Trojaner-Board - Offen W8.1 64: fehlende Hosts und Defender Error 577

Hallo Timo,

anbei...

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-08-2014

Ran by John (administrator) on HANAHOMEOFFICE on 06-08-2014 15:43:04

Running from C:\Users\John\Downloads

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe

(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Windows\tsnpstd3.exe

(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe

(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe

(Farbar) C:\Users\John\Downloads\FRST64(1).exe

() C:\ProgramData\HP Photo Creations\Communicator.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5618456 2013-09-12] (ESET)

HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)

HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)

HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)

HKLM-x32\...\Run: [snpstd3] => C:\WINDOWS\vsnpstd3.exe [835584 2007-05-10] ()

HKLM-x32\...\Run: [tsnpstd3] => C:\WINDOWS\tsnpstd3.exe [270336 2007-04-21] ()

HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-07-23] (Hewlett-Packard)

Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKU\S-1-5-21-875375503-3799985134-3711563178-1001\...\MountPoints2: {813fe800-b08a-11e2-bea2-4c72b9419957} - "K:\LaunchU3.exe" -a

HKU\S-1-5-21-875375503-3799985134-3711563178-1001\...\MountPoints2: {89193c5e-5e3d-11e3-bf2a-4c72b9419957} - "K:\GSLoader.exe" 

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 1010 series.lnk

ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 1010 series.lnk -> C:\Program Files\HP\HP Deskjet 1010 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2A1259230628CE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = hxxp://www.default-search.net/search?sid=503&aid=102&itype=n&ver=13486&tm=431&src=ds&p={searchTerms}

SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = hxxp://www.default-search.net/search?sid=503&aid=102&itype=n&ver=13486&tm=431&src=ds&p={searchTerms}

SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = hxxp://www.default-search.net/search?sid=503&aid=102&itype=n&ver=13486&tm=431&src=ds&p={searchTerms}

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
 

Hosts: Hosts file not detected in the default directory

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\8lfxhffq.default-1390413753507

FF Homepage: hxxp://www.google.de/

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()

FF Plugin: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: DownloadHelper - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\8lfxhffq.default-1390413753507\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-25]

FF Extension: DownThemAll! - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\8lfxhffq.default-1390413753507\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-03-01]

FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2014-03-03]

FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
 

Chrome: 

=======

CHR HomePage: hxxp://google.de/

CHR Extension: (Google Docs) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-09]

CHR Extension: (Google Drive) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-09]

CHR Extension: (YouTube) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-09]

CHR Extension: (Google-Suche) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-09]

CHR Extension: (Google Wallet) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-09]

CHR Extension: (Google Mail) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-09]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [1337752 2013-09-12] (ESET)

R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [85504 2012-08-15] (Hewlett-Packard Company) [File not signed]

S3 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35232 2012-08-29] (Hewlett-Packard)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)

S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]

S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-08-01] (Realtek Semiconductor)

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)

S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2138936 2014-03-20] (TuneUp Software)

S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2013-10-18] (Microsoft Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)

S3 CpqDfw; C:\Windows\System32\drivers\CpqDfw.sys [27456 2012-05-29] (Windows (R) Codename Longhorn DDK provider)

S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)

S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)

R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [239296 2013-09-17] (ESET)

R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)

R2 epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [157432 2013-09-17] (ESET)

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2014-02-10] (TuneUp Software)

S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-06 15:43 - 2014-08-06 15:43 - 00017822 _____ () C:\Users\John\Downloads\FRST.txt

2014-08-06 15:42 - 2014-08-06 15:42 - 00000470 _____ () C:\Users\John\Downloads\defogger_disable.log

2014-08-06 15:42 - 2014-08-06 15:42 - 00000000 _____ () C:\Users\John\defogger_reenable

2014-08-06 15:41 - 2014-08-06 15:41 - 00050477 _____ () C:\Users\John\Downloads\Defogger.exe

2014-08-06 15:40 - 2014-08-06 15:40 - 02094080 _____ (Farbar) C:\Users\John\Downloads\FRST64(1).exe

2014-08-06 15:40 - 2014-08-06 15:40 - 00380416 _____ () C:\Users\John\Downloads\Gmer-19357.exe

2014-08-06 10:03 - 2014-08-06 10:03 - 00003704 _____ () C:\WINDOWS\System32\Tasks\Java Update Scheduler

2014-08-06 10:03 - 2014-08-06 10:03 - 00003676 _____ () C:\WINDOWS\System32\Tasks\HP-Online-Aktualisierungsprogramm

2014-08-06 10:02 - 2014-08-06 10:02 - 00003694 _____ () C:\WINDOWS\System32\Tasks\Adobe-Online-Aktualisierungsprogramm

2014-08-06 09:36 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll

2014-08-06 09:35 - 2014-08-06 09:35 - 01361309 _____ () C:\Users\John\Downloads\adwcleaner_3.302.exe

2014-08-06 09:16 - 2014-08-06 09:16 - 00000000 ____D () C:\Users\John\AppData\Roaming\FirefoxToolbar

2014-08-06 09:16 - 2014-08-06 09:16 - 00000000 ____D () C:\ProgramData\smdmf

2014-08-06 09:15 - 2014-08-06 09:15 - 00002215 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014.lnk

2014-08-06 09:15 - 2014-08-06 09:15 - 00000000 ____D () C:\Users\John\AppData\Local\TuneUp Software

2014-08-06 09:15 - 2014-08-06 09:15 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2014

2014-08-06 09:15 - 2014-03-20 14:44 - 00040760 _____ (TuneUp Software) C:\WINDOWS\system32\TURegOpt.exe

2014-08-06 09:15 - 2014-03-20 14:44 - 00029496 _____ (TuneUp Software) C:\WINDOWS\system32\authuitu.dll

2014-08-06 09:15 - 2014-03-20 14:44 - 00025400 _____ (TuneUp Software) C:\WINDOWS\SysWOW64\authuitu.dll

2014-08-06 09:14 - 2014-08-06 09:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft

2014-08-06 09:13 - 2014-08-06 09:14 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft

2014-08-06 09:12 - 2014-08-06 09:14 - 00000000 ____D () C:\Users\John\AppData\Roaming\DVDVideoSoft

2014-08-06 09:11 - 2014-08-06 09:11 - 29527272 _____ (DVDVideoSoft Ltd. ) C:\Users\John\Downloads\FreeYouTubeToMP3Converter-3.12.42.716.exe

2014-08-06 08:59 - 2014-08-06 09:00 - 19456529 _____ () C:\Users\John\Downloads\Clean-Bandit-Rather-Be-feat.-Jess-Glynne-Official-Video.mp4

2014-08-03 22:00 - 2014-08-03 22:00 - 00263390 _____ () C:\Users\John\Downloads\Camera Uploads.zip

2014-08-03 16:50 - 2014-08-03 16:50 - 00000000 ____D () C:\Users\John\Downloads\hessen

2014-08-03 16:49 - 2014-08-03 16:49 - 00000000 ____D () C:\Users\John\Downloads\bayern

2014-08-03 15:52 - 2014-08-03 16:01 - 00000000 ____D () C:\Users\John\Downloads\Germany

2014-08-03 15:31 - 2014-08-03 15:37 - 306155903 _____ () C:\Users\John\Downloads\bayern.zip

2014-08-03 15:31 - 2014-08-03 15:36 - 123689102 _____ () C:\Users\John\Downloads\hessen.zip

2014-08-03 15:29 - 2014-08-03 15:49 - 1563097314 _____ () C:\Users\John\Downloads\Germany.zip

2014-08-02 15:01 - 2014-08-02 15:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hama Webcam AC-150

2014-08-02 15:01 - 2007-10-16 10:35 - 10376576 _____ (Sonix Co. Ltd.) C:\WINDOWS\SysWOW64\Drivers\snpstd3.sys

2014-08-02 15:01 - 2007-07-23 18:04 - 00155648 _____ ( ) C:\WINDOWS\SysWOW64\rsnpstd3.dll

2014-08-02 15:01 - 2007-07-23 17:52 - 00057344 _____ ( ) C:\WINDOWS\SysWOW64\vsnpstd3.dll

2014-08-02 15:01 - 2007-07-11 16:09 - 00020480 _____ () C:\WINDOWS\FixCamera.exe

2014-08-02 15:01 - 2007-05-10 13:18 - 00835584 _____ () C:\WINDOWS\vsnpstd3.exe

2014-08-02 15:01 - 2007-04-21 09:37 - 00270336 _____ () C:\WINDOWS\tsnpstd3.exe

2014-08-02 15:01 - 2006-07-03 10:31 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\amcap.exe

2014-08-02 15:01 - 2005-11-23 13:55 - 00053248 _____ ( ) C:\WINDOWS\csnpstd3.dll

2014-08-02 15:01 - 2005-11-22 20:40 - 00018944 _____ ( ) C:\WINDOWS\system32\csnpstd3.dll

2014-08-02 15:01 - 2004-02-27 17:36 - 00015498 _____ () C:\WINDOWS\snpstd3.ini

2014-08-02 15:01 - 2004-02-27 17:36 - 00013023 _____ () C:\WINDOWS\snpstd3.src

2014-08-02 15:00 - 2014-08-02 15:00 - 08862210 _____ () C:\Users\John\Downloads\00086510_w2000xpvista_v1.0.zip

2014-08-02 14:49 - 2014-08-02 14:49 - 00000000 ____D () C:\Users\John\Documents\MAGIX

2014-08-02 14:49 - 2014-08-02 14:49 - 00000000 ____D () C:\Users\John\AppData\Roaming\MAGIX

2014-08-02 14:49 - 2014-08-02 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX

2014-08-02 14:48 - 2014-08-02 14:49 - 00000000 ____D () C:\ProgramData\MAGIX

2014-08-02 14:48 - 2014-08-02 14:48 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0

2014-08-02 14:48 - 2014-08-02 14:48 - 00000000 ____D () C:\Program Files (x86)\MAGIX

2014-07-29 14:47 - 2014-07-29 14:47 - 00001509 _____ () C:\Users\Public\Desktop\Die Sims 4 Erstelle einen Sim-Demo.lnk

2014-07-29 14:47 - 2014-07-29 14:47 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-29 14:47 - 2014-07-29 14:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Die Sims 4 Erstelle einen Sim-Demo

2014-07-28 16:39 - 2014-07-28 16:39 - 00000000 __RHD () C:\Users\John\AppData\Roaming\SecuROM

2014-07-28 16:39 - 2014-07-28 16:39 - 00000000 ____D () C:\Users\John\Documents\EA Games

2014-07-28 10:28 - 2014-07-28 10:28 - 00000000 __RHD () C:\Users\Justine\AppData\Roaming\SecuROM

2014-07-28 10:28 - 2014-07-28 10:28 - 00000000 ____D () C:\Users\Public\Documents\EA Games

2014-07-28 10:28 - 2014-07-28 10:28 - 00000000 ____D () C:\Users\Justine\Documents\EA Games

2014-07-28 01:08 - 2014-07-28 01:08 - 00001712 _____ () C:\Users\Public\Desktop\The Sims 2 Ultimate Collection.lnk

2014-07-28 01:08 - 2014-07-28 01:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 2 Ultimate Collection

2014-07-27 20:44 - 2014-08-02 20:35 - 00000000 ____D () C:\Users\Justine\AppData\Roaming\Origin

2014-07-27 20:44 - 2014-07-29 14:31 - 00000000 ____D () C:\Users\Justine\AppData\Local\Origin

2014-07-27 13:20 - 2014-07-27 13:20 - 02908317 _____ () C:\Users\John\Downloads\1069403.zip

2014-07-23 13:22 - 2014-07-23 13:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-07-22 17:59 - 2014-07-22 17:59 - 00004594 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_65-b20.log

2014-07-22 17:59 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll

2014-07-22 17:59 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe

2014-07-22 17:59 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe

2014-07-22 17:59 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe

2014-07-22 16:23 - 2014-07-22 16:23 - 00125667 _____ () C:\Users\John\Downloads\20140722-1200757058-umsatz.csv

2014-07-18 20:24 - 2014-07-18 20:24 - 06598344 _____ () C:\Users\John\Downloads\HPPSdr.exe

2014-07-18 20:24 - 2014-07-18 20:24 - 00002026 _____ () C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk

2014-07-12 07:37 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll

2014-07-11 14:26 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2014-07-11 14:26 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2014-07-11 14:26 - 2014-06-19 01:46 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2014-07-11 14:26 - 2014-06-19 00:57 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2014-07-11 14:26 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe

2014-07-11 14:26 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe

2014-07-11 14:26 - 2014-06-06 16:20 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2014-07-11 14:26 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys

2014-07-11 14:26 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2014-07-11 14:26 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll

2014-07-11 14:26 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll

2014-07-11 14:26 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll

2014-07-11 14:26 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll

2014-07-11 14:26 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2014-07-11 14:25 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2014-07-11 14:25 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll

2014-07-11 14:25 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2014-07-11 14:25 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2014-07-11 14:25 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2014-07-11 14:25 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2014-07-11 14:25 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2014-07-11 14:25 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2014-07-11 14:25 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2014-07-11 14:25 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll

2014-07-11 14:25 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2014-07-11 14:25 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2014-07-11 14:25 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2014-07-11 14:25 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2014-07-11 14:25 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2014-07-11 14:25 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2014-07-11 14:25 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2014-07-11 14:25 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2014-07-11 14:25 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2014-07-11 14:25 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2014-07-11 14:25 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2014-07-11 14:25 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2014-07-11 14:25 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2014-07-11 14:25 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll

2014-07-11 14:25 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll

2014-07-11 14:25 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2014-07-11 14:25 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll

2014-07-11 14:25 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2014-07-11 14:25 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2014-07-11 14:25 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-07-11 14:25 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll

2014-07-11 14:25 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2014-07-11 14:25 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-07-11 14:25 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll

2014-07-11 14:25 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2014-07-11 14:25 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2014-07-11 14:25 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll

2014-07-11 14:25 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll

2014-07-11 14:25 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll

2014-07-11 14:25 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll

2014-07-11 14:23 - 2014-07-11 14:23 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-06 15:43 - 2014-08-06 15:43 - 00017822 _____ () C:\Users\John\Downloads\FRST.txt

2014-08-06 15:43 - 2014-03-27 14:45 - 00000000 ____D () C:\FRST

2014-08-06 15:43 - 2014-01-29 00:14 - 00000352 _____ () C:\WINDOWS\Tasks\HP Photo Creations Communicator.job

2014-08-06 15:42 - 2014-08-06 15:42 - 00000470 _____ () C:\Users\John\Downloads\defogger_disable.log

2014-08-06 15:42 - 2014-08-06 15:42 - 00000000 _____ () C:\Users\John\defogger_reenable

2014-08-06 15:42 - 2013-10-18 21:23 - 00000000 ____D () C:\Users\John

2014-08-06 15:41 - 2014-08-06 15:41 - 00050477 _____ () C:\Users\John\Downloads\Defogger.exe

2014-08-06 15:40 - 2014-08-06 15:40 - 02094080 _____ (Farbar) C:\Users\John\Downloads\FRST64(1).exe

2014-08-06 15:40 - 2014-08-06 15:40 - 00380416 _____ () C:\Users\John\Downloads\Gmer-19357.exe

2014-08-06 15:30 - 2014-03-28 08:06 - 00001148 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cf4a4bed7a56f2.job

2014-08-06 15:16 - 2013-10-18 21:32 - 02021782 _____ () C:\WINDOWS\WindowsUpdate.log

2014-08-06 15:12 - 2014-04-08 07:08 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2014-08-06 15:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru

2014-08-06 13:03 - 2013-09-30 06:14 - 01980998 _____ () C:\WINDOWS\system32\PerfStringBackup.INI

2014-08-06 13:03 - 2013-09-30 05:56 - 00841326 _____ () C:\WINDOWS\system32\perfh007.dat

2014-08-06 13:03 - 2013-09-30 05:56 - 00191558 _____ () C:\WINDOWS\system32\perfc007.dat

2014-08-06 12:10 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Registration

2014-08-06 10:34 - 2013-03-23 22:34 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-875375503-3799985134-3711563178-1001

2014-08-06 10:19 - 2013-03-24 15:15 - 00000000 ____D () C:\Users\John\Desktop\System

2014-08-06 10:03 - 2014-08-06 10:03 - 00003704 _____ () C:\WINDOWS\System32\Tasks\Java Update Scheduler

2014-08-06 10:03 - 2014-08-06 10:03 - 00003676 _____ () C:\WINDOWS\System32\Tasks\HP-Online-Aktualisierungsprogramm

2014-08-06 10:02 - 2014-08-06 10:02 - 00003694 _____ () C:\WINDOWS\System32\Tasks\Adobe-Online-Aktualisierungsprogramm

2014-08-06 10:02 - 2014-01-02 18:48 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2014-08-06 10:02 - 2013-08-11 22:36 - 00000000 ____D () C:\Users\John\AppData\Roaming\Nero

2014-08-06 10:02 - 2012-10-19 21:18 - 00000000 ____D () C:\ProgramData\{AFF99647-6D64-46F2-934A-F12F468037F6}

2014-08-06 09:43 - 2013-10-09 19:40 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-08-06 09:42 - 2013-10-09 19:39 - 00001132 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2014-08-06 09:40 - 2013-09-29 21:04 - 00043096 _____ () C:\WINDOWS\PFRO.log

2014-08-06 09:40 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2014-08-06 09:40 - 2013-08-22 16:44 - 00437960 _____ () C:\WINDOWS\system32\FNTCACHE.DAT

2014-08-06 09:39 - 2013-08-22 15:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI

2014-08-06 09:38 - 2014-03-28 08:33 - 00000000 ____D () C:\AdwCleaner

2014-08-06 09:35 - 2014-08-06 09:35 - 01361309 _____ () C:\Users\John\Downloads\adwcleaner_3.302.exe

2014-08-06 09:28 - 2013-03-30 13:03 - 00000000 ____D () C:\ProgramData\Origin

2014-08-06 09:16 - 2014-08-06 09:16 - 00000000 ____D () C:\Users\John\AppData\Roaming\FirefoxToolbar

2014-08-06 09:16 - 2014-08-06 09:16 - 00000000 ____D () C:\ProgramData\smdmf

2014-08-06 09:15 - 2014-08-06 09:15 - 00002215 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014.lnk

2014-08-06 09:15 - 2014-08-06 09:15 - 00000000 ____D () C:\Users\John\AppData\Local\TuneUp Software

2014-08-06 09:15 - 2014-08-06 09:15 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2014

2014-08-06 09:14 - 2014-08-06 09:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft

2014-08-06 09:14 - 2014-08-06 09:13 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft

2014-08-06 09:14 - 2014-08-06 09:12 - 00000000 ____D () C:\Users\John\AppData\Roaming\DVDVideoSoft

2014-08-06 09:11 - 2014-08-06 09:11 - 29527272 _____ (DVDVideoSoft Ltd. ) C:\Users\John\Downloads\FreeYouTubeToMP3Converter-3.12.42.716.exe

2014-08-06 08:58 - 2013-03-24 05:13 - 00000000 ____D () C:\Users\John\AppData\Roaming\vlc

2014-08-06 08:56 - 2013-03-25 20:48 - 00000000 ____D () C:\Users\John\dwhelper

2014-08-06 08:18 - 2014-02-12 23:40 - 00027136 _____ () C:\Users\John\Documents\FFM-NBG 2013.xls

2014-08-05 23:59 - 2013-03-24 09:12 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-875375503-3799985134-3711563178-1005

2014-08-04 19:25 - 2013-03-24 13:52 - 00003170 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleForJohn

2014-08-04 19:25 - 2013-03-24 13:52 - 00000358 _____ () C:\WINDOWS\Tasks\HPCeeScheduleForJohn.job

2014-08-03 22:00 - 2014-08-03 22:00 - 00263390 _____ () C:\Users\John\Downloads\Camera Uploads.zip

2014-08-03 16:50 - 2014-08-03 16:50 - 00000000 ____D () C:\Users\John\Downloads\hessen

2014-08-03 16:49 - 2014-08-03 16:49 - 00000000 ____D () C:\Users\John\Downloads\bayern

2014-08-03 16:47 - 2013-03-25 21:05 - 00000000 ____D () C:\Users\John\AppData\Roaming\MyPhoneExplorer

2014-08-03 16:01 - 2014-08-03 15:52 - 00000000 ____D () C:\Users\John\Downloads\Germany

2014-08-03 15:49 - 2014-08-03 15:29 - 1563097314 _____ () C:\Users\John\Downloads\Germany.zip

2014-08-03 15:37 - 2014-08-03 15:31 - 306155903 _____ () C:\Users\John\Downloads\bayern.zip

2014-08-03 15:36 - 2014-08-03 15:31 - 123689102 _____ () C:\Users\John\Downloads\hessen.zip

2014-08-03 12:02 - 2013-03-24 13:52 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log

2014-08-03 12:02 - 2013-03-24 13:52 - 00000000 _____ () C:\WINDOWS\system32\HP_ActiveX_Patch_NOT_DETECTED.txt

2014-08-03 10:10 - 2013-09-08 15:19 - 00000000 ____D () C:\FILME 0913

2014-08-02 20:35 - 2014-07-27 20:44 - 00000000 ____D () C:\Users\Justine\AppData\Roaming\Origin

2014-08-02 20:34 - 2013-03-30 13:03 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-08-02 19:11 - 2014-02-28 10:02 - 00000000 ____D () C:\Users\John\AppData\Local\QuickPar

2014-08-02 18:34 - 2013-03-26 22:26 - 00000000 ____D () C:\Users\John\Desktop\Office

2014-08-02 18:33 - 2013-10-27 10:20 - 00000000 ____D () C:\Users\John\Desktop\Spiele

2014-08-02 16:17 - 2013-08-22 16:46 - 00410702 _____ () C:\WINDOWS\setupact.log

2014-08-02 15:01 - 2014-08-02 15:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hama Webcam AC-150

2014-08-02 15:01 - 2012-10-19 21:16 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-08-02 15:01 - 2012-07-26 07:26 - 00000334 _____ () C:\WINDOWS\win.ini

2014-08-02 15:00 - 2014-08-02 15:00 - 08862210 _____ () C:\Users\John\Downloads\00086510_w2000xpvista_v1.0.zip

2014-08-02 14:49 - 2014-08-02 14:49 - 00000000 ____D () C:\Users\John\Documents\MAGIX

2014-08-02 14:49 - 2014-08-02 14:49 - 00000000 ____D () C:\Users\John\AppData\Roaming\MAGIX

2014-08-02 14:49 - 2014-08-02 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX

2014-08-02 14:49 - 2014-08-02 14:48 - 00000000 ____D () C:\ProgramData\MAGIX

2014-08-02 14:48 - 2014-08-02 14:48 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0

2014-08-02 14:48 - 2014-08-02 14:48 - 00000000 ____D () C:\Program Files (x86)\MAGIX

2014-07-29 14:47 - 2014-07-29 14:47 - 00001509 _____ () C:\Users\Public\Desktop\Die Sims 4 Erstelle einen Sim-Demo.lnk

2014-07-29 14:47 - 2014-07-29 14:47 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-29 14:47 - 2014-07-29 14:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Die Sims 4 Erstelle einen Sim-Demo

2014-07-29 14:47 - 2014-03-17 18:32 - 00000000 ____D () C:\Users\Justine\Documents\Electronic Arts

2014-07-29 14:31 - 2014-07-27 20:44 - 00000000 ____D () C:\Users\Justine\AppData\Local\Origin

2014-07-29 14:31 - 2013-04-06 21:10 - 00000000 ____D () C:\Program Files (x86)\Origin Games

2014-07-28 16:39 - 2014-07-28 16:39 - 00000000 __RHD () C:\Users\John\AppData\Roaming\SecuROM

2014-07-28 16:39 - 2014-07-28 16:39 - 00000000 ____D () C:\Users\John\Documents\EA Games

2014-07-28 10:28 - 2014-07-28 10:28 - 00000000 __RHD () C:\Users\Justine\AppData\Roaming\SecuROM

2014-07-28 10:28 - 2014-07-28 10:28 - 00000000 ____D () C:\Users\Public\Documents\EA Games

2014-07-28 10:28 - 2014-07-28 10:28 - 00000000 ____D () C:\Users\Justine\Documents\EA Games

2014-07-28 01:08 - 2014-07-28 01:08 - 00001712 _____ () C:\Users\Public\Desktop\The Sims 2 Ultimate Collection.lnk

2014-07-28 01:08 - 2014-07-28 01:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 2 Ultimate Collection

2014-07-27 13:20 - 2014-07-27 13:20 - 02908317 _____ () C:\Users\John\Downloads\1069403.zip

2014-07-24 07:08 - 2013-03-23 23:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-07-23 13:22 - 2014-07-23 13:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-07-22 18:00 - 2013-10-22 07:13 - 00000000 ____D () C:\ProgramData\Oracle

2014-07-22 17:59 - 2014-07-22 17:59 - 00004594 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_65-b20.log

2014-07-22 17:59 - 2013-06-24 07:54 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-22 16:23 - 2014-07-22 16:23 - 00125667 _____ () C:\Users\John\Downloads\20140722-1200757058-umsatz.csv

2014-07-18 20:24 - 2014-07-18 20:24 - 06598344 _____ () C:\Users\John\Downloads\HPPSdr.exe

2014-07-18 20:24 - 2014-07-18 20:24 - 00002026 _____ () C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk

2014-07-18 20:24 - 2013-04-08 09:28 - 00000000 ____D () C:\Program Files (x86)\HP

2014-07-14 13:41 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache

2014-07-14 12:53 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData

2014-07-14 12:53 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-07-14 12:53 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-07-14 12:53 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore

2014-07-13 22:02 - 2014-02-23 10:02 - 00000000 ____D () C:\Bilder Justine Ronneburg 2011 und Halloween 2013

2014-07-12 07:40 - 2013-08-14 18:54 - 00000000 ____D () C:\WINDOWS\system32\MRT

2014-07-12 07:40 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp

2014-07-12 07:37 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM

2014-07-12 07:37 - 2013-03-24 23:33 - 96441528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2014-07-12 07:36 - 2013-09-30 05:59 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-11 14:23 - 2014-07-11 14:23 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe

2014-07-11 03:02 - 2014-07-22 17:59 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll

2014-07-11 02:56 - 2014-07-22 17:59 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe

2014-07-11 02:56 - 2014-07-22 17:59 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe

2014-07-11 02:55 - 2014-07-22 17:59 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe

2014-07-09 16:12 - 2014-04-08 07:08 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
 

Some content of TEMP:

====================

C:\Users\John\AppData\Local\Temp\Quarantine.exe

C:\Users\Justine\AppData\Local\Temp\drm_dyndata_7400009.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-08-06 10:34
 

==================== End Of Log ============================

--- --- ---

Ja, sorry.
Sei hiermit nachgereicht.

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-08-2014

Ran by John at 2014-08-06 19:32:15

Running from C:\Users\John\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: ESET NOD32 Antivirus 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

AS: ESET NOD32 Antivirus 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden

Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.4.144 - Adobe Systems, Inc.)

Animated Wallpaper - Beautiful Space 3D (HKLM\...\Beautiful Space 3D_is1) (Version: 1.13 - PUSH Entertainment)

Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Artist Colony (HKLM-x32\...\Artist Colony) (Version: 1.0.0.0 - INTENIUM GmbH)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden

calibre (HKLM-x32\...\{CE9EE84E-F7A9-4256-8785-0CB35014DD33}) (Version: 0.9.26 - Kovid Goyal)

CDisplay 1.8 (HKLM-x32\...\CDisplay_is1) (Version:  - dvd8n)

Cheatbusters 1.0.0.0 (HKLM-x32\...\Cheatbusters 1.0.0.0) (Version: 1.0.0.0 - Shadow - Time to play)

Connected Music powered by Universal Music Group version 1.0 (HKLM-x32\...\{46037DC7-F927-46DF-935F-D6F122BDD34B}_is1) (Version: 1.0 - Snowite)

Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden

CraftROBO DesignMaster (C:\CraftROBO DesignMaster) (HKLM-x32\...\{385B9A14-B5DD-487C-A0E3-25FB62DA8E9E}) (Version: 7 - CADlink)

CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1.5510 - CyberLink Corp.)

CyberLink LabelPrint (x32 Version: 2.5.1.5510 - CyberLink Corp.) Hidden

CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.1.1916 - CyberLink Corp.)

CyberLink Media Suite 10 (x32 Version: 10.0.1.1916 - CyberLink Corp.) Hidden

CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.1.1902 - CyberLink Corp.)

CyberLink Power2Go 8 (x32 Version: 8.0.1.1902 - CyberLink Corp.) Hidden

CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.8.4930 - CyberLink Corp.)

CyberLink PowerDVD (x32 Version: 10.0.8.4930 - CyberLink Corp.) Hidden

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Delicious: Emily und der Duft des Erfolgs (HKLM-x32\...\Delicious: Emily und der Duft des Erfolgs) (Version: 1.0.0.0 - INTENIUM GmbH)

Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden

DEUTSCHLAND SPIELT GAME CENTER (HKLM-x32\...\DSGPlayer) (Version: 1.0.0.46 - INTENIUM GmbH)

DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden

DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)

Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.55.4 - Electronic Arts)

Die Sims™ 3 Einfach tierisch (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)

Die Sims™ 3 Inselparadies (HKLM-x32\...\{DB21639E-FE55-432C-BCA2-0C5249E3F79E}) (Version: 19.0.101 - Electronic Arts)

Die Sims™ 3 Jahreszeiten (HKLM-x32\...\{3DE92282-CB49-434F-81BF-94E5B380E889}) (Version: 16.0.136 - Electronic Arts)

Die Sims™ 3 Late Night (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.0.81 - Electronic Arts)

Die Sims™ 3 Lebensfreude (HKLM-x32\...\{E6B88BD6-E4B2-4701-A648-B6DAC6E491CC}) (Version: 8.0.152 - Electronic Arts)

Die Sims™ 3 Showtime (HKLM-x32\...\{3BBFD444-5FAB-49F6-98B1-A1954E831399}) (Version: 12.0.273 - Electronic Arts)

Die Sims™ 3 Supernatural (HKLM-x32\...\{B37DAFA5-717D-41F8-BDFB-3A4B68C0B3A1}) (Version: 15.0.135 - Electronic Arts)

Die Sims™ 3 Wildes Studentenleben (HKLM-x32\...\{F26DE8EF-F2CF-40DC-8CDA-CC0D82D11B36}) (Version: 18.0.126 - Electronic Arts)

Die Sims™ 4 Erstelle einen Sim-Demo (HKLM-x32\...\{6908ED99-F02B-4E99-A202-3FAC99C510ED}) (Version: 1.0.207.190 - Electronic Arts, Inc.)

DJ_AIO_03_F4200_Software_Min (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden

DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden

Dropbox (HKCU\...\Dropbox) (Version: 2.6.25 - Dropbox, Inc.)

Edna Bricht Aus - Sammler Edition (HKLM-x32\...\EdnaSE) (Version: 1.2 - Daedalic Entertainment)

Energy Star (HKLM\...\{0FA995CC-C849-4755-B14B-5404CC75DC24}) (Version: 1.0.8 - Hewlett-Packard)

ESET NOD32 Antivirus (HKLM\...\{7EE0D9E8-299E-4E7A-8BDE-B1D295E30077}) (Version: 7.0.302.26 - ESET, spol s r. o.)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )

F4200 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden

FormatFactory 3.1.1 (HKLM-x32\...\FormatFactory) (Version: 3.1.1 - Free Time)

Free Video to MP3 Converter version 5.0.24.430 (HKLM-x32\...\Free Video to MP3 Converter_is1) (Version: 5.0.24.430 - DVDVideoSoft Ltd.)

Free YouTube to MP3 Converter version 3.12.42.716 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.42.716 - DVDVideoSoft Ltd.)

GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)

Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden

Hama Webcam AC-150 (HKLM-x32\...\{ECD03DA7-5952-406A-8156-5F0C93618D1F}) (Version: Hama Webcam AC-150 - Sonix)

Harveys neue Augen Special Edition (HKLM-x32\...\Harveys neue Augen Special Edition) (Version: 1.3 - Daedalic Entertainment)

Hewlett-Packard ACLM.NET v1.2.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden

HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)

HP Connected Remote (HKLM-x32\...\{F243A34B-AB7F-4065-B770-B85B767C247C}) (Version: 1.0.1206 - Hewlett-Packard)

HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden

HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)

HP Deskjet 1010 series - Grundlegende Software für das Gerät (HKLM\...\{7F30B5E6-174F-4039-BFA7-7189BE15EC6E}) (Version: 30.0.1093.41190 - Hewlett-Packard Co.)

HP Deskjet 1010 series Hilfe (HKLM-x32\...\{307E9E87-616E-4DC5-B509-6AB3BD2BBF87}) (Version: 30.0.0 - Hewlett Packard)

HP Deskjet F4200 All-In-One Driver Software 14.0 Rel. 6 (HKLM\...\{8C925017-72A8-4C4A-AF21-84901E26638F}) (Version: 14.0 - HP)

HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)

HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.12412 - HP)

HP Postscript Converter (Version: 3.1.3591 - Hewlett-Packard) Hidden

HP Registration Service (HKLM\...\{E4D6CCF2-0AAF-4B9C-9DE5-893EDC9B4BAA}) (Version: 1.0.5976.4186 - Hewlett-Packard)

HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)

HP Support Assistant (HKLM-x32\...\{FF27F674-821E-4BA2-985B-DDF539C2CD03}) (Version: 7.0.33.6 - Hewlett-Packard Company)

HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 12.00.0000 - Hewlett-Packard)

HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)

HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden

HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden

HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)

Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden

iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)

jAlbum (HKLM-x32\...\{E87F1FFB-A689-4AB4-B79C-4FC4AAF4A1FD}) (Version: 11.6.14 - Jalbum AB)

Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle)

Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.650 - Oracle)

Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden

Joe (HKLM-x32\...\{F8C986EA-13F8-4B39-91C3-A6B9A851CD34}) (Version: 4.01.0000 - Wirth IT Design)

lingDIALOG (HKLM-x32\...\InstallShield_{071B843C-9A39-40B3-BB01-BBD6A8D2E1C5}) (Version: 3.0908 - WEVOSYS)

lingDIALOG (x32 Version: 3.0908 - WEVOSYS) Hidden

MAGIX Video easy SE (HKLM-x32\...\MAGIX_{D0498EA9-0858-4E1B-B25A-C907ACD15E67}) (Version: 3.0.1.41 - MAGIX AG)

MAGIX Video easy SE (Version: 3.0.1.41 - MAGIX AG) Hidden

Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)

Manic Digger (HKLM-x32\...\{119E2FCB-5CDD-4C24-BCB2-56A824E2BF0A}_is1) (Version:  - )

MarketResearch (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)

Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.2 - F.J. Wechselberger)

Nero 12 (HKLM-x32\...\{B3E6F9B5-35CC-4010-8EDA-55ACCF468A82}) (Version: 12.5.02100 - Nero AG)

Nero 12 Content Pack (HKLM-x32\...\{4E7AC009-5212-499F-942F-A5AA42AE359E}) (Version: 12.0.00400 - Nero AG)

Nero Abstract Themes (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden

Nero BackItUp (x32 Version: 12.5.7000 - Nero AG) Hidden

Nero BackItUp Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden

Nero Blu-ray Player (x32 Version: 12.0.20030 - Nero AG) Hidden

Nero Blu-ray Player Help (CHM) (x32 Version: 12.0.9000 - Nero AG) Hidden

Nero Burning ROM (x32 Version: 12.5.6000 - Nero AG) Hidden

Nero Burning ROM Help (CHM) (x32 Version: 12.0.3000 - Nero AG) Hidden

Nero Cliparts (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero ControlCenter (x32 Version: 11.0.15600 - Nero AG) Hidden

Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden

Nero Core Components (x32 Version: 11.0.21800 - Nero AG) Hidden

Nero Disc Menus 1 (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Disc Menus 2 (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Disc Menus 3 (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Disc Menus Basic (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Effects Basic (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Express (x32 Version: 12.5.7000 - Nero AG) Hidden

Nero Express Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden

Nero Family and Events Themes (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Football (Soccer) Themes (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Holiday and Sports Themes (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Image Samples (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Kwik Media (x32 Version: 1.18.20100 - Nero AG) Hidden

Nero Kwik Media Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden

Nero Kwik Themes Basic (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden

Nero PiP Effects 1 (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero PiP Effects Basic (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Platinum Effects 12 (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Recode (x32 Version: 12.5.6000 - Nero AG) Hidden

Nero Recode Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden

Nero RescueAgent (x32 Version: 12.0.11000 - Nero AG) Hidden

Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden

Nero Retro Film Themes (x32 Version: 12.0.11700 - Nero AG) Hidden

Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0 - Nero AG) Hidden

Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden

Nero Video (x32 Version: 12.5.4000 - Nero AG) Hidden

Nero Video Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden

Nero Video Samples (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Video Transitions 1 (x32 Version: 12.0.11500 - Nero AG) Hidden

neroxml (x32 Version: 1.0.0 - Nero AG) Hidden

OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)

OpenOffice 4.0.0 (HKLM-x32\...\{B28DBCBA-60F8-40ED-B35B-F510C327946C}) (Version: 4.00.9702 - Apache Software Foundation)

Origin (HKLM-x32\...\Origin) (Version: 9.1.15.109 - Electronic Arts, Inc.)

Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)

Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden

QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7004 - Realtek Semiconductor Corp.)

Recovery Manager (x32 Version: 5.5.0.5530 - CyberLink Corp.) Hidden

Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)

SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden

Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.2.25 - Safer-Networking Ltd.)

Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden

SuperHTML Web Studio 8.5.6 (HKLM-x32\...\{31D72726-2A42-11E1-9D98-20824824019B}_is1) (Version: 8.5.6 - mirabyte GmbH & Co. KG)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

The Sims 2: Ultimate Collection (HKLM-x32\...\{04450C18-F039-4B81-A621-70C3B0F523D5}) (Version: 1.0.0.0 - Electronic Arts)

Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden

TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden

TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.275 - TuneUp Software) Hidden

TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.275 - TuneUp Software)

TuneUp Utilities 2014 (x32 Version: 14.0.1000.275 - TuneUp Software) Hidden

Video Wallpaper (HKLM\...\Video Wallpaper_is1) (Version: 2.58 - PUSH Entertainment)

VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)

WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden

Welcome App (Start-up experience) (x32 Version: 12.0.15000 - Nero AG) Hidden

Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden

Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden

Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

WinZip 17.0 (HKLM-x32\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240D8}) (Version: 17.0.10381 - WinZip Computing, S.L. )

Zwischenland: Die fliegende Insel (HKLM-x32\...\Zwischenland: Die fliegende Insel) (Version: 1.0.0.0 - INTENIUM GmbH)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-875375503-3799985134-3711563178-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\John\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-875375503-3799985134-3711563178-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-875375503-3799985134-3711563178-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-875375503-3799985134-3711563178-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-875375503-3799985134-3711563178-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
 

==================== Restore Points  =========================
 

22-07-2014 15:58:48 Installed Java 7 Update 65

29-07-2014 12:46:51 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005

02-08-2014 13:01:09 Installiert Hama Webcam AC-150
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {008BAE1E-1412-471F-8805-2D8BB94998D1} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask

Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {0B852AC9-CD4B-4630-9742-6470758EF475} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe

Task: {0CE72F4D-EA7B-4BDF-8BBB-FF1F9A5D23C8} - System32\Tasks\GoogleUpdateTaskMachineUA1cec963a392db2a => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-09] (Google Inc.)

Task: {0F7CCB19-B8B7-48D5-87BE-9D213BD69056} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv

Task: {1207424E-7342-4284-8BB8-D09647E5689C} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup

Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask

Task: {273AFC99-55F2-4E39-9ADE-018364193A7F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company)

Task: {2BD0C28F-0151-43A7-A38B-DB491A072441} - System32\Tasks\HP AR Program Upload - 3d6661d696e94d978c031dcc210cac564c842311e7594d34bf2e2bdee6316c5b => C:\Program Files\HP\HP Deskjet 1010 series\bin\HPRewards.exe [2013-02-08] (TODO: <Company name>)

Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate

Task: {307D82DC-DE34-410B-A975-91ED935C64E2} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)

Task: {30A49235-5749-44A8-AEAE-7DC47690B8FF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company)

Task: {315B2FAF-9AAE-4541-9A8B-F8BB0DB4222A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-11] (Oracle Corporation)

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)

Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)

Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance

Task: {4A731108-A826-49DA-87C6-9F625DEACEB5} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation

Task: {510FD04C-DC5D-429C-8CEF-DB6D988B6BF5} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe

Task: {595CABF8-8BD3-4271-9584-C46B977051F8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-09] (Google Inc.)

Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup

Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task

Task: {7274C706-8D80-4C73-8809-20B65F4B1F14} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-07-12] (Microsoft Corporation)

Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask

Task: {75A67260-8218-4B7A-B039-8949698527DA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company)

Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState

Task: {7B7AF412-3FE5-46B4-97D3-FF01DF02D36A} - System32\Tasks\HPCeeScheduleForJohn => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)

Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task

Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask

Task: {8D6214AB-7FB8-4F7F-BEFC-6D8AF859B16C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)

Task: {9A6B05F9-F8A4-4C71-BF2A-722B90165EEB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Critical Actions Pending => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company)

Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work

Task: {A3B2ABB9-6AAD-4148-BF74-B242E47D97B2} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe

Task: {A50017EF-00DB-4B4F-8FF1-C7BFE487CC36} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)

Task: {C3B6A201-FD56-47C6-8523-20D4C2BB0853} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-09] (Google Inc.)

Task: {C4309DDB-9F3C-4C2D-BAFF-D86B17478AA6} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)

Task: {CD07F67A-330F-4411-A24C-C365D19C9798} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2014-01-29] ()

Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask

Task: {D0AD6B10-F4C9-49EB-9463-5C8C5EB4F93D} - System32\Tasks\WebReg HP Deskjet F4200 series => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqwrg.exe [2011-04-29] (Hewlett-Packard Company)

Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing

Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization

Task: {E04EB1E6-8CD3-46D2-9CCF-9BD9BEC509C1} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload

Task: {E5FC2F99-8C70-4D6B-815D-3FFDF46E8A91} - System32\Tasks\GoogleUpdateTaskMachineUA1cef11530b5334a => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-09] (Google Inc.)

Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE

Task: {F1B618F5-F9D8-4C37-B65C-C26B821CDC6F} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management

Task: {FA1AACE9-DF80-4036-85F8-AAE93110F74A} - System32\Tasks\GoogleUpdateTaskMachineUA1cf4a4bed7a56f2 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-09] (Google Inc.)

Task: {FA8C16ED-1505-44DB-B324-E36A52D758FD} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2011-10-28] (Hewlett-Packard)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cf4a4bed7a56f2.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

Task: C:\WINDOWS\Tasks\HPCeeScheduleForJohn.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

Task: C:\WINDOWS\Tasks\WebReg HP Deskjet F4200 series.job => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqwrg.exe
 

==================== Loaded Modules (whitelisted) =============
 

2012-12-14 02:42 - 2012-12-14 02:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2014-08-02 15:01 - 2007-04-21 09:37 - 00270336 _____ () C:\Windows\tsnpstd3.exe

2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2014-03-26 23:01 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll

2014-03-26 23:01 - 2013-05-16 11:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2014-03-26 23:01 - 2013-05-16 11:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2014-03-26 23:01 - 2013-05-16 11:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2014-03-26 23:01 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll

2012-10-19 21:23 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll

2012-06-08 12:34 - 2012-06-08 12:34 - 00016400 _____ () c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\Users\John\SkyDrive:ms-properties
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"

HKLM\...\StartupApproved\Run32: => "APSDaemon"

HKLM\...\StartupApproved\Run32: => "iTunesHelper"

HKLM\...\StartupApproved\Run32: => "HP Software Update"

HKLM\...\StartupApproved\Run32: => "ApnTBMon"

HKLM\...\StartupApproved\Run32: => "Adobe ARM"

HKLM\...\StartupApproved\Run32: => "QuickTime Task"

HKLM\...\StartupApproved\Run32: => "FixCamera"

HKLM\...\StartupApproved\Run32: => "snpstd3"
 

==================== Faulty Device Manager Devices =============
 

Name: TOSHIBA EXT

Description: External USB 3.0

Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}

Manufacturer: Toshiba

Service: WUDFWpdFs

Problem: : Windows has stopped this device because it has reported problems. (Code 43)

Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (08/06/2014 10:39:34 AM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
 

Error: (08/06/2014 10:39:34 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"1".

Die abhängige Assemblierung "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (08/06/2014 10:38:11 AM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
 

Error: (08/06/2014 10:38:04 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"1".

Die abhängige Assemblierung "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (08/06/2014 09:15:55 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: FreeYouTubeToMP3Converter.exe, Version: 3.12.42.716, Zeitstempel: 0x53c6609e

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.17031, Zeitstempel: 0x5308893d

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000401bf

ID des fehlerhaften Prozesses: 0xf38

Startzeit der fehlerhaften Anwendung: 0xFreeYouTubeToMP3Converter.exe0

Pfad der fehlerhaften Anwendung: FreeYouTubeToMP3Converter.exe1

Pfad des fehlerhaften Moduls: FreeYouTubeToMP3Converter.exe2

Berichtskennung: FreeYouTubeToMP3Converter.exe3

Vollständiger Name des fehlerhaften Pakets: FreeYouTubeToMP3Converter.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FreeYouTubeToMP3Converter.exe5
 

Error: (08/06/2014 06:54:13 AM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
 

Error: (08/06/2014 06:54:09 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"1".

Die abhängige Assemblierung "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (08/05/2014 07:09:53 AM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
 

Error: (08/05/2014 07:09:52 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"1".

Die abhängige Assemblierung "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (08/05/2014 07:09:10 AM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
 
 

System errors:

=============

Error: (08/06/2014 02:34:01 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{C37A7408-4F7C-4016-8D16-89B85FC3A69C}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (08/06/2014 02:27:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Windows Defender-Dienst" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%577
 

Error: (08/06/2014 02:27:21 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Windows Defender-Dienst" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%577
 

Error: (08/06/2014 02:26:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Windows Defender-Dienst" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%577
 

Error: (08/06/2014 02:16:27 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Windows Defender-Dienst" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%577
 

Error: (08/06/2014 00:00:48 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{C37A7408-4F7C-4016-8D16-89B85FC3A69C}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (08/06/2014 11:47:49 AM) (Source: DCOM) (EventID: 10010) (User: HanaHomeOffice)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
 

Error: (08/06/2014 10:21:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "TuneUp Utilities Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (08/06/2014 09:42:24 AM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{C37A7408-4F7C-4016-8D16-89B85FC3A69C}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (08/06/2014 09:41:07 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "HASP License Manager" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 
 

Microsoft Office Sessions:

=========================

Error: (08/06/2014 10:39:34 AM) (Source: SideBySide) (EventID: 78) (User: )

Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
 

Error: (08/06/2014 10:39:34 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files (x86)\Nero\Nero 12\nero recode\NeroBRServer.exe.Manifest
 

Error: (08/06/2014 10:38:11 AM) (Source: SideBySide) (EventID: 78) (User: )

Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
 

Error: (08/06/2014 10:38:04 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files (x86)\Nero\Nero 12\nero recode\NeroBRServer.exe.Manifest
 

Error: (08/06/2014 09:15:55 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: FreeYouTubeToMP3Converter.exe3.12.42.71653c6609entdll.dll6.3.9600.170315308893dc0000005000401bff3801cfb146043c258fC:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exeC:\WINDOWS\SYSTEM32\ntdll.dll814e315a-1d39-11e4-bf47-4c72b9419957
 

Error: (08/06/2014 06:54:13 AM) (Source: SideBySide) (EventID: 78) (User: )

Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
 

Error: (08/06/2014 06:54:09 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files (x86)\Nero\Nero 12\nero recode\NeroBRServer.exe.Manifest
 

Error: (08/05/2014 07:09:53 AM) (Source: SideBySide) (EventID: 78) (User: )

Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
 

Error: (08/05/2014 07:09:52 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files (x86)\Nero\Nero 12\nero recode\NeroBRServer.exe.Manifest
 

Error: (08/05/2014 07:09:10 AM) (Source: SideBySide) (EventID: 78) (User: )

Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
 
 

CodeIntegrity Errors:

===================================

  Date: 2014-08-06 14:27:34.850

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2014-08-06 14:27:21.266

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2014-08-06 14:26:53.995

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2014-08-06 14:16:27.920

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2014-03-27 14:23:27.407

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2014-03-27 14:22:37.454

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2014-03-27 14:20:25.936

  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Program Files\Windows Defender\NisSrv.exe that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2014-03-27 14:20:02.741

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 27%

Total physical RAM: 6010.68 MB

Available physical RAM: 4365.88 MB

Total Pagefile: 6970.68 MB

Available Pagefile: 5300.58 MB

Total Virtual: 131072 MB

Available Virtual: 131071.82 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:711.06 GB) (Free:287.2 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive d: (Recovery Image) (Fixed) (Total:8.61 GB) (Free:0.99 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive g: (TOSHIBA EXT) (Fixed) (Total:623.07 GB) (Free:42.66 GB) NTFS

Drive h: (Spiele_X) (Fixed) (Total:619.97 GB) (Free:17.17 GB) NTFS

Drive i: (Bilder_Musik_X) (Fixed) (Total:619.97 GB) (Free:12.92 GB) NTFS

Drive j: (Daten) (Fixed) (Total:675.78 GB) (Free:90.59 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 1397 GB) (Disk ID: 89A7F66A)
 

Partition: GPT Partition Type.
 

========================================================

Disk: 1 (Size: 1863 GB) (Disk ID: FCECE274)

Partition 1: (Active) - (Size=623 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=620 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=620 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Hab beim flüchtigen Drüberschauen gesehen, dass sich eine "default-search.net" reingeschlichen hat. Und das, obwohl ich sie nach dem ersten Auftreten bereits deinstalliert hab.
Mistding...