Trojaner-Board - Browser sind trotz neuem aufsetzen immernoch sehr langsam

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Browser sind trotz neuem aufsetzen immernoch sehr langsam (https://www.trojaner-board.de/155137-browser-trotz-neuem-aufsetzen-immernoch-sehr-langsam.html)

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-10-2014 02

Ran by Grisu (administrator) on GRISU-PC on 17-10-2014 22:58:10

Running from C:\Users\Grisu\Desktop\Trojaner software

Loaded Profile: Grisu (Available profiles: Grisu)

Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe

(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe

(My Digital Life Forums) C:\Windows\KMSServerService\KMS Server Service.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Deutsche Telekom AG) D:\Programme\Netzmanager\NMInfraIS2\Netzmanager_Service.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

(Dropbox, Inc.) C:\Users\Grisu\AppData\Roaming\Dropbox\bin\Dropbox.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe

(Canon INC.) C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe

(Deutsche Telekom AG) D:\Programme\Netzmanager\netzmanager.exe

(CANON INC.) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Frontend.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5581888 2014-02-24] (ESET)

HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [839384 2014-09-16] (BlueStack Systems, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk

ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk

ShortcutTarget: DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)

Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk

ShortcutTarget: DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)

Startup: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EOS Utility.lnk

ShortcutTarget: EOS Utility.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (Canon INC.)

Startup: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk

ShortcutTarget: Netzmanager.lnk -> D:\Programme\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x56C38410017FCF01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO: OpitOn -> {6b836c64-f364-437e-bab5-11f39990cfe9} ->  No File

BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)

BHO: OpteOn -> {ab957d78-2cdb-4568-8020-2eaabcd137c2} ->  No File

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: GoSaive -> {cfd100a1-0615-4d32-9827-7ac2d4b0faa4} ->  No File

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)

BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Grisu\AppData\Roaming\Mozilla\Firefox\Profiles\t2l1m1y7.default-1407286514912

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()

FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()

FF Plugin-x32: @ganymede/GanymedeNetPlugin,version=1.0 -> C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll ( )

FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npganymedenet.dll ( )

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Lightshot (screenshot tool) - C:\Users\Grisu\AppData\Roaming\Mozilla\Firefox\Profiles\t2l1m1y7.default-1407286514912\Extensions\{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B} [2014-10-02]

FF Extension: NoScript - C:\Users\Grisu\AppData\Roaming\Mozilla\Firefox\Profiles\t2l1m1y7.default-1407286514912\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-10-16]

FF Extension: {7d02e03c-f690-4f38-bf10-5e8cc02a4740} - C:\Users\Grisu\AppData\Roaming\Mozilla\Firefox\Profiles\t2l1m1y7.default-1407286514912\Extensions\{7d02e03c-f690-4f38-bf10-5e8cc02a4740}.xpi [2014-09-09]

FF Extension: Adblock Plus - C:\Users\Grisu\AppData\Roaming\Mozilla\Firefox\Profiles\t2l1m1y7.default-1407286514912\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-17]

FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-07-28]

FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com

FF Extension: 卡巴斯基網址顧問 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-06-03]

FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com

FF Extension: 虛擬鍵盤 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-06-03]

FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com

FF Extension: 惡意網站攔截器 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-06-03]

FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com

FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-06-03]

FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com

FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-06-03]

FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
 

Chrome: 

=======

CHR HomePage: Default -> 

CHR Profile: C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-26]

CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-09-26]

CHR Extension: (ZenMate) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdcgdnkidjaadafnichfpabhfomcebme [2014-08-05]

CHR Extension: (AdBlock) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-17]

CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-09-26]

CHR Extension: (Modul zum Sperren von gefährlichen Webseiten) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-09-26]

CHR Extension: (Virtual Keyboard) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-09-26]

CHR Extension: (Disconnect) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeoacafpbcihiomhlakheieifhpjdfeo [2014-09-17]

CHR Extension: (Google Wallet) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-29]

CHR Extension: (Anti-Banner) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-09-26]

CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-10-17]

CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-10-17]

CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-10-17]

CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-10-17]

CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-10-17]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)

R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-09-16] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384728 2014-09-16] (BlueStack Systems, Inc.)

R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [777944 2014-09-16] (BlueStack Systems, Inc.)

R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1343408 2014-02-24] (ESET)

S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2014-07-06] () [File not signed]

R2 KMSServerService; C:\Windows\KMSServerService\KMS Server Service.exe [211968 2014-07-06] (My Digital Life Forums) [File not signed]

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 Netzmanager Service; D:\Programme\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [File not signed]

S4 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696 2014-04-30] (NVIDIA Corporation)

S4 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH)

S4 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH)

R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)

R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)

S4 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software) [File not signed]

S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]

S3 TDslMgrService; C:\Program Files (x86)\DSL-Manager\DslMgrSvc.exe [294912 2007-11-26] (T-Systems Enterprise Services GmbH) [File not signed]

S2 Orbiter; C:/Program Files (x86)/ORBTR/orbiter.dll [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-09-16] (BlueStack Systems)

R1 DslMNLwf; C:\Windows\System32\DRIVERS\dslmnlwf.sys [19008 2007-08-01] (T-Systems Enterprise Services GmbH)

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)

U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)

R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)

R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)

R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)

R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-06-03] (Kaspersky Lab ZAO)

S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-06-03] (Kaspersky Lab ZAO)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-06-03] (Kaspersky Lab ZAO)

R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)

R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-06-03] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)

R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)

R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-06-03] (Kaspersky Lab ZAO)

S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-10-17] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)

R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)

S0 sptd; C:\Windows\System32\Drivers\sptd.sys [868848 2014-06-03] (Duplex Secure Ltd.)

R3 TelekomNM6; D:\Programme\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

S3 gwfilt64; system32\drivers\gwfilt64.sys [X]

S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
 

========================== Drivers MD5 =======================
 

C:\Windows\system32\DRIVERS\IPMIDrv.sys ==> MD5 is legit

C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit

C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\isapnp.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\msiscsi.sys 96BB922A0981BC7432C8CF52B5410FE6

C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\kl1.sys 795EC29BA21F1D948FD6FD740C00B599

C:\Windows\System32\DRIVERS\klflt.sys D0C3AEF67932D2A80736FBCB956C017D

C:\Windows\System32\DRIVERS\klif.sys 41DF293A7F0418F5DDED9F0297DC68F3

C:\Windows\System32\DRIVERS\klim6.sys 31B69BFF28348503E4BD10C2A4F66D05

C:\Windows\System32\DRIVERS\klkbdflt.sys 8DA5BC75C3E8A995335642F26CAEA54B

C:\Windows\System32\DRIVERS\klmouflt.sys 72CF64FBF38CD681FA7F37176047E967

C:\Windows\System32\DRIVERS\klpd.sys 8C0EC95AD65A0DE3D6C040591D02BF02

C:\Windows\System32\DRIVERS\kltdi.sys 4828B3D2BC89B05E07101C6E60CE0A6A

C:\Windows\System32\DRIVERS\kneps.sys 91BC1C5B00275A4D7FD669EFF0DDEB2A

C:\Windows\System32\Drivers\ksecdd.sys 353009DEDF918B2A51414F330CF72DEC

C:\Windows\System32\Drivers\ksecpkg.sys 1C2D8E18AA8FD50CD04C15CC27F7F5AB

C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\lsi_fc.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\lsi_sas.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\lsi_sas2.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\lsi_scsi.sys ==> MD5 is legit

C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\lvuvc64.sys FF3A488924B0032B1A9CA6948C1FA9E8

C:\Windows\system32\drivers\mbamchameleon.sys 9D9ED48F841EA37AA5310D54B9E5D3C7

C:\Windows\system32\drivers\mbam.sys F92B0E478C0FAA6D6661E6E977247E60

C:\Windows\system32\drivers\MBAMSwissArmy.sys 8A50D5304E6AE48664CF5838EC32F647

C:\Windows\system32\drivers\mwac.sys 15E8ABC06843672955CE26A009533BAD

C:\Windows\system32\DRIVERS\megasas.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\MegaSR.sys ==> MD5 is legit

C:\Windows\System32\drivers\modem.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit

C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\mpio.sys ==> MD5 is legit

C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit

C:\Windows\system32\drivers\mrxdav.sys 1A4F75E63C9FB84B85DFFC6B63FD5404

C:\Windows\System32\DRIVERS\mrxsmb.sys A5D9106A73DC88564C825D317CAC68AC

C:\Windows\System32\DRIVERS\mrxsmb10.sys D711B3C1D5F42C0C2415687BE09FC163

C:\Windows\System32\DRIVERS\mrxsmb20.sys 9423E9D355C8D303E76B8CFBD8A5C30C

C:\Windows\System32\DRIVERS\msahci.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\msdsm.sys ==> MD5 is legit

C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit

C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\msisadrv.sys ==> MD5 is legit

C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit

C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit

C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit

C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\mssmbios.sys ==> MD5 is legit

C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 is legit

C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit

C:\Windows\System32\drivers\ndis.sys 760E38053BF56E501D562B70AD796B88

C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit

C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 is legit

C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit

C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit

C:\Windows\System32\Drivers\Ntfs.sys 1A29A59A4C5BA6F8C85062A613B7E2B2

C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit

C:\Windows\System32\drivers\nvhda64v.sys E366A5681C50785D4ED04FCFD65C3415

C:\Windows\System32\DRIVERS\nvlddmkm.sys 0AC797F70F2F3E5B69A34FF2F63496F3

C:\Windows\system32\DRIVERS\nvraid.sys 0A92CB65770442ED0DC44834632F66AD

C:\Windows\system32\DRIVERS\nvstor.sys DAB0E87525C10052BF65F06152F37E4A

C:\Windows\System32\drivers\nvvad64v.sys 75034A4D7C02327D150B617571D4196A

C:\Windows\system32\DRIVERS\nv_agp.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\ohci1394.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\parport.sys ==> MD5 is legit

C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C

C:\Windows\System32\DRIVERS\pci.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\pciide.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 is legit

C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit

C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\processr.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\psi_mf_amd64.sys DD3FD48D69F5FBBB21D46D1514C1C2DB

C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 is legit

C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\rdpbus.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit

C:\Windows\System32\drivers\rdpdr.sys ==> MD5 is legit

C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit

C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit

C:\Windows\System32\Drivers\RDPWD.sys E61608AA35E98999AF9AAEEEA6114B0A

C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\revoflt.sys 9C3AC71A9934B884FAC567A8807E9C4D

C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\sbp2port.sys ==> MD5 is legit

C:\Windows\System32\Drivers\SCDEmu.sys 158F1C92B48150F603FB558D84A5B48E

C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit

C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\serial.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\sffdisk.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\sffp_mmc.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\sffp_sd.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit

C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit

C:\Windows\System32\Drivers\sptd.sys 4C33F139236FD9BD14A920F60C1CB072

C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B

C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28

C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3

C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\swenum.sys ==> MD5 is legit

C:\Windows\System32\drivers\tbhsd.sys 048CFE7569D6ADCAB9349BB1A566A79E

C:\Windows\System32\drivers\tcpip.sys 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E

C:\Windows\System32\DRIVERS\tcpip.sys 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E

C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC

C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit

C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8

C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit

D:\Programme\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys 4283D7125BA4BD0CB50BB0F78B54257A

C:\Windows\System32\DRIVERS\termdd.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\tssecsrv.sys 4CE278FC9671BA81A138D70823FCAA09

C:\Windows\System32\drivers\tsusbflt.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\uliagpkx.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\umpass.sys ==> MD5 is legit

C:\Windows\System32\drivers\usbaudio.sys B0435098C81D04CAFFF80DDB746CD3A2

C:\Windows\System32\DRIVERS\usbccgp.sys DCA68B0943D6FA415F0C56C92158A83A

C:\Windows\system32\DRIVERS\usbcir.sys 80B0F7D5CCF86CEB5D402EAAF61FEC31

C:\Windows\System32\DRIVERS\usbehci.sys 18A85013A3E0F7E1755365D287443965

C:\Windows\System32\DRIVERS\usbhub.sys 8D1196CFBB223621F2C67D45710F25BA

C:\Windows\system32\DRIVERS\usbohci.sys 765A92D428A8DB88B960DA5A8D6089DC

C:\Windows\system32\DRIVERS\usbprint.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\usbscan.sys 9661DA76B4531B2DA272ECCE25A8AF24

C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6

C:\Windows\System32\DRIVERS\usbuhci.sys DD253AFC3BC6CBA412342DE60C3647F3

C:\Windows\System32\Drivers\usbvideo.sys 1F775DA4CF1A3A1834207E975A72E9D7

C:\Windows\System32\DRIVERS\vdrvroot.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit

C:\Windows\System32\drivers\vga.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\vhdmp.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\viaide.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\volmgr.sys ==> MD5 is legit

C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\volsnap.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 is legit

C:\Windows\System32\drivers\vwifibus.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit

C:\Windows\system32\DRIVERS\wd.sys ==> MD5 is legit

C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8

C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit

C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit

C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\WinUsb.sys FE88B288356E7B47B74B13372ADD906D

C:\Windows\System32\DRIVERS\wmiacpi.sys ==> MD5 is legit

C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit

C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F

C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-10-17 22:53 - 2014-10-17 22:58 - 00000000 ____D () C:\FRST

2014-10-17 09:35 - 2014-10-17 09:51 - 00056368 _____ () C:\Users\Grisu\Desktop\Arbeitszeitnachweis-2014 - Kopie.ods

2014-10-17 01:06 - 2014-10-17 08:59 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\0B2A46DE.sys

2014-10-17 00:50 - 2014-10-17 00:50 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cfe993939fd0f4

2014-10-17 00:50 - 2014-10-17 00:50 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfe993939fd0f4.job

2014-10-17 00:49 - 2014-10-17 00:49 - 00880272 _____ (Google Inc.) C:\Users\Grisu\Downloads\ChromeSetup.exe

2014-10-17 00:47 - 2014-10-16 10:26 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-10-17 00:45 - 2014-10-17 00:50 - 00000861 _____ () C:\Windows\SecuniaPackage.log

2014-10-16 10:34 - 2014-10-16 10:36 - 00001772 _____ () C:\DelFix.txt

2014-10-16 10:34 - 2014-10-16 10:34 - 00001080 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk

2014-10-16 10:34 - 2014-10-16 10:34 - 00000000 ____D () C:\Users\Grisu\AppData\Local\Secunia PSI

2014-10-16 10:34 - 2014-10-16 10:34 - 00000000 ____D () C:\Program Files (x86)\Secunia

2014-10-16 10:30 - 2014-10-16 10:31 - 00541865 _____ () C:\Users\Grisu\Downloads\noscript_security_suite-2.6.9.1-fn_fx_sm.zip

2014-10-16 10:27 - 2014-10-16 10:27 - 05329480 _____ (Secunia) C:\Users\Grisu\Downloads\PSISetup_3.0.0.9016.exe

2014-10-15 13:04 - 2014-10-15 13:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-10-14 02:41 - 2014-10-14 02:41 - 00000314 _____ () C:\Windows\PFRO.log

2014-10-14 02:10 - 2014-10-14 02:10 - 00000000 ____D () C:\Users\Grisu\4.0

2014-10-14 02:10 - 2014-10-14 02:10 - 00000000 ____D () C:\Users\Grisu\.tfo4

2014-10-12 21:27 - 2014-10-12 21:36 - 28076375 _____ () C:\Users\Grisu\Downloads\va-german50odc06102014.part3.rar

2014-10-12 10:07 - 2014-10-12 10:07 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\04E23FBD.sys

2014-10-12 10:04 - 2014-10-12 10:04 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\1BA03D9F.sys

2014-10-11 12:33 - 2014-10-11 13:42 - 209715200 _____ () C:\Users\Grisu\Downloads\va-german50odc06102014.part2.rar

2014-10-11 10:26 - 2014-10-11 10:26 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\0781265D.sys

2014-10-10 09:43 - 2014-10-10 09:43 - 00001818 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk

2014-10-10 09:40 - 2014-10-10 09:40 - 00001830 _____ () C:\Users\Public\Desktop\Apps.lnk

2014-10-10 09:34 - 2014-10-10 09:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks

2014-10-10 09:34 - 2014-10-10 09:34 - 00000000 ____D () C:\ProgramData\BlueStacks

2014-10-10 09:22 - 2014-10-17 21:23 - 00003325 _____ () C:\Windows\setupact.log

2014-10-10 09:22 - 2014-10-10 09:22 - 00000000 _____ () C:\Windows\setuperr.log

2014-10-10 08:53 - 2014-10-10 08:53 - 13309928 _____ (BlueStack Systems Inc.) C:\Users\Grisu\Downloads\BlueStacks-SplitInstaller_native.exe

2014-10-10 06:50 - 2014-10-10 06:54 - 163978588 _____ () C:\Users\Grisu\Downloads\U2-Songs_Of_Innocence-%28Deluxe_Edition%29-2CD-2014-BriBerY.rar

2014-10-10 06:11 - 2014-10-10 06:11 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2014-10-10 06:00 - 2014-10-10 06:00 - 00001088 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk

2014-10-10 06:00 - 2014-10-10 06:00 - 00000000 ____D () C:\Users\Grisu\AppData\Local\VS Revo Group

2014-10-10 06:00 - 2014-10-10 06:00 - 00000000 ____D () C:\ProgramData\VS Revo Group

2014-10-10 06:00 - 2014-10-10 06:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro

2014-10-10 06:00 - 2014-10-10 06:00 - 00000000 ____D () C:\Program Files\VS Revo Group

2014-10-10 06:00 - 2009-12-30 11:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys

2014-10-10 05:56 - 2014-10-10 07:04 - 209715200 _____ () C:\Users\Grisu\Downloads\va-german50odc06102014.part1.rar

2014-10-10 05:55 - 2014-10-10 05:58 - 50068373 _____ () C:\Users\Grisu\Downloads\Neueinsteiger_der_German_ODC_TOP50_vom_06.10.2014-CannaPower.rar

2014-10-10 00:58 - 2014-10-10 09:15 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\2E653FC9.sys

2014-10-08 15:19 - 2014-10-08 15:19 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\VSRevoGroup

2014-10-08 15:13 - 2014-10-08 15:13 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\Sinvise Systems

2014-10-08 15:13 - 2014-10-08 15:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sinvise Systems

2014-10-08 15:13 - 2014-10-08 15:13 - 00000000 ____D () C:\Program Files (x86)\Sinvise Systems

2014-10-08 15:10 - 2014-10-08 15:10 - 01125200 _____ () C:\Users\Grisu\Downloads\Shutdown Timer 32 Bit - CHIP-Installer.exe

2014-10-08 14:55 - 2014-10-08 14:55 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\64911C52.sys

2014-10-08 04:15 - 2014-10-08 04:15 - 04246449 _____ () C:\Users\Grisu\Downloads\motochopper.zip

2014-10-08 03:52 - 2014-10-08 03:52 - 00000000 ____D () C:\EGLTD

2014-10-07 14:47 - 2014-10-07 14:47 - 02941840 _____ (Microsoft Corporation) C:\Users\Grisu\Downloads\Windows7-USB-DVD-Download-Tool-Installer-de-DE.exe

2014-10-05 14:38 - 2014-10-16 10:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-10-04 02:20 - 2014-10-04 02:27 - 291852366 _____ () C:\Users\Grisu\Downloads\Windows6.1-KB968211-x86-RefreshPkg.msu

2014-10-03 14:18 - 2014-10-03 14:18 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\1343656D.sys

2014-10-02 09:35 - 2014-10-02 09:55 - 176129509 _____ () C:\Users\Grisu\Downloads\Mashup-Germany - Vol.6 - Back to the future.zip

2014-10-02 08:56 - 2014-10-14 02:39 - 00270078 _____ () C:\Users\Grisu\Documents\WhatsApp Chat mit Franzi.odt

2014-10-02 01:43 - 2014-10-02 01:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-10-02 01:27 - 2014-10-02 01:27 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Grisu\Downloads\revosetup95.exe

2014-10-01 12:25 - 2014-10-01 12:25 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\449A0149.sys

2014-10-01 00:19 - 2014-10-01 00:19 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\7D894C22.sys

2014-09-29 14:13 - 2014-10-01 12:05 - 00381736 _____ () C:\Users\Grisu\Documents\WhatsApp Chat mit Franzi.txt

2014-09-28 12:49 - 2014-09-28 12:49 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\319F42D4.sys

2014-09-28 12:09 - 2014-09-28 12:09 - 00335504 _____ (Bytro Labs) C:\Users\Grisu\Downloads\S1914JavaInstaller.exe

2014-09-26 16:12 - 2014-09-26 16:12 - 00000310 _____ () C:\CCALib8WS.log

2014-09-26 16:11 - 2014-09-26 17:36 - 00000000 ____D () C:\sh4ldr

2014-09-26 13:38 - 2014-09-26 13:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elcomsoft Password Recovery

2014-09-26 13:38 - 2014-09-26 13:38 - 00000000 ____D () C:\ProgramData\Elcomsoft Password Recovery

2014-09-26 13:38 - 2014-09-26 13:38 - 00000000 ____D () C:\Program Files (x86)\Elcomsoft

2014-09-26 13:36 - 2014-09-26 13:36 - 00000000 ____D () C:\Users\Grisu\Desktop\Advanced Archive Password Recovery Professional 4.54.48

2014-09-26 13:35 - 2014-09-26 13:35 - 07328167 _____ () C:\Users\Grisu\Downloads\Advanced Archive Password Recovery.zip

2014-09-26 13:13 - 2014-09-26 13:13 - 00000000 _____ () C:\Users\Grisu\Downloads\Spy_Hunter_4_Crack_Full.exe

2014-09-26 05:05 - 2014-09-26 05:05 - 00000000 ____D () C:\Users\Grisu\Desktop\Canon

2014-09-26 05:05 - 2014-09-26 05:05 - 00000000 _____ () C:\autoexec.bat

2014-09-26 03:02 - 2014-09-26 03:02 - 00000000 ____D () C:\Windows\SysWOW64\X86

2014-09-26 03:02 - 2014-09-26 03:02 - 00000000 ____D () C:\Windows\SysWOW64\AMD64

2014-09-26 03:01 - 2014-09-26 04:12 - 00000000 ____D () C:\Program Files (x86)\OpteOn

2014-09-26 03:01 - 2014-09-26 04:12 - 00000000 ____D () C:\Program Files (x86)\OpitOn

2014-09-26 03:01 - 2014-09-26 03:44 - 00000000 ____D () C:\ProgramData\OpteOn

2014-09-26 03:01 - 2014-09-26 03:44 - 00000000 ____D () C:\ProgramData\OpitOn

2014-09-26 03:00 - 2014-09-26 04:52 - 00000000 ____D () C:\Program Files (x86)\ORBTR

2014-09-26 01:47 - 2014-10-02 01:36 - 00000008 __RSH () C:\ProgramData\ntuser.pol

2014-09-26 01:47 - 2014-09-26 03:01 - 00000000 ____D () C:\ProgramData\dad537a8ea1f6947

2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google

2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo

2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\HomeGroupUser$

2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\Grisu\AppData\Local\Comodo

2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google

2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo

2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\Gast

2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google

2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo

2014-09-26 01:46 - 2014-09-26 01:46 - 00000000 ____D () C:\Users\Administrator

2014-09-26 01:30 - 2014-09-26 01:30 - 00122467 _____ () C:\Users\Grisu\Downloads\PL5-6-Kgn(1).rar

2014-09-26 01:29 - 2014-09-26 01:29 - 00122467 _____ () C:\Users\Grisu\Downloads\PL5-6-Kgn.rar

2014-09-25 21:38 - 2014-10-08 11:44 - 00000000 ____D () C:\Users\Grisu\AppData\Local\CANON_INC

2014-09-25 21:32 - 2014-09-26 03:24 - 00000000 ___RD () C:\Users\Grisu\Desktop\104CANON

2014-09-25 21:31 - 2014-09-25 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities

2014-09-25 21:30 - 2014-09-25 21:31 - 00000000 ____D () C:\Program Files (x86)\Canon

2014-09-25 21:29 - 2014-09-25 21:46 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\canon

2014-09-25 21:28 - 2014-09-25 21:28 - 00000000 ____D () C:\ProgramData\Canon_Inc_IC

2014-09-24 23:32 - 2014-09-24 23:33 - 00001703 _____ () C:\Users\Grisu\Downloads\Adobe Photoshop Lightroom 5.2 [64 bit] (Serials ONLY).zip

2014-09-24 23:19 - 2014-09-24 23:24 - 00000000 ____D () C:\Users\Grisu\Downloads\odbg110

2014-09-24 23:19 - 2014-09-24 23:19 - 01333471 _____ () C:\Users\Grisu\Downloads\odbg110.zip

2014-09-24 22:06 - 2014-09-24 22:06 - 00521216 _____ (PainteR) C:\Users\Grisu\Downloads\Adobe Universal Patcher.exe

2014-09-24 11:32 - 2014-09-24 11:32 - 00000917 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC.lnk

2014-09-24 10:45 - 2014-09-24 10:45 - 00001711 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop Lightroom 5.6 64-bit.lnk

2014-09-24 01:24 - 2014-09-24 01:29 - 00000000 ____D () C:\Users\Grisu\Downloads\Adobe_Photoshop_Lightroom_5_6_keygen

2014-09-24 01:21 - 2014-09-24 01:21 - 00000000 ____D () C:\Users\Grisu\Documents\Adobe

2014-09-24 00:51 - 2014-09-24 00:53 - 00007510 _____ () C:\Users\Grisu\Adobe Creative Suite Cleaner Tool.log

2014-09-24 00:50 - 2014-09-24 00:53 - 00000000 ____D () C:\Users\Grisu\Downloads\adobe_creative_suite_6cleaner_tool

2014-09-24 00:49 - 2014-09-24 00:50 - 08098376 _____ () C:\Users\Grisu\Downloads\adobe_creative_suite_6cleaner_tool.zip

2014-09-23 01:50 - 2014-09-23 03:16 - 1047527424 _____ () C:\Users\Grisu\Downloads\9846541212-ts4sg.part02.rar

2014-09-22 12:05 - 2014-09-22 13:36 - 1047527424 _____ () C:\Users\Grisu\Downloads\9846541212-ts4sg.part01.rar

2014-09-22 03:31 - 2014-09-22 03:31 - 00000000 ____D () C:\ProgramData\Codemasters

2014-09-22 03:15 - 2014-09-22 03:15 - 00001349 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk

2014-09-22 03:15 - 2014-09-22 03:15 - 00000000 ____D () C:\Windows\SysWOW64\xlive

2014-09-22 03:15 - 2014-09-22 03:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace

2014-09-22 03:15 - 2014-09-22 03:15 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE

2014-09-22 03:03 - 2014-09-22 03:03 - 00000000 ____D () C:\Program Files (x86)\OpenAL

2014-09-22 02:48 - 2014-09-22 02:48 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\095B6173.sys

2014-09-20 16:31 - 2014-10-17 10:48 - 00070197 _____ () C:\Users\Grisu\Desktop\Arbeitszeitnachweis-2014.ods

2014-09-20 16:22 - 2014-10-12 11:03 - 00020028 _____ () C:\Users\Grisu\Desktop\Lärmbelästigung Nachbar 2014.ods

2014-09-19 12:55 - 2014-09-19 12:55 - 13629321 _____ () C:\Users\Grisu\Downloads\The-Next-Generation.rar

2014-09-19 12:55 - 2014-09-19 12:55 - 05895249 _____ () C:\Users\Grisu\Downloads\Was-kommt-danach.rar

2014-09-19 12:54 - 2014-09-19 12:56 - 54808864 _____ () C:\Users\Grisu\Downloads\Liebe---Schmerz.rar

2014-09-19 12:54 - 2014-09-19 12:55 - 07495120 _____ () C:\Users\Grisu\Downloads\Meine-eigene-Lieder.rar

2014-09-19 02:02 - 2014-10-17 21:26 - 00000000 ___RD () C:\Users\Grisu\Dropbox

2014-09-19 02:01 - 2014-09-18 14:59 - 00001021 _____ () C:\Users\Grisu\Desktop\Dropbox.lnk

2014-09-18 14:59 - 2014-09-18 14:59 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-09-18 14:56 - 2014-10-17 21:26 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\Dropbox

2014-09-18 14:55 - 2014-09-24 09:59 - 00000000 ____D () C:\Users\Grisu\Desktop\Adobe CS6 All Products Activator (x32 & x64)

2014-09-18 14:53 - 2014-09-18 14:54 - 41377280 _____ (Dropbox, Inc.) C:\Users\Grisu\Downloads\Dropbox_2.10.30.exe

2014-09-18 14:07 - 2014-09-18 14:07 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\PDAppFlex

2014-09-18 12:04 - 2014-09-18 12:04 - 00030392 _____ () C:\Users\Grisu\Downloads\excel-vorlagen-haushaltsbuch.zip

2014-09-18 11:49 - 2014-09-18 11:49 - 00034304 _____ () C:\Users\Grisu\Downloads\wochenplan.xls

2014-09-18 11:44 - 2014-09-18 11:45 - 07441742 _____ () C:\Users\Grisu\Downloads\Unternehmensbereich-Aktuelles-SoundOfWork-3029_41456-0.zip

2014-09-18 11:34 - 2014-09-18 12:59 - 1047527424 _____ () C:\Users\Grisu\Downloads\984561244-ultstrfighiv.part02.rar

2014-09-18 09:52 - 2014-09-18 11:17 - 1047527424 _____ () C:\Users\Grisu\Downloads\984561244-ultstrfighiv.part01.rar

2014-09-17 23:28 - 2014-09-17 23:28 - 00918440 _____ (Oracle Corporation) C:\Users\Grisu\Downloads\chromeinstall-7u67 (1).exe

2014-09-17 22:30 - 2014-09-17 22:30 - 00000000 ___RD () C:\Users\Grisu\Creative Cloud Files

2014-09-17 11:40 - 2014-09-17 11:40 - 00031408 _____ () C:\Users\Grisu\Downloads\Arbeitszeit_2004.zip

2014-09-17 11:35 - 2014-09-17 11:35 - 01101648 _____ () C:\Users\Grisu\Downloads\Arbeitszeit_2004 - CHIP-Installer.exe

2014-09-17 11:06 - 2014-09-17 11:36 - 00002269 _____ () C:\Users\Grisu\Desktop\Datenbank Open Office.odb

2014-09-17 10:15 - 2014-09-17 10:15 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\OpenOffice

2014-09-17 08:21 - 2014-09-17 08:21 - 00000855 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk

2014-09-17 08:21 - 2014-09-17 08:21 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1

2014-09-17 06:35 - 2014-09-17 06:36 - 01101648 _____ () C:\Users\Grisu\Downloads\OpenOffice - CHIP-Installer.exe
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-10-17 22:58 - 2014-06-16 02:43 - 00000000 ____D () C:\Users\Grisu\Desktop\Trojaner software

2014-10-17 22:54 - 2014-06-13 03:59 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-10-17 22:32 - 2014-07-29 10:57 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-10-17 22:01 - 2014-06-05 15:00 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-10-17 21:39 - 2014-06-03 10:14 - 00000000 ____D () C:\ProgramData\Kaspersky Lab

2014-10-17 21:31 - 2009-07-14 06:45 - 00059584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-10-17 21:31 - 2009-07-14 06:45 - 00059584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-10-17 21:26 - 2014-06-03 09:07 - 01943981 _____ () C:\Windows\WindowsUpdate.log

2014-10-17 21:25 - 2014-07-29 10:57 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-10-17 21:23 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-10-17 09:07 - 2014-08-04 02:00 - 00000000 ____D () C:\Users\Grisu\AppData\Local\Adobe

2014-10-17 00:50 - 2014-07-29 10:57 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-10-17 00:50 - 2014-06-13 03:59 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-10-17 00:50 - 2014-06-03 11:47 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-10-17 00:50 - 2014-06-03 11:47 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-10-17 00:47 - 2014-09-15 21:47 - 00000000 ____D () C:\Program Files (x86)\Java

2014-10-16 10:35 - 2014-06-18 23:30 - 00000000 ____D () C:\Windows\ERUNT

2014-10-16 10:28 - 2014-07-28 23:36 - 00000000 ____D () C:\Program Files\Java

2014-10-16 10:27 - 2014-09-15 21:39 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-10-16 10:26 - 2014-09-15 21:47 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-10-16 10:26 - 2014-09-15 21:47 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-10-16 10:26 - 2014-09-15 21:47 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-10-16 10:14 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2014-10-16 09:51 - 2014-07-19 12:21 - 00003852 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1405765260

2014-10-16 09:51 - 2014-07-19 12:21 - 00000000 ____D () C:\Program Files (x86)\Opera

2014-10-15 13:18 - 2014-06-06 02:32 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\GanymedeNet

2014-10-14 02:10 - 2014-06-03 09:14 - 00000000 ____D () C:\Users\Grisu

2014-10-13 02:08 - 2014-06-23 12:56 - 00000000 ____D () C:\ProgramData\Origin

2014-10-13 01:28 - 2014-06-24 12:18 - 00000000 ____D () C:\Users\Grisu\Documents\FIFA 14

2014-10-12 22:50 - 2014-06-23 12:55 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-10-11 11:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2014-10-10 09:58 - 2014-09-09 14:35 - 00000000 ____D () C:\ProgramData\BlueStacksSetup

2014-10-10 09:40 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries

2014-10-10 09:34 - 2014-09-15 12:01 - 00000000 ____D () C:\Program Files (x86)\BlueStacks

2014-10-10 09:32 - 2013-01-22 21:02 - 00000000 ____D () C:\Users\Grisu\Desktop\Paddy musik

2014-10-10 06:35 - 2009-07-14 19:58 - 00732176 _____ () C:\Windows\system32\perfh007.dat

2014-10-10 06:35 - 2009-07-14 19:58 - 00159712 _____ () C:\Windows\system32\perfc007.dat

2014-10-10 06:35 - 2009-07-14 07:13 - 01685660 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-10-10 06:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-10-10 04:03 - 2014-06-03 12:48 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\Adobe

2014-10-10 03:57 - 2014-07-18 09:50 - 00000000 ____D () C:\Program Files (x86)\Adobe

2014-10-10 03:52 - 2014-06-23 13:02 - 00000000 ____D () C:\Program Files (x86)\Origin Games

2014-10-10 00:16 - 2014-06-17 15:55 - 00000000 ____D () C:\Users\Grisu\Documents\Benutzerdefinierte Office-Vorlagen

2014-10-09 12:31 - 2014-09-11 09:04 - 00000000 ____D () C:\ProgramData\Netzmanager

2014-10-08 15:02 - 2014-06-06 02:30 - 00000000 ____D () C:\Program Files (x86)\Ganymede

2014-10-08 11:44 - 2014-06-03 17:32 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform

2014-10-08 11:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration

2014-10-06 15:17 - 2014-06-03 14:50 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\uTorrent

2014-10-05 16:22 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-10-04 02:28 - 2009-07-14 20:18 - 00000000 ___RD () C:\Users\Public\Recorded TV

2014-10-04 02:02 - 2014-06-11 00:00 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games

2014-10-03 23:34 - 2014-08-05 03:07 - 00000000 ____D () C:\Users\Grisu\Desktop\SciLor's Grooveshark.com Downloader

2014-10-02 05:51 - 2014-06-03 10:14 - 00000000 ____D () C:\Windows\ELAMBKUP

2014-09-30 12:26 - 2014-07-25 00:31 - 00000000 ____D () C:\Users\Grisu\AppData\Local\Unity

2014-09-29 01:11 - 2014-09-11 09:05 - 00000769 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Netzmanager.lnk

2014-09-29 01:11 - 2014-09-11 09:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netzmanager

2014-09-27 13:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help

2014-09-26 17:11 - 2014-07-18 18:14 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\ICQM

2014-09-26 06:27 - 2014-07-29 10:57 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-09-26 06:27 - 2014-06-03 16:14 - 00000000 ____D () C:\Program Files (x86)\Google

2014-09-26 05:56 - 2014-06-18 12:34 - 00000774 _____ () C:\Users\Grisu\Desktop\TeamSpeak 3 Client.lnk

2014-09-26 05:55 - 2014-06-11 14:27 - 00000725 _____ () C:\Users\Grisu\Desktop\Cheat Engine.lnk

2014-09-26 05:42 - 2014-07-18 09:56 - 00000907 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5 (64 Bit).lnk

2014-09-26 05:42 - 2014-07-18 09:56 - 00000862 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5.lnk

2014-09-26 05:42 - 2014-07-18 09:53 - 00000899 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS5.lnk

2014-09-26 05:42 - 2014-07-18 09:51 - 00000956 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS5.lnk

2014-09-26 05:08 - 2014-06-03 09:14 - 00000000 ____D () C:\Users\Grisu\AppData\Local\VirtualStore

2014-09-26 04:11 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy

2014-09-26 03:44 - 2014-07-22 06:08 - 00000000 ____D () C:\Windows\Sun

2014-09-26 01:46 - 2014-06-03 16:14 - 00000000 ____D () C:\Users\Grisu\AppData\Local\Google

2014-09-26 01:30 - 2014-06-03 17:28 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-09-25 23:51 - 2014-06-25 11:25 - 00000000 ____D () C:\Windows\pss

2014-09-25 19:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PLA

2014-09-24 23:08 - 2009-07-14 06:45 - 05157960 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-09-24 14:59 - 2014-06-03 10:55 - 00118680 _____ () C:\Users\Grisu\AppData\Local\GDIPFONTCACHEV1.DAT

2014-09-24 11:33 - 2014-07-18 09:53 - 00000000 ____D () C:\Program Files\Common Files\Adobe

2014-09-24 09:59 - 2014-07-29 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-09-24 09:59 - 2014-07-07 16:41 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\Ubisoft

2014-09-24 09:58 - 2014-07-18 09:49 - 00000000 ____D () C:\ProgramData\Adobe

2014-09-22 03:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared

2014-09-22 03:03 - 2014-07-18 10:09 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe

2014-09-20 19:55 - 2014-06-14 04:00 - 00000000 ____D () C:\Windows\Minidump

2014-09-17 22:41 - 2014-06-19 12:37 - 00000000 ____D () C:\Users\Grisu\AppData\Local\Apps\2.0

2014-09-17 22:25 - 2014-06-06 01:52 - 00000000 ____D () C:\ProgramData\Package Cache
 

Some content of TEMP:

====================

C:\Users\Grisu\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmphwubvb.dll

C:\Users\Grisu\AppData\Local\Temp\FileSystemView.dll

C:\Users\Grisu\AppData\Local\Temp\InstallPlugin_15_0_0_189.exe

C:\Users\Grisu\AppData\Local\Temp\jre-8u25-windows-au.exe

C:\Users\Grisu\AppData\Local\Temp\Quarantine.exe

C:\Users\Grisu\AppData\Local\Temp\sqlite3.dll

C:\Users\Grisu\AppData\Local\Temp\VSUSetup.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 

==================== BCD ================================
 

Windows-Start-Manager

---------------------

Bezeichner              {bootmgr}

device                  partition=C:

description             Windows Boot Manager

locale                  de-DE

inherit                 {globalsettings}

default                 {current}

resumeobject            {83b231c0-eaf5-11e3-9627-acd98b81b942}

displayorder            {current}

toolsdisplayorder       {memdiag}

timeout                 15
 

Windows-Startladeprogramm

-------------------------

Bezeichner              {2cce4ab4-37dd-11e4-94c2-00226863bf18}

device                  ramdisk=[C:]\Recovery\2cce4ab4-37dd-11e4-94c2-00226863bf18\Winre.wim,{2cce4ab5-37dd-11e4-94c2-00226863bf18}

path                    \windows\system32\winload.exe

description             Windows Recovery Environment

inherit                 {bootloadersettings}

osdevice                ramdisk=[C:]\Recovery\2cce4ab4-37dd-11e4-94c2-00226863bf18\Winre.wim,{2cce4ab5-37dd-11e4-94c2-00226863bf18}

systemroot              \windows

nx                      OptIn

winpe                   Yes
 

Windows-Startladeprogramm

-------------------------

Bezeichner              {current}

device                  partition=C:

path                    \Windows\system32\winload.exe

description             Windows 7

locale                  de-DE

inherit                 {bootloadersettings}

recoverysequence        {2cce4ab4-37dd-11e4-94c2-00226863bf18}

recoveryenabled         Yes

osdevice                partition=C:

systemroot              \Windows

resumeobject            {83b231c0-eaf5-11e3-9627-acd98b81b942}

nx                      OptIn

usefirmwarepcisettings  No

sos                     Yes
 

Wiederaufnahme aus dem Ruhezustand

----------------------------------

Bezeichner              {83b231c0-eaf5-11e3-9627-acd98b81b942}

device                  partition=C:

path                    \Windows\system32\winresume.exe

description             Windows Resume Application

locale                  de-DE

inherit                 {resumeloadersettings}

filedevice              partition=C:

filepath                \hiberfil.sys

debugoptionenabled      No
 

Windows-Speichertestprogramm

----------------------------

Bezeichner              {memdiag}

device                  partition=C:

path                    \boot\memtest.exe

description             Windows-Speicherdiagnose

locale                  de-DE

inherit                 {globalsettings}

badmemoryaccess         Yes
 

EMS-Einstellungen

-----------------

Bezeichner              {emssettings}

bootems                 Yes
 

Debuggereinstellungen

---------------------

Bezeichner              {dbgsettings}

debugtype               Serial

debugport               1

baudrate                115200
 

RAM-Defekte

-----------

Bezeichner              {badmemory}
 

Globale Einstellungen

---------------------

Bezeichner              {globalsettings}

inherit                 {dbgsettings}

                        {emssettings}

                        {badmemory}
 

Startladeprogramm-Einstellungen

-------------------------------

Bezeichner              {bootloadersettings}

inherit                 {globalsettings}

                        {hypervisorsettings}
 

Hypervisoreinstellungen

-------------------

Bezeichner              {hypervisorsettings}

hypervisordebugtype     Serial

hypervisordebugport     1

hypervisorbaudrate      115200
 

Einstellungen zur Ladeprogrammfortsetzung

-----------------------------------------

Bezeichner              {resumeloadersettings}

inherit                 {globalsettings}
 

Geräteoptionen

--------------

Bezeichner              {2cce4ab5-37dd-11e4-94c2-00226863bf18}

description             Ramdisk Options

ramdisksdidevice        partition=C:

ramdisksdipath          \Recovery\2cce4ab4-37dd-11e4-94c2-00226863bf18\boot.sdi
 
 
 

LastRegBack: 2014-09-26 08:47
 

==================== End Of Log ============================

--- --- ---

Users shortcut scan result (x64) Version: 15-10-2014 02
Ran by Grisu at 2014-10-17 23:00:46
Running from C:\Users\Grisu\Desktop\Trojaner software
Boot Mode: Normal
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Netzmanager.lnk -> D:\Programme\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS5.lnk -> F:\Programme\Photosho CS5\Adobe Bridge CS5\Bridge.exe (Adobe Systems, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS5.lnk -> D:\Programme\Photosho CS5\Adobe Device Central CS5\DeviceCentral.exe (Adobe Systems Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS5.lnk -> C:\Program Files (x86)\Adobe\Adobe Utilities - CS5\ExtendScript Toolkit CS5\ExtendScript Toolkit.exe (Adobe Systems Incorporated)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS5.lnk -> D:\Programme\Photosho CS5\Adobe Extension Manager CS5\Adobe Extension Manager CS5.exe (Adobe Systems Incorporated)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk -> C:\Program Files (x86)\Adobe\Adobe Help\Adobe Help.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC.lnk -> D:\Programme\Adobe Photoshop CC 64Bit\Adobe Photoshop CC\Photoshop.exe (Adobe Systems, Incorporated)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5 (64 Bit).lnk -> D:\Programme\Photosho CS5\Adobe Photoshop CS5 (64 Bit)\Photoshop.exe (Adobe Systems, Incorporated)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5.lnk -> D:\Programme\Photosho CS5\Adobe Photoshop CS5\Photoshop.exe (Adobe Systems, Incorporated)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop Lightroom 5.6 64-bit.lnk -> D:\Programme\Adobe Photoshop Lightroom 5.6\lightroom.exe (Adobe Systems)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk -> C:\Program Files (x86)\Secunia\PSI\psi.exe (Secunia)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk -> C:\Windows\System32\WindowsAnytimeUpgradeUI.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk -> C:\Program Files\DVD Maker\DVDMaker.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\SIGNINOPTIONS.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft\Account- und Rechnungssupport.lnk -> F:\Spiele von C\World of Warcraft\Data\deDE\AccountBilling.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft\Technischer Kundendienst.lnk -> F:\Spiele von C\World of Warcraft\Data\deDE\TechSupport.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft\World of Warcraft.lnk -> D:\Spiele\World of Warcraft\Launcher.exe (Blizzard Entertainment)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Benutzerhandbuch für die Konsolenversion von RAR.lnk -> C:\Program Files\WinRAR\Rar.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Hilfe zu WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Was ist neu in dieser Version.lnk -> C:\Program Files\WinRAR\WhatsNew.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sinvise Systems\Shutdown Timer\Check for Updates.lnk -> C:\Windows\Installer\{0B1BBEE3-C10D-44BE-A6BE-EEC867315F87}\Updater.exe_E20B2B5FC4F041B78CF7696254CCF80B.exe (Acresso Software Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sinvise Systems\Shutdown Timer\Shutdown Timer.lnk -> C:\Windows\Installer\{0B1BBEE3-C10D-44BE-A6BE-EEC867315F87}\Shutdown_Timer.exe_1679CE734515425E8E8CCB32956A82D7.exe (Acresso Software Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro\Revo Uninstaller Pro entfernen.lnk -> C:\Program Files\VS Revo Group\Revo Uninstaller Pro\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro\Revo Uninstaller Pro Help.lnk -> C:\Program Files\VS Revo Group\Revo Uninstaller Pro\Revo Uninstaller Pro Help.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro\Revo Uninstaller Pro.lnk -> C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe (VS Revo Group)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrintProjects\ PrintProjects deinstallieren.lnk -> C:\Program Files (x86)\PrintProjects\uninst.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrintProjects\PrintProjects.lnk -> C:\Program Files (x86)\PrintProjects\PhotoProduct.exe (Visan / RocketLife)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO\PowerISO Help.lnk -> C:\Program Files (x86)\PowerISO\PowerISO.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO\PowerISO Virtual Drive Manager.lnk -> C:\Program Files (x86)\PowerISO\PWRISOVM.EXE (Power Software Ltd)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO\PowerISO.lnk -> C:\Program Files (x86)\PowerISO\PowerISO.exe (Power Software Ltd)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO\Uninstall PowerISO.lnk -> C:\Program Files (x86)\PowerISO\uninstall.exe (Power Software Ltd)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Historie.lnk -> C:\Program Files (x86)\PDFCreator\History.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\PDFCreator Hilfe.lnk -> C:\Program Files (x86)\PDFCreator\PDFCreator_german.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\PDFCreator im Internet.lnk -> C:\Program Files (x86)\PDFCreator\PDFCreator.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\PDFCreator.lnk -> C:\Program Files (x86)\PDFCreator\PDFCreator.exe (pdfforge GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Translation Tool.lnk -> C:\Program Files (x86)\PDFCreator\languages\TransTool.exe (pdfforge pdfforge | The free PDF Creator, Converter and PDF Editor)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Unterstütze PDFCreator.lnk -> C:\Program Files (x86)\PDFCreator\Unterstütze PDFCreator.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Licenses\AFPL License.lnk -> C:\Program Files (x86)\PDFCreator\AFPL License.txt (No File)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Licenses\FairPlay License.lnk -> C:\Program Files (x86)\PDFCreator\FairPlay License.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Licenses\GPL License.lnk -> C:\Program Files (x86)\PDFCreator\GNU License.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Images2PDF\Images2PDF.lnk -> C:\Program Files (x86)\PDFCreator\Images2PDF\Images2PDF.exe (pdfforge GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2\PDF Architect 2.lnk -> C:\Program Files (x86)\PDF Architect 2\PDF Architect 2.exe (pdfforge GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Deinstallieren von Origin.lnk -> C:\Program Files (x86)\Origin\OriginUninstall.exe (Electronic Arts, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Origin Fehlermelder.lnk -> C:\Program Files (x86)\Origin\OriginER.exe (Electronic Arts)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Origin.lnk -> C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenTTD\Changelog.lnk -> G:\Spiele von C\Transport tycoon deluxe\changelog.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenTTD\Known-bugs.lnk -> G:\Spiele von C\Transport tycoon deluxe\known-bugs.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenTTD\OpenTTD.lnk -> G:\Spiele von C\Transport tycoon deluxe\openttd.exe (OpenTTD Development Team)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenTTD\Readme.lnk -> G:\Spiele von C\Transport tycoon deluxe\readme.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenTTD\Uninstall.lnk -> E:\Spiele von C\Transport Tycoon Deluxe\uninstall.exe (No File)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenTTD\Scripts\Readme.lnk -> G:\Spiele von C\Transport tycoon deluxe\scripts\readme.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenTTD\Docs\Multiplayer.lnk -> G:\Spiele von C\Transport tycoon deluxe\docs\multiplayer.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Base.lnk -> D:\Programme\Open Office\program\sbase.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Calc.lnk -> D:\Programme\Open Office\program\scalc.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Draw.lnk -> D:\Programme\Open Office\program\sdraw.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Impress.lnk -> D:\Programme\Open Office\program\simpress.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Math.lnk -> D:\Programme\Open Office\program\smath.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Writer.lnk -> D:\Programme\Open Office\program\swriter.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice.lnk -> D:\Programme\Open Office\program\soffice.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netzmanager\Netzmanager.lnk -> D:\Programme\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\Silverlight.Configuration.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Access 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\accicons.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\An OneNote 2013 senden.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\joticon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Excel 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\xlicons.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\InfoPath Filler 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\inficon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Lync 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\lyncicon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\OneDrive for Business 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\grv_icons.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\OneNote 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\joticon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Outlook 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\outicon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\PowerPoint 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\pptico.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Publisher 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\pubs.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Word 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\wordicon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Office 2013-Tools\Database Compare 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\dbcicons.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Office 2013-Tools\Lync-Aufzeichnungs-Manager.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\lyncicon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Office 2013-Tools\Office 2013 Upload Center.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\msouc.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Office 2013-Tools\Office 2013-Spracheinstellungen.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\misc.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Office 2013-Tools\Spreadsheet Compare 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\sscicons.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Office 2013-Tools\Telemetriedashboard für Office 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\osmadminicon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Office 2013-Tools\Telemetrieprotokoll für Office 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\osmclienticon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace\Games for Windows Marketplace.lnk -> C:\Program Files (x86)\Microsoft Games for Windows - LIVE\Client\GFWLive.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Malwarebytes Anti-Malware entfernen.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Malwarebytes Anti-Malware.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (Malwarebytes Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\chameleon.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Create Recovery Disc.lnk -> C:\Windows\System32\recdisc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk -> C:\Windows\System32\msra.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kodak\KODAK AiO Home Center.lnk -> C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe (Eastman Kodak Company)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kodak\KODAK AiO*Drucker-Tools.lnk -> C:\Program Files (x86)\Kodak\AiO\Center\AiOPrinterTools.exe (Eastman Kodak Company)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kodak\Kodak Druckereinrichtungs-Dienstprogramm.lnk -> C:\Program Files (x86)\Kodak\AiO\Center\NetworkPrinterDiscovery.exe (Eastman Kodak Company)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security\Hilfe für Kaspersky Internet Security.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\Doc\de\kis\context.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security\Kaspersky Internet Security.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe (Kaspersky Lab ZAO)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security\Kaspersky Lab im Internet.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kl.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security\Lizenzvertrag.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\Doc\de\license.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk -> C:\Program Files\Java\jre1.8.0_25\bin\javacpl.exe (Oracle Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Java konfigurieren.lnk -> C:\Program Files\Java\jre1.8.0_25\bin\javacpl.exe (Oracle Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Smart Security\Dokumentation.lnk -> C:\Program Files\ESET\ESET Smart Security\eset.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Smart Security\ESET Smart Security.lnk -> C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Smart Security\ESET SysInspector.lnk -> C:\Program Files\ESET\ESET Smart Security\SysInspector.exe (ESET)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Smart Security\ESET SysRescue.lnk -> C:\Program Files\ESET\ESET Smart Security\SysRescue.exe (ESET)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Smart Security\Lizenzvereinbarung.lnk -> C:\Program Files\ESET\ESET Smart Security\eula.rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elcomsoft Password Recovery\Advanced Archive Password Recovery.lnk -> D:\Programme\Passwort Recovery\Advanced Archive Password Recovery\ARCHPR.exe (ElcomSoft Co. Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elcomsoft Password Recovery\Documentation\Advanced Archive Password Recovery Help.lnk -> D:\Programme\Passwort Recovery\Advanced Archive Password Recovery\ARCHPR.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elcomsoft Password Recovery\Documentation\License Agreement.lnk -> D:\Programme\Passwort Recovery\License.rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duplicate Music Files Finder\Duplicate Music Files Finder.lnk -> C:\Program Files (x86)\Duplicate Music Files Finder\DMFF.exe (LC IBros Solutions)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duplicate Music Files Finder\Help.lnk -> C:\Program Files (x86)\Duplicate Music Files Finder\DMFFHelp.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duplicate Music Files Finder\Uninstall Duplicate Music Files Finder.lnk -> C:\Program Files (x86)\Duplicate Music Files Finder\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DSL-Manager\DSL-Manager Hilfe.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\Cheat Engine 6.3 (32-bit).lnk -> F:\Programme\Cheat Engine 6.3\cheatengine-i386.exe (No File)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\Cheat Engine 6.3 (64-bit).lnk -> D:\Programme\Cheat Engine 6.3\cheatengine-x86_64.exe (Cheat Engine)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\Cheat Engine 6.3.lnk -> D:\Programme\Cheat Engine 6.3\Cheat Engine.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\Cheat Engine help.lnk -> D:\Programme\Cheat Engine 6.3\CheatEngine.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\Cheat Engine tutorial.lnk -> D:\Programme\Cheat Engine 6.3\Tutorial-i386.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\Reset settings.lnk -> D:\Programme\Cheat Engine 6.3\ceregreset.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\Uninstall Cheat Engine.lnk -> D:\Programme\Cheat Engine 6.3\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\Kernel stuff\Unload kernel module.lnk -> D:\Programme\Cheat Engine 6.3\Kernelmoduleunloader.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\Picture Style Editor\Picture Style Editor.lnk -> C:\Program Files (x86)\Canon\Picture Style Editor\PSEditor.exe (CANON INC.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\PhotoStitch\PhotoStitch - INFO.lnk -> C:\Program Files (x86)\Canon\PhotoStitch\Readme.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\PhotoStitch\PhotoStitch.lnk -> C:\Program Files (x86)\Canon\PhotoStitch\STLauncher.exe (Canon Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\EOS Utility\EOS Utility 2 - INFO.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EU2\readme.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\EOS Utility\EOS Utility 2.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EU2\EOS Utility 2.exe (CANON INC.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\EOS Utility\EOS Utility.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (Canon INC.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\Digital Photo Professional\Digital Photo Professional.lnk -> C:\Program Files (x86)\Canon\Digital Photo Professional\DPPViewer.exe (CANON INC.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks\Start BlueStacks.lnk -> C:\Program Files (x86)\BlueStacks\HD-StartLauncher.exe (BlueStack Systems, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Byte\Die Siedler IV\Die Siedler IV.lnk -> D:\Spiele\Siedler 4\S4.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Byte\Die Siedler IV\Editor.lnk -> D:\Spiele\Siedler 4\Editor\S4Editor.exe (Blue Byte Software, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Byte\Die Siedler IV\Handbuch zu Die Siedler IV - Gold Edition.lnk -> D:\Spiele\Siedler 4\Handbuch\Die Siedler IV Gold Handbuch.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Byte\Die Siedler IV\Handbuch zu Die Siedler IV - Mission CD 2.lnk -> D:\Spiele\Siedler 4\Handbuch\Die Siedler IV Mission CD2 Handbuch.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Byte\Die Siedler IV\Handbuch zu Die Siedler IV - Mission CD.lnk -> D:\Spiele\Siedler 4\Handbuch\Die Siedler IV Mission CD Handbuch.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Byte\Die Siedler IV\Handbuch zu Die Siedler IV.lnk -> D:\Spiele\Siedler 4\Handbuch\Die Siedler IV Handbuch.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Byte\Die Siedler IV\Handbuch zu Die Trojaner und das Elixier der Macht.lnk -> D:\Spiele\Siedler 4\Handbuch\Die Siedler IV Add On Handbuch.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdreamers\TimeComX Basic (64-Bit)\ReadMe.lnk -> E:\Iso Programme\TimeComX Basic\ReadMe.rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdreamers\TimeComX Basic (64-Bit)\TimeComX.lnk -> E:\Iso Programme\TimeComX Basic\TimeComX.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdreamers\TimeComX Basic (64-Bit)\UnInstall.lnk -> Q:\Programme\TimeComX Basic\Uninstall.exe (No File)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net\Battle.net.lnk -> C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe (Blizzard Entertainment)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 120%\Alcohol 120% deinstallieren.lnk -> C:\Program Files (x86)\Alcohol Soft\Alcohol 120\uninst.exe (Alcohol Soft Development Team)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 120%\Alcohol 120%.lnk -> C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Alcohol.exe (Alcohol Soft Development Team)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 120%\Alcohol Hilfe.lnk -> C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Help\AX_GE.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 120%\Alcohol Kommandozeilen Starter.lnk -> C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxCmd.exe (Alcohol Soft Development Team)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Print Management.lnk -> C:\Windows\System32\printmanagement.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\displayswitch.lnk -> C:\Windows\System32\displayswitch.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\NetworkProjection.lnk -> C:\Windows\System32\NetProj.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sync Center.lnk -> C:\Windows\System32\mobsync.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\Windowspowershell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\ShapeCollector.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\TabTip.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk -> C:\Program Files\Windows Journal\Journal.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Restore.lnk -> C:\Windows\System32\rstrui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk -> C:\Windows\System32\migwiz\PostMig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Grisu\Links\Creative Cloud Files.lnk -> C:\Users\Grisu\Creative Cloud Files ()
Shortcut: C:\Users\Grisu\Links\Desktop.lnk -> C:\Users\Grisu\Desktop ()
Shortcut: C:\Users\Grisu\Links\Downloads.lnk -> C:\Users\Grisu\Downloads ()
Shortcut: C:\Users\Grisu\Links\Dropbox.lnk -> C:\Users\Grisu\Dropbox ()
Shortcut: C:\Users\Grisu\Desktop\Cheat Engine.lnk -> D:\Programme\Cheat Engine 6.3\Cheat Engine.exe ()
Shortcut: C:\Users\Grisu\Desktop\Duplicate Music Files Finder.lnk -> C:\Program Files (x86)\Duplicate Music Files Finder\DMFF.exe (LC IBros Solutions)
Shortcut: C:\Users\Grisu\Desktop\TeamSpeak 3 Client.lnk -> G:\Spiele von C\Team Speak 3\ts3client_win64.exe (TeamSpeak Systems GmbH)
Shortcut: C:\Users\Grisu\Desktop\VirtualDJ 8.lnk -> C:\Program Files (x86)\VirtualDJ\virtualdj8.exe (Atomix Productions)
Shortcut: C:\Users\Grisu\Desktop\Trojaner software\Malwarebytes Anti-Malware.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (Malwarebytes Corporation)
Shortcut: C:\Users\Grisu\Desktop\Trojaner software\Revo Uninstaller.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group)
Shortcut: C:\Users\Grisu\Desktop\Spiele\AC4BFSP - Verknüpfung.lnk -> G:\Spiele von C\Assasins creed 4\Assassin's Creed IV Black Flag\AC4BFSP.exe ()
Shortcut: C:\Users\Grisu\Desktop\Spiele\Battle.net.lnk -> C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe (Blizzard Entertainment)
Shortcut: C:\Users\Grisu\Desktop\Spiele\Die Siedler IV Gold+ Edition.lnk -> D:\Spiele\Siedler 4\S4.exe ()
Shortcut: C:\Users\Grisu\Desktop\Spiele\FIFA 14.lnk -> C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe (Electronic Arts)
Shortcut: C:\Users\Grisu\Desktop\Spiele\Launcher.exe - Verknüpfung.lnk -> D:\Spiele\World of Warcraft\Launcher.exe (Blizzard Entertainment)
Shortcut: C:\Users\Grisu\Desktop\Spiele\OpenTTD.lnk -> G:\Spiele von C\Transport tycoon deluxe\openttd.exe (OpenTTD Development Team)
Shortcut: C:\Users\Grisu\Desktop\Spiele\Sniper Elite 3.lnk -> E:\Spiele von C\Sniper Elite 3\Launcher\Sniper3Launcher.exe (No File)
Shortcut: C:\Users\Grisu\Desktop\Spiele\Wolfenstein German Uncut Edition.lnk -> G:\Spiele von C\Wolfenstein 2014\Wolfenstein German Uncut Edition\SP\Wolf2.exe (Raven Software)
Shortcut: C:\Users\Grisu\Desktop\Dokumente 2014\GEZ 19-01-2012\Bezahlt - GEZ.lnk -> C:\Users\Grisu\Desktop\Dokumente 2014\GEZ 19-01-2012\Bezahlt.txt ()
Shortcut: C:\Users\Grisu\Desktop\Canon\Digital Photo Professional.lnk -> C:\Program Files (x86)\Canon\Digital Photo Professional\DPPViewer.exe (CANON INC.)
Shortcut: C:\Users\Grisu\Desktop\Canon\EOS Utility.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (Canon INC.)
Shortcut: C:\Users\Grisu\Desktop\Canon\Picture Style Editor.lnk -> C:\Program Files (x86)\Canon\Picture Style Editor\PSEditor.exe (CANON INC.)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk -> C:\Users\Grisu\AppData\Roaming\ICQM\icq.exe (ICQ)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk -> C:\Users\Grisu\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Benutzerhandbuch für die Konsolenversion von RAR.lnk -> C:\Program Files\WinRAR\Rar.txt ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Hilfe zu WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.chm ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Was ist neu in dieser Version.lnk -> C:\Program Files\WinRAR\WhatsNew.txt ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Rip DVD.lnk -> C:\Program Files (x86)\VirtualDJ\ripdvd.exe (No File)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Rip Vinyl.lnk -> C:\Program Files (x86)\VirtualDJ\ripvinyl.exe (No File)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Setup Audio.lnk -> C:\Users\Grisu\Documents\VirtualDJ\VirtualDJ 7 - Audio Setup Guide.pdf (No File)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Setup QuickStart.lnk -> C:\Users\Grisu\Documents\VirtualDJ\VirtualDJ 8 - Getting Started.pdf ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\User Guide.lnk -> C:\Users\Grisu\Documents\VirtualDJ\VirtualDJ 8 - User Guide.pdf ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\VirtualDJ 8.lnk -> C:\Program Files (x86)\VirtualDJ\virtualdj8.exe (Atomix Productions)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\VirtualDJ Home FREE.lnk -> C:\Program Files (x86)\VirtualDJ\virtualdj_home.exe (No File)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft\Uplay\Uninstall.lnk -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uninstall.exe (Ubisoft)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft\Uplay\Uplay.lnk -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uplay.exe (Ubisoft)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander\Total Commander 64 bit Entfernen oder Reparieren.lnk -> C:\Program Files\totalcmd\TCUNIN64.EXE ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander\Total Commander 64 bit.lnk -> C:\Program Files\totalcmd\TOTALCMD64.EXE (Ghisler Software GmbH)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander\Total Commander Hilfe.lnk -> C:\Program Files\totalcmd\TOTALCMD.CHM ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client\TeamSpeak 3 Client.lnk -> G:\Spiele von C\Team Speak 3\ts3client_win64.exe (TeamSpeak Systems GmbH)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client\Uninstall.lnk -> E:\Spiele von C\Team Speak 3\Uninstall.exe (No File)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Revo Uninstaller.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Uninstall.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\uninst.exe (VS Revo Group Ltd.)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Website.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revo Uninstaller.url ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Word 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\wordicon.exe ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ\ICQ.lnk -> C:\Users\Grisu\AppData\Roaming\ICQM\icq.exe (ICQ)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Uninstall Dropbox.lnk -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe (Dropbox, Inc.)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\SendTo\Dropbox.lnk -> C:\Users\Grisu\Dropbox ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Duplicate Music Files Finder.lnk -> C:\Program Files (x86)\Duplicate Music Files Finder\DMFF.exe (LC IBros Solutions)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ICQ.lnk -> C:\Users\Grisu\AppData\Roaming\ICQM\icq.exe (ICQ)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PDFCreator.lnk -> D:\Programme\PDFCreator\PDFCreator.exe (pdfforge GmbH)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Alcohol 120% (2).lnk -> C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Alcohol.exe (Alcohol Soft Development Team)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Alcohol 120%.lnk -> C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Alcohol.exe (Alcohol Soft Development Team)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Excel 2013 (2).lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\xlicons.exe ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Excel 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\xlicons.exe ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome (2).lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\ICQ.lnk -> C:\Users\Grisu\AppData\Roaming\ICQM\icq.exe (ICQ)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Kaspersky Internet Security.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe (Kaspersky Lab ZAO)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\KODAK AiO Home Center.lnk -> C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe (Eastman Kodak Company)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Lightroom 5.6 64-bit.lnk -> D:\Programme\Adobe Photoshop Lightroom 5.6\lightroom.exe (Adobe Systems)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox (2).lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\OpenOffice Base.lnk -> D:\Programme\Open Office\program\sbase.exe (Apache Software Foundation)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Photoshop - Verknüpfung.lnk -> D:\Programme\Adobe Photoshop CC 64Bit\Adobe Photoshop CC (64 Bit)\Photoshop.exe (Adobe Systems, Incorporated)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PowerISO.lnk -> C:\Program Files (x86)\PowerISO\PowerISO.exe (Power Software Ltd)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Secunia PSI.lnk -> C:\Program Files (x86)\Secunia\PSI\psi.exe (Secunia)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Skype.lnk -> C:\Windows\Installer\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}\SkypeIcon.exe ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TimeComX (2).lnk -> E:\Iso Programme\TimeComX Basic\TimeComX.exe ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TimeComX.lnk -> E:\Iso Programme\TimeComX Basic\TimeComX.exe ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Total Commander 64 bit.lnk -> C:\Program Files\totalcmd\TOTALCMD64.EXE (Ghisler Software GmbH)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\VirtualDJ 8.lnk -> C:\Program Files (x86)\VirtualDJ\virtualdj8.exe (Atomix Productions)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Word 2013 (2).lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\wordicon.exe ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Word 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\wordicon.exe ()
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\µTorrent (2).lnk -> C:\Users\Grisu\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\µTorrent.lnk -> C:\Users\Grisu\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
Shortcut: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\ICQ.lnk -> C:\Users\Grisu\AppData\Roaming\ICQM\icq.exe (ICQ)
Shortcut: C:\Users\Grisu\AppData\Local\Microsoft\Windows\GameExplorer\{0B7E82D5-6ABA-42FC-B6A0-B57D9AC7647A}\PlayTasks\0\Spielen.lnk -> F:\Spiele von C\Gothic II\System\gothic2.exe (Piranha Bytes)
Shortcut: C:\Users\Public\Desktop\Apps.lnk -> C:\Users\Public\Libraries\Apps.library-ms ()
Shortcut: C:\Users\Public\Desktop\CCleaner.lnk -> C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
Shortcut: C:\Users\Public\Desktop\KODAK AiO Home Center.lnk -> C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe (Eastman Kodak Company)
Shortcut: C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk -> D:\Programme\Open Office\program\soffice.exe (Apache Software Foundation)
Shortcut: C:\Users\Public\Desktop\PDF Architect 2.lnk -> C:\Program Files (x86)\PDF Architect 2\PDF Architect 2.exe (pdfforge GmbH)
Shortcut: C:\Users\Public\Desktop\PDFCreator.lnk -> C:\Program Files (x86)\PDFCreator\PDFCreator.exe (pdfforge GmbH)
Shortcut: C:\Users\Public\Desktop\PrintProjects.lnk -> C:\Program Files (x86)\PrintProjects\PhotoProduct.exe (Visan / RocketLife)
Shortcut: C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk -> C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe (VS Revo Group)
Shortcut: C:\Users\Public\Desktop\Start BlueStacks.lnk -> C:\Program Files (x86)\BlueStacks\HD-StartLauncher.exe (BlueStack Systems, Inc.)

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk -> C:\Windows\System32\wuapp.exe (Microsoft Corporation) -> startmenu
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) -> /showgadgets
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sinvise Systems\Shutdown Timer\Uninstall Shutdown Timer.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /x {0B1BBEE3-C10D-44BE-A6BE-EEC867315F87}
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sierra\SWAT 4\SWAT 4 deinstallieren.lnk -> C:\Program Files (x86)\Common Files\InstallShield\Driver\10\Intel 32\IDriver.exe (InstallShield Software Corporation) -> /M{8E1CCF20-9E12-4824-BD59-7AD9E0486DD8} uninstall
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Images2PDF\Images2PDF Console Application.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /k "C:\Program Files (x86)\PDFCreator\Images2PDF\Images2PDFC.exe"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2\Uninstall or Modify PDF Architect 2.lnk -> C:\ProgramData\PDF Architect 2\Installation\PDFArchitect2Installer.exe (© pdfforge GmbH.) -> /uninstall
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\InfoPath Designer 2013.lnk -> C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\inficon.exe () -> /design
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Backup and Restore Center.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.BackupAndRestore
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kodak\KODAK AiO*Statusmonitor.lnk -> C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe (Eastman Kodak Company) -> /open
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kodak\KODAK All-in-One Software deinstallieren.lnk -> C:\ProgramData\Kodak\Installer\Setup.exe (Eastman Kodak Company) -> /Web /x {E0F274B7-592B-4669-8FB8-8D9825A09858} CompanyName="Eastman Kodak Company" /code 1031
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security\Kaspersky Internet Security entfernen.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /i{6F6873E3-5C92-4049-B511-231A138DD090} REMOVE=ALL
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk -> C:\Program Files\Java\jre1.8.0_25\bin\javacpl.exe (Oracle Corporation) -> -tab about
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Auf Updates prüfen.lnk -> C:\Program Files\Java\jre1.8.0_25\bin\javacpl.exe (Oracle Corporation) -> -tab update
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk -> C:\Program Files\Java\jre1.8.0_25\bin\javacpl.exe (Oracle Corporation) -> -tab update
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Info zu Java.lnk -> C:\Program Files\Java\jre1.8.0_25\bin\javacpl.exe (Oracle Corporation) -> -tab about
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Smart Security\Deinstallation.lnk -> C:\Program Files\ESET\ESET Smart Security\callmsi.exe (ESET) -> /i {23234C01-F6B0-40FE-A583-B66840B28445}
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elcomsoft Password Recovery\Uninstall\Advanced Archive Password Recovery.lnk -> C:\Windows\System32\msiexec.exe (Microsoft Corporation) -> /i {01011662-76A8-41E8-B1A8-4F8821570AC5}
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DSL-Manager\DSL-Manager Deinstallation.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{90A455A7-0FC8-4508-B7FA-8F135B8F041A}\Setup.exe" -l0x7
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DSL-Manager\DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH) -> /ShowGUI
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\Picture Style Editor\Picture Style Editor - Deinstallieren.lnk -> C:\Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\UnInstaller\UniversalUnInstaller.exe (CANON INC.) -> "C:\Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\Picture Style Editor\uninstall.xml"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\PhotoStitch\PhotoStitch - Deinstallieren.lnk -> C:\Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\UnInstaller\UniversalUnInstaller.exe (CANON INC.) -> "C:\Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\PhotoStitch\uninstall.xml"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\EOS Utility\EOS Utility 2 - Deinstallieren.lnk -> C:\Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\UnInstaller\UniversalUnInstaller.exe (CANON INC.) -> "C:\Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\EOS Utility 2\uninstall.xml"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\Digital Photo Professional\Digital Photo Professional - Deinstallieren.lnk -> C:\Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\UnInstaller\UniversalUnInstaller.exe (CANON INC.) -> "C:\Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\Digital Photo Professional\uninstall.xml"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Security Configuration Management.lnk -> C:\Windows\System32\secpol.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) -> -NoExit -ImportSystemModules
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) -> /open
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Welcome Center.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Grisu\Desktop\Dropbox.lnk -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) -> /home
ShortcutWithArgument: C:\Users\Grisu\AppData\Roaming\VSRevoGroup\RevoUninstaller\ADCU\EOS Utility.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (Canon INC.) -> /AutoStartUp
ShortcutWithArgument: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Uninstall VirtualDJ 8.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /x {9ADBBA93-4625-4898-BB0D-BCE7EA9F8B4A}
ShortcutWithArgument: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Uninstall VirtualDJ Home FREE.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /x {77C2D5D4-ADC5-49F9-B36E-5992FCF35EA3}
ShortcutWithArgument: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) -> /systemstartup
ShortcutWithArgument: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EOS Utility.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (Canon INC.) -> /AutoStartUp
ShortcutWithArgument: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk -> D:\Programme\Netzmanager\netzmanager.exe (Deutsche Telekom AG) -> /Autostart
ShortcutWithArgument: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Run Hunter Mode.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group) -> -hunter
ShortcutWithArgument: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ\Uninstall ICQ.lnk -> C:\Users\Grisu\AppData\Roaming\ICQM\icqsetup.exe (ICQ) -> -uninstallcu
ShortcutWithArgument: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Dropbox.lnk -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) -> /home
ShortcutWithArgument: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -extoff
ShortcutWithArgument: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter
ShortcutWithArgument: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\SendTo\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.) -> /sendto:
ShortcutWithArgument: C:\Users\Grisu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro\Revo Uninstaller Pro im Internet.url -> hxxp://www.revouninstallerpro.com/
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kodak\Benutzerhandbuch.url -> hxxp://www.kodak.com/go/manuals?pq-locale=de_DE#aioprinters
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kodak\KODAK Mobile Solutions.url -> hxxp://www.kodak.com/go/mobileprinting
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elcomsoft Password Recovery\Documentation\ElcomSoft on the Web.url -> hxxp://www.elcomsoft.com
InternetURL: C:\Users\Grisu\Favorites\Windows Live\Windows Live Gallery.url -> hxxp://go.microsoft.com/fwlink/?LinkId=70742
InternetURL: C:\Users\Grisu\Favorites\Windows Live\Windows Live Ideas.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72700
InternetURL: C:\Users\Grisu\Favorites\Windows Live\Windows Live Mail.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72681
InternetURL: C:\Users\Grisu\Favorites\Windows Live\Windows Live Spaces.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72682
InternetURL: C:\Users\Grisu\Favorites\MSN-Websites\MSN Auto.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72680
InternetURL: C:\Users\Grisu\Favorites\MSN-Websites\MSN Fernsehen.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72659
InternetURL: C:\Users\Grisu\Favorites\MSN-Websites\MSN Money.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72640
InternetURL: C:\Users\Grisu\Favorites\MSN-Websites\MSN Nachrichten.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72636
InternetURL: C:\Users\Grisu\Favorites\MSN-Websites\MSN Sport.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72635
InternetURL: C:\Users\Grisu\Favorites\MSN-Websites\MSN.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72630
InternetURL: C:\Users\Grisu\Favorites\Microsoft-Websites\IE-Site auf Microsoft.com.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72186
InternetURL: C:\Users\Grisu\Favorites\Microsoft-Websites\Microsoft Deutschland GmbH.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72520
InternetURL: C:\Users\Grisu\Favorites\Microsoft-Websites\Microsoft Store.url -> hxxp://go.microsoft.com/fwlink/?linkid=140813
InternetURL: C:\Users\Grisu\Favorites\Microsoft-Websites\Microsoft Windows - Start.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72629
InternetURL: C:\Users\Grisu\Favorites\Microsoft-Websites\Microsoft zu Hause.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72406
InternetURL: C:\Users\Grisu\Favorites\Microsoft-Websites\Microsoft.com durchsuchen.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72893
InternetURL: C:\Users\Grisu\Favorites\Microsoft-Websites\Site für IE Add-Ons.url -> hxxp://go.microsoft.com/fwlink/?LinkId=50893
InternetURL: C:\Users\Grisu\Favorites\Links\Vorgeschlagene Sites.url -> https://ieonline.microsoft.com/#ieslice
InternetURL: C:\Users\Grisu\Desktop\Spiele\Assassin's Creed IV Black Flag.url -> uplay://launch/273
InternetURL: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Dropbox Website.URL -> hxxp://www.dropbox.com
InternetURL: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse\Curse Client online support.url -> hxxp://clientsupport.curse.com/

==================== End of log =============================

Fehlt noch die Addition.txt :)

wie mach ich das ?

sry das sagt mir gerade nicht´s wie das geht oder was du meinst

FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-10-2014

Ran by Grisu at 2014-10-20 07:19:36

Running from C:\Users\Grisu\Desktop\Trojaner software

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: ESET Smart Security 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}

AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: ESET Smart Security 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

FW: ESET Personal Firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

µTorrent (HKCU\...\uTorrent) (Version: 3.4.2.34024 - BitTorrent Inc.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)

Adobe AIR (x32 Version: 1.5.3.9120 - Adobe Systems Inc.) Hidden

Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)

Adobe Community Help (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden

Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)

Adobe Photoshop CC (HKLM-x32\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated)

Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)

Adobe Photoshop Lightroom 5.6 64-bit (HKLM\...\{D19E99C2-6D9D-4075-B446-B4387EAF70A5}) (Version: 5.6.0 - Adobe Systems Incorporated)

Advanced Archive Password Recovery (HKLM-x32\...\{01011662-76A8-41E8-B1A8-4F8821570AC5}) (Version: 4.54.48.1338 - Elcomsoft Co. Ltd.)

aioprnt (Version: 5.3.1.0 - Eastman Kodak Company) Hidden

aioscnnr (x32 Version: 5.8.10.0 - Your Company Name) Hidden

aioscnnr (x32 Version: 7.6.13.10 - Your Company Name) Hidden

Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version:  - Ubisoft)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.3.4070 - BlueStack Systems, Inc.)

BlueStacks Notification Center (HKLM-x32\...\{B40D9A2E-C9CA-4402-A0B7-09E33C03B9C5}) (Version: 0.9.3.4070 - BlueStack Systems, Inc.)

Canon Utilities Digital Photo Professional (HKLM-x32\...\Digital Photo Professional) (Version: 3.14.0.0 - Canon Inc.)

Canon Utilities EOS Utility 2 (HKLM-x32\...\EOS Utility 2) (Version: 2.14.0.0 - Canon Inc.)

Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)

Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.14.0.0 - Canon Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 4.16 - Piriform)

center (x32 Version: 7.7.2.0 - Eastman Kodak Company) Hidden

Curse Client (HKCU\...\101a9f93b8f0bb6f) (Version: 5.1.1.810 - Curse)

Dropbox (HKCU\...\Dropbox) (Version: 2.10.30 - Dropbox, Inc.)

DSL-Manager (HKLM-x32\...\{90A455A7-0FC8-4508-B7FA-8F135B8F041A}) (Version:  - )

Duel of Champions (HKLM-x32\...\MMDoC-PDCLive) (Version:  - Ubisoft)

Duplicate Music Files Finder 1.5.5 (HKLM-x32\...\Duplicate Music Files Finder_is1) (Version:  - LC IBros Solutions S.R.L.)

ESET Smart Security (HKLM\...\{23234C01-F6B0-40FE-A583-B66840B28445}) (Version: 7.0.317.4 - ESET, spol s r. o.)

essentials (x32 Version: 7.7.2.0 - Eastman Kodak Company) Hidden

FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.7 - Electronic Arts)

GameDesire-Pool & Snooker (HKLM-x32\...\GameDesire-Pool & Snooker) (Version:  - )

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.124 - Google Inc.)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

ICQ 8.2 (build 7100) (HKCU\...\ICQ) (Version: 8.2.7100.0 - ICQ)

Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)

Java 8 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418025F0}) (Version: 8.0.250 - Oracle Corporation)

Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)

Java Auto Updater (x32 Version: 2.8.25.18 - Oracle Corporation) Hidden

Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab)

Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden

Kodak AIO Printer (Version: 7.7.2.0 - Eastman Kodak Company) Hidden

KODAK All-in-One Software (HKLM-x32\...\{E0F274B7-592B-4669-8FB8-8D9825A09858}) (Version: 7.7.6.0 - Eastman Kodak Company)

Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)

Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)

Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{3bcf8c72-b231-4d28-9f39-3405c22d8b5a}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)

Mozilla Firefox 33.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0 (x86 de)) (Version: 33.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0.3 - Mozilla)

NBA 2K14 (HKLM-x32\...\{4FE0545A-1BF3-4B9B-A044-6E1EE719E197}) (Version: 1.0.0 - 2K Sports)

Netzmanager (HKLM-x32\...\Netzmanager) (Version: 1.081 - Deutsche Telekom AG)

Netzmanager (Version: 1.081 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden

NVIDIA Grafiktreiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.154.1168 - NVIDIA Corporation) Hidden

NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA Systemsteuerung 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden

NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden

ocr (x32 Version: 6.2.3.50 - Eastman Kodak Company) Hidden

OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)

OpenTTD 1.4.1 (HKLM-x32\...\OpenTTD) (Version: 1.4.1 - OpenTTD)

Opera Stable 25.0.1614.50 (HKLM-x32\...\Opera 25.0.1614.50) (Version: 25.0.1614.50 - Opera Software ASA)

Origin (HKLM-x32\...\Origin) (Version: 9.4.10.297 - Electronic Arts, Inc.)

Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)

PDF Architect 2 View Module (HKLM-x32\...\{C960FF38-431D-429D-AD1F-FBD12A45B7C5}) (Version: 2.0.17.17583 - pdfforge GmbH)

PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden

PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden

PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)

PowerISO (HKLM-x32\...\PowerISO) (Version: 5.9 - Power Software Ltd)

PreReq (x32 Version: 6.2.4.0 - Eastman Kodak Company) Hidden

PrintProjects (HKLM-x32\...\PrintProjects) (Version: 1.0.0.9282 - RocketLife Inc.)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Revo Uninstaller Pro 3.1.1 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.1 - VS Revo Group, Ltd.)

Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)

Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)

Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version:  - Microsoft) Hidden

Shutdown Timer (HKLM-x32\...\{0B1BBEE3-C10D-44BE-A6BE-EEC867315F87}) (Version: 3.3.4 - Sinvise Systems)

Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)

Sniper Elite 3 GERMAN (HKLM-x32\...\U25pcGVyRWxpdGUz_is1) (Version: 1 - )

TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)

TimeComX Basic (64-Bit) (HKLM-x32\...\TimeComX Basic 64-Bit) (Version: 1.3.2.7 - Bitdreamers)

Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)

Uplay (HKLM-x32\...\Uplay) (Version: 4.6 - Ubisoft)

VirtualDJ 8 (HKLM-x32\...\{9ADBBA93-4625-4898-BB0D-BCE7EA9F8B4A}) (Version: 8.0.0 - Atomix Productions)

VirtualDJ Home FREE (HKLM-x32\...\{77C2D5D4-ADC5-49F9-B36E-5992FCF35EA3}) (Version: 7.4.1 - Atomix Productions)

Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)

WinRAR 5.10 Beta 4 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)

Wolfenstein German Uncut Edition 1.2 (HKLM-x32\...\Wolfenstein German Uncut Edition 1.2) (Version:  - )

World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
 

==================== Restore Points  =========================
 

16-10-2014 08:35:23 Ende der Bereinigung

16-10-2014 22:46:56 Installed Java 7 Update 71

16-10-2014 22:49:44 Installed Adobe Flash Player 15 Plugin.

17-10-2014 21:50:06 Wiederherstellungsvorgang
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:34 - 2014-10-10 03:22 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {137F8DA8-B0D6-4D79-A354-01F3D3786DEC} - System32\Tasks\CCleaner => C:\Program

Task: {3214F43F-E1A1-4C68-BF16-E5897A43677F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)

Task: {35F176CF-CA9A-44F4-86C7-453074B5F388} - System32\Tasks\AutoKMSCustom => C:\Windows\AutoKMS\AutoKMS.exe

Task: {47204497-A725-44BE-A0D9-2F21AE38E29F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-26] (Google Inc.)

Task: {51A59664-473F-4FFA-875A-FE68FE802FD9} - System32\Tasks\AdobeAAMUpdater-1.0-Grisu-PC-Grisu => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated)

Task: {56461B0B-7519-4712-B9BB-9859AA17AA2F} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup

Task: {633933A3-0FD6-41F6-828D-054E0E631943} - System32\Tasks\Opera scheduled Autoupdate 1405765260 => C:\Program Files (x86)\Opera\launcher.exe [2014-10-15] (Opera Software)

Task: {73F6469B-1E78-4E6C-A5F5-88191BFC333F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-10] (Adobe Systems Incorporated)

Task: {7DFD5D42-E1C6-4390-86C1-B957F1040339} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)

Task: {83D37B77-37C2-4D2B-8458-16CB19C92A74} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-26] (Google Inc.)

Task: {887F700D-9A61-4F19-ACE6-457B2D42CCAA} - System32\Tasks\{303E9A7B-F154-43B4-896B-1AD818FEB83A} => C:\Program Files (x86)\VirtualDJ\virtualdj_pro.exe

Task: {93E20468-A940-43AF-9687-0AB18E8F852A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-10-07] (Oracle Corporation)

Task: {967BFB2D-83E2-4B3D-A225-E7BCCF94D76B} - System32\Tasks\{6C11C149-E388-4638-8FF2-38591C16AC8E} => E:\Spiele von C\NBA 2014\nba2k14.exe

Task: {9FA11F48-9923-461F-A36A-F2A17A41238C} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)

Task: {BDFCBC5C-4416-42A1-BB30-04248F26BBFA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-07-23] (Piriform Ltd)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-09-01 18:54 - 2014-09-01 18:54 - 00819200 _____ () C:\Program Files (x86)\BlueStacks\HD-Adb.exe

2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll

2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll

2014-10-20 07:02 - 2014-10-20 07:02 - 00043008 _____ () c:\users\grisu\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp0r8y57.dll

2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Grisu\AppData\Roaming\Dropbox\bin\libcef.dll

2013-12-17 10:31 - 2013-12-17 10:31 - 00491520 _____ () C:\Program Files (x86)\Canon\EOS Utility\EDSDK.dll

2014-09-16 12:27 - 2014-10-10 09:40 - 00195584 _____ () C:\Program Files (x86)\BlueStacks\libEGL.dll

2014-09-16 12:27 - 2014-10-10 09:40 - 01467392 _____ () C:\Program Files (x86)\BlueStacks\libGLESv2.dll

2014-10-15 13:04 - 2014-10-15 13:04 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2014-09-10 17:55 - 2014-09-10 17:55 - 16825520 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MyOSProtect => ""="service"
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3

MSCONFIG\Services: BstHdAndroidSvc => 2

MSCONFIG\Services: BstHdLogRotatorSvc => 2

MSCONFIG\Services: BstHdUpdaterSvc => 2

MSCONFIG\Services: bthserv => 3

MSCONFIG\Services: Fax => 3

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

MSCONFIG\Services: MozillaMaintenance => 3

MSCONFIG\Services: NvNetworkService => 2

MSCONFIG\Services: nvsvc => 2

MSCONFIG\Services: ose64 => 3

MSCONFIG\Services: osppsvc => 3

MSCONFIG\Services: PDF Architect 2 => 3

MSCONFIG\Services: pdfforge CrashHandler => 3

MSCONFIG\Services: SkypeUpdate => 2

MSCONFIG\Services: StarWindServiceAE => 2

MSCONFIG\Services: SwitchBoard => 3

MSCONFIG\Services: UMVPFSrv => 2

MSCONFIG\Services: Wlansvc => 3

MSCONFIG\Services: WMPNetworkSvc => 3

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SmartCopy.lnk => C:\Windows\pss\SmartCopy.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Grisu^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip => C:\Windows\pss\CurseClientStartup.ccip.Startup

MSCONFIG\startupfolder: C:^Users^Grisu^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Grisu^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^EOS Utility.lnk => C:\Windows\pss\EOS Utility.lnk.Startup

MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true

MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

MSCONFIG\startupreg: AdobeCEPServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe" -launchedbylogin

MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin

MSCONFIG\startupreg: AlcoholAutomount => "C:\Program Files (x86)\Alcohol Soft\Alcohol 120\axcmd.exe" /automount

MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe

MSCONFIG\startupreg: Driver Operating Service => C:\Users\Grisu\AppData\Local\Apps\2.0\JDRWC0RT.9RO\5G9E4LPA.5WV\dros..tion_0000000000000000_0001.0000_b92f9a67277994ec\Driver Operating Service.appref-ms

MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart

MSCONFIG\startupreg: EKIJ5000StatusMonitor => C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe

MSCONFIG\startupreg: EKStatusMonitor => C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe                                                                                                                                                                                                       

MSCONFIG\startupreg: icq => C:\Users\Grisu\AppData\Roaming\ICQM\icq.exe -CU

MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
 

========================= Accounts: ==========================
 

Administrator (S-1-5-21-2132015822-3264924353-165971380-500 - Administrator - Disabled)

Gast (S-1-5-21-2132015822-3264924353-165971380-501 - Limited - Disabled)

Grisu (S-1-5-21-2132015822-3264924353-165971380-1000 - Administrator - Enabled) => C:\Users\Grisu

HomeGroupUser$ (S-1-5-21-2132015822-3264924353-165971380-1002 - Limited - Enabled)
 

==================== Faulty Device Manager Devices =============
 

Name: sptd

Description: sptd

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: sptd

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 

Name: Teredo Tunneling Pseudo-Interface

Description: Microsoft-Teredo-Tunneling-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 

Name: Standardtastatur (PS/2)

Description: Standardtastatur (PS/2)

Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}

Manufacturer: (Standardtastaturen)

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 

Name: Microsoft PS/2-Maus

Description: Microsoft PS/2-Maus

Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (10/20/2014 07:11:38 AM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc.manifest.
 

Error: (10/20/2014 07:11:21 AM) (Source: Windows Backup) (EventID: 4103) (User: )

Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"
 

Error: (10/18/2014 09:48:37 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (10/18/2014 00:18:01 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (10/17/2014 11:54:32 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (10/17/2014 11:48:21 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: HD-Frontend.exe, Version: 0.9.3.4070, Zeitstempel: 0x5417dc9e

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x53159a86

Ausnahmecode: 0xc0020001

Fehleroffset: 0x0000c42d

ID des fehlerhaften Prozesses: 0xb58

Startzeit der fehlerhaften Anwendung: 0xHD-Frontend.exe0

Pfad der fehlerhaften Anwendung: HD-Frontend.exe1

Pfad des fehlerhaften Moduls: HD-Frontend.exe2

Berichtskennung: HD-Frontend.exe3
 

Error: (10/17/2014 11:47:32 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 33.0.0.5397, Zeitstempel: 0x543924b1

Name des fehlerhaften Moduls: mozalloc.dll, Version: 33.0.0.5397, Zeitstempel: 0x5438ffbb

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001425

ID des fehlerhaften Prozesses: 0x704

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 

Error: (10/17/2014 00:46:13 AM) (Source: MsiInstaller) (EventID: 1002) (User: Grisu-PC)

Description: Nicht erwarteter oder fehlender Wert (Name: "PackageName", Wert: "") für Schlüssel "HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList".
 

Error: (10/17/2014 00:42:05 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm psi.exe, Version 3.0.0.9016 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: f60
 

Startzeit: 01cfe992335afa27
 

Endzeit: 0
 

Anwendungspfad: C:\Program Files (x86)\Secunia\PSI\psi.exe
 

Berichts-ID: a5971ebc-5585-11e4-a073-00226863bf18
 

Error: (10/17/2014 00:41:57 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm psi.exe, Version 3.0.0.9016 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1044
 

Startzeit: 01cfe99239502056
 

Endzeit: 0
 

Anwendungspfad: C:\Program Files (x86)\Secunia\PSI\psi.exe
 

Berichts-ID: a0f5b173-5585-11e4-a073-00226863bf18
 
 

System errors:

=============

Error: (10/20/2014 07:03:16 AM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

sptd
 

Error: (10/20/2014 07:01:28 AM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MMCSS erreicht.
 

Error: (10/20/2014 07:01:11 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (10/20/2014 07:01:11 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Live ID Sign-in Assistant erreicht.
 

Error: (10/20/2014 07:01:10 AM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ekrn erreicht.
 

Error: (10/20/2014 07:00:32 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "Orbiter" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (10/20/2014 06:59:55 AM) (Source: sptd) (EventID: 4) (User: )

Description: Der Treiber hat einen internen Fehler in seinen Datenstrukturen für  festgestellt.
 

Error: (10/19/2014 11:45:39 AM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

sptd
 

Error: (10/19/2014 11:45:03 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "Orbiter" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (10/19/2014 11:44:36 AM) (Source: sptd) (EventID: 4) (User: )

Description: Der Treiber hat einen internen Fehler in seinen Datenstrukturen für  festgestellt.
 
 

Microsoft Office Sessions:

=========================

Error: (10/20/2014 07:11:38 AM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc.manifestC:\Users\Grisu\Desktop\Trojaner software\esetsmartinstaller_deu.exe
 

Error: (10/20/2014 07:11:21 AM) (Source: Windows Backup) (EventID: 4103) (User: )

Description: D:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)
 

Error: (10/18/2014 09:48:37 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (10/18/2014 00:18:01 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (10/17/2014 11:54:32 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (10/17/2014 11:48:21 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: HD-Frontend.exe0.9.3.40705417dc9eKERNELBASE.dll6.1.7601.1840953159a86c00200010000c42db5801cfea43fda766b5C:\Program Files (x86)\BlueStacks\HD-Frontend.exeC:\Windows\syswow64\KERNELBASE.dll4f8a65aa-5647-11e4-87e5-00226863bf18
 

Error: (10/17/2014 11:47:32 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe33.0.0.5397543924b1mozalloc.dll33.0.0.53975438ffbb800000030000142570401cfea46797378b6C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll326422d6-5647-11e4-87e5-00226863bf18
 

Error: (10/17/2014 00:46:13 AM) (Source: MsiInstaller) (EventID: 1002) (User: Grisu-PC)

Description: PackageNameHKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList(NULL)(NULL)(NULL)
 

Error: (10/17/2014 00:42:05 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: psi.exe3.0.0.9016f6001cfe992335afa270C:\Program Files (x86)\Secunia\PSI\psi.exea5971ebc-5585-11e4-a073-00226863bf18
 

Error: (10/17/2014 00:41:57 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: psi.exe3.0.0.9016104401cfe992395020560C:\Program Files (x86)\Secunia\PSI\psi.exea0f5b173-5585-11e4-a073-00226863bf18
 
 

CodeIntegrity Errors:

===================================

  Date: 2014-10-11 11:06:51.822

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-11 11:06:51.822

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-11 11:06:51.822

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-11 11:06:51.790

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-11 11:06:51.790

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-11 11:06:51.790

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-11 11:06:51.728

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-11 11:06:51.728

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-11 11:06:51.728

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-08 12:09:11.957

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Web Protect\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz

Percentage of memory in use: 64%

Total physical RAM: 6135.17 MB

Available physical RAM: 2166.19 MB

Total Pagefile: 12268.52 MB

Available Pagefile: 7702.09 MB

Total Virtual: 8192 MB

Available Virtual: 8191.84 MB
 

==================== Drives ================================
 

Drive c: (Betriebssys) (Fixed) (Total:115.75 GB) (Free:19.67 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (Programme) (Fixed) (Total:1023.87 GB) (Free:900.17 GB) NTFS

Drive e: (Wichtiges) (Fixed) (Total:931.5 GB) (Free:184.63 GB) NTFS

Drive f: (Volume) (Fixed) (Total:886.45 GB) (Free:492.13 GB) NTFS

Drive g: (Spiele) (Fixed) (Total:465.76 GB) (Free:341.84 GB) NTFS

Drive h: (Betriebssys 2) (Fixed) (Total:723.4 GB) (Free:522.17 GB) NTFS

Drive i: (Spiele 3) (Fixed) (Total:976.56 GB) (Free:849.94 GB) NTFS

Drive j: (Musik&Bilder) (Fixed) (Total:936.58 GB) (Free:188.07 GB) NTFS

Drive k: () (Fixed) (Total:926.44 GB) (Free:891.41 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: F883268C)

Partition 1: (Not Active) - (Size=976.6 GB) - (Type=07 NTFS)

Partition 2: (Active) - (Size=886.5 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: F88326EF)

Partition 1: (Active) - (Size=115.7 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=1023.9 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=723.4 GB) - (Type=07 NTFS)
 

========================================================

Disk: 2 (Size: 465.8 GB) (Disk ID: 2EE023AC)

Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)
 

========================================================

Disk: 3 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 6A1CCFD9)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=OF Extended)
 

========================================================

Disk: 4 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 52425DEB)

Partition 1: (Active) - (Size=936.6 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=926.4 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---

Was genau gibt es denn an Problemen mit diesem Rechner? :)

beim kauf war er schneller bei vielen öffnungen bei programmen spielen oder auch office und oder EA-games

wie bekomme ich zb den arbeitsspeicher leer

Zitat:

AV: ESET Smart Security 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}
FW: ESET Personal Firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

Deinstallier erstmal alles an Schutzsoftware, bis auf ein einziges AV Programm.

ok die zeit vom pc beim hoch fahren oder bei der berechnung und ausführung einzelner Programme hat sich gebesser brauche dessen keine hilfe nur
ist seid neusten bei Google chrome standart mässig ein tab auf "mystartsearch"

wie bekomme ich den trojaner noch runter !
beim runterladen vom update adobe flash player

Poste mal bitte frische FRST logs.

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-10-2014

Ran by Grisu (administrator) on GRISU-PC on 30-10-2014 11:57:52

Running from C:\Users\Grisu\Desktop\Trojaner software

Loaded Profile: Grisu (Available profiles: Grisu)

Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe

(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe

(My Digital Life Forums) C:\Windows\KMSServerService\KMS Server Service.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Deutsche Telekom AG) D:\Programme\Netzmanager\NMInfraIS2\Netzmanager_Service.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

(Dropbox, Inc.) C:\Users\Grisu\AppData\Roaming\Dropbox\bin\Dropbox.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe

(Canon INC.) C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe

(Deutsche Telekom AG) D:\Programme\Netzmanager\netzmanager.exe

(CANON INC.) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Frontend.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5581888 2014-02-24] (ESET)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk

ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk

ShortcutTarget: DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)

Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk

ShortcutTarget: DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)

Startup: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EOS Utility.lnk

ShortcutTarget: EOS Utility.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (Canon INC.)

Startup: C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk

ShortcutTarget: Netzmanager.lnk -> D:\Programme\Netzmanager\netzmanager.exe (Deutsche Telekom AG)

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x56C38410017FCF01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO: OpitOn -> {6b836c64-f364-437e-bab5-11f39990cfe9} ->  No File

BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)

BHO: OpteOn -> {ab957d78-2cdb-4568-8020-2eaabcd137c2} ->  No File

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: GoSaive -> {cfd100a1-0615-4d32-9827-7ac2d4b0faa4} ->  No File

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)

BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Grisu\AppData\Roaming\Mozilla\Firefox\Profiles\t2l1m1y7.default-1407286514912

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()

FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()

FF Plugin-x32: @ganymede/GanymedeNetPlugin,version=1.0 -> C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll ( )

FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npganymedenet.dll ( )

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mystartsearch.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Lightshot (screenshot tool) - C:\Users\Grisu\AppData\Roaming\Mozilla\Firefox\Profiles\t2l1m1y7.default-1407286514912\Extensions\{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B} [2014-10-02]

FF Extension: NoScript - C:\Users\Grisu\AppData\Roaming\Mozilla\Firefox\Profiles\t2l1m1y7.default-1407286514912\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-10-16]

FF Extension: {7d02e03c-f690-4f38-bf10-5e8cc02a4740} - C:\Users\Grisu\AppData\Roaming\Mozilla\Firefox\Profiles\t2l1m1y7.default-1407286514912\Extensions\{7d02e03c-f690-4f38-bf10-5e8cc02a4740}.xpi [2014-09-09]

FF Extension: Adblock Plus - C:\Users\Grisu\AppData\Roaming\Mozilla\Firefox\Profiles\t2l1m1y7.default-1407286514912\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-17]

FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-07-28]

FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com

FF Extension: 卡巴斯基網址顧問 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-06-03]

FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com

FF Extension: 虛擬鍵盤 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-06-03]

FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com

FF Extension: 惡意網站攔截器 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-06-03]

FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com

FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-06-03]

FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com

FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-06-03]

FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
 

Chrome: 

=======

CHR HomePage: Default -> https://www.google.de/

CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=1413582446&from=amt&uid=SAMSUNGXHD204UI_S2H7J90B728318"

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}

CHR Profile: C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-26]

CHR Extension: (ZenMate) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdcgdnkidjaadafnichfpabhfomcebme [2014-08-05]

CHR Extension: (AdBlock) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-17]

CHR Extension: (Disconnect) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeoacafpbcihiomhlakheieifhpjdfeo [2014-09-17]

CHR Extension: (Google Wallet) - C:\Users\Grisu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-29]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)

R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-09-16] (BlueStack Systems, Inc.)

S4 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384728 2014-09-16] (BlueStack Systems, Inc.)

R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [777944 2014-09-16] (BlueStack Systems, Inc.)

R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1343408 2014-02-24] (ESET)

R2 KMSServerService; C:\Windows\KMSServerService\KMS Server Service.exe [211968 2014-07-06] (My Digital Life Forums) [File not signed]

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)

R2 Netzmanager Service; D:\Programme\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [File not signed]

S4 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696 2014-04-30] (NVIDIA Corporation)

S4 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH)

S4 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH)

S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Personal 2014.SP2a\RpcAgentSrv.exe [72344 2008-05-19] (SiSoftware) [File not signed]

R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)

S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)

S4 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software) [File not signed]

S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]

S3 TDslMgrService; C:\Program Files (x86)\DSL-Manager\DslMgrSvc.exe [294912 2007-11-26] (T-Systems Enterprise Services GmbH) [File not signed]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-09-16] (BlueStack Systems)

R1 DslMNLwf; C:\Windows\System32\DRIVERS\dslmnlwf.sys [19008 2007-08-01] (T-Systems Enterprise Services GmbH)

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)

U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)

R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)

R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)

R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)

R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-06-03] (Kaspersky Lab ZAO)

S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-06-03] (Kaspersky Lab ZAO)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-06-03] (Kaspersky Lab ZAO)

R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)

R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-06-03] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)

R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)

R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-06-03] (Kaspersky Lab ZAO)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-10-30] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-10-01] (Malwarebytes Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)

R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)

S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Personal 2014.SP2a\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [868848 2014-10-23] () [File not signed]

R3 TelekomNM6; D:\Programme\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)

U3 aigzmjpb; C:\Windows\System32\Drivers\aigzmjpb.sys [0 ] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

S3 gwfilt64; system32\drivers\gwfilt64.sys [X]

S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-10-29 20:48 - 2014-10-29 21:06 - 14393344 _____ () C:\Users\Grisu\AppData\Roaming\Sandra.mdb

2014-10-29 20:48 - 2014-10-29 20:49 - 00000064 _____ () C:\Users\Grisu\AppData\Roaming\Sandra.ldb

2014-10-29 20:43 - 2014-10-29 20:43 - 00001230 _____ () C:\Users\Public\Desktop\SiSoftware Sandra Personal 2014.SP2a.lnk

2014-10-29 20:43 - 2014-10-29 20:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SiSoftware

2014-10-29 20:43 - 2014-10-29 20:43 - 00000000 ____D () C:\Program Files\SiSoftware

2014-10-29 20:40 - 2014-10-29 20:45 - 00000000 ____D () C:\Users\Grisu\Desktop\SiSoftware.Sandra.Personal.v2014.06.20.35.Multilingual.Retail.Incl.Keymaker-ZWT

2014-10-29 17:13 - 2014-10-29 17:39 - 78934679 _____ () C:\Users\Grisu\Downloads\14-sissyperso-35.rar

2014-10-29 15:06 - 2014-10-29 15:07 - 68778552 _____ (SiSoftware ) C:\Users\Grisu\Downloads\san2050.exe

2014-10-29 14:40 - 2013-03-10 21:02 - 00000000 ____D () C:\Users\Grisu\Desktop\6.666 Vorlagen Excel Tabellen

2014-10-29 13:30 - 2014-07-08 13:04 - 00000000 ____D () C:\Users\Grisu\Desktop\SiSoftware.Sandra.Enterprise.v2014.06.20.35.Multilingual.Retail.Incl.Keymaker-ZWT

2014-10-29 13:13 - 2014-10-29 14:39 - 262091872 _____ () C:\Users\Grisu\Downloads\6.666.Tabellen.rar

2014-10-29 13:03 - 2014-10-29 13:28 - 78952673 _____ () C:\Users\Grisu\Desktop\14-sissyente-35.rar

2014-10-29 08:22 - 2014-10-30 09:39 - 00000392 _____ () C:\Windows\setupact.log

2014-10-29 08:22 - 2014-10-30 08:48 - 00001900 _____ () C:\Windows\PFRO.log

2014-10-29 08:22 - 2014-10-29 08:22 - 00000000 _____ () C:\Windows\setuperr.log

2014-10-28 11:56 - 2014-10-30 09:37 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-10-28 11:56 - 2014-10-28 11:56 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-10-28 11:56 - 2014-10-28 11:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-10-28 11:56 - 2014-10-28 11:56 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-10-28 11:56 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-10-28 11:56 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-10-28 11:56 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-10-28 11:55 - 2014-10-28 11:55 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Grisu\Downloads\mbam-setup-2.0.3.1025.exe

2014-10-27 22:38 - 2014-10-28 09:37 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\7E171EA0.sys

2014-10-27 22:37 - 2014-10-27 22:37 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\148D1E34.sys

2014-10-26 08:41 - 2014-10-26 08:42 - 00000000 ____D () C:\Users\Grisu\Desktop\2014_10_26

2014-10-24 14:27 - 2014-10-24 14:27 - 00000770 _____ () C:\Users\Grisu\Desktop\JRT.txt

2014-10-23 23:37 - 2014-10-23 23:37 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\75651398.sys

2014-10-23 23:37 - 2014-10-23 23:37 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\152B13CC.sys

2014-10-23 14:48 - 2014-10-29 12:22 - 00000000 ____D () C:\AdwCleaner

2014-10-23 01:49 - 2014-10-23 01:49 - 00000673 _____ () C:\Users\Public\Desktop\F1 2014.lnk

2014-10-23 01:49 - 2014-10-23 01:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codemasters

2014-10-23 01:22 - 2014-10-23 01:22 - 00000000 ____D () C:\Users\Grisu\Documents\Usenet.nl

2014-10-22 22:35 - 2014-10-23 12:37 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\708E15EB.sys

2014-10-22 22:33 - 2014-10-22 22:33 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\59D914BF.sys

2014-10-22 22:32 - 2014-10-22 22:32 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\47F524EC.sys

2014-10-22 22:12 - 2014-10-22 22:12 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\VS Revo Group

2014-10-20 06:39 - 2014-10-20 06:39 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cfec284612b0a0

2014-10-20 06:39 - 2014-10-20 06:39 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfec284612b0a0.job

2014-10-19 10:03 - 2014-10-19 10:03 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys

2014-10-18 09:24 - 2014-10-18 09:24 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\2231591B.sys

2014-10-17 21:53 - 2014-10-30 11:58 - 00000000 ____D () C:\FRST

2014-10-17 08:35 - 2014-10-17 08:51 - 00056368 _____ () C:\Users\Grisu\Desktop\Arbeitszeitnachweis-2014 - Kopie.ods

2014-10-16 23:47 - 2014-10-16 09:26 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-10-16 09:34 - 2014-10-16 09:36 - 00001772 _____ () C:\DelFix.txt

2014-10-16 09:34 - 2014-10-16 09:34 - 00001080 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk

2014-10-16 09:34 - 2014-10-16 09:34 - 00000000 ____D () C:\Users\Grisu\AppData\Local\Secunia PSI

2014-10-16 09:34 - 2014-10-16 09:34 - 00000000 ____D () C:\Program Files (x86)\Secunia

2014-10-16 09:30 - 2014-10-16 09:31 - 00541865 _____ () C:\Users\Grisu\Downloads\noscript_security_suite-2.6.9.1-fn_fx_sm.zip

2014-10-16 09:27 - 2014-10-16 09:27 - 05329480 _____ (Secunia) C:\Users\Grisu\Downloads\PSISetup_3.0.0.9016.exe

2014-10-15 12:04 - 2014-10-15 12:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-10-14 01:10 - 2014-10-14 01:10 - 00000000 ____D () C:\Users\Grisu\4.0

2014-10-14 01:10 - 2014-10-14 01:10 - 00000000 ____D () C:\Users\Grisu\.tfo4

2014-10-12 20:27 - 2014-10-12 20:36 - 28076375 _____ () C:\Users\Grisu\Downloads\va-german50odc06102014.part3.rar

2014-10-12 09:07 - 2014-10-12 09:07 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\04E23FBD.sys

2014-10-12 09:04 - 2014-10-12 09:04 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\1BA03D9F.sys

2014-10-11 11:33 - 2014-10-11 12:42 - 209715200 _____ () C:\Users\Grisu\Downloads\va-german50odc06102014.part2.rar

2014-10-11 09:26 - 2014-10-11 09:26 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\0781265D.sys

2014-10-10 08:43 - 2014-10-10 08:43 - 00001818 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk

2014-10-10 08:40 - 2014-10-10 08:40 - 00001830 _____ () C:\Users\Public\Desktop\Apps.lnk

2014-10-10 08:34 - 2014-10-10 08:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks

2014-10-10 08:34 - 2014-10-10 08:34 - 00000000 ____D () C:\ProgramData\BlueStacks

2014-10-10 05:50 - 2014-10-10 05:54 - 163978588 _____ () C:\Users\Grisu\Downloads\U2-Songs_Of_Innocence-%28Deluxe_Edition%29-2CD-2014-BriBerY.rar

2014-10-10 05:11 - 2014-10-10 05:11 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2014-10-10 05:00 - 2014-10-10 05:00 - 00000000 ____D () C:\Users\Grisu\AppData\Local\VS Revo Group

2014-10-10 05:00 - 2014-10-10 05:00 - 00000000 ____D () C:\ProgramData\VS Revo Group

2014-10-10 05:00 - 2014-10-10 05:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro

2014-10-10 05:00 - 2014-10-10 05:00 - 00000000 ____D () C:\Program Files\VS Revo Group

2014-10-10 05:00 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys

2014-10-10 04:56 - 2014-10-10 06:04 - 209715200 _____ () C:\Users\Grisu\Downloads\va-german50odc06102014.part1.rar

2014-10-10 04:55 - 2014-10-10 04:58 - 50068373 _____ () C:\Users\Grisu\Downloads\Neueinsteiger_der_German_ODC_TOP50_vom_06.10.2014-CannaPower.rar

2014-10-09 23:58 - 2014-10-10 08:15 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\2E653FC9.sys

2014-10-08 14:19 - 2014-10-08 14:19 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\VSRevoGroup

2014-10-08 13:55 - 2014-10-08 13:55 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\64911C52.sys

2014-10-08 03:15 - 2014-10-08 03:15 - 04246449 _____ () C:\Users\Grisu\Downloads\motochopper.zip

2014-10-08 02:52 - 2014-10-08 02:52 - 00000000 ____D () C:\EGLTD

2014-10-05 13:38 - 2014-10-16 09:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-10-03 13:18 - 2014-10-03 13:18 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\1343656D.sys

2014-10-02 08:35 - 2014-10-02 08:55 - 176129509 _____ () C:\Users\Grisu\Downloads\Mashup-Germany - Vol.6 - Back to the future.zip

2014-10-02 07:56 - 2014-10-14 01:39 - 00270078 _____ () C:\Users\Grisu\Documents\WhatsApp Chat mit Franzi.odt

2014-10-02 00:43 - 2014-10-02 00:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-10-02 00:27 - 2014-10-02 00:27 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Grisu\Downloads\revosetup95.exe

2014-10-01 11:25 - 2014-10-01 11:25 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\449A0149.sys

2014-09-30 23:19 - 2014-09-30 23:19 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\7D894C22.sys
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-10-30 11:57 - 2014-06-16 01:43 - 00000000 ____D () C:\Users\Grisu\Desktop\Trojaner software

2014-10-30 11:54 - 2014-06-13 02:59 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-10-30 11:32 - 2014-07-29 09:57 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-10-30 11:05 - 2014-06-03 09:14 - 00000000 ____D () C:\ProgramData\Kaspersky Lab

2014-10-30 08:59 - 2014-08-04 01:00 - 00000000 ____D () C:\Users\Grisu\AppData\Local\Adobe

2014-10-30 08:57 - 2009-07-14 05:45 - 00059584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-10-30 08:57 - 2009-07-14 05:45 - 00059584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-10-30 08:55 - 2009-07-14 18:58 - 00732176 _____ () C:\Windows\system32\perfh007.dat

2014-10-30 08:55 - 2009-07-14 18:58 - 00159712 _____ () C:\Windows\system32\perfc007.dat

2014-10-30 08:55 - 2009-07-14 06:13 - 01685660 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-10-30 08:52 - 2014-06-03 08:07 - 01465908 _____ () C:\Windows\WindowsUpdate.log

2014-10-30 08:50 - 2014-09-19 01:02 - 00000000 ___RD () C:\Users\Grisu\Dropbox

2014-10-30 08:50 - 2014-09-18 13:56 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\Dropbox

2014-10-30 08:49 - 2014-07-29 09:57 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-10-30 08:48 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-10-29 21:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Globalization

2014-10-29 20:19 - 2014-09-20 15:31 - 00069336 _____ () C:\Users\Grisu\Desktop\Arbeitszeitnachweis-2014.ods

2014-10-29 14:32 - 2014-06-06 01:32 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\GanymedeNet

2014-10-27 22:08 - 2014-07-19 11:21 - 00003852 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1405765260

2014-10-27 22:08 - 2014-07-19 11:21 - 00000000 ____D () C:\Program Files (x86)\Opera

2014-10-26 09:06 - 2014-09-20 15:22 - 00020120 _____ () C:\Users\Grisu\Desktop\Lärmbelästigung Nachbar 2014.ods

2014-10-23 12:08 - 2014-06-13 02:59 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-10-23 12:07 - 2014-06-03 10:47 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-10-23 12:07 - 2014-06-03 10:47 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-10-23 12:03 - 2014-07-18 08:50 - 00000000 ____D () C:\Program Files (x86)\Adobe

2014-10-23 11:38 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-10-23 01:50 - 2014-09-22 02:31 - 00000000 ____D () C:\ProgramData\Codemasters

2014-10-23 01:50 - 2014-06-11 12:48 - 00000000 ____D () C:\Users\Grisu\Documents\My Games

2014-10-23 01:32 - 2014-06-03 16:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 120%

2014-10-23 01:32 - 2014-06-03 14:48 - 00000000 ____D () C:\Program Files\Alcohol 120%

2014-10-23 01:24 - 2014-06-03 14:50 - 00868848 _____ () C:\Windows\system32\Drivers\sptd.sys

2014-10-20 06:41 - 2014-06-03 15:14 - 00000000 ____D () C:\Program Files (x86)\Google

2014-10-20 06:39 - 2014-07-29 09:57 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-10-19 10:44 - 2009-07-14 19:18 - 00000000 ____D () C:\Windows\ShellNew

2014-10-18 09:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\TAPI

2014-10-17 23:17 - 2014-06-03 08:14 - 00000000 ____D () C:\Users\Grisu

2014-10-17 23:15 - 2014-09-25 20:38 - 00000000 ____D () C:\Users\Grisu\AppData\Local\CANON_INC

2014-10-17 23:15 - 2014-09-11 08:04 - 00000000 ____D () C:\ProgramData\Netzmanager

2014-10-17 23:15 - 2014-06-03 16:32 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform

2014-10-17 23:15 - 2014-06-03 10:47 - 00000000 ____D () C:\Windows\system32\Macromed

2014-10-17 23:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration

2014-10-16 23:47 - 2014-09-15 20:47 - 00000000 ____D () C:\Program Files (x86)\Java

2014-10-16 09:35 - 2014-06-18 22:30 - 00000000 ____D () C:\Windows\ERUNT

2014-10-16 09:28 - 2014-07-28 22:36 - 00000000 ____D () C:\Program Files\Java

2014-10-16 09:27 - 2014-09-15 20:39 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-10-16 09:26 - 2014-09-15 20:47 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-10-16 09:26 - 2014-09-15 20:47 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-10-16 09:26 - 2014-09-15 20:47 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-10-16 09:14 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2014-10-13 01:08 - 2014-06-23 11:56 - 00000000 ____D () C:\ProgramData\Origin

2014-10-13 00:28 - 2014-06-24 11:18 - 00000000 ____D () C:\Users\Grisu\Documents\FIFA 14

2014-10-12 21:50 - 2014-06-23 11:55 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-10-11 10:09 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2014-10-10 08:58 - 2014-09-09 13:35 - 00000000 ____D () C:\ProgramData\BlueStacksSetup

2014-10-10 08:40 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries

2014-10-10 08:34 - 2014-09-15 11:01 - 00000000 ____D () C:\Program Files (x86)\BlueStacks

2014-10-10 08:32 - 2013-01-22 20:02 - 00000000 ____D () C:\Users\Grisu\Desktop\Paddy musik

2014-10-10 05:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-10-10 03:03 - 2014-06-03 11:48 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\Adobe

2014-10-10 02:52 - 2014-06-23 12:02 - 00000000 ____D () C:\Program Files (x86)\Origin Games

2014-10-09 23:16 - 2014-06-17 14:55 - 00000000 ____D () C:\Users\Grisu\Documents\Benutzerdefinierte Office-Vorlagen

2014-10-08 14:02 - 2014-06-06 01:30 - 00000000 ____D () C:\Program Files (x86)\Ganymede

2014-10-06 14:17 - 2014-06-03 13:50 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\uTorrent

2014-10-05 15:22 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-10-04 01:28 - 2009-07-14 19:18 - 00000000 ___RD () C:\Users\Public\Recorded TV

2014-10-04 01:02 - 2014-06-10 23:00 - 00000000 ____D () C:\Users\Grisu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games

2014-10-03 22:34 - 2014-08-05 02:07 - 00000000 ____D () C:\Users\Grisu\Desktop\SciLor's Grooveshark.com Downloader

2014-10-02 04:51 - 2014-06-03 09:14 - 00000000 ____D () C:\Windows\ELAMBKUP

2014-10-02 00:36 - 2014-09-26 00:47 - 00000008 __RSH () C:\ProgramData\ntuser.pol

2014-10-01 11:05 - 2014-09-29 13:13 - 00381736 _____ () C:\Users\Grisu\Documents\WhatsApp Chat mit Franzi.txt

2014-09-30 11:26 - 2014-07-24 23:31 - 00000000 ____D () C:\Users\Grisu\AppData\Local\Unity
 

Some content of TEMP:

====================

C:\Users\Grisu\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpomh34u.dll

C:\Users\Grisu\AppData\Local\Temp\Quarantine.exe

C:\Users\Grisu\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-10-29 09:01
 

==================== End Of Log ============================

--- --- ---

--- --- ---

FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-10-2014

Ran by Grisu at 2014-10-30 12:02:18

Running from C:\Users\Grisu\Desktop\Trojaner software

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: ESET Smart Security 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}

AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: ESET Smart Security 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

FW: ESET Personal Firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

µTorrent (HKCU\...\uTorrent) (Version: 3.4.2.34024 - BitTorrent Inc.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.293 - Adobe Systems Incorporated)

Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)

Adobe Flash Player 15 Plugin (HKLM-x32\...\{AF82C1A9-56DC-4CCD-A36C-CAE56D541DFA}) (Version: 15.0.0.189 - Adobe Systems Incorporated)

Adobe Photoshop CC (HKLM-x32\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated)

Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)

Adobe Photoshop Lightroom 5.6 64-bit (HKLM\...\{D19E99C2-6D9D-4075-B446-B4387EAF70A5}) (Version: 5.6.0 - Adobe Systems Incorporated)

Advanced Archive Password Recovery (HKLM-x32\...\{01011662-76A8-41E8-B1A8-4F8821570AC5}) (Version: 4.54.48.1338 - Elcomsoft Co. Ltd.)

aioprnt (Version: 5.3.1.0 - Eastman Kodak Company) Hidden

aioscnnr (x32 Version: 5.8.10.0 - Your Company Name) Hidden

aioscnnr (x32 Version: 7.6.13.10 - Your Company Name) Hidden

Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version:  - Ubisoft)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.3.4070 - BlueStack Systems, Inc.)

BlueStacks Notification Center (HKLM-x32\...\{B40D9A2E-C9CA-4402-A0B7-09E33C03B9C5}) (Version: 0.9.3.4070 - BlueStack Systems, Inc.)

Canon Utilities Digital Photo Professional (HKLM-x32\...\Digital Photo Professional) (Version: 3.14.0.0 - Canon Inc.)

Canon Utilities EOS Utility 2 (HKLM-x32\...\EOS Utility 2) (Version: 2.14.0.0 - Canon Inc.)

Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)

Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.14.0.0 - Canon Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 4.16 - Piriform)

center (x32 Version: 7.7.2.0 - Eastman Kodak Company) Hidden

Curse Client (HKCU\...\101a9f93b8f0bb6f) (Version: 5.1.1.810 - Curse)

Dropbox (HKCU\...\Dropbox) (Version: 2.10.30 - Dropbox, Inc.)

DSL-Manager (HKLM-x32\...\{90A455A7-0FC8-4508-B7FA-8F135B8F041A}) (Version:  - )

Duel of Champions (HKLM-x32\...\MMDoC-PDCLive) (Version:  - Ubisoft)

Duplicate Music Files Finder 1.5.5 (HKLM-x32\...\Duplicate Music Files Finder_is1) (Version:  - LC IBros Solutions S.R.L.)

ESET Smart Security (HKLM\...\{23234C01-F6B0-40FE-A583-B66840B28445}) (Version: 7.0.317.4 - ESET, spol s r. o.)

essentials (x32 Version: 7.7.2.0 - Eastman Kodak Company) Hidden

F1 2014 (HKLM-x32\...\F1 2014_is1) (Version:  - )

FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.7 - Electronic Arts)

GameDesire-Pool & Snooker (HKLM-x32\...\GameDesire-Pool & Snooker) (Version:  - )

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.104 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden

ICQ 8.2 (build 7100) (HKCU\...\ICQ) (Version: 8.2.7100.0 - ICQ)

Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)

Java 8 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418025F0}) (Version: 8.0.250 - Oracle Corporation)

Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)

Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab)

Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden

Kodak AIO Printer (Version: 7.7.2.0 - Eastman Kodak Company) Hidden

KODAK All-in-One Software (HKLM-x32\...\{E0F274B7-592B-4669-8FB8-8D9825A09858}) (Version: 7.7.6.0 - Eastman Kodak Company)

Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)

Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)

Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{3bcf8c72-b231-4d28-9f39-3405c22d8b5a}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)

Mozilla Firefox 33.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0 (x86 de)) (Version: 33.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0.3 - Mozilla)

Netzmanager (HKLM-x32\...\Netzmanager) (Version: 1.081 - Deutsche Telekom AG)

Netzmanager (Version: 1.081 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden

NVIDIA Grafiktreiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

ocr (x32 Version: 6.2.3.50 - Eastman Kodak Company) Hidden

OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)

OpenTTD 1.4.1 (HKLM-x32\...\OpenTTD) (Version: 1.4.1 - OpenTTD)

Opera Stable 25.0.1614.63 (HKLM-x32\...\Opera 25.0.1614.63) (Version: 25.0.1614.63 - Opera Software ASA)

Origin (HKLM-x32\...\Origin) (Version: 9.4.10.297 - Electronic Arts, Inc.)

Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)

PDF Architect 2 View Module (HKLM-x32\...\{C960FF38-431D-429D-AD1F-FBD12A45B7C5}) (Version: 2.0.17.17583 - pdfforge GmbH)

PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden

PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden

PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)

PowerISO (HKLM-x32\...\PowerISO) (Version: 5.9 - Power Software Ltd)

PreReq (x32 Version: 6.2.4.0 - Eastman Kodak Company) Hidden

PrintProjects (HKLM-x32\...\PrintProjects) (Version: 1.0.0.9282 - RocketLife Inc.)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Revo Uninstaller Pro 3.1.1 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.1 - VS Revo Group, Ltd.)

Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)

Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)

Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version:  - Microsoft) Hidden

SiSoftware Sandra Personal 2014.SP2a (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 20.35.2014.6 - SiSoftware)

Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)

Sniper Elite 3 GERMAN (HKLM-x32\...\U25pcGVyRWxpdGUz_is1) (Version: 1 - )

TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)

TimeComX Basic (64-Bit) (HKLM-x32\...\TimeComX Basic 64-Bit) (Version: 1.3.2.7 - Bitdreamers)

Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)

Uplay (HKLM-x32\...\Uplay) (Version: 4.6 - Ubisoft)

VirtualDJ 8 (HKLM-x32\...\{9ADBBA93-4625-4898-BB0D-BCE7EA9F8B4A}) (Version: 8.0.0 - Atomix Productions)

VirtualDJ Home FREE (HKLM-x32\...\{77C2D5D4-ADC5-49F9-B36E-5992FCF35EA3}) (Version: 7.4.1 - Atomix Productions)

Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)

WinRAR 5.10 Beta 4 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)

Wolfenstein German Uncut Edition 1.2 (HKLM-x32\...\Wolfenstein German Uncut Edition 1.2) (Version:  - )

World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2132015822-3264924353-165971380-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Grisu\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
 

==================== Restore Points  =========================
 

29-10-2014 16:59:39 Geplanter Prüfpunkt

29-10-2014 19:42:22 SiSoftware Sandra Personal
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 03:34 - 2014-10-10 02:22 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {137F8DA8-B0D6-4D79-A354-01F3D3786DEC} - System32\Tasks\CCleaner => C:\Program

Task: {3214F43F-E1A1-4C68-BF16-E5897A43677F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)

Task: {35F176CF-CA9A-44F4-86C7-453074B5F388} - System32\Tasks\AutoKMSCustom => C:\Windows\AutoKMS\AutoKMS.exe

Task: {47204497-A725-44BE-A0D9-2F21AE38E29F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-26] (Google Inc.)

Task: {51A59664-473F-4FFA-875A-FE68FE802FD9} - System32\Tasks\AdobeAAMUpdater-1.0-Grisu-PC-Grisu => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated)

Task: {56461B0B-7519-4712-B9BB-9859AA17AA2F} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup

Task: {73F6469B-1E78-4E6C-A5F5-88191BFC333F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-23] (Adobe Systems Incorporated)

Task: {7DFD5D42-E1C6-4390-86C1-B957F1040339} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)

Task: {83D37B77-37C2-4D2B-8458-16CB19C92A74} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-26] (Google Inc.)

Task: {887F700D-9A61-4F19-ACE6-457B2D42CCAA} - System32\Tasks\{303E9A7B-F154-43B4-896B-1AD818FEB83A} => C:\Program Files (x86)\VirtualDJ\virtualdj_pro.exe

Task: {93E20468-A940-43AF-9687-0AB18E8F852A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-10-07] (Oracle Corporation)

Task: {967BFB2D-83E2-4B3D-A225-E7BCCF94D76B} - System32\Tasks\{6C11C149-E388-4638-8FF2-38591C16AC8E} => E:\Spiele von C\NBA 2014\nba2k14.exe

Task: {9FA11F48-9923-461F-A36A-F2A17A41238C} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)

Task: {BDFCBC5C-4416-42A1-BB30-04248F26BBFA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-07-23] (Piriform Ltd)

Task: {CCD27B2F-4B91-4073-B7DD-EF58A44C936D} - System32\Tasks\GoogleUpdateTaskMachineCore1cfec284612b0a0 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-26] (Google Inc.)

Task: {D59FB116-3FEA-45FC-98BB-2095A74D8F4A} - System32\Tasks\Opera scheduled Autoupdate 1405765260 => C:\Program Files (x86)\Opera\launcher.exe [2014-10-23] (Opera Software)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfec284612b0a0.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-06-17 11:35 - 2013-06-17 11:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll

2013-05-08 13:52 - 2013-05-08 13:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll

2014-10-30 08:50 - 2014-10-30 08:50 - 00043008 _____ () c:\users\grisu\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpomh34u.dll

2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\Grisu\AppData\Roaming\Dropbox\bin\libcef.dll

2013-12-17 09:31 - 2013-12-17 09:31 - 00491520 _____ () C:\Program Files (x86)\Canon\EOS Utility\EDSDK.dll

2014-10-15 12:04 - 2014-10-15 12:04 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2014-10-23 12:07 - 2014-10-23 12:07 - 16832176 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll

2014-09-16 11:27 - 2014-10-10 08:40 - 00195584 _____ () C:\Program Files (x86)\BlueStacks\libEGL.dll

2014-09-16 11:27 - 2014-10-10 08:40 - 01467392 _____ () C:\Program Files (x86)\BlueStacks\libGLESv2.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MyOSProtect => ""="service"
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3

MSCONFIG\Services: BstHdAndroidSvc => 2

MSCONFIG\Services: BstHdLogRotatorSvc => 2

MSCONFIG\Services: BstHdUpdaterSvc => 2

MSCONFIG\Services: bthserv => 3

MSCONFIG\Services: Fax => 3

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

MSCONFIG\Services: MozillaMaintenance => 3

MSCONFIG\Services: NvNetworkService => 2

MSCONFIG\Services: nvsvc => 2

MSCONFIG\Services: ose64 => 3

MSCONFIG\Services: osppsvc => 3

MSCONFIG\Services: PDF Architect 2 => 3

MSCONFIG\Services: pdfforge CrashHandler => 3

MSCONFIG\Services: SkypeUpdate => 2

MSCONFIG\Services: StarWindServiceAE => 2

MSCONFIG\Services: SwitchBoard => 3

MSCONFIG\Services: UMVPFSrv => 2

MSCONFIG\Services: Wlansvc => 3

MSCONFIG\Services: WMPNetworkSvc => 3

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SmartCopy.lnk => C:\Windows\pss\SmartCopy.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Grisu^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip => C:\Windows\pss\CurseClientStartup.ccip.Startup

MSCONFIG\startupfolder: C:^Users^Grisu^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Grisu^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^EOS Utility.lnk => C:\Windows\pss\EOS Utility.lnk.Startup

MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true

MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

MSCONFIG\startupreg: AdobeCEPServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe" -launchedbylogin

MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin

MSCONFIG\startupreg: AlcoholAutomount => "C:\Program Files (x86)\Alcohol Soft\Alcohol 120\axcmd.exe" /automount

MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe

MSCONFIG\startupreg: Driver Operating Service => C:\Users\Grisu\AppData\Local\Apps\2.0\JDRWC0RT.9RO\5G9E4LPA.5WV\dros..tion_0000000000000000_0001.0000_b92f9a67277994ec\Driver Operating Service.appref-ms

MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart

MSCONFIG\startupreg: EKIJ5000StatusMonitor => C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe

MSCONFIG\startupreg: EKStatusMonitor => C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe                                                                                                                                                                                                       

MSCONFIG\startupreg: icq => C:\Users\Grisu\AppData\Roaming\ICQM\icq.exe -CU

MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
 

========================= Accounts: ==========================
 

Administrator (S-1-5-21-2132015822-3264924353-165971380-500 - Administrator - Disabled)

Gast (S-1-5-21-2132015822-3264924353-165971380-501 - Limited - Disabled)

Grisu (S-1-5-21-2132015822-3264924353-165971380-1000 - Administrator - Enabled) => C:\Users\Grisu

HomeGroupUser$ (S-1-5-21-2132015822-3264924353-165971380-1002 - Limited - Enabled)
 

==================== Faulty Device Manager Devices =============
 

Name: Standardtastatur (PS/2)

Description: Standardtastatur (PS/2)

Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}

Manufacturer: (Standardtastaturen)

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 

Name: Teredo Tunneling Pseudo-Interface

Description: Microsoft-Teredo-Tunneling-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 

Name: Microsoft PS/2-Maus

Description: Microsoft PS/2-Maus

Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (10/30/2014 11:57:35 AM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc.manifest.
 

Error: (10/29/2014 03:09:50 PM) (Source: Office Software Protection Platform Service) (EventID: 16385) (User: )

Description: Failed to schedule Software Protection service for re-start at 2014-10-30T10:47:50Z. Error Code: 0x80071A90.
 

Error: (10/28/2014 11:42:04 AM) (Source: VSS) (EventID: 8194) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert

.

Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {ffa56fd3-7049-4e8b-87bd-77afa4b94a5f}
 

Error: (10/26/2014 07:00:01 PM) (Source: Windows Backup) (EventID: 4103) (User: )

Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"
 
 

System errors:

=============

Error: (10/29/2014 09:14:18 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (10/29/2014 09:14:18 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (10/29/2014 09:14:18 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (10/29/2014 09:14:18 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (10/29/2014 09:14:18 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (10/29/2014 09:14:17 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (10/29/2014 09:14:16 PM) (Source: DCOM) (EventID: 10005) (User: )

Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
 

Error: (10/29/2014 09:14:16 PM) (Source: DCOM) (EventID: 10005) (User: )

Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}
 

Error: (10/29/2014 09:14:14 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (10/29/2014 09:14:13 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 
 

Microsoft Office Sessions:

=========================

Error: (10/30/2014 11:57:35 AM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc.manifestC:\Users\Grisu\Desktop\Trojaner software\esetsmartinstaller_deu.exe
 

Error: (10/29/2014 03:09:50 PM) (Source: Office Software Protection Platform Service) (EventID: 16385) (User: )

Description: 0x80071A902014-10-30T10:47:50Z
 

Error: (10/28/2014 11:42:04 AM) (Source: VSS) (EventID: 8194) (User: )

Description: 0x80070005, Zugriff verweigert
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {ffa56fd3-7049-4e8b-87bd-77afa4b94a5f}
 

Error: (10/26/2014 07:00:01 PM) (Source: Windows Backup) (EventID: 4103) (User: )

Description: D:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)
 
 

CodeIntegrity Errors:

===================================

  Date: 2014-10-29 09:06:32.098

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-29 09:06:32.098

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-29 09:06:32.098

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-29 09:06:32.020

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-29 09:06:32.020

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-29 09:06:32.004

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-29 09:06:31.973

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-29 09:06:31.973

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-29 09:06:31.973

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-10-25 20:57:13.451

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz

Percentage of memory in use: 71%

Total physical RAM: 6135.17 MB

Available physical RAM: 1752.48 MB

Total Pagefile: 12268.52 MB

Available Pagefile: 6982.75 MB

Total Virtual: 8192 MB

Available Virtual: 8191.84 MB
 

==================== Drives ================================
 

Drive c: (Betriebssys) (Fixed) (Total:115.75 GB) (Free:19.96 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (Programme) (Fixed) (Total:1023.87 GB) (Free:895.69 GB) NTFS

Drive e: (Wichtiges) (Fixed) (Total:931.5 GB) (Free:185.08 GB) NTFS

Drive f: (Volume) (Fixed) (Total:886.45 GB) (Free:492.13 GB) NTFS

Drive g: (Spiele) (Fixed) (Total:465.76 GB) (Free:336.71 GB) NTFS

Drive h: (Betriebssys 2) (Fixed) (Total:723.4 GB) (Free:522.17 GB) NTFS

Drive i: (Spiele 3) (Fixed) (Total:976.56 GB) (Free:849.94 GB) NTFS

Drive k: (Musik&Bilder) (Fixed) (Total:936.58 GB) (Free:188.07 GB) NTFS

Drive l: () (Fixed) (Total:926.44 GB) (Free:891.41 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: F88326EF)

Partition 1: (Active) - (Size=115.7 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=1023.9 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=723.4 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: F883268C)

Partition 1: (Not Active) - (Size=976.6 GB) - (Type=07 NTFS)

Partition 2: (Active) - (Size=886.5 GB) - (Type=07 NTFS)
 

========================================================

Disk: 2 (Size: 465.8 GB) (Disk ID: 2EE023AC)

Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)
 

========================================================

Disk: 3 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 6A1CCFD9)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=OF Extended)
 

========================================================

Disk: 4 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 52425DEB)

Partition 1: (Active) - (Size=936.6 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=926.4 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---

Revo Uninstaller - Download - Filepony
damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.google.com/chrome/answer/3296214?hl=de

danke somit ist alles weg ich weiß jetzt erstmal wie ich mit solchem umgehen kann und möchte mich für deine hilfe bedanken !

Fertig :)

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun :)

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

danke schön ...ist erledigt und sollte ich nochmals hilfe brauchen werde ich mich natürlich wieder melden ! mit dem jeweiliegem thema