Hi

Ich habe folgendes Problem: Nach dem Start des Rechners öffnet sich die Systemsteuerung mit dem Unterpunkt System von alleine.

Ich wäre dankbar wenn mal schnell jemand drüber schauen könnte:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-05-2015
Ran by julian at 2015-06-01 21:17:35
Running from C:\Users\julian\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3484087542-3240090288-3349016086-500 - Administrator - Disabled)
Gast (S-1-5-21-3484087542-3240090288-3349016086-501 - Limited - Disabled)
julian (S-1-5-21-3484087542-3240090288-3349016086-1000 - Administrator - Enabled) => C:\Users\julian

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-3484087542-3240090288-3349016086-1000\...\uTorrent) (Version: 3.4.3.40298 - BitTorrent Inc.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros)
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5961 - AVG Technologies)
AVG 2015 (Version: 15.0.4354 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.5961 - AVG Technologies) Hidden
AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.1.0.411 - AVG Technologies)
BitTorrent (HKU\S-1-5-21-3484087542-3240090288-3349016086-1000\...\BitTorrent) (Version: 7.9.3.40299 - BitTorrent Inc.)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.14.4604 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{01961AE4-2F93-408B-AAED-AC582C4F5059}) (Version: 0.9.14.4604 - BlueStack Systems, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Hex-Editor MX (HKLM-x32\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2993 - Intel Corporation)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
No-IP DUC (HKLM-x32\...\NoIPDUC) (Version: 4.1.0 - Vitalwerks Internet Solutions LLC)
Oracle VM VirtualBox 4.3.24 (HKLM\...\{15E093DF-951E-46CB-B3EC-E1287E7A2319}) (Version: 4.3.24 - Oracle Corporation)
PeerBlock 1.2 (r693) (HKLM\...\{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.2.0.693 - PeerBlock, LLC)
Process Hacker 2.35 (r5898) (HKLM\...\Process_Hacker2_is1) (Version: 2.35.0.5898 - wj32)
Resource Hacker Version 3.6.0 (HKLM-x32\...\ResourceHacker_is1) (Version:  - )
Sandboxie 4.16 (64-bit) (HKLM\...\Sandboxie) (Version: 4.16 - Sandboxie Holdings, LLC)
Skype™ 7.4 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.4.102 - Skype Technologies S.A.)
SlimDrivers (HKLM-x32\...\{03E312F7-8697-4BC4-A90F-33D34EECE18C}) (Version: 2.2.44488 - SlimWare Utilities, Inc.)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3484087542-3240090288-3349016086-1000_Classes\CLSID\{01E9FAE9-3819-4dd9-B1D9-998A1C62D1F8}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3484087542-3240090288-3349016086-1000_Classes\CLSID\{25815CC0-43F4-3C75-8C3A-A139D9ADE740}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

==================== Restore Points =========================

20-05-2015 15:35:59 Windows Update
26-05-2015 14:35:10 Gerätetreiber-Paketinstallation: ClockworkMod

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {26A12C05-C1FE-47A2-9B19-64B79D9C0F60} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-27] (Google Inc.)
Task: {6C9AC9D4-9621-4067-A6E5-D86F89A14564} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-27] (Google Inc.)
Task: {E93AC64D-E885-4A8F-996D-4D412331EB36} - System32\Tasks\SlimDrivers Startup => C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe [2015-01-28] (SlimWare Utilities, Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SlimDrivers Startup.job => C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe

==================== Loaded Modules (Whitelisted) ==============

2015-02-27 22:00 - 2015-03-08 19:30 - 00620056 ____N () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
2015-02-27 22:00 - 2015-02-27 22:00 - 00159768 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\loggingserver.exe
2015-02-27 21:13 - 2000-01-01 02:00 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2015-03-03 19:46 - 2015-03-03 19:46 - 00004096 _____ () C:\Users\julian\AppData\Local\Microsoft\Windows Sidebar\Gadgets\TechnoBaseFM.Gadget\TechnoBaseFMGadget.dll
2015-02-27 22:00 - 2015-03-08 19:30 - 03033112 _____ () C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
2015-02-27 22:00 - 2015-02-27 22:00 - 00519704 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\log4cplusU.dll
2015-02-27 22:00 - 2015-02-27 22:00 - 01718808 ____N () C:\Program Files (x86)\AVG Web TuneUp\TBAPI.dll
2015-02-27 22:00 - 2015-03-08 19:30 - 40630296 _____ () C:\Program Files (x86)\AVG Web TuneUp\libcef.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\29092665.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\29092665.sys => ""="Driver"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3484087542-3240090288-3349016086-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\julian\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^julian^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^7ca6a7fec2df0d82a777ae67fbedc9eb.exe => C:\Windows\pss\7ca6a7fec2df0d82a777ae67fbedc9eb.exe.Startup
MSCONFIG\startupreg: 7ca6a7fec2df0d82a777ae67fbedc9eb => "C:\Users\julian\AppData\Local\Temp\explorer.exe" ..

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{D742777A-3A32-419A-B986-016A773A68D8}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{B7A0145F-5FF7-4D70-8D26-7A03E9E7DB20}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{BED968D2-8CD6-498E-90D5-239710379348}] => (Allow) C:\Users\julian\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{D3FCBD2D-1FE6-4250-90B4-A11DED7A477B}] => (Allow) C:\Users\julian\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{FF404719-E2B2-42F9-968C-81D71AAD5516}] => (Allow) C:\Users\julian\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7E7A4AF4-BE97-440E-8A57-4D1206AF7E8C}] => (Allow) C:\Users\julian\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{AFF53B73-344E-404C-BAB9-292337AC6503}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{C5F37106-BA95-4ED3-85C1-4291BAAB1AED}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [UDP Query User{7B49886E-C05E-4E70-90EF-586638766CD7}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [{DE83F2CC-2F1F-4F9A-B572-329F51BCC59B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{2CAF4FA2-B5D7-4067-876B-C5911BD77AC6}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
FirewallRules: [{1DB6A898-9440-4BAA-BD29-3C81931F3CAE}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{A25B7058-AE37-4A0E-840B-88633408B241}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{6B74B096-F4AA-499B-929C-6FB9A2AFEBF1}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
FirewallRules: [{49EE2F6C-EC03-4952-9A84-6FDA0F8CC45B}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe

==================== Faulty Device Manager Devices =============

Name: PS/2-kompatible Maus
Description: PS/2-kompatible Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/01/2015 09:05:22 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/31/2015 08:23:09 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/31/2015 00:58:17 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/30/2015 00:45:30 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/30/2015 11:30:43 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/29/2015 09:23:14 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/29/2015 07:24:34 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/29/2015 03:24:12 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/27/2015 08:24:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Skype.exe, Version: 7.4.0.102, Zeitstempel: 0x55310e09
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bdb3b
Ausnahmecode: 0xc0000008
Fehleroffset: 0x000826a7
ID des fehlerhaften Prozesses: 0xe30
Startzeit der fehlerhaften Anwendung: 0xSkype.exe0
Pfad der fehlerhaften Anwendung: Skype.exe1
Pfad des fehlerhaften Moduls: Skype.exe2
Berichtskennung: Skype.exe3

Error: (05/27/2015 08:22:14 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)


System errors:
=============
Error: (06/01/2015 09:05:22 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (06/01/2015 09:04:55 PM) (Source: volmgr) (EventID: 45) (User: )
Description: Das System konnte den Treiber für das Speicherabbild nicht laden.

Error: (06/01/2015 09:04:31 PM) (Source: volmgr) (EventID: 45) (User: )
Description: Das System konnte den Treiber für das Speicherabbild nicht laden.

Error: (05/31/2015 08:23:09 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (05/31/2015 08:20:49 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde nicht richtig gestartet.

Error: (05/31/2015 08:18:53 PM) (Source: volmgr) (EventID: 45) (User: )
Description: Das System konnte den Treiber für das Speicherabbild nicht laden.

Error: (05/31/2015 08:18:27 PM) (Source: volmgr) (EventID: 45) (User: )
Description: Das System konnte den Treiber für das Speicherabbild nicht laden.

Error: (05/31/2015 00:58:17 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (05/31/2015 00:55:39 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde nicht richtig gestartet.

Error: (05/31/2015 00:53:38 AM) (Source: volmgr) (EventID: 45) (User: )
Description: Das System konnte den Treiber für das Speicherabbild nicht laden.


Microsoft Office:
=========================
Error: (06/01/2015 09:05:22 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/31/2015 08:23:09 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/31/2015 00:58:17 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/30/2015 00:45:30 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/30/2015 11:30:43 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/29/2015 09:23:14 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/29/2015 07:24:34 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/29/2015 03:24:12 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/27/2015 08:24:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Skype.exe7.4.0.10255310e09ntdll.dll6.1.7600.163854a5bdb3bc0000008000826a7e3001d098aa1c45809eC:\Program Files (x86)\Skype\Phone\Skype.exeC:\Windows\SysWOW64\ntdll.dll928df102-049d-11e5-bb7f-e81132051f51

Error: (05/27/2015 08:22:14 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz
Percentage of memory in use: 41%
Total physical RAM: 3892.55 MB
Available physical RAM: 2281.4 MB
Total Pagefile: 7783.25 MB
Available Pagefile: 5991.05 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:238.07 GB) (Free:207.07 GB) NTFS
Drive f: (Backup) (Fixed) (Total:97.66 GB) (Free:76.32 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 0008D427)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=97.7 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=129.9 GB) - (Type=05)

==================== End of log ============================
         

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-05-2015
Ran by julian (administrator) on JULIAN-PC on 01-06-2015 21:17:11
Running from C:\Users\julian\Desktop
Loaded Profiles: julian (Available Profiles: julian)
Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\loggingserver.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
(SlimWare Utilities, Inc.) C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(BitTorrent Inc.) C:\Users\julian\AppData\Roaming\BitTorrent\BitTorrent.exe
(BitTorrent Inc.) C:\Users\julian\AppData\Roaming\uTorrent\uTorrent.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
(TrueCrypt Foundation) C:\Program Files\TrueCrypt\TrueCrypt.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
() C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(AVG Secure Search) C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Farbar) C:\Users\julian\Desktop\FRST64 (3).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3745744 2015-05-18] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [3033112 2015-03-08] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-02-10] (Oracle Corporation)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [855768 2015-02-19] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3484087542-3240090288-3349016086-1000\...\Run: [BitTorrent] => C:\Users\julian\AppData\Roaming\BitTorrent\BitTorrent.exe [1696104 2015-05-15] (BitTorrent Inc.)
HKU\S-1-5-21-3484087542-3240090288-3349016086-1000\...\Run: [uTorrent] => C:\Users\julian\AppData\Roaming\uTorrent\uTorrent.exe [1694560 2015-05-13] (BitTorrent Inc.)
HKU\S-1-5-21-3484087542-3240090288-3349016086-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-3484087542-3240090288-3349016086-1000\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [785416 2015-02-18] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-3484087542-3240090288-3349016086-1000\...\Run: [TrueCrypt] => C:\Program Files\TrueCrypt\TrueCrypt.exe [1516496 2015-03-10] (TrueCrypt Foundation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3484087542-3240090288-3349016086-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com/?cid={2B0A9B13-43B5-4B74-B0F5-6849EFD5CC1F}&mid=edc98f5bf0cd47cd9a79395874e1f6a2-5909d533ca05b4eefd7ef8d96be2859ebf477f79&lang=de&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2015-02-27 21:01:00&v=4.1.0.411&pid=wtu&sg=&sap=hp
HKU\S-1-5-21-3484087542-3240090288-3349016086-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/de-de/?ocid=iehp
SearchScopes: HKU\S-1-5-21-3484087542-3240090288-3349016086-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={2B0A9B13-43B5-4B74-B0F5-6849EFD5CC1F}&mid=edc98f5bf0cd47cd9a79395874e1f6a2-5909d533ca05b4eefd7ef8d96be2859ebf477f79&lang=de&ds=AVG&coid=avgtbavg&cmpid=0215tb&pr=fr&d=2015-02-27 21:01:00&v=4.1.0.411&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-07] (Oracle Corporation)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.1.0.411\AVG Web TuneUp.dll [2015-03-08] (AVG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-07] (Oracle Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.4.0\\npsitesafety.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-07] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-07] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)

Chrome: 
=======
CHR Profile: C:\Users\julian\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-27]
CHR Extension: (Google Docs) - C:\Users\julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-27]
CHR Extension: (Google Drive) - C:\Users\julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-27]
CHR Extension: (YouTube) - C:\Users\julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-27]
CHR Extension: (Google Search) - C:\Users\julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-27]
CHR Extension: (Google Sheets) - C:\Users\julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-27]
CHR Extension: (Bookmark Manager) - C:\Users\julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-15]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-15]
CHR Extension: (Google Wallet) - C:\Users\julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-27]
CHR Extension: (WebRTC Block) - C:\Users\julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nphkkbaidamjmhfanlpblblcadhfbkdm [2015-03-03]
CHR Extension: (Gmail) - C:\Users\julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-27]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3438544 2015-05-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [311792 2015-05-18] (AVG Technologies CZ, s.r.o.)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2015-02-19] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2015-02-19] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [794328 2015-02-19] (BlueStack Systems, Inc.)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [175112 2015-02-18] (Sandboxie Holdings, LLC)
R2 vToolbarUpdater18.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe [1883672 2015-02-27] (AVG Secure Search)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [620056 2015-03-08] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162784 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [284128 2015-04-27] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [253920 2015-05-07] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [256992 2015-04-15] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378336 2015-05-07] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [220128 2015-05-07] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [40928 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [291296 2015-05-04] (AVG Technologies CZ, s.r.o.)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2015-02-19] (BlueStack Systems)
S3 pbfilter; C:\Program Files\PeerBlock\pbfilter.sys [22600 2014-01-14] ()
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [237064 2015-02-18] (Sandboxie Holdings, LLC)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13920 2015-06-01] ()

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-01 21:16 - 2015-06-01 21:16 - 02108928 _____ (Farbar) C:\Users\julian\Downloads\FRST64 (3).exe
2015-06-01 21:16 - 2015-06-01 21:16 - 02108928 _____ (Farbar) C:\Users\julian\Desktop\FRST64 (3).exe
2015-05-31 01:49 - 2015-05-31 01:54 - 00000000 ____D () C:\Users\julian\Desktop\CMDrShell
2015-05-31 01:48 - 2015-05-31 01:48 - 00167976 _____ () C:\Users\julian\Downloads\CMDrShellV1.0.rar
2015-05-31 01:39 - 2015-05-31 01:40 - 00234196 _____ () C:\Users\julian\Downloads\kali-linux-1.1.0a-amd64.torrent
2015-05-30 12:10 - 2015-05-30 12:11 - 07910180 _____ () C:\Users\julian\Downloads\Googy-Max-Kernel_1.7.0_CWM (1).zip
2015-05-30 11:47 - 2015-05-30 11:47 - 07910180 _____ () C:\Users\julian\Downloads\Googy-Max-Kernel_1.7.0_CWM.zip
2015-05-29 16:08 - 2015-05-29 16:09 - 838122426 _____ () C:\Users\julian\Downloads\GlamourS5versionv8.zip
2015-05-26 15:28 - 2015-05-26 15:57 - 186168282 _____ () C:\Users\julian\Downloads\cm-10.2.0-i9300.zip
2015-05-26 15:04 - 2015-05-26 15:04 - 00000000 ____D () C:\ProgramData\Samsung
2015-05-26 15:04 - 2015-05-26 15:04 - 00000000 ____D () C:\Program Files\SAMSUNG
2015-05-26 15:03 - 2015-05-26 15:04 - 16044077 _____ () C:\Users\julian\Downloads\SAMSUNG_USB_Driver_for_Mobile_Phones.zip
2015-05-26 14:51 - 2015-05-26 14:51 - 00000000 ____D () C:\Users\julian\.android
2015-05-26 14:40 - 2015-05-26 14:40 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2015-05-26 14:39 - 2015-05-26 14:39 - 01791144 _____ () C:\Users\julian\Downloads\OneClick.apk
2015-05-26 14:39 - 2015-05-26 14:39 - 01791144 _____ () C:\Users\julian\Downloads\OneClick (1).apk
2015-05-26 14:39 - 2015-05-26 14:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf
2015-05-26 14:33 - 2015-05-26 14:33 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2015-05-26 14:33 - 2015-05-26 14:33 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll
2015-05-26 14:29 - 2015-05-26 14:29 - 00943040 _____ () C:\Users\julian\Downloads\cminstaller-win-beta.exe
2015-05-25 21:36 - 2015-05-25 21:36 - 00860736 _____ () C:\Users\julian\Downloads\hexedit.zip
2015-05-25 21:36 - 2015-05-25 21:36 - 00050298 _____ () C:\Users\julian\Downloads\Strings.zip
2015-05-25 21:36 - 2015-05-25 21:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hex-Editor MX
2015-05-25 21:36 - 2015-05-25 21:36 - 00000000 ____D () C:\Program Files (x86)\Hex-Editor MX
2015-05-25 21:36 - 2013-06-18 15:12 - 00090304 _____ (Sysinternals) C:\Users\julian\Desktop\strings.exe
2015-05-25 21:34 - 2015-05-25 21:34 - 00024064 _____ () C:\Users\julian\Desktop\Server.exe
2015-05-25 21:16 - 2015-05-25 21:16 - 00000000 _____ () C:\Users\julian\Downloads\Proxies.txt
2015-05-25 20:50 - 2015-05-25 20:50 - 02108928 _____ (Farbar) C:\Users\julian\Downloads\FRST64 (2).exe
2015-05-25 20:50 - 2015-05-25 20:50 - 02108928 _____ (Farbar) C:\Users\julian\Desktop\FRST64 (2).exe
2015-05-20 16:13 - 2015-05-20 16:13 - 02107904 _____ (Farbar) C:\Users\julian\Downloads\FRST64 (1).exe
2015-05-20 16:13 - 2015-05-20 16:13 - 02107904 _____ (Farbar) C:\Users\julian\Desktop\FRST64 (1).exe
2015-05-20 16:04 - 2015-05-20 16:04 - 00000000 ____D () C:\TDSSKiller_Quarantine
2015-05-20 15:58 - 2015-05-20 15:58 - 00000000 ____D () C:\Users\julian\AppData\Roaming\Process Hacker 2
2015-05-20 15:57 - 2015-05-22 14:40 - 00001885 _____ () C:\Users\julian\Desktop\Process Hacker 2.lnk
2015-05-20 15:57 - 2015-05-20 15:57 - 01986032 _____ (wj32 ) C:\Users\julian\Downloads\processhacker-2.35-setup.exe
2015-05-20 15:57 - 2015-05-20 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Hacker 2
2015-05-20 15:57 - 2015-05-20 15:57 - 00000000 ____D () C:\Program Files\Process Hacker 2
2015-05-20 15:42 - 2015-05-20 15:42 - 03309904 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-05-20 15:36 - 2009-11-25 12:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2015-05-20 15:36 - 2009-11-25 12:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2015-05-20 15:36 - 2009-11-25 12:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2015-05-20 15:36 - 2009-11-25 12:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2015-05-20 15:36 - 2009-11-25 12:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
2015-05-20 15:36 - 2009-11-25 12:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
2015-05-20 15:36 - 2009-11-25 12:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2015-05-20 15:36 - 2009-11-25 12:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
2015-05-20 15:36 - 2009-11-25 12:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
2015-05-20 15:36 - 2009-11-25 12:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2015-05-20 15:33 - 2015-05-20 15:35 - 50449456 _____ (Microsoft Corporation) C:\Users\julian\Downloads\dotNetFx40_Full_x86_x64.exe
2015-05-20 15:04 - 2015-05-26 07:33 - 00000000 ____D () C:\Users\julian\Downloads\torrent
2015-05-18 21:49 - 2015-05-20 15:58 - 00000000 ____D () C:\Users\julian\Desktop\FRST-OlderVersion
2015-05-17 20:47 - 2015-05-17 20:47 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2015-05-17 20:47 - 2015-05-17 20:47 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2015-05-17 20:46 - 2015-05-17 20:46 - 00000000 ____D () C:\Users\julian\AppData\Local\Avg
2015-05-15 22:13 - 2015-05-15 22:13 - 00040180 _____ () C:\Users\julian\Downloads\ubuntu-14.04.2-desktop-amd64.iso.torrent
2015-05-15 22:04 - 2015-05-15 22:04 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\julian\Downloads\tdsskiller44.exe
2015-05-15 22:04 - 2015-05-15 22:04 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\julian\Desktop\tdsskiller44*gepj.exe
2015-05-15 21:59 - 2015-05-25 20:52 - 00031347 _____ () C:\Users\julian\Desktop\Shortcut.txt
2015-05-15 21:58 - 2015-05-25 20:52 - 00022641 _____ () C:\Users\julian\Desktop\Addition.txt
2015-05-15 21:57 - 2015-06-01 21:17 - 00012302 _____ () C:\Users\julian\Desktop\FRST.txt
2015-05-15 21:57 - 2015-06-01 21:17 - 00000000 ____D () C:\FRST
2015-05-15 21:57 - 2015-05-20 15:58 - 02107904 _____ (Farbar) C:\Users\julian\Desktop\FRST64.exe
2015-05-15 21:57 - 2015-05-15 21:57 - 02106368 _____ (Farbar) C:\Users\julian\Downloads\FRST64.exe
2015-05-13 21:15 - 2015-05-13 21:15 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2015-05-13 21:14 - 2015-05-13 21:14 - 04831232 _____ (Geza Kovacs) C:\Users\julian\Downloads\unetbootin-windows-608.exe
2015-05-13 20:58 - 2015-05-13 21:14 - 1044381696 ____R () C:\Users\julian\Downloads\ubuntu-14.04.2-desktop-amd64.iso
2015-05-07 13:50 - 2015-05-07 13:50 - 00378336 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgloga.sys
2015-05-07 13:49 - 2015-05-07 13:49 - 00253920 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsha.sys
2015-05-07 13:49 - 2015-05-07 13:49 - 00220128 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys
2015-05-04 14:14 - 2015-05-04 14:14 - 00291296 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdia.sys

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-01 21:17 - 2015-02-27 21:37 - 00000000 ____D () C:\Users\julian\AppData\Roaming\BitTorrent
2015-06-01 21:17 - 2015-02-27 21:35 - 00000000 ____D () C:\Users\julian\AppData\Roaming\uTorrent
2015-06-01 21:16 - 2009-07-14 06:45 - 00009888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-01 21:16 - 2009-07-14 06:45 - 00009888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-01 21:11 - 2015-02-27 22:46 - 00000000 ____D () C:\Users\julian\AppData\Roaming\Skype
2015-06-01 21:10 - 2015-02-27 21:27 - 00000000 ____D () C:\ProgramData\MFAData
2015-06-01 21:09 - 2010-06-07 00:35 - 00204936 _____ () C:\Windows\WindowsUpdate.log
2015-06-01 21:08 - 2015-02-27 21:12 - 00002840 _____ () C:\Windows\System32\Tasks\SlimDrivers Startup
2015-06-01 21:08 - 2015-02-27 21:12 - 00000412 _____ () C:\Windows\Tasks\SlimDrivers Startup.job
2015-06-01 21:07 - 2015-02-27 21:12 - 00013920 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2015-06-01 21:07 - 2015-02-27 21:09 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-01 21:05 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-06-01 21:04 - 2009-07-14 06:51 - 00023054 _____ () C:\Windows\setupact.log
2015-05-31 20:21 - 2015-02-27 21:09 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-30 11:36 - 2015-02-27 21:30 - 00000981 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2015-05-30 11:36 - 2015-02-27 21:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-05-29 15:24 - 2015-03-07 12:22 - 00001532 _____ () C:\Windows\Sandboxie.ini
2015-05-26 14:51 - 2010-06-07 00:40 - 00000000 ____D () C:\Users\julian
2015-05-26 14:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-05-25 20:23 - 2015-02-27 21:10 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-24 22:51 - 2015-02-27 22:06 - 00000000 ____D () C:\Users\julian\AppData\Local\JDownloader v2.0
2015-05-20 20:41 - 2015-02-27 21:17 - 00001890 _____ () C:\Windows\PFRO.log
2015-05-20 15:49 - 2015-02-27 22:45 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-05-20 15:49 - 2015-02-27 22:45 - 00000000 ____D () C:\ProgramData\Skype
2015-05-20 15:42 - 2009-10-24 18:10 - 00729292 _____ () C:\Windows\system32\perfh010.dat
2015-05-20 15:42 - 2009-10-24 18:10 - 00145174 _____ () C:\Windows\system32\perfc010.dat
2015-05-20 15:42 - 2009-10-24 18:01 - 00734756 _____ () C:\Windows\system32\perfh00C.dat
2015-05-20 15:42 - 2009-10-24 18:01 - 00147678 _____ () C:\Windows\system32\perfc00C.dat
2015-05-20 15:42 - 2009-10-24 17:51 - 00696370 _____ () C:\Windows\system32\perfh007.dat
2015-05-20 15:42 - 2009-10-24 17:51 - 00147634 _____ () C:\Windows\system32\perfc007.dat
2015-05-20 15:42 - 2009-07-14 07:13 - 03309904 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-18 22:15 - 2015-02-27 21:09 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-18 22:15 - 2015-02-27 21:09 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-15 22:34 - 2015-02-27 22:16 - 00000000 ____D () C:\Program Files\PeerBlock
2015-05-15 22:25 - 2015-03-07 14:27 - 00000000 ____D () C:\Users\julian\.VirtualBox
2015-05-14 06:22 - 2010-06-07 00:40 - 00000000 __SHD () C:\Recovery
2015-05-14 06:22 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Msdtc
2015-05-13 21:34 - 2015-02-27 21:29 - 00000000 ____D () C:\ProgramData\AVG2015

Some files in TEMP:
====================
C:\Users\julian\AppData\Local\Temp\CM.Launcher.Win.exe
C:\Users\julian\AppData\Local\Temp\Newtonsoft.Json.dll
C:\Users\julian\AppData\Local\Temp\NLog.dll
C:\Users\julian\AppData\Local\Temp\proxy_vole8103250847435168794.dll
C:\Users\julian\AppData\Local\Temp\System.Core.dll
C:\Users\julian\AppData\Local\Temp\System.Xml.Linq.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2010-06-07 00:29

==================== End of log ============================
         

hi,

lade Dir bei filepony.de bitte Process Explorer und lass ihn laufen, dann solltest Du sehen welcher Prozess den Ordner öffnet. Screenshot davon bitte.

Hallo Schrauber

Ich habe einen Windows Backup wiederhergestellt jetzt passt es wieder.

Kannst du vlt. noch über meinen zweitrechner drüberschrauen den habe ich schon lange und gebraucht gekauft ?

Gruß

Dann poste mal FRST Logs