FF - user.js: extensions.delta.vrsn - 1.8.21.5
FF - user.js: extensions.delta.vrsni - 1.8.21.5
FF - user.js: extensions.delta.vrsnTs - 1.8.21.50:30
FF - user.js: extensions.delta.prtnrId - delta
FF - user.js: extensions.delta.prdct - delta
FF - user.js: extensions.delta.aflt - babsst
FF - user.js: extensions.delta.smplGrp - none
FF - user.js: extensions.delta.tlbrId - base
FF - user.js: extensions.delta.instlRef - sst
FF - user.js: extensions.delta.dfltLng - de
FF - user.js: extensions.delta.excTlbr - false
FF - user.js: extensions.delta.ffxUnstlRst - true
FF - user.js: extensions.delta.admin - false
FF - user.js: extensions.delta_i.babTrack - affID=120662&tsp=4931
FF - user.js: extensions.delta_i.babExt - 
FF - user.js: extensions.delta_i.srcExt - ss
FF - user.js: extensions.delta.autoRvrt - false
FF - user.js: extensions.delta.rvrt - false
FF - user.js: extensions.delta.newTab - false
FF - user.js: extensions.Softonic.hpOld0 - hxxp://www.t-online.de
FF - user.js: extensions.Softonic.tlbrSrchUrl - hxxp://search.softonic.com/MOY00009/tb_v1?SearchSource=1&cc=&mi=a0ed2c59000000000000002586dcea82&q=
FF - user.js: extensions.Softonic.id - a0ed2c59000000000000002586dcea82
FF - user.js: extensions.Softonic.appId - {7ABBFE1C-E485-44AA-8F36-353751B4124D}
FF - user.js: extensions.Softonic.instlDay - 15998
FF - user.js: extensions.Softonic.vrsn - 1.8.19.3
FF - user.js: extensions.Softonic.vrsni - 1.8.19.3
FF - user.js: extensions.Softonic.vrsnTs - 1.8.19.318:35
FF - user.js: extensions.Softonic.prtnrId - softonic
FF - user.js: extensions.Softonic.prdct - Softonic
FF - user.js: extensions.Softonic.aflt - SD
FF - user.js: extensions.Softonic.smplGrp - none
FF - user.js: extensions.Softonic.tlbrId - 2013desingbrand
FF - user.js: extensions.Softonic.instlRef - MOY00009
FF - user.js: extensions.Softonic.dfltLng - de
FF - user.js: extensions.Softonic.excTlbr - false
FF - user.js: extensions.Softonic.ffxUnstlRst - false
FF - user.js: extensions.Softonic.admin - false
FF - user.js: extensions.Softonic.autoRvrt - false
FF - user.js: extensions.Softonic.rvrt - false
FF - user.js: extensions.Softonic.hmpg - true
FF - user.js: extensions.Softonic.hmpgUrl - hxxp://search.softonic.com/MOY00009/tb_v1?SearchSource=13&cc=&mi=a0ed2c59000000000000002586dcea82
FF - user.js: extensions.Softonic.dfltSrch - true
FF - user.js: extensions.Softonic.srchPrvdr - Search the web (Softonic)
FF - user.js: extensions.Softonic.kw_url - hxxp://search.softonic.com/MOY00009/tb_v1?SearchSource=2&cc=&mi=a0ed2c59000000000000002586dcea82&q=
FF - user.js: extensions.Softonic.dnsErr - true
FF - user.js: extensions.Softonic.newTab - true
FF - user.js: extensions.Softonic.newTabUrl - hxxp://search.softonic.com/MOY00009/tb_v1/?SearchSource=15&cc=&mi=a0ed2c59000000000000002586dcea82
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
Wow6432Node-HKLM-Run-DivXMediaServer - c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-Free AVI Video Converter_is1 - c:\program files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe
AddRemove-Free YouTube to MP3 Converter_is1 - c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\unins000.exe
AddRemove-photoFXlab - c:\program files (x86)\Topaz Labs\Applications\32Bit\uninst.exe
AddRemove-Uninstall_is1 - c:\program files (x86)\Common Files\DVDVideoSoft\unins000.exe
AddRemove-{43B74FAB-FB58-447D-8D3A-5F638AF36FD1} - c:\programdata\{87B61FE8-334F-4066-B7AA-68DC81782D4D}\Netzmanager1.071.0301_120720a.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BMP\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.bmp.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.DIB\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.bmp.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ICO\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.ico.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JFIF\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.jpg.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JPE\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.jpg.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JPEG\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.jpg.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JPG\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.jpg.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PNG\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.png.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TIF\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.tif.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TIFF\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.tif.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.WDP\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.wdp.15.4"
.
[HKEY_USERS\S-1-5-21-2430596823-3442958056-1693070999-1000\Software\Microsoft\Internet Explorer\Approved Extensions]
@DACL=(02 0000)
"{EEC0F710-38B5-4ABA-99BF-EC87564A4E13}"=hex:51,66,7a,6c,4c,1d,3b,1b,00,eb,d6,
   f4,82,6e,dc,01,8d,b6,ad,c7,55,0d,0f,0d
"{9421DD08-935F-4701-A9CA-22DF90AC4EA6}"=hex:51,66,7a,6c,4c,1d,3b,1b,18,c1,37,
   8e,68,c5,67,0c,bd,c3,63,9f,93,eb,0f,b8
"{1DAD3AF3-EF2F-4F64-AC4B-11789189FCB6}"=hex:51,66,7a,6c,4c,1d,3b,1b,e3,26,bb,
   07,18,b9,02,04,b8,42,50,38,92,ce,bd,a8
"{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,3b,1b,ab,8b,02,
   6c,c7,80,4a,0d,a2,e2,95,9a,f2,9e,6c,5d
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,3b,1b,74,c8,26,
   8a,35,1a,d9,01,9a,c5,10,24,75,4f,22,d8
"{9FDDE16B-836F-4806-AB1F-1455CBEFF289}"=hex:51,66,7a,6c,4c,1d,3b,1b,7b,fd,cb,
   85,58,d5,60,03,bf,16,55,15,c8,a8,b3,97
"{B4F3A835-0E21-4959-BA22-42B3008E02FF}"=hex:51,66,7a,6c,4c,1d,3b,1b,25,b4,e5,
   ae,16,58,3f,02,ae,2b,03,f3,03,c9,43,e1
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,3b,1b,54,1c,de,
   c1,72,f2,3d,08,a8,7d,dd,65,c2,82,c9,b7
"{4D2D3B0F-69BE-477A-90F5-FDDB05357975}"=hex:51,66,7a,6c,4c,1d,3b,1b,1f,27,3b,
   57,89,3f,1c,0c,84,fc,bc,9b,06,72,38,6b
"{1631550F-191D-4826-B069-D9439253D926}"=hex:51,66,7a,6c,4c,1d,3b,1b,1f,49,27,
   0c,2a,4f,40,03,a4,60,98,03,91,14,98,38
"{82E1477C-B154-48D3-9891-33D83C26BCD3}"=hex:51,66,7a,6c,4c,1d,3b,1b,6c,5b,f7,
   98,63,e7,b5,03,8c,98,72,98,3f,61,fd,cd
"{C1AF5FA5-852C-4C90-812E-A7F75E011D87}"=hex:51,66,7a,6c,4c,1d,3b,1b,b5,43,b9,
   db,1b,d3,f6,07,95,27,e6,b7,5d,46,5c,99
"{41564952-412D-5637-00A7-7A786E7484D7}"=hex:51,66,7a,6c,4c,1d,3b,1b,42,55,40,
   5b,1a,17,51,1d,14,ae,3b,38,6d,33,c5,c9
"{310D38FE-EB4C-467C-8781-B7C2AEB7847D}"=hex:51,66,7a,6c,4c,1d,3b,1b,ee,24,1b,
   2b,7b,bd,1a,0d,93,88,f6,82,ad,f0,c5,63
"{5018CFD2-804D-4C99-9F81-25EAEA2769DE}"=hex:51,66,7a,6c,4c,1d,3b,1b,c2,d3,0e,
   4a,7a,d6,ff,07,8b,88,64,aa,e9,60,28,c0
"{E87806B5-E908-45FD-AF5E-957D83E58E68}"=hex:51,66,7a,6c,4c,1d,3b,1b,a5,1a,6e,
   f2,3f,bf,9b,0e,bb,57,d4,3d,80,a2,cf,76
.
[HKEY_LOCAL_MACHINE\software\BlueStacks]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.16"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\program files (x86)\Hama\Common\RaRegistry.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-03-22  13:55:57 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2015-03-22 12:55
ComboFix2.txt  2012-01-18 15:50
.
Vor Suchlauf: 26 Verzeichnis(se), 97.983.614.976 Bytes frei
Nach Suchlauf: 29 Verzeichnis(se), 102.799.327.232 Bytes frei
.
- - End Of File - - F9D429812227F174CF4BBA56718AE4DE
         
--- --- --- A36C5E4F47E84449FF07ED3517B43A31

Alt 23.03.2015, 08:06   #8
schrauber
/// the machine
/// TB-Ausbilder
 

WIN7 - PC langsam, Internetabbrüche, viele Befunde - Standard

WIN7 - PC langsam, Internetabbrüche, viele Befunde



Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 25.03.2015, 15:22   #9
NoLove
 
WIN7 - PC langsam, Internetabbrüche, viele Befunde - Standard

WIN7 - PC langsam, Internetabbrüche, viele Befunde



Erledigt

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 24.03.2015
Suchlauf-Zeit: 11:36:54
Logdatei: mbam.txt
Administrator: Ja

Version: 2.01.4.1018
Malware Datenbank: v2015.03.24.03
Rootkit Datenbank: v2015.02.25.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Jibi

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 383293
Verstrichene Zeit: 22 Min, 40 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Warnen
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 9
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [1e353c0d7c0ea88efb1eef722ad94cb4], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [1e353c0d7c0ea88efb1eef722ad94cb4], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [1e353c0d7c0ea88efb1eef722ad94cb4], 
PUP.Optional.Babylon.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, In Quarantäne, [272cfe4b83072d09e7c8f82fc93a8977], 
PUP.Optional.MeinGutscheincode.A, HKLM\SOFTWARE\WOW6432NODE\Mein Gutscheincode, In Quarantäne, [460d5eeb8802d36361abca36778df808], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\eooncjejnppfjjklapaamhcdmjbilmde, In Quarantäne, [1241d574c5c5092d27a27f542cd742be], 
PUP.Optional.DataMngr.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\DataMngr_Toolbar, In Quarantäne, [ce85f2570882da5c9559e03afb0a748c], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\INSTALLCORE, In Quarantäne, [450e2326642679bd4bc758c352b3f010], 
PUP.Optional.BProtector.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings, In Quarantäne, [cd8658f13357ed4971c4021c85806f91], 

Registrierungswerte: 2
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\INSTALLCORE|tb, 0D1N1N1B1K1L1JtG0ZtH1O, In Quarantäne, [450e2326642679bd4bc758c352b3f010]
PUP.BProtector, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, In Quarantäne, [4c07a3a61f6b03336789db3f06ff32ce], 

Registrierungsdaten: 1
Hijack.StartPage, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.doko-search.com/?babsrc=HP_ss_mib2&mntrId=A0ED002586DCEA82&affID=120662&tsp=4931, Gut: (www.google.com), Schlecht: (hxxp://www.doko-search.com/?babsrc=HP_ss_mib2&mntrId=A0ED002586DCEA82&affID=120662&tsp=4931),Ersetzt,[e271dd6c7f0b77bfe99f0aeac3423ac6]

Ordner: 9
PUP.Optional.SpeedTestAnalysis.A, C:\Users\Jibi\AppData\Roaming\SpeedTestAnalysis, In Quarantäne, [6be83a0f7b0f7abc15c822e02fd5d12f], 
PUP.Optional.OpenCandy, C:\Users\Jibi\AppData\Roaming\OpenCandy, In Quarantäne, [ba9990b994f6e94db9960a6bb64d817f], 
PUP.Optional.OpenCandy, C:\Users\Jibi\AppData\Roaming\OpenCandy\5BFA656A60EF4BFD8C8C354C21065D98, In Quarantäne, [ba9990b994f6e94db9960a6bb64d817f], 
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\LocalLow\BabylonToolbar, In Quarantäne, [c09387c2e5a505311664b1d5dc272fd1], 
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\LocalLow\BabylonToolbar\BabylonToolbar, In Quarantäne, [c09387c2e5a505311664b1d5dc272fd1], 
PUP.Optional.IBUpdater.A, C:\ProgramData\IBUpdaterService, In Quarantäne, [e66daa9f0d7d03337b17a9e79e6540c0], 
PUP.Optional.OnlySearch, C:\Users\Jibi\AppData\Local\onlysearch, In Quarantäne, [e76c8abf6f1b0a2c1caa4e4971929070], 
PUP.Optional.OnlySearch, C:\Users\Jibi\AppData\Local\onlysearch\onlysearch, In Quarantäne, [e76c8abf6f1b0a2c1caa4e4971929070], 
PUP.Optional.OnlySearch, C:\Users\Jibi\AppData\Local\onlysearch\onlysearch\1.3.12.9, In Quarantäne, [e76c8abf6f1b0a2c1caa4e4971929070], 

Dateien: 103
PUP.Optional.DLClient.A, C:\Windows\System32\Tasks\dlclient Updater, In Quarantäne, [f85b9aaf0387e05682bf387cf013a15f], 
PUP.Optional.DLClient.A, C:\Windows\System32\Tasks\dlclient, In Quarantäne, [a6ad4affd8b2ad8998ab6f4514efd52b], 
PUP.Optional.BitGuard.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\BitGuard.xml, In Quarantäne, [272c83c61674f343adf4c31fc043f709], 
PUP.Optional.BrowserDefender.A, C:\Windows\System32\Tasks\BrowserDefendert, In Quarantäne, [a0b3c3862862b28419f67e653cc715eb], 
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\softonic.xml, In Quarantäne, [2c270148494147ef4e58ad4abf4433cd], 
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\babylon.xml, In Quarantäne, [054e2a1f8ffb03338b07e218b0532fd1], 
PUP.Optional.BProtector.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\bProtector_extensions.sqlite, In Quarantäne, [80d37bce8901c670950906f415ee7d83], 
PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\delta.xml, In Quarantäne, [3d16ee5be5a5e0563193e911956eaf51], 
PUP.Optional.SpeedTestAnalysis.A, C:\Users\Jibi\AppData\Roaming\SpeedTestAnalysis\speedtestanalysis.crx, In Quarantäne, [6be83a0f7b0f7abc15c822e02fd5d12f], 
PUP.Optional.SpeedTestAnalysis.A, C:\Users\Jibi\AppData\Roaming\SpeedTestAnalysis\DeskTopIcon.ico, In Quarantäne, [6be83a0f7b0f7abc15c822e02fd5d12f], 
PUP.Optional.SpeedTestAnalysis.A, C:\Users\Jibi\AppData\Roaming\SpeedTestAnalysis\install_helper.exe, In Quarantäne, [6be83a0f7b0f7abc15c822e02fd5d12f], 
PUP.Optional.OpenCandy, C:\Users\Jibi\AppData\Roaming\OpenCandy\5BFA656A60EF4BFD8C8C354C21065D98\Trial-14.0.1000.89_de-DE_1004732_DE-1.exe, In Quarantäne, [ba9990b994f6e94db9960a6bb64d817f], 
PUP.Optional.IBUpdater.A, C:\ProgramData\IBUpdaterService\repository.xml, In Quarantäne, [e66daa9f0d7d03337b17a9e79e6540c0], 
PUP.Optional.CrossRider.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossrider.bic", "13fa612b836a5abd9074469d5c7528f7");), Ersetzt,[025174d5e4a6a492dfdfd95952b4d927]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.admin", false);), Ersetzt,[9cb7ea5f3b4fdd599c301919a561857b]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences

/* Do not edit this file.
 *
 * If you m), Ersetzt,[96bd4306a6e4092d329a3cf610f64db3]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences

/* Do not edit this file.
 *
 * If you), Ersetzt,[93c01c2d7e0c082ef2daf93940c67e82]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references

/* Do not edit this file.
 *
 * If you make chan), Ersetzt,[bf9482c736546acceddf7db59b6bd729]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (/* Do not edit this file.
 *
 * If you make chan), Ersetzt,[4b08a5a41971b87e9f2d5ad8a95d0bf5]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references

/* Do not edit this file.
 *
 * If you ), Ersetzt,[7ed52128becc55e19d2fdd553dc9fb05]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences

/* Do not edit this file.
 *
 * If you m), Ersetzt,[f65dc0893753d75f2aa2112116f0ae52]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (eferences

/* Do not edit this file.
 *
 * If you make changes to this fil), Ersetzt,[0b481039c4c6b18522aadb5728de0df3]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( this file.
 *
 * If you make changes to this file whil), Ersetzt,[8ec511380882af87f3d946ec51b5758b]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces

/* Do not edit this file.
 *
 * If you make ch), Ersetzt,[0152b396b0daba7cdcf041f1ec1a51af]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences

/* Do not edit this file.
 *
 * If you ), Ersetzt,[490ab990523861d5a6264fe3a85ef50b]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references

/* Do not edit this file.
 *
 * If you make changes to), Ersetzt,[242fc38645452a0ce5e78aa89b6b669a]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (not edit this file.
 *
 * If you make changes to this fil), Ersetzt,[c48f7dcccac067cfdbf1cd6545c16799]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (s

/* Do not edit this file.
 *
 * If you make c), Ersetzt,[e96ab7924b3fda5c4d7f66ccfa0c837d]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences

/* Do not edit this file.
 *
 * If you make changes to this file while the appli), Ersetzt,[21327fca9af050e6af1d87ab45c13dc3]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (
 * If you make changes to this file while the applicati), Ersetzt,[99ba1a2f404aa69015b740f2ac5aa45c]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (nces

/* Do not edit this file.
 *
 * If you make changes t), Ersetzt,[22311a2f0a808ea85379bc7627df827e]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
 *
 * If you make changes to this ), Ersetzt,[91c27fca3e4c191dbe0ed35fbc4a7789]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
 *
 * If you make ch), Ersetzt,[f95aa5a49feb69cda8248ca69c6a18e8]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (Preferences

/* Do not edit this file.
 *
 * If), Ersetzt,[99ba3b0e622850e6ad1fa68cc73f5ca4]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (eferences

/* Do not edit this file.
 *
 * If you make), Ersetzt,[5cf7ee5b93f74de92ba187ab82844bb5]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (es

/* Do not edit this file.
 *
 * If you make cha), Ersetzt,[c98a0a3f5d2d0a2c3e8e30021fe738c8]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences

/* Do not edit this file.
 *
 * If you make), Ersetzt,[4c07bd8c9eec96a028a4b67ce0266b95]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences

/* Do not edit this file.
 *
 * If you m), Ersetzt,[97bc0f3a6e1cb97dc10b58dabd4913ed]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences

/* Do not edit this file.
 *
 * If you ), Ersetzt,[86cd9dacf79367cfc80492a0e32329d7]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (erences

/* Do not edit this file.
 *
 * If you make), Ersetzt,[4b0874d5a1e968ce23a90d2561a549b7]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (nces

/* Do not edit this file.
 *
 * If you make changes to t), Ersetzt,[7cd7fe4baedc2511e2eae64cb74f14ec]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( Do not edit this file.
 *
 * If you make changes to th), Ersetzt,[015262e71674eb4bb913b67cf016c13f]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces

/* Do not edit this file.
 *
 * If you make cha), Ersetzt,[d0830445a7e339fd7d4ffd3520e632ce]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (nces

/* Do not edit this file.
 *
 * If you mak), Ersetzt,[eb686edbcbbfa096765655dde91da759]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences

/* Do not edit this file.
 *
 * If you make changes ), Ersetzt,[23300b3e0882b3830fbd4ce675914ab6]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( Do not edit this file.
 *
 * If you make changes to this file while the applicati), Ersetzt,[2e253712008a4fe77a523002fd0928d8]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (file.
 *
 * If you make changes to this file while the application is running,), Ersetzt,[d0835bee8dfd1e18eddff43e03037b85]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (his file.
 *
 * If you make changes to this file while th), Ersetzt,[f65dc6833951280e3399d062a561f40c]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (s

/* Do not edit this file.
 *
 * If you make change), Ersetzt,[c0932524f595d56110bc81b112f49b65]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces

/* Do not edit this file.
 *
 * If you make c), Ersetzt,[341f1b2e48420f273498bc76c83e53ad]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences

/* Do not edit this file.
 *
 * If you make changes to this file while the application is running,
 * the changes will be overwritten ), Ersetzt,[d87b2623d4b6a690755765cde1253cc4]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ation is running,
 * the changes will be overwritten when the ap), Ersetzt,[ff5475d4830780b6af1d80b2ca3c02fe]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (* Do not edit this file.
 *
 * If you make changes to this), Ersetzt,[9db64207cebc41f54587b87a30d66997]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (

/* Do not edit this file.
 *
 * If you make changes), Ersetzt,[450ebb8ed6b423135c707bb7b0567b85]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences

/* Do not edit this file.
 *
 * If you make), Ersetzt,[6be8ee5b414965d177555dd5ad59f808]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences

/* Do not edit this file.
 *
 * If you make cha), Ersetzt,[163d5aef305a0432913b52e031d51fe1]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (es

/* Do not edit this file.
 *
 * If you make changes to this ), Ersetzt,[ba997bce8dfd0c2a46860d25b94d59a7]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (o not edit this file.
 *
 * If you make changes to this f), Ersetzt,[153ed772305a5fd7ad1f4ee4c244e21e]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.admin", false);), Ersetzt,[80d34801fc8e40f6cf04d2606d99be42]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences

/* Do not edit this file.
 *
 ), Ersetzt,[b0a3b297c8c288aef1e2fc3644c23bc5]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references

/* Do not edit this file.
 *
 * If you make changes to this file ), Ersetzt,[044f83c64644f83ef8db1d159f67d030]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (e.
 *
 * If you make changes to this file while t), Ersetzt,[9cb789c0b3d788ae716262d03cca47b9]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces

/* Do not edit this file.
 *
 * If you), Ersetzt,[bd962f1ac4c606304192e34fc244fe02]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (erences

/* Do not edit this file.
 *
 * If ), Ersetzt,[a3b075d43456e94d686b61d1a16558a8]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences

/* Do not edit this file.
 *
 * If), Ersetzt,[500344056624979ffdd668ca8d792fd1]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences

/* Do not edit this file.
 *
 * If), Ersetzt,[450e0c3d0a80e84e50831f138185a15f]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (es

/* Do not edit this file.
 *
 * If y), Ersetzt,[3d1669e0c3c789adede69d9519edb749]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references

/* Do not edit this file.
 *
 * If you make changes to this file while the application is running,
 * the changes will be ove), Ersetzt,[70e32a1f3a50c76fe5eeb08292746997]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (tion is running,
 * the changes will be overwritten when the appl), Ersetzt,[0e450940a7e356e0369de64c58aeff01]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (t edit this file.
 *
 * If you make changes to this file while the app), Ersetzt,[381b2b1e2a60d660b023a989e0269c64]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( this file.
 *
 * If you make changes to this fil), Ersetzt,[b89bfe4ba9e1f64062713cf69c6a619f]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (

/* Do not edit this file.
 *
 * If you make changes to this file while the application is running,
 * the changes will be overwritten wh), Ersetzt,[7fd45deca8e2fa3cce052f03b65045bb]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ion is running,
 * the changes will be overwr), Ersetzt,[2132fa4fb1d914224390ab8747bf8878]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences

/* Do not edit this file.
 *
 * If you make changes to this file while the application is running,
 * the changes will be overwrit), Ersetzt,[411215345a301521c70cd1619a6c8878]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (n is running,
 * the changes will be overwritten w), Ersetzt,[9cb72e1b1a70de5833a0b37fab5b936d]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces

/* Do not edit this file.
 *
 * If you make ), Ersetzt,[094a84c50d7d1d19914277bb15f1d52b]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (s

/* Do not edit this file.
 *
 * If you m), Ersetzt,[b89b27220e7c1a1cbf1478ba8c7aa957]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (erences

/* Do not edit this file.
 *
 * If y), Ersetzt,[94bf5bee0d7d7eb8ab288aa87690e31d]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences

/* Do not edit this file.
 *
 * If you make changes to this f), Ersetzt,[fe55b990cdbd191d3d9692a00600af51]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( this file.
 *
 * If you make changes to this file while ), Ersetzt,[a1b21a2f8307db5bdef51e147492e719]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (* Do not edit this file.
 *
 * If you make changes to this file while the application is running,
 * the changes will be overwritten when the app), Ersetzt,[61f2a1a86d1dd264458e76bc8a7ca957]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (s running,
 * the changes will be overwritten whe), Ersetzt,[0a4952f794f6290d349f5bd726e0a957]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (nces

/* Do not edit this file.
 *
 * If you make change), Ersetzt,[2a29ee5b7119340240935ad8e81e13ed]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( Do not edit this file.
 *
 * If you make changes), Ersetzt,[f65d8bbe4d3da096bb18c76be32359a7]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/MOY00009/tb_v1?SearchSource=13&cc=&mi=a0ed2c59000000000000002586dcea82");), Ersetzt,[183b0643335741f5a13afc3610f67c84]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (sesensitive", 1);
user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("app.update.lastUpdateTime.addon-background-update-timer", ), Ersetzt,[9fb4e7622b5f03336f6c59d9e52135cb]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ing,
 * the changes will be overwritten when the application exits.
 *
 * To make a manual change to preferences, you can visit the URL about:), Ersetzt,[82d199b06822a1954b904de59e68e61a]
PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (te.lastUpdateTime.addon-background-update-timer", 1427137956);
user_pref("app.update.lastUpdateTime.background-update-timer", 1427137716);
user_pr), Ersetzt,[d57e0445494146f0cc0fbe741aec54ac]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.babTrack", "affID=110819");), Ersetzt,[8fc499b0cebcbf772f3c6ac804021be5]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (lbar_i.babTrack", "affID=110819");
user_pref("exten), Ersetzt,[a2b1cd7c7416cf67f5766bc79b6bba46]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (ons.BabylonToolbar_i.babTrack", "affID=110819");
user), Ersetzt,[163d22271b6fab8b99d256dc10f66d93]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (s.BabylonToolbar_i.babTrack", "affID=110819");
user_pref("extensions.BabylonToo), Ersetzt,[b1a207427a107abc88e3de5480866f91]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (k", "affID=110819");
user_pref("extensions.BabylonToolbar_i.babExt", "");
user_pre), Ersetzt,[84cfa5a4ef9b082e1a51fd351fe757a9]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: ("affID=110819");
user_pref("extensions.BabylonToolbar_i.ba), Ersetzt,[a0b3e762cdbddc5ae7840e24b94d1ae6]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (ylonToolbar_i.babTrack", "affID=110819");
user_pref("exte), Ersetzt,[ea69fd4c8cfed3634328cf63e22408f8]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (bylonToolbar_i.babTrack", "affID=110819");
user_pref("exte), Ersetzt,[afa4f455d3b793a3c0abeb47f4124db3]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (ylonToolbar_i.babTrack", "affID=110819");
user_pref("extensions.Bab), Ersetzt,[044fba8f8307e650dc8feb47f11558a8]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (ar_i.babTrack", "affID=110819");
user_pref("extensions.Baby), Ersetzt,[75de4dfce6a46dc928439e94dd29c937]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (lonToolbar_i.babTrack", "affID=110819");
user_pref("extensions.B), Ersetzt,[a2b193b68bff4aec81ea62d0e0269c64]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (olbar_i.babTrack", "affID=110819");
user_pref("extensio), Ersetzt,[89ca77d2c1c9d0669ccff042bb4bae52]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (BabylonToolbar_i.babTrack", "affID=110819");
user_pref("), Ersetzt,[68eb1930fe8c5adc3e2dc1718f7744bc]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (abylonToolbar_i.babTrack", "affID=110819");
user_pref(), Ersetzt,[3f143811206a2412f77451e1749247b9]
PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (.BabylonToolbar_i.babTrack", "affID=110819");
user_pref(), Ersetzt,[f3605fea5634a88e79f2d85a60a6a45c]

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)
         
AdwCleaner Logfile:
Code:
ATTFilter
# AdwCleaner v4.113 - Bericht erstellt 25/03/2015 um 14:22:23
# Aktualisiert 22/03/2015 von Xplode
# Datenbank : 2015-03-23.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Jibi - JIBI-PC
# Gestarted von : C:\Users\Jibi\Downloads\AdwCleaner_4.113.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : APNMCP

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\apn
Ordner Gelöscht : C:\ProgramData\AskPartnerNetwork
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\simplitec
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\simplitec
Ordner Gelöscht : C:\Program Files (x86)\AskPartnerNetwork
Ordner Gelöscht : C:\Program Files (x86)\simplitec
Ordner Gelöscht : C:\Program Files (x86)\B1 Free Archiver
Ordner Gelöscht : C:\Users\Jibi\AppData\Local\Temp\apn
Ordner Gelöscht : C:\Users\Jibi\AppData\Local\AskPartnerNetwork
Ordner Gelöscht : C:\Users\Jibi\AppData\Local\Delta
Ordner Gelöscht : C:\Users\Jibi\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Jibi\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\Jibi\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Jibi\AppData\Roaming\simplitec
Ordner Gelöscht : C:\Users\Jibi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Ordner Gelöscht : C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\anttoolbar@ant.com
Datei Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk
Datei Gelöscht : C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\bProtector_extensions.rdf
Datei Gelöscht : C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\foxydeal.sqlite
Datei Gelöscht : C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\invalidprefs.js
Datei Gelöscht : C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\BrowserDefender.xml
Datei Gelöscht : C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js

***** [ Geplante Tasks ] *****

Task Gelöscht : BrowserDefendert
Task Gelöscht : dlclient Updater
Task Gelöscht : dlclient

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh
Schlüssel Gelöscht : HKCU\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\BabylonToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
Schlüssel Gelöscht : HKCU\Software\Classes\keepmysearch
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaacalgebmfelllfiaoknifldpngjh
Schlüssel Gelöscht : HKCU\Software\a68b8db66fe948
Schlüssel Gelöscht : HKLM\SOFTWARE\a68b8db66fe948
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A1CCCE0D-AE21-42A2-BE58-8E6109410995}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{41564952-412D-5637-00A7-7A786E7484D7}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{41564952-412D-5637-00A7-7A786E7484D7}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{41564952-412D-5637-00A7-7A786E7484D7}]
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{318CA664-3DA3-441E-8A53-898DF41959FC}
Schlüssel Gelöscht : HKCU\Software\AskPartnerNetwork
Schlüssel Gelöscht : HKCU\Software\b1.org
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\filescout
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\powerpack
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\AskPartnerNetwork
Schlüssel Gelöscht : HKLM\SOFTWARE\b1.org
Schlüssel Gelöscht : HKLM\SOFTWARE\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\simplitec
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DF103EDA-7937-4966-8EFB-5EF5C38301F2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A2D81E70-2A98-4A08-A628-94388B063C5E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\AskPartnerNetwork
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\b1.org
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Features\ADE301FD73976694E8BFE55F3C38102F
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Products\ADE301FD73976694E8BFE55F3C38102F
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\499E8534DA7E759419D2048CB780D3D5
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5DCE3C04E576AD15F972B67D0725120C
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62255E52F19EC97429A42D59D49024FA
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\930D9472A978D7A4EB16BF4DECB173B7
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEB93799E8B47D14CA356E4343D632A4
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE7C2A75DF08824E9CEFDE20F655BD9
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\ADE301FD73976694E8BFE55F3C38102F
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - 103.10.231.110:8080

***** [ Internetbrowser ] *****

-\\ Internet Explorer v10.0.9200.17267


-\\ Mozilla Firefox v36.0.4 (x86 de)

[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.admin", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.aflt", "babsst");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.babExt", "");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.babTrack", "affID=110819");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.bbDpng", 14);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.dfltSrch", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.hmpg", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.id", "a0ed2c59000000000000002586dcea82");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.instlDay", "15458");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.instlRef", "sst");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.lastDP", 14);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1723:52:50");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "22.0");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.newTab", true);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_FFUP");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.propectorlck", 112402551);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.prtkDS", 1);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.prtkHmpg", 1);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.ptch_0717", true);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.smplGrp", "azb");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.srcExt", "ss");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1723:52:50");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.babExt", "");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=110819");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.hardId", "a0ed2c59000000000000002586dcea82");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.id", "a0ed2c59000000000000002586dcea82");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.instlDay", "15458");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.newTab", true);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=110819&babsrc=NT_ss&mntrId=a0ed2c59000000000000002586dcea82");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1723:52:50");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.admin", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.aflt", "SD");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.appId", "{7ABBFE1C-E485-44AA-8F36-353751B4124D}");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.autoRvrt", "false");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.dfltLng", "de");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.dfltSrch", true);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.dnsErr", true);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.excTlbr", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.ffxUnstlRst", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.hmpg", true);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/MOY00009/tb_v1?SearchSource=13&cc=&mi=a0ed2c59000000000000002586dcea82");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.hpOld0", "hxxp://www.t-online.de");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.id", "a0ed2c59000000000000002586dcea82");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.instlDay", "15998");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.instlRef", "MOY00009");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.kw_url", "hxxp://search.softonic.com/MOY00009/tb_v1?SearchSource=2&cc=&mi=a0ed2c59000000000000002586dcea82&q=");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.newTab", true);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.newTabUrl", "hxxp://search.softonic.com/MOY00009/tb_v1/?SearchSource=15&cc=&mi=a0ed2c59000000000000002586dcea82");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.prdct", "Softonic");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.prtnrId", "softonic");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.rvrt", "false");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.smplGrp", "none");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.srchPrvdr", "Search the web (Softonic)");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.tlbrId", "2013desingbrand");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.tlbrSrchUrl", "hxxp://search.softonic.com/MOY00009/tb_v1?SearchSource=1&cc=&mi=a0ed2c59000000000000002586dcea82&q=");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.vrsn", "1.8.19.3");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.vrsnTs", "1.8.19.318:35:28");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.vrsni", "1.8.19.3");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.crossrider.bic", "13fa612b836a5abd9074469d5c7528f7");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.admin", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.aflt", "babsst");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.autoRvrt", "false");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.dfltLng", "de");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.excTlbr", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.id", "a0ed2c59000000000000002586dcea82");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.instlDay", "15888");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.instlRef", "sst");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.lastVrsnTs", "");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.newTab", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.prdct", "delta");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.prtnrId", "delta");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.rvrt", "false");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.smplGrp", "none");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.tlbrId", "base");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.vrsn", "1.8.21.5");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.21.50:30:42");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.vrsni", "1.8.21.5");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta_i.babExt", "");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta_i.babTrack", "affID=120662&tsp=4931");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta_i.srcExt", "ss");

-\\ Google Chrome v41.0.2272.101


*************************

AdwCleaner[R0].txt - [21099 Bytes] - [25/03/2015 14:18:07]
AdwCleaner[S0].txt - [21326 Bytes] - [25/03/2015 14:22:23]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [21386  Bytes] ##########
         
--- --- ---

Alt 25.03.2015, 15:23   #10
NoLove
 
WIN7 - PC langsam, Internetabbrüche, viele Befunde - Standard

WIN7 - PC langsam, Internetabbrüche, viele Befunde



Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.6 (03.22.2015:1)
OS: Windows 7 Home Premium x64
Ran by Jibi on 25.03.2015 at 14:45:44,38
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{028D1B66-1C19-4921-AA8E-5ECDB42CEABB}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{3816987A-84FB-4361-B586-B1E97159E52B}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{3BF3359F-470E-4DA7-A271-77FD63309276}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{5142CF1C-28BA-4851-BBD8-25CBBB6979C2}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{6394A81C-79CC-460A-86EC-F280D250D46B}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{6620FF96-F0CA-4662-AD31-EF4703B6B2F6}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{6D5F0E76-A5A5-4CE6-BFE0-A14CBB4F4EC7}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{705760DC-834D-4F85-A53C-D8B91907F606}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{8549B74A-84D2-4D01-84DC-C33F9B0CF8CF}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{8AA51DFB-AD80-4D26-A712-21E652B84C70}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{8E193D4C-2098-4A3A-AA8C-E70BB9A29A77}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{9875D751-B788-48BD-A352-472079EB9D9B}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{9D7AD2FD-B487-4103-8AE8-F98A48081490}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{AC7DEB86-A090-4526-AA88-70190D5592DA}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{BE98C51E-CA67-4419-8C4B-19FD5CB21A4E}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{C0A8CDF1-E3BE-4448-A55A-03347CF9AA98}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{C1BFD7B3-5BD8-4135-B58A-FD6D2303812E}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{C555314A-B685-4A53-812B-A383358EA1F0}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{CCA3B516-AB20-4B50-87D0-EBD0D2F0C23C}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{CCEE9C91-FD63-4F55-95E2-B6F855F8A5E4}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{D203970E-642E-4E6E-85E6-4165A9880397}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{DDD69635-08B5-41E5-B867-34CE3C779160}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{EBBE0B0C-13A0-4CD0-B57C-42A1F42184BF}



~~~ FireFox

Successfully deleted: [File] C:\user.js
Emptied folder: C:\Users\Jibi\AppData\Roaming\mozilla\firefox\profiles\58ohugm3.default\minidumps [328 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 25.03.2015 at 14:50:27,85
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Jibi (administrator) on JIBI-PC on 25-03-2015 14:55:22
Running from C:\Users\Jibi\Downloads
Loaded Profiles: Jibi (Available profiles: Jibi)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Windows\SysWOW64\ASGT.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Avid Technology, Inc..) C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Windows\RAVCpl64.exe
(SoftPerfect Research) C:\Program Files\NetWorx\networx.exe
(Avid Technology, Inc.) C:\Windows\System32\M-AudioTaskBarIcon.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\GPUTweak.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(Akamai Technologies, Inc.) C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILGE.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILGE.EXE
(Akamai Technologies, Inc.) C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe
(FILSH Media GmbH) C:\Program Files (x86)\FILSHtray\FILSHtray.exe
(Hama GmbH & Co KG) C:\Program Files (x86)\Hama\Common\RaUI.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Google Inc.) C:\Users\Jibi\AppData\Local\RockMelt\Update\1.2.189.1\RockMeltCrashHandler.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_134.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_134.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RAVCpl64.exe [6297088 2008-05-28] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [NetWorx] => C:\Program Files\NetWorx\networx.exe [4760464 2012-12-18] (SoftPerfect Research)
HKLM\...\Run: [M-Audio Taskbar Icon] => C:\Windows\system32\M-AudioTaskBarIcon.exe [798728 2010-12-07] (Avid Technology, Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-08-30] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\Video Capture Master\Filters\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [DigidesignMMERefresh] => C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe [81920 2011-08-11] (Avid Technology, Inc..)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [704512 2015-03-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [807696 2013-12-20] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [127792 2015-02-12] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [RockMelt Update] => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [136336 2012-02-04] (Google Inc.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3631448 2015-02-27] (Electronic Arts)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EPLTarget\P0000000000000002] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FILSHtray.lnk
ShortcutTarget: FILSHtray.lnk -> C:\Program Files (x86)\FILSHtray\FILSHtray.exe (FILSH Media GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hama Wireless LAN Utility.lnk
ShortcutTarget: Hama Wireless LAN Utility.lnk -> C:\Program Files (x86)\Hama\Common\RaUI.exe (Hama GmbH & Co KG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
Startup: C:\Users\Jibi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> {93D3B8AD-132C-4F50-ABFA-62FD82DBFACC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {5A39CCDF-55F5-45CB-9121-13364B8573DB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000 -> {5A39CCDF-55F5-45CB-9121-13364B8573DB} URL = 
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-05-25] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-05-25] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default
FF DefaultSearchEngine: Wikipedia (de)
FF Homepage: hxxp://www.t-online.de/
FF NetworkProxy: "backup.ftp", "202.147.198.217"
FF NetworkProxy: "backup.ftp_port", 8080
FF NetworkProxy: "backup.socks", "202.147.198.217"
FF NetworkProxy: "backup.socks_port", 8080
FF NetworkProxy: "backup.ssl", "202.147.198.217"
FF NetworkProxy: "backup.ssl_port", 8080
FF NetworkProxy: "ftp", "202.147.198.217"
FF NetworkProxy: "ftp_port", 8888
FF NetworkProxy: "http", "202.147.198.217"
FF NetworkProxy: "http_port", 8888
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "202.147.198.217"
FF NetworkProxy: "socks_port", 8888
FF NetworkProxy: "ssl", "202.147.198.217"
FF NetworkProxy: "ssl_port", 8888
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-14] ()
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2011-02-20] (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-05-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-05-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2852 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nppl3260.dll No File
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.46 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nppl3260.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1662 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nprpjplug.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.46 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nprpjplug.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Jibi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2011-11-08] (Skype Limited)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Jibi\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @talk.google.com/O1DPlugin -> C:\Users\Jibi\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-01-27] (Google)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @us-w1.rockmelt.com/RockMelt Update;version=8 -> C:\Users\Jibi\AppData\Local\RockMelt\Update\1.2.189.1\npRockMeltOneClick8.dll [2012-02-04] (RockMelt Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2011-05-04] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npijjiautoinstallpluginff.dll [2010-07-27] (NHN USA Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npijjiFFPlugin1.dll [2010-07-28] (NHN USA Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Jibi\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Jibi\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-01-27] (Google)
FF Extension: Firebug - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\firebug@software.joehewitt.com.xpi [2013-11-21]
FF Extension: ProxTube - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\ich@maltegoetz.de.xpi [2014-09-10]
FF Extension: ReloadEvery - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2013-04-11]
FF Extension: Pearl Crescent Page Saver Basic - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\{c151d79e-e61b-4a90-a887-5a46d38fba99}.xpi [2013-01-21]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.ver-filmes.com/
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll No File
CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\pdf.dll ()
CHR Plugin: (ijji Auto Install Plugin for Mozilla) - C:\Program Files (x86)\Mozilla Firefox\plugins\npijjiautoinstallpluginff.dll (NHN USA Inc.)
CHR Plugin: (ijji Web Launching Plugin for FF) - C:\Program Files (x86)\Mozilla Firefox\plugins\npijjiFFPlugin1.dll (NHN USA Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll No File
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Bing Bar) - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Jibi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Profile: C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-21]
CHR Extension: (Google Drive) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-21]
CHR Extension: (YouTube) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-21]
CHR Extension: (Adblock Plus) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-03-24]
CHR Extension: (Google Search) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-21]
CHR Extension: (IE Tab) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehijbfgiekmjfkfjpbkbammjbdenadd [2014-08-17]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-11]
CHR Extension: (Google Wallet) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-21]
CHR Extension: (Auto Refresh Plus) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilipfekkmncanaajkapbpancpelijih [2014-03-31]
CHR Extension: (Gmail) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-21]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [992504 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [184056 2015-02-12] (Avira Operations GmbH & Co. KG)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.)
R2 DigiRefresh; C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe [81920 2011-08-11] (Avid Technology, Inc..) [File not signed]
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)
R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [152640 2013-04-30] (SEIKO EPSON CORPORATION)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2011-01-14] (Macrovision Europe Ltd.) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4208208 2010-10-21] (INCA Internet Co., Ltd.) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-02-27] (Electronic Arts)
R2 RalinkRegistryWriter; C:\Program Files (x86)\Hama\Common\RaRegistry.exe [185632 2009-12-10] (Ralink Technology, Corp.)
R2 RalinkRegistryWriter64; C:\Program Files (x86)\Hama\Common\RaRegistry64.exe [212256 2009-12-10] (Ralink Technology, Corp.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2015x\RpcAgentSrv.exe [73200 2014-12-17] (SiSoftware) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132120 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-06] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [114448 2013-12-20] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-04-30] (DT Soft Ltd)
S3 E100B; C:\Windows\System32\DRIVERS\efe5b32e.sys [192256 2009-06-10] (Intel Corporation)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2013-07-02] (ASUSTeK Computer Inc.)
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 MAUSBFASTTRACK; C:\Windows\System32\DRIVERS\MAudioFastTrack.sys [187912 2010-12-07] (Avid Technology, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-03-17] (Malwarebytes Corporation)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4774 2012-03-06] (INCA Internet Co., Ltd.) [File not signed]
S3 NVFLASH; C:\Windows\system32\drivers\nvflash.sys [15648 2014-01-06] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2012-05-14] (Realtek Semiconductor Corporation                           )
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2015x\WNt600x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 dump_wmimmc; \??\C:\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-25 14:55 - 2015-03-25 14:56 - 00031040 _____ () C:\Users\Jibi\Downloads\FRST.txt
2015-03-25 14:44 - 2015-03-25 14:44 - 01388782 _____ (Thisisu) C:\Users\Jibi\Downloads\JRT.exe
2015-03-25 14:18 - 2015-03-25 14:42 - 00000000 ____D () C:\AdwCleaner
2015-03-25 14:12 - 2015-03-25 14:12 - 02168320 _____ () C:\Users\Jibi\Downloads\AdwCleaner_4.113.exe
2015-03-25 12:13 - 2015-03-25 12:13 - 00000061 _____ () C:\Users\Jibi\Desktop\bsafetest.txt
2015-03-24 11:33 - 2015-03-24 11:33 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Jibi\Downloads\mbam-setup-2.1.4.1018.exe
2015-03-23 11:43 - 2013-07-02 16:29 - 00024824 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys
2015-03-22 16:50 - 2015-03-22 18:10 - 437338288 _____ () C:\Users\Jibi\Desktop\jibitetet.mp4
2015-03-22 15:56 - 2015-03-22 16:03 - 00257088 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.mp4.sfk
2015-03-22 13:55 - 2015-03-22 13:55 - 00038062 _____ () C:\ComboFix.txt
2015-03-22 13:22 - 2015-03-22 13:22 - 00001154 _____ () C:\Users\Jibi\Desktop\ComboFix - Verknüpfung.lnk
2015-03-22 13:21 - 2015-03-22 13:21 - 05615380 ____R (Swearware) C:\Users\Jibi\Downloads\ComboFix.exe
2015-03-22 13:11 - 2015-03-22 13:11 - 00001274 _____ () C:\Users\Jibi\Desktop\Revo Uninstaller.lnk
2015-03-22 13:11 - 2015-03-22 13:11 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-03-22 13:10 - 2015-03-22 13:10 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Jibi\Downloads\revosetup95.exe
2015-03-22 12:26 - 2015-03-22 12:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-21 16:12 - 2015-03-25 14:51 - 00000000 ____D () C:\Users\Jibi\Desktop\Virus
2015-03-21 16:09 - 2015-03-25 14:55 - 00000000 ____D () C:\FRST
2015-03-21 16:08 - 2015-03-21 16:08 - 00000540 _____ () C:\Users\Jibi\Downloads\defogger_disable.log
2015-03-21 16:08 - 2015-03-21 16:08 - 00000168 _____ () C:\Users\Jibi\defogger_reenable
2015-03-21 14:00 - 2015-03-21 14:00 - 02095616 _____ (Farbar) C:\Users\Jibi\Downloads\FRST64.exe
2015-03-21 14:00 - 2015-03-21 14:00 - 00380416 _____ () C:\Users\Jibi\Downloads\f9lghzg5.exe
2015-03-21 13:57 - 2015-03-21 13:57 - 00050477 _____ () C:\Users\Jibi\Downloads\Defogger.exe
2015-03-19 19:16 - 2015-03-22 18:42 - 00123648 _____ () C:\Users\Jibi\Desktop\aloholtet.vf
2015-03-19 19:16 - 2015-03-22 16:50 - 00123648 _____ () C:\Users\Jibi\Desktop\aloholtet.vf.bak
2015-03-18 19:38 - 2015-03-22 15:43 - 00000000 ____D () C:\Users\Jibi\Desktop\Alkohol Test
2015-03-17 13:07 - 2015-03-17 14:59 - 00000000 ____D () C:\Users\Jibi\Downloads\German Top 100 Single Charts 16.03.2015
2015-03-17 12:54 - 2015-03-17 13:07 - 911811482 _____ () C:\Users\Jibi\Downloads\German Top100 Single Charts 16.03.2015.rar
2015-03-16 13:25 - 2015-03-17 11:50 - 00000000 ____D () C:\Users\Jibi\Desktop\Wand
2015-03-14 18:54 - 2015-03-14 19:06 - 105310610 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.mp4
2015-03-14 18:23 - 2015-03-14 18:23 - 00000000 ____D () C:\Users\Jibi\Downloads\Neuer Ordner (2)
2015-03-14 18:05 - 2015-03-14 18:10 - 00279280 _____ () C:\Users\Jibi\Downloads\Conflikt_Beatz_-_Spiriduell_VR3_Beat_www.rappers.in.mp3.sfk
2015-03-13 12:03 - 2015-03-14 19:25 - 00069648 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.vf
2015-03-13 12:03 - 2015-03-14 18:53 - 00069648 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.vf.bak
2015-03-13 11:02 - 2015-03-13 11:05 - 00213832 _____ () C:\Users\Jibi\Desktop\jibitestetfb.MP3.sfk
2015-03-11 13:53 - 2015-02-20 05:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 13:53 - 2015-02-20 05:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 13:53 - 2015-02-20 04:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 13:53 - 2015-02-20 04:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 13:53 - 2015-02-03 04:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 13:53 - 2015-02-03 04:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 13:53 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 13:53 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 13:52 - 2015-02-03 04:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 13:52 - 2015-02-03 04:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 13:52 - 2015-02-03 04:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 13:52 - 2015-02-03 04:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 13:52 - 2015-02-03 04:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 13:52 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 13:52 - 2015-02-03 04:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 13:52 - 2015-02-03 04:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 13:52 - 2015-02-03 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 13:52 - 2015-02-03 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 13:52 - 2015-02-03 04:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 13:52 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 13:52 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 13:52 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 13:52 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 13:52 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 13:52 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 13:52 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 13:52 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 13:52 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 13:52 - 2015-02-03 03:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 13:52 - 2014-10-31 23:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 13:52 - 2014-06-28 01:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-03-11 13:52 - 2014-06-28 01:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-03-11 13:51 - 2015-03-06 06:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 13:51 - 2015-03-06 06:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 13:51 - 2015-03-06 06:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 13:51 - 2015-03-06 06:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 13:51 - 2015-03-06 06:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 13:51 - 2015-03-06 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 13:51 - 2015-03-06 06:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 13:51 - 2015-03-06 06:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 13:51 - 2015-03-06 06:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 13:51 - 2015-03-06 06:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 13:51 - 2015-03-06 06:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 13:51 - 2015-03-06 06:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 13:51 - 2015-03-06 06:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 13:51 - 2015-02-23 11:52 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 13:51 - 2015-02-23 11:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 13:51 - 2015-02-23 11:51 - 01409024 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 13:51 - 2015-02-23 11:51 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 13:51 - 2015-02-23 11:51 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 19301888 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 15410688 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 02656256 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 13:51 - 2015-02-23 11:49 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 13:51 - 2015-02-23 10:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 13:51 - 2015-02-23 09:51 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-03-11 13:51 - 2015-02-23 09:25 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2015-03-11 13:51 - 2015-02-21 06:31 - 01763328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 13:51 - 2015-02-21 06:31 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 13:51 - 2015-02-21 06:31 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 14380544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 13768704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 02864640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 13:51 - 2015-02-21 06:29 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 13:51 - 2015-02-21 06:29 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 13:51 - 2015-02-21 06:29 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 13:51 - 2015-02-21 06:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 13:51 - 2015-02-21 05:42 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-03-11 13:51 - 2015-02-21 05:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2015-03-11 13:51 - 2015-02-13 06:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 13:51 - 2015-02-13 06:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 13:51 - 2015-02-03 04:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 13:51 - 2015-02-03 04:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 13:51 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 13:51 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 13:51 - 2015-01-31 00:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 13:51 - 2015-01-17 03:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 13:51 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 13:50 - 2015-02-26 04:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 13:46 - 2015-02-04 04:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 13:46 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-10 19:16 - 2015-03-12 12:49 - 00091408 _____ () C:\Users\Jibi\Desktop\rage4.vf
2015-03-10 19:16 - 2015-03-12 12:48 - 00091408 _____ () C:\Users\Jibi\Desktop\rage4.vf.bak
2015-03-10 18:33 - 2015-03-10 18:34 - 18597681 _____ () C:\Users\Jibi\Desktop\kopfballmaster.mp4
2015-03-10 18:28 - 2015-03-12 12:21 - 00000000 ____D () C:\Users\Jibi\Desktop\Neuer Ordner (4)
2015-03-05 14:43 - 2015-03-05 14:54 - 123529920 _____ () C:\Users\Jibi\Desktop\ytmmrz.mp4
2015-03-05 14:29 - 2015-03-05 14:29 - 00030976 _____ () C:\Users\Jibi\Desktop\outronew.mp4.sfk
2015-03-05 14:25 - 2015-03-05 14:26 - 00125584 _____ () C:\Users\Jibi\Desktop\MVI_0331.MOV.sfk
2015-03-05 14:25 - 2015-03-05 14:26 - 00042608 _____ () C:\Users\Jibi\Desktop\MVI_0330.MOV.sfk
2015-03-05 14:23 - 2015-03-05 14:19 - 475796800 ____N () C:\Users\Jibi\Desktop\MVI_0331.MOV
2015-03-05 14:23 - 2015-03-05 14:15 - 155390932 ____N () C:\Users\Jibi\Desktop\MVI_0330.MOV
2015-03-05 13:22 - 2015-03-05 14:56 - 00050552 _____ () C:\Users\Jibi\Desktop\ytmyolo.vf
2015-03-05 13:22 - 2015-03-05 14:40 - 00049784 _____ () C:\Users\Jibi\Desktop\ytmyolo.vf.bak
2015-03-05 12:57 - 2015-03-05 12:58 - 00243856 _____ () C:\Users\Jibi\Desktop\ytmnews.MP3.sfk
2015-03-05 12:57 - 2015-03-05 12:57 - 00004704 _____ () C:\Users\Jibi\Desktop\Intro.mp4.sfk
2015-03-05 00:37 - 2015-03-17 23:59 - 00000000 ____D () C:\Users\Jibi\Desktop\BeGe
2015-03-04 17:35 - 2015-03-04 17:44 - 36873627 _____ () C:\Users\Jibi\Desktop\diagpromo.mp4
2015-03-04 16:07 - 2015-03-04 16:10 - 00044240 _____ () C:\Users\Jibi\Desktop\Diagnose.MP3.sfk
2015-03-04 15:52 - 2015-03-04 15:53 - 00168296 _____ () C:\Users\Jibi\Downloads\♩♫ Epic and Dramatic Trailer Music ♪♬ - Copyright and Royalty Free.mp3.sfk
2015-03-04 14:48 - 2015-03-04 16:25 - 00000000 ____D () C:\Users\Jibi\Desktop\Neuer Ordner (3)
2015-02-25 11:19 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-25 11:19 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-23 22:20 - 2015-02-23 22:31 - 84817327 _____ () C:\Users\Jibi\Desktop\DeeEF - BBK Quali.mp4
2015-02-23 20:05 - 2015-02-23 20:06 - 00134672 _____ () C:\Users\Jibi\Downloads\DeeEF-BBK-Qualifikation.mp3.mp3.sfk
2015-02-23 03:40 - 2015-03-17 12:20 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\FCBfan
2015-02-23 03:40 - 2015-02-23 03:40 - 00003424 _____ () C:\Windows\System32\Tasks\FCBfan

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-25 14:44 - 2012-06-14 12:43 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-25 14:42 - 2014-07-25 11:47 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-25 14:33 - 2009-07-14 05:45 - 00023072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-25 14:33 - 2009-07-14 05:45 - 00023072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-25 14:29 - 2011-01-08 21:22 - 01777769 _____ () C:\Windows\WindowsUpdate.log
2015-03-25 14:25 - 2015-02-20 00:04 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-03-25 14:25 - 2014-03-21 17:14 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-25 14:25 - 2012-11-25 17:39 - 00126061 _____ () C:\Windows\setupact.log
2015-03-25 14:25 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-25 14:04 - 2014-03-21 17:14 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-25 14:03 - 2012-02-04 11:53 - 00000924 _____ () C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job
2015-03-25 14:01 - 2015-01-21 20:01 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job
2015-03-25 14:00 - 2015-01-21 20:00 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job
2015-03-25 14:00 - 2014-03-05 20:14 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job
2015-03-25 13:59 - 2015-01-21 19:59 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job
2015-03-25 13:58 - 2015-01-21 19:58 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job
2015-03-25 13:55 - 2012-02-21 16:49 - 00000132 _____ () C:\Users\Jibi\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-03-25 12:11 - 2013-09-22 18:58 - 00000042 _____ () C:\Users\Jibi\Desktop\wpa.txt
2015-03-25 11:58 - 2012-02-04 11:53 - 00000872 _____ () C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job
2015-03-25 02:00 - 2011-01-11 19:31 - 00000000 ____D () C:\Users\Jibi\AppData\Local\Adobe
2015-03-24 20:03 - 2012-10-25 08:34 - 00000000 ____D () C:\ProgramData\Origin
2015-03-24 19:48 - 2012-11-25 22:18 - 00277964 _____ () C:\Windows\PFRO.log
2015-03-24 13:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-03-24 11:34 - 2014-07-25 11:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-03-24 11:34 - 2014-07-25 11:42 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-03-24 11:34 - 2012-01-17 16:40 - 00001112 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-03-23 11:52 - 2009-07-14 18:58 - 00699912 _____ () C:\Windows\system32\perfh007.dat
2015-03-23 11:52 - 2009-07-14 18:58 - 00149794 _____ () C:\Windows\system32\perfc007.dat
2015-03-23 11:52 - 2009-07-14 06:13 - 01622420 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-22 14:42 - 2012-07-11 06:46 - 00000000 ____D () C:\Users\Jibi\Documents\Vegas Movie Studio HD Platinum 11.0 Projekte
2015-03-22 13:56 - 2012-01-18 16:37 - 00000000 ____D () C:\Qoobox
2015-03-22 13:48 - 2012-01-18 16:37 - 00000000 ____D () C:\Windows\ERDNT
2015-03-22 13:48 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2015-03-22 13:46 - 2012-05-31 13:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-21 17:25 - 2014-08-17 22:30 - 00000000 ____D () C:\Users\Jibi\AppData\Local\IE Tab
2015-03-21 16:43 - 2014-09-19 13:55 - 00000530 _____ () C:\Users\Jibi\Desktop\wwe.txt
2015-03-21 16:08 - 2011-01-08 21:30 - 00000000 ____D () C:\Users\Jibi
2015-03-17 15:10 - 2013-01-24 14:43 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\Skype
2015-03-17 15:01 - 2011-01-13 19:55 - 00000000 ____D () C:\Users\Jibi\AppData\Local\Last.fm
2015-03-17 06:15 - 2014-07-25 11:42 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-03-17 06:15 - 2014-07-25 11:42 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-03-17 06:15 - 2012-01-17 16:40 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-03-14 17:59 - 2014-12-30 02:10 - 00000000 ____D () C:\Users\Jibi\Desktop\Werbungsvideo
2015-03-14 15:37 - 2012-06-14 12:43 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-03-14 15:36 - 2012-06-14 12:43 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-03-14 15:36 - 2011-05-13 21:29 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-14 15:31 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-13 19:49 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-03-11 19:59 - 2009-07-14 05:45 - 05361848 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-11 19:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-11 19:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-11 15:53 - 2012-03-18 17:12 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-11 15:53 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2015-03-11 15:46 - 2013-08-15 01:07 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-11 15:37 - 2011-01-18 11:24 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-06 13:15 - 2013-08-19 13:26 - 00001974 _____ () C:\Users\Jibi\Desktop\amer.txt
2015-03-05 11:25 - 2014-10-15 08:43 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-05 11:25 - 2013-08-21 21:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-03-05 11:25 - 2013-08-21 21:46 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-03-04 11:09 - 2013-08-21 22:03 - 00044088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-03-04 11:09 - 2013-08-21 21:46 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-03-04 11:09 - 2013-08-21 21:46 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-02-27 12:55 - 2013-01-28 09:46 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\TS3Client
2015-02-27 11:56 - 2012-10-25 08:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-02-27 11:56 - 2012-10-25 08:33 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-02-26 10:22 - 2015-02-22 15:36 - 00000000 ____D () C:\Users\Jibi\Desktop\Dietrich Drehtag

==================== Files in the root of some directories =======

2013-11-21 10:25 - 2013-11-21 10:25 - 4216840 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\vcredist.exe
2012-02-21 16:49 - 2015-03-25 13:55 - 0000132 _____ () C:\Users\Jibi\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-02-15 21:45 - 2014-12-12 14:11 - 14397440 _____ () C:\Users\Jibi\AppData\Roaming\Sandra.mdb
2014-04-02 11:03 - 2014-04-02 11:03 - 0001456 _____ () C:\Users\Jibi\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2012-11-26 06:55 - 2015-02-09 00:00 - 0005120 _____ () C:\Users\Jibi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Some content of TEMP:
====================
C:\Users\Jibi\AppData\Local\Temp\avgnt.exe
C:\Users\Jibi\AppData\Local\Temp\Quarantine.exe
C:\Users\Jibi\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-07 13:47

==================== End Of Log ============================
         
--- --- ---

--- --- ---


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Jibi at 2015-03-25 14:56:53
Running from C:\Users\Jibi\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (x32 Version: 9.01.513.58212 - ABBYY) Hidden
Adobe After Effects CS6 (HKLM-x32\...\{4817D846-700B-474E-A31B-80892B3E92E3}) (Version: 11 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2 - Adobe Systems Incorporated)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Photoshop CS3 (HKLM-x32\...\Adobe_5f143314a5d434c8511097393d17397) (Version: 10.0 - Adobe Systems Incorporated)
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
Akamai NetSession Interface (HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Apple Application Support (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.6.8.3 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.6.8.3 - ASUSTek COMPUTER INC.) Hidden
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.026 - ASUSTek Computer Inc.)
Avid Pro Tools SE 8.0.3 (HKLM-x32\...\{371F27A1-9502-4762-AE97-1C1938B21055}) (Version: 8.0.3 - Digidesign, ein Geschäftsbereich von Avid Technology, Inc.)
Avira (HKLM-x32\...\{d9ed6dcf-6bfc-4fbb-802e-81dd5b767d6e}) (Version: 1.1.32.25147 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.32.25147 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 15.0.8.656 - Avira)
Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C1801}) (Version: 12.24.1.234 - APN, LLC)
Bing Bar (HKLM-x32\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation)
BlueStacks Notification Center (HKLM-x32\...\{44181DF6-2751-48C7-B918-72F14508F127}) (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden
Camtasia Studio 7 (HKLM-x32\...\{DE042823-C359-4B87-B66B-308057E8B6AF}) (Version: 7.0.1 - TechSmith Corporation)
CANON iMAGE GATEWAY MyCamera Download Plugin (HKLM-x32\...\MyCamera Download Plugin) (Version: 3.1.1.2 - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.9.0.9 - Canon Inc.)
Canon MOV Decoder (HKLM-x32\...\Canon MOV Decoder) (Version: 1.8.0.7 - Canon Inc.)
Canon MOV Encoder (HKLM-x32\...\Canon MOV Encoder) (Version: 1.6.0.1 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.7.0.4 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.10 (HKLM-x32\...\DPP) (Version: 3.10.2.0 - Canon Inc.)
Canon Utilities EOS Sample Music (HKLM-x32\...\EOS Sample Music) (Version: 1.0.0.204 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.10.2.0 - Canon Inc.)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (HKLM-x32\...\EOS Video Snapshot Task) (Version: 1.0.0.10 - Canon Inc.)
Canon Utilities Movie Uploader for YouTube (HKLM-x32\...\MovieUploaderForYouTube) (Version: 1.2.0.7 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.9.0.0 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.7.0.24 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.5.0.9 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 3.24 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.4.1.3341 - CDBurnerXP)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
CPUID CPU-Z 1.71.1 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
Druckerdeinstallation für EPSON XP-215 217 Series (HKLM\...\EPSON XP-215 217 Series) (Version:  - SEIKO EPSON Corporation)
DVD Architect Studio 5.0 (HKLM-x32\...\{04DF4A51-DE2A-11E0-9AB5-F04DA23A5C58}) (Version: 5.0.156 - Sony)
Epson Easy Photo Print 2 (HKLM-x32\...\{A02D7029-C4EF-44C1-9FD4-C0D3CA518113}) (Version: 2.2.4.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8A17C27D-0325-400C-8AA9-DAA6B16CBD74}) (Version: 2.40.0009 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON SX130 Series Printer Uninstall (HKLM\...\EPSON SX130 Series) (Version:  - SEIKO EPSON Corporation)
Epson-Handbücher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.0.0.0 - SEIKO EPSON CORPORATION)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Facebook Video Calling 1.0.0.7339 (HKLM-x32\...\{EEA5F1E7-E934-4F4E-85C8-8FEC9CCE525C}) (Version: 1.0.7339 - Skype Limited)
Facebook Video Calling 1.0.0.8953 (HKLM-x32\...\{1D7CE340-70C3-4848-BCCF-215950328A4C}) (Version: 1.0.8953 - Skype Limited)
ffdshow [rev 2975] [2009-05-28] (HKLM-x32\...\ffdshow_is1) (Version: 1.0 - )
FILSHtray (HKLM-x32\...\{0844CC2A-512E-4BA1-872B-02887E7A2672}) (Version: 0.12 - FILSH Media GmbH)
FILSHtray (HKLM-x32\...\{5928359F-BF46-4646-BF19-B64E55171EB5}) (Version: 0.12 - FILSH Media GmbH)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)
FormatFactory 3.3.2.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.2.0 - Format Factory)
Foxit Reader (HKLM-x32\...\Foxit Reader) (Version: 4.3.1.118 - Foxit Corporation)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free AVI Video Converter version 5.0.24.426 (HKLM-x32\...\Free AVI Video Converter_is1) (Version: 5.0.24.426 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.9.32 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version:  - DVDVideoSoft Limited.)
FUSSBALL MANAGER 13 (HKLM-x32\...\{80AF0300-866F-400F-A350-D53E3C3E34E0}) (Version: 1.0.3.0 - Electronic Arts)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{C77CC230-7417-3F01-B70D-52583DC9FEC9}) (Version: 5.40.2.0 - Google)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GPUTweakStreaming (HKLM-x32\...\InstallShield_{D2A41AA7-4313-43D5-AA39-7E3FBBE0556D}) (Version: 1.0.3.5 - ASUS)
GPUTweakStreaming (x32 Version: 1.0.3.5 - ASUS) Hidden
Hama Wireless LAN Adapter (HKLM-x32\...\{E91E8912-769D-42F0-8408-0E329443BABC}) (Version: 10.1.0 - Hama)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)
Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.8.13 - PACE Anti-Piracy)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 7 Update 21 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217021FF}) (Version: 7.0.210 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version:  - Last.fm)
Layer III Audio Encoder (HKLM-x32\...\Layer III Audio Encoder 1.0.70111) (Version: 1.0.70111 - Elecard)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
MAGIX Audio Cleaning Lab 2013 (HKLM-x32\...\MAGIX_{97E2116F-CC11-4EDA-B179-78CB6A89D836}) (Version: 19.0.0.10 - MAGIX AG)
MAGIX Audio Cleaning Lab 2013 (Version: 19.0.0.10 - MAGIX AG) Hidden
MAGIX Music Maker 17 Premium Download Version (HKLM-x32\...\MAGIX_MSI_mm17dlx) (Version: 17.0.0.16 - MAGIX AG)
MAGIX Music Maker 17 Premium Download Version (x32 Version: 17.0.0.16 - MAGIX AG) Hidden
MAGIX Screenshare (HKLM-x32\...\{DFDD2913-557D-4EB5-8745-47749E521760}) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Screenshare 4.3.6.1987 (D) (HKLM-x32\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Speed burnR (MSI) (HKLM-x32\...\MAGIX_{7F4DE580-F810-431C-8730-34F6CD89C4F6}) (Version: 7.0.2.6 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
M-Audio FastTrack Driver 6.0.6 (x64) (HKLM\...\{91A8C38A-0239-11E0-9658-189EDFD72085}) (Version: 6.0.6 - M-Audio)
Media Player Codec Pack 4.0.1 (HKLM-x32\...\Media Player - Codec Pack) (Version:  - Media Player Codec Pack)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.5128.5002 - Microsoft Corporation)
Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
MorphVOX Pro (HKLM-x32\...\{DB2B4DA8-595D-42A1-A1AF-8AF654C18D54}) (Version: 4.4.5 - Screaming Bee)
Mozilla Firefox 36.0.4 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0.4 (x86 de)) (Version: 36.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.5 - F.J. Wechselberger)
NetWorx 5.2.7 (HKLM\...\NetWorx_is1) (Version:  - Softperfect Research)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.1.2 - )
NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
OpenOffice.org 3.2 (HKLM-x32\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)
Origin (HKLM-x32\...\Origin) (Version: 9.0.11.77 - Electronic Arts, Inc.)
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.0 - Frank Heindörfer, Philip Chinery)
photoFXlab (HKLM-x32\...\photoFXlab) (Version: 1.2.6 - Topaz Labs)
PhotoResampling 12.1 (HKLM-x32\...\PhotoResampling_is1) (Version:  - )
Power Sound Editor Free (HKLM-x32\...\Power Sound Editor Free) (Version:  - PowerSE Studio Inc.)
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
QuickTime Alternative 2.8.0 (HKLM-x32\...\QuicktimeAlt_is1) (Version: 2.8.0 - )
Real Alternative 1.8.4 Lite (HKLM-x32\...\RealAlt_is1) (Version: 1.8.4 - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.61.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version:  - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RockMelt (HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\RockMelt) (Version: 0.16.91.483 - RockMelt, Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SHIELD Streaming (Version: 3.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.18.9 - NVIDIA Corporation) Hidden
SiSoftware Sandra Lite 2015x (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2496}_is1) (Version: 21.15.2015.1 - SiSoftware)
Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
Software Updater (HKLM-x32\...\{FA7EE274-7370-43B7-9A45-A39B17CCCDC5}) (Version: 4.3.3 - SEIKO EPSON CORPORATION)
Sony Ericsson Themes Creator 4.16.2.6 (HKLM-x32\...\Sony Ericsson Themes Creator) (Version: 4.16.2.6 - Sony Ericsson Mobile Communications AB)
Sound Forge Audio Studio 10.0 (HKLM-x32\...\{0AA0DA00-A1D3-11E0-B9A9-005056C00008}) (Version: 10.0.176 - Sony)
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version:  - Obsidian Entertainment)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
Topaz Adjust 5 (HKLM-x32\...\Topaz Adjust 5) (Version: 5.0.1 - Topaz Labs, LLC)
Topaz B&W Effects (HKLM-x32\...\Topaz BW Effects 2) (Version: 2.1.0 - Topaz Labs, LLC)
Topaz Clarity (HKLM-x32\...\Topaz Clarity) (Version: 1.0.0 - Topaz Labs, LLC)
Topaz Clean 3 (HKLM-x32\...\Topaz Clean 3) (Version: 3.0.2 - Topaz Labs, LLC)
Topaz DeJpeg 4 (HKLM-x32\...\Topaz DeJpeg 4) (Version: 4.0.2 - Topaz Labs, LLC)
Topaz DeNoise 5 (HKLM-x32\...\Topaz DeNoise 5) (Version: 5.0.1 - Topaz Labs, LLC)
Topaz Detail 3 (HKLM-x32\...\Topaz Detail 3) (Version: 3.1.0 - Topaz Labs, LLC)
Topaz Fusion Express 2 (HKLM-x32\...\Topaz Fusion Express 2) (Version: 2.1.3 - Topaz Labs, LLC)
Topaz InFocus (HKLM-x32\...\Topaz InFocus) (Version: 1.0.0 - Topaz Labs, LLC)
Topaz Lens Effects (HKLM-x32\...\Topaz Lens Effects) (Version: 1.2.0 - Topaz Labs, LLC)
Topaz ReMask 3 (HKLM-x32\...\Topaz ReMask 3) (Version: 3.2.1 - Topaz Labs, LLC)
Topaz Simplify 4 (HKLM-x32\...\Topaz Simplify 4) (Version: 4.0.0 - Topaz Labs, LLC)
Topaz Star Effects (HKLM-x32\...\Topaz Star Effects) (Version: 1.1.0 - Topaz Labs, LLC)
TP-LINK TL-WN821N Driver (HKLM-x32\...\{26B52E5B-1620-4676-9B46-B6C56B8105CE}) (Version: 1.2.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.2.1 - TP-LINK)
Uninstall 1.0.0.1 (HKLM-x32\...\Uninstall_is1) (Version:  - )
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vegas Movie Studio HD Platinum 11.0 (HKLM-x32\...\{DA00F140-1C03-11E1-AE47-F04DA23A5C58}) (Version: 11.0.283 - Sony)
VLC media player 1.1.5 (HKLM-x32\...\VLC media player) (Version: 1.1.5 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version:  - )
YGOPro DevPro Version 1.9.2r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.2r2 - YGOPro DevPro Online)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{67F2A879-82D5-4A6D-8CC5-FFB3C114B69D}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\program\so_activex_x64.dll ()
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\ooofiltproxy_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File

==================== Restore Points  =========================

11-03-2015 15:34:17 Windows Update
15-03-2015 19:00:09 Windows-Sicherung
17-03-2015 12:18:52 Removed BlueStacks Notification Center
22-03-2015 13:12:30 Revo Uninstaller's restore point - Delta toolbar  
22-03-2015 13:15:46 Revo Uninstaller's restore point - Delta Chrome Toolbar
22-03-2015 13:18:45 Revo Uninstaller's restore point - PriceGong 2.6.11
22-03-2015 19:00:12 Windows-Sicherung

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2015-03-22 13:44 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {148B9FF8-AD9B-4939-A971-E4651FF9C5E8} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2014-03-25] (ASUSTek Computer Inc.)
Task: {1D7CE3C9-2B2A-47EB-A828-A90FDAAB8D28} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe [2014-03-05] (Google Inc.)
Task: {30973219-71E8-43B4-A613-CDB938E98CA9} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {3410C2E5-7288-4C9C-81CF-B47892E0D4D3} - System32\Tasks\{A84C457A-CCAC-4B7E-8B48-6EB6B2C86990} => pcalua.exe -a C:\Users\Jibi\Downloads\ArticGunZ_Installer_23052014.exe -d C:\Users\Jibi\Downloads
Task: {39FFD13A-E76D-4D6C-AAFC-D19A68636283} - System32\Tasks\AutoKMSCustom => C:\Windows\AutoKMS\AutoKMS.exe [2012-03-19] ()
Task: {3EAA0B57-E774-44D5-B95B-E1910FD2882C} - System32\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {51488CC2-CE57-49D5-86EC-80F29FD1177D} - System32\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {55A13CFE-6A8F-4125-B0BA-19F43534FDAE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Task: {6B44A402-03E6-49A1-AAC7-2DD228FA33DE} - System32\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {7336D0CE-6C96-47AD-96F5-4F62EEC33A72} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-21] (Google Inc.)
Task: {75A3A52B-31A2-4BC4-A6B7-9EC07DFC5E40} - System32\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-02-04] (Google Inc.)
Task: {7E4BC6EE-C068-4C77-B407-D887AC9D29BA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-10-24] (Piriform Ltd)
Task: {8E65CF69-13EF-42C8-8CBB-7EA35F5C9DC3} - System32\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-02-04] (Google Inc.)
Task: {91DE9A25-CE2D-48F5-A26D-EAFAE27F9485} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-14] (Adobe Systems Incorporated)
Task: {965DE61A-2096-40CB-8DF5-A9E5C25CA850} - System32\Tasks\AdobeAAMUpdater-1.0-Jibi-PC-Jibi => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {CB2CEECB-52A7-4319-ABC6-5408D6B5E831} - System32\Tasks\FCBfan => C:\Users\Jibi\AppData\Roaming\FCBfan\fcbfan.exe
Task: {CF7CBD1F-0A14-4E15-8B9F-1C3EF186A44B} - System32\Tasks\{88AEA439-7C97-48A7-AA75-B6210354059D} => pcalua.exe -a C:\Users\Jibi\Downloads\ZeusProInstall.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {DE5D4799-3376-4F3C-9CAC-5E1E015429F5} - System32\Tasks\{AD781ADF-B570-4985-B48C-4E5EECEAB2AF} => pcalua.exe -a C:\Users\Jibi\AppData\Local\Temp\Temp1_animake.zip\SETUP.EXE
Task: {DF6E8E9A-8CE7-40B7-8376-72755C7A6EFA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe [2014-03-05] (Google Inc.)
Task: {E28BEE1B-F9B1-4331-8B70-79DB6480C3E0} - System32\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {EC7F474B-97F6-4C43-A443-4CEA64A39830} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-21] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE:/EXE:{35651874-80E9-4EE7-A1F0-3E21ADA902D7} /F:UpdateSYSTEM
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE:/EXE:{D45E6B82-C3DA-4F6E-9045-2208BD7865C1} /F:UpdateSYSTEM
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe
Task: C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-02-20 00:03 - 2014-07-02 19:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-02-20 18:07 - 2005-03-12 00:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll
2012-01-17 11:24 - 2012-01-17 11:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2013-05-09 11:29 - 2011-09-17 11:12 - 00664576 _____ () C:\Program Files\NetWorx\sqlite.dll
2011-01-14 05:58 - 2010-03-15 11:28 - 00052224 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2014-07-14 15:25 - 2014-07-14 15:25 - 00278528 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Vender.dll
2014-06-16 17:25 - 2014-06-16 17:25 - 00053248 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Exeio.dll
2011-01-11 19:18 - 2009-12-10 12:16 - 00918816 _____ () C:\Program Files (x86)\Hama\Common\RaWLAPI.dll
2010-05-04 15:36 - 2010-05-04 15:36 - 00970752 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 02145304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 07956504 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00342552 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00029208 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00128536 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2015-03-14 15:36 - 2015-03-14 15:36 - 16858288 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Microsoft:69ElgEF7iygl4sAe7O961m3q
AlternateDataStreams: C:\ProgramData\Microsoft:ZfmP3J0OhHEOv0FcWdGFrW
AlternateDataStreams: C:\Users\Jibi\Lokale Einstellungen:io0ixmDJZ5jbABAKuZ4Ktb
AlternateDataStreams: C:\Users\Jibi\Lokale Einstellungen:oVnqElZKfcCPatCKgwCPYBLEr00
AlternateDataStreams: C:\Users\Jibi\AppData\Local:io0ixmDJZ5jbABAKuZ4Ktb
AlternateDataStreams: C:\Users\Jibi\AppData\Local:oVnqElZKfcCPatCKgwCPYBLEr00
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Anwendungsdaten:io0ixmDJZ5jbABAKuZ4Ktb
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Anwendungsdaten:oVnqElZKfcCPatCKgwCPYBLEr00
AlternateDataStreams: C:\Users\Jibi\AppData\Local\DjJBtBcdu89:GDoD5RxXtm7M7QHNUX8F7tmsNA
AlternateDataStreams: C:\Users\Jibi\AppData\Local\dNJMUE2SBzD:u2YxZ8UuqYMS0BVHDHedfJM0
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Temporary Internet Files:4gSuiEdYVtWsBig0N2ymvN3aI
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Temporary Internet Files:jR4u6Rc8LPoZPKgCv8ljft

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Jibi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

7EC67C03D29E42C8B5CC (S-1-5-21-2430596823-3442958056-1693070999-1004 - Limited - Enabled)
Administrator (S-1-5-21-2430596823-3442958056-1693070999-500 - Administrator - Disabled)
Gast (S-1-5-21-2430596823-3442958056-1693070999-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2430596823-3442958056-1693070999-1002 - Limited - Enabled)
Jibi (S-1-5-21-2430596823-3442958056-1693070999-1000 - Administrator - Enabled) => C:\Users\Jibi

==================== Faulty Device Manager Devices =============

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Processor: Intel(R) Celeron(R) CPU E3400 @ 2.60GHz
Percentage of memory in use: 42%
Total physical RAM: 4095.24 MB
Available physical RAM: 2362.56 MB
Total Pagefile: 8188.67 MB
Available Pagefile: 6019.68 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:465.76 GB) (Free:93.68 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 3775115E)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Alt 26.03.2015, 10:35   #11
schrauber
/// the machine
/// TB-Ausbilder
 

WIN7 - PC langsam, Internetabbrüche, viele Befunde - Standard

WIN7 - PC langsam, Internetabbrüche, viele Befunde




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 27.03.2015, 00:39   #12
NoLove
 
WIN7 - PC langsam, Internetabbrüche, viele Befunde - Standard

WIN7 - PC langsam, Internetabbrüche, viele Befunde



Läuft in jenem Fall wieder flüssiger, vielen dank schon mal

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=1213e20208c97648bf705ceb883f4440
# engine=23094
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-03-26 03:17:19
# local_time=2015-03-26 04:17:19 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 53768899 179012889 0 0
# scanned=341546
# found=16
# cleaned=0
# scan_time=8999
sh=1268802D5952FCA12B7773468AC3DB79BDAD66F5 ft=1 fh=8cbade19ae4d7cac vn="Variante von Win32/4Shared.T evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\B1 Free Archiver\installer.exe.vir"
sh=D80123E6AC987CF995575868B56CDFBF9EF4DCC6 ft=1 fh=50275bc8e5a4a4a3 vn="Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Forbidden Duel\Gunz.exe"
sh=91E25C0E559F3ADB71DE828E5A9CDFDE3E8935A7 ft=1 fh=1b1b874fb1c78831 vn="Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Forbidden Duel\GunzLauncher.exe"
sh=CF5C38D61E9742980C8983DCB51F46C582FC85C9 ft=1 fh=5030f6078266cae1 vn="Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\ijji\ENGLISH\Gunz\Gunz.exe"
sh=261C2730BC3E466344CB93C1245C78F7951B8C5E ft=1 fh=38a35ccfed3ac690 vn="Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\EntityGaming Network\ArticGunZ\Gunz.exe"
sh=E5A3C100D2D0FD94482783AF2B2FF94CDFC9923F ft=1 fh=a0ddd0619a504a2e vn="Variante von Win32/Hao123.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\BaiDu\hao123inst.exe"
sh=64415FA6FF25F9943B9882D48B98D9CBCE1A4971 ft=1 fh=fb393e5a201064c9 vn="Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\HeroGamers\Gunz Beta\gunz.exe"
sh=F9E91AC299893D807D0C62FC271CFBE9C21914C4 ft=1 fh=ad7442ea028cc53b vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\Power Sound Editor Free\FreeOnlineRadioPlayerRecorder.exe"
sh=61B71BC4759715C444AD943747852B6F418DFBD9 ft=1 fh=a0ae22699c04ac55 vn="Variante von Win32/Injector.NMJ Trojaner" ac=I fn="C:\Qoobox\Quarantine\C\ProgramData\XxksWjWBdt0XuC\IJv6SoDIr.exe.vir"
sh=F2B555F04C85CAE909552B4D5B4C5EA5CD96FD14 ft=0 fh=0000000000000000 vn="Variante von Java/Exploit.CVE-2011-3544.BP Trojaner" ac=I fn="C:\Users\Jibi\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\3e57c383-572bcd01"
sh=1522AB4C510B94BA3D29F44F86980EB9F6067756 ft=0 fh=0000000000000000 vn="Variante von Java/Exploit.CVE-2011-3544.BP Trojaner" ac=I fn="C:\Users\Jibi\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\601fdb83-769d4617"
sh=BD92C8E681824C31736629085EE9F9CD8A84DFF4 ft=0 fh=0000000000000000 vn="Variante von Java/Exploit.CVE-2011-3544.BP Trojaner" ac=I fn="C:\Users\Jibi\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\1d17861-1fa3b604"
sh=0CC99B62CD56088496C3F72CD1E9EFF3B2E47A9C ft=0 fh=0000000000000000 vn="Variante von Java/Exploit.CVE-2011-3544.BP Trojaner" ac=I fn="C:\Users\Jibi\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\1c7583f5-4f7598e1"
sh=CB0CBA53366072785B0E30C66D410E133E13D5A0 ft=1 fh=68efb6649f09c452 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Jibi\Downloads\MSI Afterburner - CHIP-Installer.exe"
sh=D53CA1F19B28CFA1B9C3E362B82789397E7B8AA2 ft=1 fh=5ebef63faf55e674 vn="Variante von Win32/Injector.NIM Trojaner" ac=I fn="C:\_OTL\MovedFiles\01182012_063741\C_ProgramData\SmGIbGCGFJi\viylMPHb5k.exe"
sh=61B71BC4759715C444AD943747852B6F418DFBD9 ft=1 fh=a0ae22699c04ac55 vn="Variante von Win32/Injector.NMJ Trojaner" ac=I fn="C:\_OTL\MovedFiles\01182012_063741\C_ProgramData\XxksWjWBdt0XuC\IJv6SoDIr.exe"
         
Code:
ATTFilter
 Results of screen317's Security Check version 0.99.97  
 Windows 7 Service Pack 1 x64   
 Internet Explorer 10 Out of date! 
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Java 7 Update 21  
 Java version 32-bit out of Date! 
  Java 64-bit 8 Update 31  
 Adobe Flash Player 17.0.0.134  
 Mozilla Firefox (36.0.4) 
 Google Chrome (41.0.2272.101) 
 Google Chrome (41.0.2272.89) 
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Jibi (administrator) on JIBI-PC on 27-03-2015 00:36:08
Running from C:\Users\Jibi\Downloads
Loaded Profiles: Jibi (Available profiles: Jibi)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Windows\SysWOW64\ASGT.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\GPUTweak.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Realtek Semiconductor) C:\Windows\RAVCpl64.exe
(SoftPerfect Research) C:\Program Files\NetWorx\networx.exe
(Avid Technology, Inc.) C:\Windows\System32\M-AudioTaskBarIcon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Akamai Technologies, Inc.) C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILGE.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Users\Jibi\AppData\Local\RockMelt\Update\1.2.189.1\RockMeltCrashHandler.exe
(Hama GmbH & Co KG) C:\Program Files (x86)\Hama\Common\RaUI.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Akamai Technologies, Inc.) C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Avid Technology, Inc..) C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RAVCpl64.exe [6297088 2008-05-28] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [NetWorx] => C:\Program Files\NetWorx\networx.exe [4760464 2012-12-18] (SoftPerfect Research)
HKLM\...\Run: [M-Audio Taskbar Icon] => C:\Windows\system32\M-AudioTaskBarIcon.exe [798728 2010-12-07] (Avid Technology, Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-08-30] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\Video Capture Master\Filters\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [DigidesignMMERefresh] => C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe [81920 2011-08-11] (Avid Technology, Inc..)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [704512 2015-03-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [807696 2013-12-20] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [127792 2015-02-12] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [RockMelt Update] => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [136336 2012-02-04] (Google Inc.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3631448 2015-02-27] (Electronic Arts)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EPLTarget\P0000000000000002] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FILSHtray.lnk
ShortcutTarget: FILSHtray.lnk -> C:\Program Files (x86)\FILSHtray\FILSHtray.exe (FILSH Media GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hama Wireless LAN Utility.lnk
ShortcutTarget: Hama Wireless LAN Utility.lnk -> C:\Program Files (x86)\Hama\Common\RaUI.exe (Hama GmbH & Co KG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
Startup: C:\Users\Jibi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> {93D3B8AD-132C-4F50-ABFA-62FD82DBFACC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {5A39CCDF-55F5-45CB-9121-13364B8573DB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000 -> {5A39CCDF-55F5-45CB-9121-13364B8573DB} URL = 
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-05-25] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-05-25] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default
FF DefaultSearchEngine: Wikipedia (de)
FF Homepage: hxxp://www.t-online.de/
FF NetworkProxy: "backup.ftp", "202.147.198.217"
FF NetworkProxy: "backup.ftp_port", 8080
FF NetworkProxy: "backup.socks", "202.147.198.217"
FF NetworkProxy: "backup.socks_port", 8080
FF NetworkProxy: "backup.ssl", "202.147.198.217"
FF NetworkProxy: "backup.ssl_port", 8080
FF NetworkProxy: "ftp", "202.147.198.217"
FF NetworkProxy: "ftp_port", 8888
FF NetworkProxy: "http", "202.147.198.217"
FF NetworkProxy: "http_port", 8888
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "202.147.198.217"
FF NetworkProxy: "socks_port", 8888
FF NetworkProxy: "ssl", "202.147.198.217"
FF NetworkProxy: "ssl_port", 8888
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-14] ()
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2011-02-20] (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-05-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-05-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2852 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nppl3260.dll No File
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.46 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nppl3260.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1662 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nprpjplug.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.46 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nprpjplug.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Jibi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2011-11-08] (Skype Limited)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Jibi\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @talk.google.com/O1DPlugin -> C:\Users\Jibi\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-01-27] (Google)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @us-w1.rockmelt.com/RockMelt Update;version=8 -> C:\Users\Jibi\AppData\Local\RockMelt\Update\1.2.189.1\npRockMeltOneClick8.dll [2012-02-04] (RockMelt Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2011-05-04] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npijjiautoinstallpluginff.dll [2010-07-27] (NHN USA Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npijjiFFPlugin1.dll [2010-07-28] (NHN USA Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Jibi\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Jibi\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-01-27] (Google)
FF Extension: Firebug - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\firebug@software.joehewitt.com.xpi [2013-11-21]
FF Extension: ProxTube - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\ich@maltegoetz.de.xpi [2014-09-10]
FF Extension: ReloadEvery - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2013-04-11]
FF Extension: Pearl Crescent Page Saver Basic - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\{c151d79e-e61b-4a90-a887-5a46d38fba99}.xpi [2013-01-21]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.ver-filmes.com/
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll No File
CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\pdf.dll ()
CHR Plugin: (ijji Auto Install Plugin for Mozilla) - C:\Program Files (x86)\Mozilla Firefox\plugins\npijjiautoinstallpluginff.dll (NHN USA Inc.)
CHR Plugin: (ijji Web Launching Plugin for FF) - C:\Program Files (x86)\Mozilla Firefox\plugins\npijjiFFPlugin1.dll (NHN USA Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll No File
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Bing Bar) - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Jibi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Profile: C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-21]
CHR Extension: (Google Drive) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-21]
CHR Extension: (YouTube) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-21]
CHR Extension: (Adblock Plus) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-03-24]
CHR Extension: (Google Search) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-21]
CHR Extension: (IE Tab) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehijbfgiekmjfkfjpbkbammjbdenadd [2014-08-17]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-11]
CHR Extension: (Google Wallet) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-21]
CHR Extension: (Auto Refresh Plus) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilipfekkmncanaajkapbpancpelijih [2014-03-31]
CHR Extension: (Gmail) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-21]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [992504 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [184056 2015-02-12] (Avira Operations GmbH & Co. KG)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.)
R2 DigiRefresh; C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe [81920 2011-08-11] (Avid Technology, Inc..) [File not signed]
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)
R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [152640 2013-04-30] (SEIKO EPSON CORPORATION)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2011-01-14] (Macrovision Europe Ltd.) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4208208 2010-10-21] (INCA Internet Co., Ltd.) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-02-27] (Electronic Arts)
R2 RalinkRegistryWriter; C:\Program Files (x86)\Hama\Common\RaRegistry.exe [185632 2009-12-10] (Ralink Technology, Corp.)
R2 RalinkRegistryWriter64; C:\Program Files (x86)\Hama\Common\RaRegistry64.exe [212256 2009-12-10] (Ralink Technology, Corp.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2015x\RpcAgentSrv.exe [73200 2014-12-17] (SiSoftware) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132120 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-06] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [114448 2013-12-20] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-04-30] (DT Soft Ltd)
S3 E100B; C:\Windows\System32\DRIVERS\efe5b32e.sys [192256 2009-06-10] (Intel Corporation)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2013-07-02] (ASUSTeK Computer Inc.)
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 MAUSBFASTTRACK; C:\Windows\System32\DRIVERS\MAudioFastTrack.sys [187912 2010-12-07] (Avid Technology, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-03-17] (Malwarebytes Corporation)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4774 2012-03-06] (INCA Internet Co., Ltd.) [File not signed]
S3 NVFLASH; C:\Windows\system32\drivers\nvflash.sys [15648 2014-01-06] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2012-05-14] (Realtek Semiconductor Corporation                           )
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2015x\WNt600x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 dump_wmimmc; \??\C:\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-27 00:36 - 2015-03-27 00:36 - 00030710 _____ () C:\Users\Jibi\Downloads\FRST.txt
2015-03-26 13:38 - 2015-03-26 13:38 - 00852604 _____ () C:\Users\Jibi\Desktop\SecurityCheck.exe
2015-03-26 13:32 - 2015-03-26 13:32 - 02347384 _____ (ESET) C:\Users\Jibi\Downloads\esetsmartinstaller_deu.exe
2015-03-26 13:03 - 2013-07-02 16:29 - 00024824 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys
2015-03-25 14:44 - 2015-03-25 14:44 - 01388782 _____ (Thisisu) C:\Users\Jibi\Downloads\JRT.exe
2015-03-25 14:18 - 2015-03-25 14:42 - 00000000 ____D () C:\AdwCleaner
2015-03-25 14:12 - 2015-03-25 14:12 - 02168320 _____ () C:\Users\Jibi\Downloads\AdwCleaner_4.113.exe
2015-03-25 12:13 - 2015-03-26 13:38 - 00000261 _____ () C:\Users\Jibi\Desktop\bsafetest.txt
2015-03-25 07:48 - 2015-03-11 05:06 - 00943616 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-03-25 07:48 - 2015-03-11 05:06 - 00760832 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-03-25 07:48 - 2015-03-11 05:06 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-03-25 07:48 - 2015-03-11 05:06 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-03-25 07:48 - 2015-03-11 05:05 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-03-25 07:48 - 2015-03-11 05:05 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-03-25 07:48 - 2015-03-11 05:05 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-03-25 07:48 - 2015-03-11 05:02 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-03-24 11:33 - 2015-03-24 11:33 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Jibi\Downloads\mbam-setup-2.1.4.1018.exe
2015-03-22 16:50 - 2015-03-22 18:10 - 437338288 _____ () C:\Users\Jibi\Desktop\jibitetet.mp4
2015-03-22 15:56 - 2015-03-22 16:03 - 00257088 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.mp4.sfk
2015-03-22 13:55 - 2015-03-22 13:55 - 00038062 _____ () C:\ComboFix.txt
2015-03-22 13:22 - 2015-03-22 13:22 - 00001154 _____ () C:\Users\Jibi\Desktop\ComboFix - Verknüpfung.lnk
2015-03-22 13:21 - 2015-03-22 13:21 - 05615380 ____R (Swearware) C:\Users\Jibi\Downloads\ComboFix.exe
2015-03-22 13:11 - 2015-03-22 13:11 - 00001274 _____ () C:\Users\Jibi\Desktop\Revo Uninstaller.lnk
2015-03-22 13:11 - 2015-03-22 13:11 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-03-22 13:10 - 2015-03-22 13:10 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Jibi\Downloads\revosetup95.exe
2015-03-22 12:26 - 2015-03-22 12:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-21 16:12 - 2015-03-27 00:24 - 00000000 ____D () C:\Users\Jibi\Desktop\Virus
2015-03-21 16:09 - 2015-03-27 00:36 - 00000000 ____D () C:\FRST
2015-03-21 16:08 - 2015-03-21 16:08 - 00000540 _____ () C:\Users\Jibi\Downloads\defogger_disable.log
2015-03-21 16:08 - 2015-03-21 16:08 - 00000168 _____ () C:\Users\Jibi\defogger_reenable
2015-03-21 14:00 - 2015-03-21 14:00 - 02095616 _____ (Farbar) C:\Users\Jibi\Downloads\FRST64.exe
2015-03-21 14:00 - 2015-03-21 14:00 - 00380416 _____ () C:\Users\Jibi\Downloads\f9lghzg5.exe
2015-03-21 13:57 - 2015-03-21 13:57 - 00050477 _____ () C:\Users\Jibi\Downloads\Defogger.exe
2015-03-19 19:16 - 2015-03-22 18:42 - 00123648 _____ () C:\Users\Jibi\Desktop\aloholtet.vf
2015-03-19 19:16 - 2015-03-22 16:50 - 00123648 _____ () C:\Users\Jibi\Desktop\aloholtet.vf.bak
2015-03-18 19:38 - 2015-03-22 15:43 - 00000000 ____D () C:\Users\Jibi\Desktop\Alkohol Test
2015-03-17 13:07 - 2015-03-17 14:59 - 00000000 ____D () C:\Users\Jibi\Downloads\German Top 100 Single Charts 16.03.2015
2015-03-17 12:54 - 2015-03-17 13:07 - 911811482 _____ () C:\Users\Jibi\Downloads\German Top100 Single Charts 16.03.2015.rar
2015-03-16 13:25 - 2015-03-17 11:50 - 00000000 ____D () C:\Users\Jibi\Desktop\Wand
2015-03-14 18:54 - 2015-03-14 19:06 - 105310610 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.mp4
2015-03-14 18:23 - 2015-03-14 18:23 - 00000000 ____D () C:\Users\Jibi\Downloads\Neuer Ordner (2)
2015-03-14 18:05 - 2015-03-14 18:10 - 00279280 _____ () C:\Users\Jibi\Downloads\Conflikt_Beatz_-_Spiriduell_VR3_Beat_www.rappers.in.mp3.sfk
2015-03-13 12:03 - 2015-03-14 19:25 - 00069648 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.vf
2015-03-13 12:03 - 2015-03-14 18:53 - 00069648 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.vf.bak
2015-03-13 11:02 - 2015-03-13 11:05 - 00213832 _____ () C:\Users\Jibi\Desktop\jibitestetfb.MP3.sfk
2015-03-11 13:53 - 2015-02-20 05:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 13:53 - 2015-02-20 05:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 13:53 - 2015-02-20 04:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 13:53 - 2015-02-20 04:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 13:53 - 2015-02-03 04:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 13:53 - 2015-02-03 04:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 13:53 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 13:53 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 13:52 - 2015-02-03 04:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 13:52 - 2015-02-03 04:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 13:52 - 2015-02-03 04:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 13:52 - 2015-02-03 04:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 13:52 - 2015-02-03 04:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 13:52 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 13:52 - 2015-02-03 04:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 13:52 - 2015-02-03 04:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 13:52 - 2015-02-03 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 13:52 - 2015-02-03 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 13:52 - 2015-02-03 04:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 13:52 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 13:52 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 13:52 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 13:52 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 13:52 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 13:52 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 13:52 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 13:52 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 13:52 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 13:52 - 2015-02-03 03:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 13:52 - 2014-10-31 23:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 13:52 - 2014-06-28 01:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-03-11 13:52 - 2014-06-28 01:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-03-11 13:51 - 2015-03-06 06:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 13:51 - 2015-03-06 06:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 13:51 - 2015-03-06 06:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 13:51 - 2015-03-06 06:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 13:51 - 2015-03-06 06:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 13:51 - 2015-03-06 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 13:51 - 2015-03-06 06:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 13:51 - 2015-03-06 06:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 13:51 - 2015-03-06 06:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 13:51 - 2015-03-06 06:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 13:51 - 2015-03-06 06:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 13:51 - 2015-03-06 06:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 13:51 - 2015-03-06 06:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 13:51 - 2015-02-23 11:52 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 13:51 - 2015-02-23 11:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 13:51 - 2015-02-23 11:51 - 01409024 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 13:51 - 2015-02-23 11:51 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 13:51 - 2015-02-23 11:51 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 19301888 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 15410688 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 02656256 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 13:51 - 2015-02-23 11:49 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 13:51 - 2015-02-23 10:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 13:51 - 2015-02-23 09:51 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-03-11 13:51 - 2015-02-23 09:25 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2015-03-11 13:51 - 2015-02-21 06:31 - 01763328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 13:51 - 2015-02-21 06:31 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 13:51 - 2015-02-21 06:31 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 14380544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 13768704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 02864640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 13:51 - 2015-02-21 06:29 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 13:51 - 2015-02-21 06:29 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 13:51 - 2015-02-21 06:29 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 13:51 - 2015-02-21 06:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 13:51 - 2015-02-21 05:42 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-03-11 13:51 - 2015-02-21 05:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2015-03-11 13:51 - 2015-02-13 06:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 13:51 - 2015-02-13 06:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 13:51 - 2015-02-03 04:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 13:51 - 2015-02-03 04:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 13:51 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 13:51 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 13:51 - 2015-01-31 00:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 13:51 - 2015-01-17 03:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 13:51 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 13:50 - 2015-02-26 04:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 13:46 - 2015-02-04 04:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 13:46 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-10 19:16 - 2015-03-12 12:49 - 00091408 _____ () C:\Users\Jibi\Desktop\rage4.vf
2015-03-10 19:16 - 2015-03-12 12:48 - 00091408 _____ () C:\Users\Jibi\Desktop\rage4.vf.bak
2015-03-10 18:33 - 2015-03-10 18:34 - 18597681 _____ () C:\Users\Jibi\Desktop\kopfballmaster.mp4
2015-03-10 18:28 - 2015-03-12 12:21 - 00000000 ____D () C:\Users\Jibi\Desktop\Neuer Ordner (4)
2015-03-05 14:43 - 2015-03-05 14:54 - 123529920 _____ () C:\Users\Jibi\Desktop\ytmmrz.mp4
2015-03-05 14:29 - 2015-03-05 14:29 - 00030976 _____ () C:\Users\Jibi\Desktop\outronew.mp4.sfk
2015-03-05 14:25 - 2015-03-05 14:26 - 00125584 _____ () C:\Users\Jibi\Desktop\MVI_0331.MOV.sfk
2015-03-05 14:25 - 2015-03-05 14:26 - 00042608 _____ () C:\Users\Jibi\Desktop\MVI_0330.MOV.sfk
2015-03-05 14:23 - 2015-03-05 14:19 - 475796800 ____N () C:\Users\Jibi\Desktop\MVI_0331.MOV
2015-03-05 14:23 - 2015-03-05 14:15 - 155390932 ____N () C:\Users\Jibi\Desktop\MVI_0330.MOV
2015-03-05 13:22 - 2015-03-05 14:56 - 00050552 _____ () C:\Users\Jibi\Desktop\ytmyolo.vf
2015-03-05 13:22 - 2015-03-05 14:40 - 00049784 _____ () C:\Users\Jibi\Desktop\ytmyolo.vf.bak
2015-03-05 12:57 - 2015-03-05 12:58 - 00243856 _____ () C:\Users\Jibi\Desktop\ytmnews.MP3.sfk
2015-03-05 12:57 - 2015-03-05 12:57 - 00004704 _____ () C:\Users\Jibi\Desktop\Intro.mp4.sfk
2015-03-05 00:37 - 2015-03-17 23:59 - 00000000 ____D () C:\Users\Jibi\Desktop\BeGe
2015-03-04 17:35 - 2015-03-04 17:44 - 36873627 _____ () C:\Users\Jibi\Desktop\diagpromo.mp4
2015-03-04 16:07 - 2015-03-04 16:10 - 00044240 _____ () C:\Users\Jibi\Desktop\Diagnose.MP3.sfk
2015-03-04 15:52 - 2015-03-04 15:53 - 00168296 _____ () C:\Users\Jibi\Downloads\♩♫ Epic and Dramatic Trailer Music ♪♬ - Copyright and Royalty Free.mp3.sfk
2015-03-04 14:48 - 2015-03-04 16:25 - 00000000 ____D () C:\Users\Jibi\Desktop\Neuer Ordner (3)
2015-02-25 11:19 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-25 11:19 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-27 00:04 - 2014-03-21 17:14 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-27 00:03 - 2012-02-04 11:53 - 00000924 _____ () C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job
2015-03-27 00:01 - 2015-01-21 20:01 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job
2015-03-27 00:00 - 2015-01-21 20:00 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job
2015-03-27 00:00 - 2014-03-05 20:14 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job
2015-03-26 23:59 - 2015-01-21 19:59 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job
2015-03-26 23:58 - 2015-01-21 19:58 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job
2015-03-26 23:44 - 2012-06-14 12:43 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-26 23:08 - 2011-01-08 21:22 - 01875503 _____ () C:\Windows\WindowsUpdate.log
2015-03-26 13:35 - 2009-07-14 18:58 - 00699912 _____ () C:\Windows\system32\perfh007.dat
2015-03-26 13:35 - 2009-07-14 18:58 - 00149794 _____ () C:\Windows\system32\perfc007.dat
2015-03-26 13:35 - 2009-07-14 06:13 - 01622420 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-26 13:15 - 2009-07-14 05:45 - 00023072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-26 13:15 - 2009-07-14 05:45 - 00023072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-26 13:04 - 2012-11-25 17:39 - 00126397 _____ () C:\Windows\setupact.log
2015-03-26 13:03 - 2014-03-21 17:14 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-26 13:02 - 2015-02-20 00:04 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-03-26 13:02 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-26 02:00 - 2011-01-11 19:31 - 00000000 ____D () C:\Users\Jibi\AppData\Local\Adobe
2015-03-25 15:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-03-25 15:02 - 2014-12-12 21:10 - 00000000 ____D () C:\Windows\system32\appraiser
2015-03-25 15:02 - 2014-05-06 22:41 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-03-25 14:42 - 2014-07-25 11:47 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-25 13:55 - 2012-02-21 16:49 - 00000132 _____ () C:\Users\Jibi\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-03-25 12:11 - 2013-09-22 18:58 - 00000042 _____ () C:\Users\Jibi\Desktop\wpa.txt
2015-03-25 11:58 - 2012-02-04 11:53 - 00000872 _____ () C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job
2015-03-24 20:03 - 2012-10-25 08:34 - 00000000 ____D () C:\ProgramData\Origin
2015-03-24 19:48 - 2012-11-25 22:18 - 00277964 _____ () C:\Windows\PFRO.log
2015-03-24 13:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-03-24 11:34 - 2014-07-25 11:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-03-24 11:34 - 2014-07-25 11:42 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-03-24 11:34 - 2012-01-17 16:40 - 00001112 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-03-22 14:42 - 2012-07-11 06:46 - 00000000 ____D () C:\Users\Jibi\Documents\Vegas Movie Studio HD Platinum 11.0 Projekte
2015-03-22 13:56 - 2012-01-18 16:37 - 00000000 ____D () C:\Qoobox
2015-03-22 13:48 - 2012-01-18 16:37 - 00000000 ____D () C:\Windows\ERDNT
2015-03-22 13:48 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2015-03-22 13:46 - 2012-05-31 13:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-21 17:25 - 2014-08-17 22:30 - 00000000 ____D () C:\Users\Jibi\AppData\Local\IE Tab
2015-03-21 16:43 - 2014-09-19 13:55 - 00000530 _____ () C:\Users\Jibi\Desktop\wwe.txt
2015-03-21 16:08 - 2011-01-08 21:30 - 00000000 ____D () C:\Users\Jibi
2015-03-17 15:10 - 2013-01-24 14:43 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\Skype
2015-03-17 15:01 - 2011-01-13 19:55 - 00000000 ____D () C:\Users\Jibi\AppData\Local\Last.fm
2015-03-17 12:20 - 2015-02-23 03:40 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\FCBfan
2015-03-17 06:15 - 2014-07-25 11:42 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-03-17 06:15 - 2014-07-25 11:42 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-03-17 06:15 - 2012-01-17 16:40 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-03-14 17:59 - 2014-12-30 02:10 - 00000000 ____D () C:\Users\Jibi\Desktop\Werbungsvideo
2015-03-14 15:37 - 2012-06-14 12:43 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-03-14 15:36 - 2012-06-14 12:43 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-03-14 15:36 - 2011-05-13 21:29 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-14 15:31 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-13 19:49 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-03-11 19:59 - 2009-07-14 05:45 - 05361848 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-11 19:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-11 19:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-11 15:53 - 2012-03-18 17:12 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-11 15:53 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2015-03-11 15:46 - 2013-08-15 01:07 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-11 15:37 - 2011-01-18 11:24 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-06 13:15 - 2013-08-19 13:26 - 00001974 _____ () C:\Users\Jibi\Desktop\amer.txt
2015-03-05 11:25 - 2014-10-15 08:43 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-05 11:25 - 2013-08-21 21:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-03-05 11:25 - 2013-08-21 21:46 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-03-04 11:09 - 2013-08-21 22:03 - 00044088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-03-04 11:09 - 2013-08-21 21:46 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-03-04 11:09 - 2013-08-21 21:46 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-02-27 12:55 - 2013-01-28 09:46 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\TS3Client
2015-02-27 11:56 - 2012-10-25 08:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-02-27 11:56 - 2012-10-25 08:33 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-02-26 10:22 - 2015-02-22 15:36 - 00000000 ____D () C:\Users\Jibi\Desktop\Dietrich Drehtag

==================== Files in the root of some directories =======

2013-11-21 10:25 - 2013-11-21 10:25 - 4216840 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\vcredist.exe
2012-02-21 16:49 - 2015-03-25 13:55 - 0000132 _____ () C:\Users\Jibi\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-02-15 21:45 - 2014-12-12 14:11 - 14397440 _____ () C:\Users\Jibi\AppData\Roaming\Sandra.mdb
2014-04-02 11:03 - 2014-04-02 11:03 - 0001456 _____ () C:\Users\Jibi\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2012-11-26 06:55 - 2015-02-09 00:00 - 0005120 _____ () C:\Users\Jibi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Some content of TEMP:
====================
C:\Users\Jibi\AppData\Local\Temp\avgnt.exe
C:\Users\Jibi\AppData\Local\Temp\Quarantine.exe
C:\Users\Jibi\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-25 15:42

==================== End Of Log ============================
         
--- --- ---

--- --- ---

Alt 27.03.2015, 00:40   #13
NoLove
 
WIN7 - PC langsam, Internetabbrüche, viele Befunde - Standard

WIN7 - PC langsam, Internetabbrüche, viele Befunde



Code:
ATTFilter
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Jibi at 2015-03-27 00:37:15
Running from C:\Users\Jibi\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (x32 Version: 9.01.513.58212 - ABBYY) Hidden
Adobe After Effects CS6 (HKLM-x32\...\{4817D846-700B-474E-A31B-80892B3E92E3}) (Version: 11 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2 - Adobe Systems Incorporated)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Photoshop CS3 (HKLM-x32\...\Adobe_5f143314a5d434c8511097393d17397) (Version: 10.0 - Adobe Systems Incorporated)
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
Akamai NetSession Interface (HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Apple Application Support (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.6.8.3 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.6.8.3 - ASUSTek COMPUTER INC.) Hidden
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.026 - ASUSTek Computer Inc.)
Avid Pro Tools SE 8.0.3 (HKLM-x32\...\{371F27A1-9502-4762-AE97-1C1938B21055}) (Version: 8.0.3 - Digidesign, ein Geschäftsbereich von Avid Technology, Inc.)
Avira (HKLM-x32\...\{d9ed6dcf-6bfc-4fbb-802e-81dd5b767d6e}) (Version: 1.1.32.25147 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.32.25147 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 15.0.8.656 - Avira)
Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C1801}) (Version: 12.24.1.234 - APN, LLC)
Bing Bar (HKLM-x32\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation)
BlueStacks Notification Center (HKLM-x32\...\{44181DF6-2751-48C7-B918-72F14508F127}) (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden
Camtasia Studio 7 (HKLM-x32\...\{DE042823-C359-4B87-B66B-308057E8B6AF}) (Version: 7.0.1 - TechSmith Corporation)
CANON iMAGE GATEWAY MyCamera Download Plugin (HKLM-x32\...\MyCamera Download Plugin) (Version: 3.1.1.2 - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.9.0.9 - Canon Inc.)
Canon MOV Decoder (HKLM-x32\...\Canon MOV Decoder) (Version: 1.8.0.7 - Canon Inc.)
Canon MOV Encoder (HKLM-x32\...\Canon MOV Encoder) (Version: 1.6.0.1 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.7.0.4 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.10 (HKLM-x32\...\DPP) (Version: 3.10.2.0 - Canon Inc.)
Canon Utilities EOS Sample Music (HKLM-x32\...\EOS Sample Music) (Version: 1.0.0.204 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.10.2.0 - Canon Inc.)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (HKLM-x32\...\EOS Video Snapshot Task) (Version: 1.0.0.10 - Canon Inc.)
Canon Utilities Movie Uploader for YouTube (HKLM-x32\...\MovieUploaderForYouTube) (Version: 1.2.0.7 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.9.0.0 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.7.0.24 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.5.0.9 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 3.24 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.4.1.3341 - CDBurnerXP)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
CPUID CPU-Z 1.71.1 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
Druckerdeinstallation für EPSON XP-215 217 Series (HKLM\...\EPSON XP-215 217 Series) (Version:  - SEIKO EPSON Corporation)
DVD Architect Studio 5.0 (HKLM-x32\...\{04DF4A51-DE2A-11E0-9AB5-F04DA23A5C58}) (Version: 5.0.156 - Sony)
Epson Easy Photo Print 2 (HKLM-x32\...\{A02D7029-C4EF-44C1-9FD4-C0D3CA518113}) (Version: 2.2.4.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8A17C27D-0325-400C-8AA9-DAA6B16CBD74}) (Version: 2.40.0009 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON SX130 Series Printer Uninstall (HKLM\...\EPSON SX130 Series) (Version:  - SEIKO EPSON Corporation)
Epson-Handbücher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.0.0.0 - SEIKO EPSON CORPORATION)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Facebook Video Calling 1.0.0.7339 (HKLM-x32\...\{EEA5F1E7-E934-4F4E-85C8-8FEC9CCE525C}) (Version: 1.0.7339 - Skype Limited)
Facebook Video Calling 1.0.0.8953 (HKLM-x32\...\{1D7CE340-70C3-4848-BCCF-215950328A4C}) (Version: 1.0.8953 - Skype Limited)
ffdshow [rev 2975] [2009-05-28] (HKLM-x32\...\ffdshow_is1) (Version: 1.0 - )
FILSHtray (HKLM-x32\...\{0844CC2A-512E-4BA1-872B-02887E7A2672}) (Version: 0.12 - FILSH Media GmbH)
FILSHtray (HKLM-x32\...\{5928359F-BF46-4646-BF19-B64E55171EB5}) (Version: 0.12 - FILSH Media GmbH)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)
FormatFactory 3.3.2.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.2.0 - Format Factory)
Foxit Reader (HKLM-x32\...\Foxit Reader) (Version: 4.3.1.118 - Foxit Corporation)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free AVI Video Converter version 5.0.24.426 (HKLM-x32\...\Free AVI Video Converter_is1) (Version: 5.0.24.426 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.9.32 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version:  - DVDVideoSoft Limited.)
FUSSBALL MANAGER 13 (HKLM-x32\...\{80AF0300-866F-400F-A350-D53E3C3E34E0}) (Version: 1.0.3.0 - Electronic Arts)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{C77CC230-7417-3F01-B70D-52583DC9FEC9}) (Version: 5.40.2.0 - Google)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GPUTweakStreaming (HKLM-x32\...\InstallShield_{D2A41AA7-4313-43D5-AA39-7E3FBBE0556D}) (Version: 1.0.3.5 - ASUS)
GPUTweakStreaming (x32 Version: 1.0.3.5 - ASUS) Hidden
Hama Wireless LAN Adapter (HKLM-x32\...\{E91E8912-769D-42F0-8408-0E329443BABC}) (Version: 10.1.0 - Hama)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)
Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.8.13 - PACE Anti-Piracy)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 7 Update 21 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217021FF}) (Version: 7.0.210 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version:  - Last.fm)
Layer III Audio Encoder (HKLM-x32\...\Layer III Audio Encoder 1.0.70111) (Version: 1.0.70111 - Elecard)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
MAGIX Audio Cleaning Lab 2013 (HKLM-x32\...\MAGIX_{97E2116F-CC11-4EDA-B179-78CB6A89D836}) (Version: 19.0.0.10 - MAGIX AG)
MAGIX Audio Cleaning Lab 2013 (Version: 19.0.0.10 - MAGIX AG) Hidden
MAGIX Music Maker 17 Premium Download Version (HKLM-x32\...\MAGIX_MSI_mm17dlx) (Version: 17.0.0.16 - MAGIX AG)
MAGIX Music Maker 17 Premium Download Version (x32 Version: 17.0.0.16 - MAGIX AG) Hidden
MAGIX Screenshare (HKLM-x32\...\{DFDD2913-557D-4EB5-8745-47749E521760}) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Screenshare 4.3.6.1987 (D) (HKLM-x32\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Speed burnR (MSI) (HKLM-x32\...\MAGIX_{7F4DE580-F810-431C-8730-34F6CD89C4F6}) (Version: 7.0.2.6 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
M-Audio FastTrack Driver 6.0.6 (x64) (HKLM\...\{91A8C38A-0239-11E0-9658-189EDFD72085}) (Version: 6.0.6 - M-Audio)
Media Player Codec Pack 4.0.1 (HKLM-x32\...\Media Player - Codec Pack) (Version:  - Media Player Codec Pack)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.5128.5002 - Microsoft Corporation)
Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
MorphVOX Pro (HKLM-x32\...\{DB2B4DA8-595D-42A1-A1AF-8AF654C18D54}) (Version: 4.4.5 - Screaming Bee)
Mozilla Firefox 36.0.4 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0.4 (x86 de)) (Version: 36.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.5 - F.J. Wechselberger)
NetWorx 5.2.7 (HKLM\...\NetWorx_is1) (Version:  - Softperfect Research)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.1.2 - )
NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
OpenOffice.org 3.2 (HKLM-x32\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)
Origin (HKLM-x32\...\Origin) (Version: 9.0.11.77 - Electronic Arts, Inc.)
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.0 - Frank Heindörfer, Philip Chinery)
photoFXlab (HKLM-x32\...\photoFXlab) (Version: 1.2.6 - Topaz Labs)
PhotoResampling 12.1 (HKLM-x32\...\PhotoResampling_is1) (Version:  - )
Power Sound Editor Free (HKLM-x32\...\Power Sound Editor Free) (Version:  - PowerSE Studio Inc.)
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
QuickTime Alternative 2.8.0 (HKLM-x32\...\QuicktimeAlt_is1) (Version: 2.8.0 - )
Real Alternative 1.8.4 Lite (HKLM-x32\...\RealAlt_is1) (Version: 1.8.4 - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.61.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version:  - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RockMelt (HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\RockMelt) (Version: 0.16.91.483 - RockMelt, Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SHIELD Streaming (Version: 3.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.18.9 - NVIDIA Corporation) Hidden
SiSoftware Sandra Lite 2015x (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2496}_is1) (Version: 21.15.2015.1 - SiSoftware)
Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
Software Updater (HKLM-x32\...\{FA7EE274-7370-43B7-9A45-A39B17CCCDC5}) (Version: 4.3.3 - SEIKO EPSON CORPORATION)
Sony Ericsson Themes Creator 4.16.2.6 (HKLM-x32\...\Sony Ericsson Themes Creator) (Version: 4.16.2.6 - Sony Ericsson Mobile Communications AB)
Sound Forge Audio Studio 10.0 (HKLM-x32\...\{0AA0DA00-A1D3-11E0-B9A9-005056C00008}) (Version: 10.0.176 - Sony)
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version:  - Obsidian Entertainment)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
Topaz Adjust 5 (HKLM-x32\...\Topaz Adjust 5) (Version: 5.0.1 - Topaz Labs, LLC)
Topaz B&W Effects (HKLM-x32\...\Topaz BW Effects 2) (Version: 2.1.0 - Topaz Labs, LLC)
Topaz Clarity (HKLM-x32\...\Topaz Clarity) (Version: 1.0.0 - Topaz Labs, LLC)
Topaz Clean 3 (HKLM-x32\...\Topaz Clean 3) (Version: 3.0.2 - Topaz Labs, LLC)
Topaz DeJpeg 4 (HKLM-x32\...\Topaz DeJpeg 4) (Version: 4.0.2 - Topaz Labs, LLC)
Topaz DeNoise 5 (HKLM-x32\...\Topaz DeNoise 5) (Version: 5.0.1 - Topaz Labs, LLC)
Topaz Detail 3 (HKLM-x32\...\Topaz Detail 3) (Version: 3.1.0 - Topaz Labs, LLC)
Topaz Fusion Express 2 (HKLM-x32\...\Topaz Fusion Express 2) (Version: 2.1.3 - Topaz Labs, LLC)
Topaz InFocus (HKLM-x32\...\Topaz InFocus) (Version: 1.0.0 - Topaz Labs, LLC)
Topaz Lens Effects (HKLM-x32\...\Topaz Lens Effects) (Version: 1.2.0 - Topaz Labs, LLC)
Topaz ReMask 3 (HKLM-x32\...\Topaz ReMask 3) (Version: 3.2.1 - Topaz Labs, LLC)
Topaz Simplify 4 (HKLM-x32\...\Topaz Simplify 4) (Version: 4.0.0 - Topaz Labs, LLC)
Topaz Star Effects (HKLM-x32\...\Topaz Star Effects) (Version: 1.1.0 - Topaz Labs, LLC)
TP-LINK TL-WN821N Driver (HKLM-x32\...\{26B52E5B-1620-4676-9B46-B6C56B8105CE}) (Version: 1.2.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.2.1 - TP-LINK)
Uninstall 1.0.0.1 (HKLM-x32\...\Uninstall_is1) (Version:  - )
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vegas Movie Studio HD Platinum 11.0 (HKLM-x32\...\{DA00F140-1C03-11E1-AE47-F04DA23A5C58}) (Version: 11.0.283 - Sony)
VLC media player 1.1.5 (HKLM-x32\...\VLC media player) (Version: 1.1.5 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version:  - )
YGOPro DevPro Version 1.9.2r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.2r2 - YGOPro DevPro Online)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{67F2A879-82D5-4A6D-8CC5-FFB3C114B69D}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\program\so_activex_x64.dll ()
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\ooofiltproxy_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File

==================== Restore Points  =========================

25-03-2015 14:59:01 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2015-03-22 13:44 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {148B9FF8-AD9B-4939-A971-E4651FF9C5E8} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2014-03-25] (ASUSTek Computer Inc.)
Task: {1D7CE3C9-2B2A-47EB-A828-A90FDAAB8D28} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe [2014-03-05] (Google Inc.)
Task: {30973219-71E8-43B4-A613-CDB938E98CA9} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {3410C2E5-7288-4C9C-81CF-B47892E0D4D3} - System32\Tasks\{A84C457A-CCAC-4B7E-8B48-6EB6B2C86990} => pcalua.exe -a C:\Users\Jibi\Downloads\ArticGunZ_Installer_23052014.exe -d C:\Users\Jibi\Downloads
Task: {39FFD13A-E76D-4D6C-AAFC-D19A68636283} - System32\Tasks\AutoKMSCustom => C:\Windows\AutoKMS\AutoKMS.exe [2012-03-19] ()
Task: {3EAA0B57-E774-44D5-B95B-E1910FD2882C} - System32\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {51488CC2-CE57-49D5-86EC-80F29FD1177D} - System32\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {55A13CFE-6A8F-4125-B0BA-19F43534FDAE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Task: {6B44A402-03E6-49A1-AAC7-2DD228FA33DE} - System32\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {7336D0CE-6C96-47AD-96F5-4F62EEC33A72} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-21] (Google Inc.)
Task: {75A3A52B-31A2-4BC4-A6B7-9EC07DFC5E40} - System32\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-02-04] (Google Inc.)
Task: {7E4BC6EE-C068-4C77-B407-D887AC9D29BA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-10-24] (Piriform Ltd)
Task: {8E65CF69-13EF-42C8-8CBB-7EA35F5C9DC3} - System32\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-02-04] (Google Inc.)
Task: {91DE9A25-CE2D-48F5-A26D-EAFAE27F9485} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-14] (Adobe Systems Incorporated)
Task: {965DE61A-2096-40CB-8DF5-A9E5C25CA850} - System32\Tasks\AdobeAAMUpdater-1.0-Jibi-PC-Jibi => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {CB2CEECB-52A7-4319-ABC6-5408D6B5E831} - System32\Tasks\FCBfan => C:\Users\Jibi\AppData\Roaming\FCBfan\fcbfan.exe
Task: {CF7CBD1F-0A14-4E15-8B9F-1C3EF186A44B} - System32\Tasks\{88AEA439-7C97-48A7-AA75-B6210354059D} => pcalua.exe -a C:\Users\Jibi\Downloads\ZeusProInstall.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {DE5D4799-3376-4F3C-9CAC-5E1E015429F5} - System32\Tasks\{AD781ADF-B570-4985-B48C-4E5EECEAB2AF} => pcalua.exe -a C:\Users\Jibi\AppData\Local\Temp\Temp1_animake.zip\SETUP.EXE
Task: {DF6E8E9A-8CE7-40B7-8376-72755C7A6EFA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe [2014-03-05] (Google Inc.)
Task: {E28BEE1B-F9B1-4331-8B70-79DB6480C3E0} - System32\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {EC7F474B-97F6-4C43-A443-4CEA64A39830} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-21] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE:/EXE:{35651874-80E9-4EE7-A1F0-3E21ADA902D7} /F:UpdateSYSTEM
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE:/EXE:{D45E6B82-C3DA-4F6E-9045-2208BD7865C1} /F:UpdateSYSTEM
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe
Task: C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-02-20 00:03 - 2014-07-02 19:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-02-20 18:07 - 2005-03-12 00:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll
2011-01-14 05:58 - 2010-03-15 11:28 - 00052224 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2011-07-18 22:04 - 2011-07-18 22:04 - 00301568 _____ () C:\Program Files (x86)\Notepad++\NppShell_04.dll
2012-01-17 11:24 - 2012-01-17 11:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2013-05-09 11:29 - 2011-09-17 11:12 - 00664576 _____ () C:\Program Files\NetWorx\sqlite.dll
2014-07-14 15:25 - 2014-07-14 15:25 - 00278528 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Vender.dll
2014-06-16 17:25 - 2014-06-16 17:25 - 00053248 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Exeio.dll
2011-01-11 19:18 - 2009-12-10 12:16 - 00918816 _____ () C:\Program Files (x86)\Hama\Common\RaWLAPI.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 02145304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 07956504 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00342552 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00029208 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00128536 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2010-05-04 15:36 - 2010-05-04 15:36 - 00970752 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Microsoft:69ElgEF7iygl4sAe7O961m3q
AlternateDataStreams: C:\ProgramData\Microsoft:ZfmP3J0OhHEOv0FcWdGFrW
AlternateDataStreams: C:\Users\Jibi\Lokale Einstellungen:io0ixmDJZ5jbABAKuZ4Ktb
AlternateDataStreams: C:\Users\Jibi\Lokale Einstellungen:oVnqElZKfcCPatCKgwCPYBLEr00
AlternateDataStreams: C:\Users\Jibi\AppData\Local:io0ixmDJZ5jbABAKuZ4Ktb
AlternateDataStreams: C:\Users\Jibi\AppData\Local:oVnqElZKfcCPatCKgwCPYBLEr00
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Anwendungsdaten:io0ixmDJZ5jbABAKuZ4Ktb
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Anwendungsdaten:oVnqElZKfcCPatCKgwCPYBLEr00
AlternateDataStreams: C:\Users\Jibi\AppData\Local\DjJBtBcdu89:GDoD5RxXtm7M7QHNUX8F7tmsNA
AlternateDataStreams: C:\Users\Jibi\AppData\Local\dNJMUE2SBzD:u2YxZ8UuqYMS0BVHDHedfJM0
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Temporary Internet Files:4gSuiEdYVtWsBig0N2ymvN3aI
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Temporary Internet Files:jR4u6Rc8LPoZPKgCv8ljft

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Jibi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

7EC67C03D29E42C8B5CC (S-1-5-21-2430596823-3442958056-1693070999-1004 - Limited - Enabled)
Administrator (S-1-5-21-2430596823-3442958056-1693070999-500 - Administrator - Disabled)
Gast (S-1-5-21-2430596823-3442958056-1693070999-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2430596823-3442958056-1693070999-1002 - Limited - Enabled)
Jibi (S-1-5-21-2430596823-3442958056-1693070999-1000 - Administrator - Enabled) => C:\Users\Jibi

==================== Faulty Device Manager Devices =============

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/27/2015 00:24:28 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/27/2015 00:00:38 AM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/26/2015 11:00:55 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/26/2015 10:00:55 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/26/2015 09:00:53 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/26/2015 08:00:46 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/26/2015 07:00:55 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/26/2015 06:00:50 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/26/2015 05:01:00 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/26/2015 04:35:43 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".


System errors:
=============
Error: (03/26/2015 01:05:27 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (03/26/2015 01:02:58 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (03/26/2015 01:02:53 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎26.‎03.‎2015 um 02:23:15 unerwartet heruntergefahren.

Error: (03/25/2015 03:04:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SSDP-Suche" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (03/25/2015 03:04:24 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst SSDP-Suche erreicht.

Error: (03/25/2015 03:02:33 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (03/25/2015 03:02:15 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126


Microsoft Office Sessions:
=========================
Error: (03/27/2015 00:24:28 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (03/27/2015 00:00:38 AM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/26/2015 11:00:55 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/26/2015 10:00:55 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/26/2015 09:00:53 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/26/2015 08:00:46 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/26/2015 07:00:55 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/26/2015 06:00:50 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/26/2015 05:01:00 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques

Error: (03/26/2015 04:35:43 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"c:\program files (x86)\Last.fm\ext_skypenotify.dll


==================== Memory info =========================== 

Processor: Intel(R) Celeron(R) CPU E3400 @ 2.60GHz
Percentage of memory in use: 44%
Total physical RAM: 4095.24 MB
Available physical RAM: 2267.64 MB
Total Pagefile: 8188.67 MB
Available Pagefile: 5727.85 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:465.76 GB) (Free:94.98 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive f: (TOSHIBA EXT) (Fixed) (Total:931.5 GB) (Free:885.9 GB) exFAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 3775115E)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: CEE787BB)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Alt 27.03.2015, 18:59   #14
schrauber
/// the machine
/// TB-Ausbilder
 

WIN7 - PC langsam, Internetabbrüche, viele Befunde - Standard

WIN7 - PC langsam, Internetabbrüche, viele Befunde



Java updaten.


Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
Emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.







Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
Combofix deinstallieren
  • Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  • Drücke bitte die + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
  • Klicke auf OK.
    Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
  • Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte DelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen.


Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:

Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie .
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu WIN7 - PC langsam, Internetabbrüche, viele Befunde
abbrüche, delta chrome toolbar entfernen, delta toolbar entfernen, pricegong 2.6.11 entfernen, pup.bprotector, pup.optional.babsolution.a, pup.optional.bitguard.a, pup.optional.bprotector.a, pup.optional.browserdefender.a, pup.optional.buenosearch.a, pup.optional.conduit.a, pup.optional.crossrider.a, pup.optional.crx.a, pup.optional.datamngr.a, pup.optional.delta, pup.optional.dlclient.a, pup.optional.ibupdater.a, pup.optional.installcore.a, pup.optional.installrex, pup.optional.keepmysearch.a, pup.optional.mediatech.a, pup.optional.meingutscheincode.a, pup.optional.onlysearch, pup.optional.opencandy, pup.optional.softonic.a, pup.optional.speedtestanalysis.a



Ähnliche Themen: WIN7 - PC langsam, Internetabbrüche, viele Befunde


  1. AdwCleaner meldet mehrere Befunde - Pokki
    Plagegeister aller Art und deren Bekämpfung - 20.08.2015 (7)
  2. Win7 viele Bluescreens
    Alles rund um Windows - 27.07.2015 (12)
  3. Win7: Trojan.VBS.Autorun.ADK wurde von Antivir nicht erkannt. Oeffnet viele Kommandozeilenfenster mit Admin-Zugriffsanfrage
    Log-Analyse und Auswertung - 25.05.2015 (25)
  4. Win7: Regin ? viele Funde mit LOKI, akute Paranoia angebracht?
    Log-Analyse und Auswertung - 06.03.2015 (11)
  5. Befunde durch mein Internet Security Programm
    Log-Analyse und Auswertung - 26.02.2015 (4)
  6. Spontane Internetabbrüche (Windows 7)
    Netzwerk und Hardware - 13.12.2014 (16)
  7. Virus? Internetabbrüche, rechner extrem langsam windows8.1
    Plagegeister aller Art und deren Bekämpfung - 25.11.2014 (3)
  8. Avast StartUpScan hat 15 Befunde gemeldet
    Log-Analyse und Auswertung - 08.03.2014 (8)
  9. Viele Malwares auf meinem Laptop Win7
    Log-Analyse und Auswertung - 06.03.2014 (1)
  10. Win7-64 Malwarebytes viele Funde, Snapdo
    Log-Analyse und Auswertung - 19.01.2014 (11)
  11. Internetabbrüche alle 5-6 Minuten ( regelmäßig)
    Alles rund um Windows - 18.12.2013 (5)
  12. Internetabbrüche wahrscheinlich durch Virus
    Log-Analyse und Auswertung - 05.12.2013 (15)
  13. seltsame internetabbrüche !
    Plagegeister aller Art und deren Bekämpfung - 08.09.2013 (27)
  14. More for you, wie bekomme ich diese Werbung weg? Virus? 26 Befunde?
    Log-Analyse und Auswertung - 16.10.2012 (21)
  15. PC extrem langsam, viele Denkpausen
    Log-Analyse und Auswertung - 05.08.2011 (30)
  16. System langsam, zu viele Prozesse
    Log-Analyse und Auswertung - 24.01.2011 (28)
  17. PC wird langsam & zu viele Svchost :(
    Log-Analyse und Auswertung - 02.02.2009 (16)

Zum Thema WIN7 - PC langsam, Internetabbrüche, viele Befunde - Hallo, hatte die letzten Tage vermehrt Probleme mit dem PC. Der PC war sehr langsam / hat keine Leistung gebracht, die Internet-Verbindung wurde ohne ersichtlichen Grund getrennt (WPA-Schlüssel musste neu - WIN7 - PC langsam, Internetabbrüche, viele Befunde...
Archiv
Du betrachtest: WIN7 - PC langsam, Internetabbrüche, viele Befunde auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.