Trojaner-Board
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   (save , on) Links im Internet & Chrome funktioniert nicht richtig (https://www.trojaner-board.de/156202-save-on-links-internet-chrome-funktioniert-richtig.html)

Terrenay 23.07.2014 13:38
Hab Avira:

Code:

Avira Free Antivirus
Erstellungsdatum der Reportdatei: Mittwoch, 23. Juli 2014  09:46


Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer  : Avira Antivirus Free
Seriennummer  : 0000149996-AVHOE-0000001
Plattform      : Windows 7 Home Premium
Windowsversion : (Service Pack 1)  [6.1.7601]
Boot Modus    : Normal gebootet
Benutzername  : SYSTEM
Computername  : MirjamZanetti

Versionsinformationen:
BUILD.DAT      : 14.0.5.464    91868 Bytes  02.07.2014 13:06:00
AVSCAN.EXE    : 14.0.5.396  1042512 Bytes  02.07.2014 11:06:43
AVSCANRC.DLL  : 14.0.5.364    62544 Bytes  02.07.2014 11:06:43
LUKE.DLL      : 14.0.5.336    57936 Bytes  02.07.2014 11:06:46
AVSCPLR.DLL    : 14.0.5.376    89680 Bytes  02.07.2014 11:06:43
AVREG.DLL      : 14.0.5.356    261200 Bytes  02.07.2014 11:06:43
avlode.dll    : 14.0.5.396    588368 Bytes  02.07.2014 11:06:42
avlode.rdf    : 14.0.4.42      65114 Bytes  19.07.2014 17:26:05
XBV00008.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00009.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00010.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00011.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00012.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00013.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00014.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00015.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00016.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00017.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00018.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00019.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00020.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00021.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00022.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00023.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00024.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00025.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00026.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00027.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00028.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00029.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00030.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00031.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00032.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00033.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00034.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00035.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00036.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00037.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00038.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00039.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00040.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00041.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00163.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:22
XBV00164.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:22
XBV00165.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:22
XBV00166.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:22
XBV00167.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:22
XBV00168.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:22
XBV00169.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:22
XBV00170.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:22
XBV00171.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:23
XBV00172.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:23
XBV00173.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:23
XBV00174.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:23
XBV00175.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:23
XBV00176.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:23
XBV00177.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:23
XBV00178.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:23
XBV00179.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:23
XBV00180.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:23
XBV00181.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:23
XBV00182.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:23
XBV00183.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:23
XBV00184.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:24
XBV00185.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:24
XBV00186.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:24
XBV00187.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:24
XBV00188.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:24
XBV00189.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:24
XBV00190.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:24
XBV00191.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:24
XBV00192.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:24
XBV00193.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:24
XBV00194.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:24
XBV00195.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:24
XBV00196.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:24
XBV00197.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00198.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00199.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00200.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00201.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00202.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00203.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00204.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00205.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00206.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00207.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00208.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00209.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00210.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00211.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00212.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00213.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00214.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00215.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00216.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00217.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00218.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00219.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00220.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00221.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00222.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00223.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00224.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00225.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00226.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00227.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00228.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00229.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00230.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00231.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00232.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00233.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00234.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00235.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00236.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00237.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00238.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00239.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00240.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00241.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00242.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00243.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00244.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00245.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00246.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00247.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00248.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00249.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00250.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00251.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00252.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:29
XBV00253.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:29
XBV00254.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:29
XBV00255.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:29
XBV00000.VDF  : 7.11.70.0  66736640 Bytes  04.04.2013 11:06:47
XBV00001.VDF  : 7.11.74.226  2201600 Bytes  30.04.2013 11:06:47
XBV00002.VDF  : 7.11.80.60  2751488 Bytes  28.05.2013 11:06:47
XBV00003.VDF  : 7.11.85.214  2162688 Bytes  21.06.2013 11:06:47
XBV00004.VDF  : 7.11.91.176  3903488 Bytes  23.07.2013 11:06:47
XBV00005.VDF  : 7.11.98.186  6822912 Bytes  29.08.2013 11:06:47
XBV00006.VDF  : 7.11.139.38 15708672 Bytes  27.03.2014 11:06:47
XBV00007.VDF  : 7.11.152.100  4193792 Bytes  02.06.2014 11:06:47
XBV00042.VDF  : 8.11.153.142  710656 Bytes  06.06.2014 11:06:47
XBV00043.VDF  : 8.11.155.44  1013760 Bytes  16.06.2014 11:06:47
XBV00044.VDF  : 8.11.159.102  1662976 Bytes  08.07.2014 14:50:53
XBV00045.VDF  : 8.11.159.104    13824 Bytes  08.07.2014 14:50:53
XBV00046.VDF  : 8.11.159.108    13312 Bytes  08.07.2014 14:50:53
XBV00047.VDF  : 8.11.159.112    30720 Bytes  09.07.2014 14:50:54
XBV00048.VDF  : 8.11.159.114    6144 Bytes  09.07.2014 14:50:54
XBV00049.VDF  : 8.11.159.116    10240 Bytes  09.07.2014 14:50:54
XBV00050.VDF  : 8.11.159.118    5632 Bytes  09.07.2014 14:50:54
XBV00051.VDF  : 8.11.159.122    7168 Bytes  09.07.2014 14:50:54
XBV00052.VDF  : 8.11.159.126  180736 Bytes  09.07.2014 14:50:58
XBV00053.VDF  : 8.11.159.148  174080 Bytes  09.07.2014 14:51:04
XBV00054.VDF  : 8.11.159.168    2560 Bytes  09.07.2014 14:51:04
XBV00055.VDF  : 8.11.159.188    15360 Bytes  09.07.2014 14:51:05
XBV00056.VDF  : 8.11.159.210    25600 Bytes  09.07.2014 14:51:05
XBV00057.VDF  : 8.11.159.212    7168 Bytes  09.07.2014 14:51:05
XBV00058.VDF  : 8.11.159.218    27648 Bytes  10.07.2014 14:51:06
XBV00059.VDF  : 8.11.159.220    2048 Bytes  10.07.2014 14:51:06
XBV00060.VDF  : 8.11.159.222    29696 Bytes  10.07.2014 14:51:07
XBV00061.VDF  : 8.11.159.224  167936 Bytes  10.07.2014 14:51:13
XBV00062.VDF  : 8.11.159.226    35328 Bytes  10.07.2014 14:51:14
XBV00063.VDF  : 8.11.159.230  186368 Bytes  10.07.2014 20:49:51
XBV00064.VDF  : 8.11.159.250    16896 Bytes  10.07.2014 20:49:51
XBV00065.VDF  : 8.11.159.252    2048 Bytes  10.07.2014 20:49:51
XBV00066.VDF  : 8.11.160.16    6144 Bytes  10.07.2014 20:49:51
XBV00067.VDF  : 8.11.160.40    17408 Bytes  10.07.2014 10:12:52
XBV00068.VDF  : 8.11.160.42    2048 Bytes  11.07.2014 10:12:54
XBV00069.VDF  : 8.11.160.46  179200 Bytes  11.07.2014 10:12:55
XBV00070.VDF  : 8.11.160.48  203264 Bytes  11.07.2014 14:37:58
XBV00071.VDF  : 8.11.160.50    6144 Bytes  11.07.2014 14:37:58
XBV00072.VDF  : 8.11.160.52    2048 Bytes  11.07.2014 14:37:58
XBV00073.VDF  : 8.11.160.54    2048 Bytes  11.07.2014 14:37:58
XBV00074.VDF  : 8.11.160.58    22016 Bytes  11.07.2014 14:37:58
XBV00075.VDF  : 8.11.160.60    2048 Bytes  11.07.2014 14:37:58
XBV00076.VDF  : 8.11.160.62    8192 Bytes  11.07.2014 14:37:58
XBV00077.VDF  : 8.11.160.66  198656 Bytes  12.07.2014 14:38:00
XBV00078.VDF  : 8.11.160.68    7168 Bytes  12.07.2014 14:38:00
XBV00079.VDF  : 8.11.160.70    14848 Bytes  12.07.2014 14:38:00
XBV00080.VDF  : 8.11.160.72    7168 Bytes  12.07.2014 14:38:00
XBV00081.VDF  : 8.11.160.92    40448 Bytes  13.07.2014 14:37:40
XBV00082.VDF  : 8.11.160.112    2048 Bytes  13.07.2014 14:37:40
XBV00083.VDF  : 8.11.160.130  193024 Bytes  13.07.2014 14:37:42
XBV00084.VDF  : 8.11.160.132    2048 Bytes  13.07.2014 14:37:42
XBV00085.VDF  : 8.11.160.152    20480 Bytes  13.07.2014 20:37:37
XBV00086.VDF  : 8.11.160.154    2048 Bytes  13.07.2014 20:37:37
XBV00087.VDF  : 8.11.160.156    20992 Bytes  14.07.2014 08:37:41
XBV00088.VDF  : 8.11.160.158    2560 Bytes  14.07.2014 08:37:41
XBV00089.VDF  : 8.11.160.160    11264 Bytes  14.07.2014 14:37:42
XBV00090.VDF  : 8.11.160.162    2560 Bytes  14.07.2014 14:37:42
XBV00091.VDF  : 8.11.160.166    14336 Bytes  14.07.2014 14:37:42
XBV00092.VDF  : 8.11.160.168    5120 Bytes  14.07.2014 14:37:42
XBV00093.VDF  : 8.11.160.178    7168 Bytes  14.07.2014 20:37:41
XBV00094.VDF  : 8.11.160.180    2048 Bytes  14.07.2014 20:37:41
XBV00095.VDF  : 8.11.160.182    2048 Bytes  14.07.2014 20:37:41
XBV00096.VDF  : 8.11.160.188  256000 Bytes  14.07.2014 02:37:43
XBV00097.VDF  : 8.11.160.190    7680 Bytes  14.07.2014 02:37:43
XBV00098.VDF  : 8.11.160.194    18432 Bytes  15.07.2014 08:37:38
XBV00099.VDF  : 8.11.160.212  184832 Bytes  15.07.2014 19:24:53
XBV00100.VDF  : 8.11.160.230  289792 Bytes  15.07.2014 19:24:55
XBV00101.VDF  : 8.11.160.232    2048 Bytes  15.07.2014 19:24:55
XBV00102.VDF  : 8.11.160.234  176128 Bytes  15.07.2014 19:24:56
XBV00103.VDF  : 8.11.160.254    18432 Bytes  15.07.2014 17:26:06
XBV00104.VDF  : 8.11.161.16    6144 Bytes  16.07.2014 17:26:06
XBV00105.VDF  : 8.11.161.32    2048 Bytes  16.07.2014 17:26:06
XBV00106.VDF  : 8.11.161.34    2048 Bytes  16.07.2014 17:26:06
XBV00107.VDF  : 8.11.161.52    26624 Bytes  16.07.2014 17:26:07
XBV00108.VDF  : 8.11.161.68  184832 Bytes  16.07.2014 17:26:08
XBV00109.VDF  : 8.11.161.84    2048 Bytes  16.07.2014 17:26:08
XBV00110.VDF  : 8.11.162.2      2560 Bytes  16.07.2014 17:26:08
XBV00111.VDF  : 8.11.162.6    16896 Bytes  16.07.2014 17:26:08
XBV00112.VDF  : 8.11.162.8    24064 Bytes  16.07.2014 17:26:08
XBV00113.VDF  : 8.11.162.10    2560 Bytes  16.07.2014 17:26:09
XBV00114.VDF  : 8.11.162.14    41472 Bytes  17.07.2014 17:26:09
XBV00115.VDF  : 8.11.162.16    2048 Bytes  17.07.2014 17:26:09
XBV00116.VDF  : 8.11.162.18  215040 Bytes  17.07.2014 17:26:10
XBV00117.VDF  : 8.11.162.22  184320 Bytes  17.07.2014 17:26:12
XBV00118.VDF  : 8.11.162.40  258048 Bytes  17.07.2014 17:26:14
XBV00119.VDF  : 8.11.162.42    3584 Bytes  17.07.2014 17:26:14
XBV00120.VDF  : 8.11.162.58    3072 Bytes  17.07.2014 17:26:14
XBV00121.VDF  : 8.11.162.78    2048 Bytes  17.07.2014 17:26:14
XBV00122.VDF  : 8.11.162.94    2048 Bytes  17.07.2014 17:26:14
XBV00123.VDF  : 8.11.162.110    35840 Bytes  17.07.2014 17:26:14
XBV00124.VDF  : 8.11.162.112    2048 Bytes  18.07.2014 17:26:14
XBV00125.VDF  : 8.11.162.130    23040 Bytes  18.07.2014 17:26:14
XBV00126.VDF  : 8.11.162.134  184320 Bytes  18.07.2014 17:26:16
XBV00127.VDF  : 8.11.162.136    2048 Bytes  18.07.2014 17:26:16
XBV00128.VDF  : 8.11.162.152  231424 Bytes  18.07.2014 17:26:22
XBV00129.VDF  : 8.11.162.154    2048 Bytes  18.07.2014 17:26:22
XBV00130.VDF  : 8.11.162.170  108032 Bytes  18.07.2014 17:26:25
XBV00131.VDF  : 8.11.162.172    9728 Bytes  18.07.2014 17:26:25
XBV00132.VDF  : 8.11.162.174    2048 Bytes  18.07.2014 17:26:25
XBV00133.VDF  : 8.11.162.188    20992 Bytes  18.07.2014 17:26:25
XBV00134.VDF  : 8.11.162.192    2048 Bytes  18.07.2014 17:26:25
XBV00135.VDF  : 8.11.162.194    2048 Bytes  18.07.2014 17:26:26
XBV00136.VDF  : 8.11.162.200    19968 Bytes  18.07.2014 17:26:26
XBV00137.VDF  : 8.11.162.204    2048 Bytes  18.07.2014 17:26:26
XBV00138.VDF  : 8.11.162.212    2048 Bytes  18.07.2014 17:26:26
XBV00139.VDF  : 8.11.162.228  227840 Bytes  19.07.2014 17:26:27
XBV00140.VDF  : 8.11.162.244    2048 Bytes  19.07.2014 17:26:27
XBV00141.VDF  : 8.11.163.2    31232 Bytes  19.07.2014 17:26:28
XBV00142.VDF  : 8.11.163.16    62464 Bytes  20.07.2014 16:13:15
XBV00143.VDF  : 8.11.163.20  202752 Bytes  20.07.2014 16:13:17
XBV00144.VDF  : 8.11.163.22    2048 Bytes  20.07.2014 16:13:17
XBV00145.VDF  : 8.11.163.26    50176 Bytes  21.07.2014 10:13:04
XBV00146.VDF  : 8.11.163.28    23040 Bytes  21.07.2014 10:13:05
XBV00147.VDF  : 8.11.163.42    6144 Bytes  21.07.2014 10:13:05
XBV00148.VDF  : 8.11.163.44    2560 Bytes  21.07.2014 10:13:05
XBV00149.VDF  : 8.11.163.56    5120 Bytes  21.07.2014 10:13:05
XBV00150.VDF  : 8.11.163.68    8192 Bytes  21.07.2014 16:13:27
XBV00151.VDF  : 8.11.163.74  213504 Bytes  21.07.2014 16:13:28
XBV00152.VDF  : 8.11.163.78    22528 Bytes  22.07.2014 04:13:04
XBV00153.VDF  : 8.11.163.82    2560 Bytes  22.07.2014 10:13:30
XBV00154.VDF  : 8.11.163.84  181248 Bytes  22.07.2014 10:13:31
XBV00155.VDF  : 8.11.163.86    9728 Bytes  22.07.2014 10:13:31
XBV00156.VDF  : 8.11.163.92    2560 Bytes  22.07.2014 16:13:16
XBV00157.VDF  : 8.11.163.98  230400 Bytes  22.07.2014 22:13:15
XBV00158.VDF  : 8.11.163.100    2048 Bytes  22.07.2014 22:13:15
XBV00159.VDF  : 8.11.163.102    2048 Bytes  22.07.2014 22:13:15
XBV00160.VDF  : 8.11.163.108    22528 Bytes  22.07.2014 22:13:15
XBV00161.VDF  : 8.11.163.112    17920 Bytes  22.07.2014 04:13:11
XBV00162.VDF  : 8.11.163.116    2048 Bytes  23.07.2014 04:13:11
LOCAL000.VDF  : 8.11.163.116 109633536 Bytes  23.07.2014 04:13:26
Engineversion  : 8.3.22.12
AEVDF.DLL      : 8.3.0.4      118976 Bytes  02.07.2014 11:06:41
AESCRIPT.DLL  : 8.2.0.12      426184 Bytes  21.07.2014 16:13:27
AESCN.DLL      : 8.3.2.2      139456 Bytes  21.07.2014 16:13:25
AESBX.DLL      : 8.2.20.24    1409224 Bytes  02.07.2014 11:06:41
AERDL.DLL      : 8.2.0.138    704888 Bytes  02.07.2014 11:06:41
AEPACK.DLL    : 8.4.0.42      786632 Bytes  10.07.2014 14:50:04
AEOFFICE.DLL  : 8.3.0.14      213192 Bytes  21.07.2014 16:13:25
AEHEUR.DLL    : 8.1.4.1166  7233736 Bytes  21.07.2014 16:13:24
AEHELP.DLL    : 8.3.1.0      278728 Bytes  02.07.2014 11:06:41
AEGEN.DLL      : 8.1.7.28      450752 Bytes  02.07.2014 11:06:41
AEEXP.DLL      : 8.4.2.6      237760 Bytes  02.07.2014 11:06:41
AEEMU.DLL      : 8.1.3.2      393587 Bytes  02.07.2014 11:06:41
AEDROID.DLL    : 8.4.2.24      442568 Bytes  02.07.2014 11:06:41
AECORE.DLL    : 8.3.2.2      241864 Bytes  21.07.2014 16:13:03
AEBB.DLL      : 8.1.1.4        53619 Bytes  02.07.2014 11:06:41
AVWINLL.DLL    : 14.0.5.320    24144 Bytes  02.07.2014 11:06:44
AVPREF.DLL    : 14.0.5.320    50256 Bytes  02.07.2014 11:06:43
AVREP.DLL      : 14.0.5.320    219216 Bytes  02.07.2014 11:06:43
AVARKT.DLL    : 14.0.5.368    226384 Bytes  02.07.2014 11:06:42
AVEVTLOG.DLL  : 14.0.5.320    182352 Bytes  02.07.2014 11:06:42
SQLITE3.DLL    : 14.0.5.320    452176 Bytes  02.07.2014 11:06:47
AVSMTP.DLL    : 14.0.5.320    76368 Bytes  02.07.2014 11:06:44
NETNT.DLL      : 14.0.5.320    13392 Bytes  02.07.2014 11:06:46
RCIMAGE.DLL    : 14.0.5.320  4998224 Bytes  02.07.2014 11:06:46
RCTEXT.DLL    : 14.0.5.322    73808 Bytes  02.07.2014 11:06:46

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, D:,
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert

Beginn des Suchlaufs: Mittwoch, 23. Juli 2014  09:46

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'HDD0(C:, D:)'
    [INFO]      Es wurde kein Virus gefunden!

Der Suchlauf nach versteckten Objekten wird begonnen.

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'atiesrxx.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '75' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '91' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '105' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '164' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '92' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '106' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'armsvc.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '120' Modul(e) wurden durchsucht
Durchsuche Prozess 'HD-LogRotatorService.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'dtsrvc.exe' - '25' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '50' Modul(e) wurden durchsucht
Durchsuche Prozess 'GREGsvc.exe' - '23' Modul(e) wurden durchsucht
Durchsuche Prozess 'UpdaterService.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMIGuardianSvc.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'NOBuAgent.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'pdisrvc.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'sqlwriter.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLIDSVC.EXE' - '74' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.ServiceHost.exe' - '132' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLIDSvcM.exe' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskeng.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'hamachi-2.exe' - '73' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'NASvc.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'SeaPort.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'atieclxx.exe' - '43' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '169' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.Systray.exe' - '138' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '114' Modul(e) wurden durchsucht
Durchsuche Prozess 'hamachi-2-ui.exe' - '58' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '91' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '61' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '113' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '125' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '30' Modul(e) wurden durchsucht

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '11879' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\' <Acer>
C:\Program Files (x86)\NextCouuP\f.dll
  [FUND]      Enthält Erkennungsmuster der Adware ADWARE/AgentCV.A.14238
C:\Program Files (x86)\Perfect World Entertainment\RaiderZ_en\Splash.exe
  [FUND]      Ist das Trojanische Pferd TR/Dropper.A.24596
C:\Program Files (x86)\SK Supporter\uninstall.exe
    [0] Archivtyp: NSIS
    --> [PluginsDir]/spext.dll
        [FUND]      Enthält Erkennungsmuster der Adware ADWARE/BHO.BProtector.13
        [WARNUNG]  Infizierte Dateien in Archiven können nicht repariert werden
C:\Users\Mirjam Zanetti\Downloads\Multihack by Madeye v4.1.zip
    [0] Archivtyp: ZIP
    --> Multihack by Madeye v4.1/Multihack by Madeye v4.1.exe
        [FUND]      Ist das Trojanische Pferd TR/Spy.Gen
        [WARNUNG]  Infizierte Dateien in Archiven können nicht repariert werden
C:\Users\Sven\AppData\Local\Mozilla\Firefox\Profiles\42h3y7h3.default\Cache\7\97\51E1Fd01
  [FUND]      Enthält Erkennungsmuster des Java-Scriptvirus JS/Blacole.GB.105
C:\Users\Sven\Downloads\4Story Hack by LaBomba.zip
    [0] Archivtyp: ZIP
    --> 4Story Hack by LaBomba.exe
        [FUND]      Ist das Trojanische Pferd TR/Spy.Gen
        [WARNUNG]  Infizierte Dateien in Archiven können nicht repariert werden
    [0] Archivtyp: Runtime Packed
    --> C:\Users\Sven\Downloads\chromeinstall-7u65.exe
        [1] Archivtyp: Runtime Packed
      --> C:\Users\Sven\Downloads\chromeinstall-7u9.exe
          [2] Archivtyp: Runtime Packed
        --> C:\Users\Sven\Downloads\Multihack by Madeye v4.1.zip
            [3] Archivtyp: ZIP
          --> Multihack by Madeye v4.1/Multihack by Madeye v4.1.exe
              [FUND]      Ist das Trojanische Pferd TR/Spy.Gen
              [WARNUNG]  Infizierte Dateien in Archiven können nicht repariert werden
C:\Users\Sven\Downloads\Multihack by Madeye v4.1.zip
  [FUND]      Ist das Trojanische Pferd TR/Spy.Gen
C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0002eb
  [FUND]      Enthält Erkennungsmuster der Adware ADWARE/InstallRex.Gen
        --> C:\Users\Tim\Downloads\4story Gold Hack 2014 4.4.rar
            [3] Archivtyp: RAR
          --> 4story Gold Hack 2014 4.4.exe
              [FUND]      Ist das Trojanische Pferd TR/Spy.Gen
              [WARNUNG]  Infizierte Dateien in Archiven können nicht repariert werden
C:\Users\Tim\Downloads\4story Gold Hack 2014 4.4.rar
  [FUND]      Ist das Trojanische Pferd TR/Spy.Gen
Beginne mit der Suche in 'D:\' <DATA>

Beginne mit der Desinfektion:
C:\Users\Tim\Downloads\4story Gold Hack 2014 4.4.rar
  [FUND]      Ist das Trojanische Pferd TR/Spy.Gen
  [HINWEIS]  Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '50a20aa7.qua' verschoben!
C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0002eb
  [FUND]      Enthält Erkennungsmuster der Adware ADWARE/InstallRex.Gen
  [HINWEIS]  Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4f892514.qua' verschoben!
C:\Users\Sven\Downloads\Multihack by Madeye v4.1.zip
  [FUND]      Ist das Trojanische Pferd TR/Spy.Gen
  [HINWEIS]  Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '1a127fea.qua' verschoben!
C:\Users\Sven\Downloads\4Story Hack by LaBomba.zip
  [FUND]      Ist das Trojanische Pferd TR/Spy.Gen
  [HINWEIS]  Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '7c5d304a.qua' verschoben!
C:\Users\Sven\AppData\Local\Mozilla\Firefox\Profiles\42h3y7h3.default\Cache\7\97\51E1Fd01
  [FUND]      Enthält Erkennungsmuster des Java-Scriptvirus JS/Blacole.GB.105
  [HINWEIS]  Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '398e1d52.qua' verschoben!
C:\Users\Mirjam Zanetti\Downloads\Multihack by Madeye v4.1.zip
  [FUND]      Ist das Trojanische Pferd TR/Spy.Gen
  [HINWEIS]  Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '46ba2f77.qua' verschoben!
C:\Program Files (x86)\SK Supporter\uninstall.exe
  [FUND]      Enthält Erkennungsmuster der Adware ADWARE/BHO.BProtector.13
  [HINWEIS]  Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '0a010334.qua' verschoben!
C:\Program Files (x86)\Perfect World Entertainment\RaiderZ_en\Splash.exe
  [FUND]      Ist das Trojanische Pferd TR/Dropper.A.24596
  [HINWEIS]  Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '761a436a.qua' verschoben!
C:\Program Files (x86)\NextCouuP\f.dll
  [FUND]      Enthält Erkennungsmuster der Adware ADWARE/AgentCV.A.14238
  [HINWEIS]  Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5b486c69.qua' verschoben!


Ende des Suchlaufs: Mittwoch, 23. Juli 2014  14:30
Benötigte Zeit:  4:16:07 Stunde(n)

Der Suchlauf wurde vollständig durchgeführt.

 105434 Verzeichnisse wurden überprüft
 2485463 Dateien wurden geprüft
    11 Viren bzw. unerwünschte Programme wurden gefunden
      0 Dateien wurden als verdächtig eingestuft
      0 Dateien wurden gelöscht
      0 Viren bzw. unerwünschte Programme wurden repariert
      9 Dateien wurden in die Quarantäne verschoben
      0 Dateien wurden umbenannt
      0 Dateien konnten nicht durchsucht werden
 2485452 Dateien ohne Befall
  25609 Archive wurden durchsucht
      5 Warnungen
      9 Hinweise
 1629595 Objekte wurden beim Rootkitscan durchsucht
      0 Versteckte Objekte wurden gefunden
Das Problem aus dem Startpost ist wie gesagt schon länger verschwunden^^
Allerdings hab ich noch das Problem mit Google Chrome: Wenn ich es starte, gehen 2-5 Mitteilungen ("Ihr Profil konnte nicht ordnungsgemäss geöffnet werden. Etc. etc.") auf und wenn ich es schliesse, bleibt der Prozess zwei Mal offen. Ich muss dann beide chrome.exe-Prozesse über den Taskmanager schliessen damit ich Chrome wieder öffnen kann, ansonsten passiert nämlich nix.
Weisst du vielleicht, wie ich das wieder hinkriege? Mit Revo drüber und neu installieren zB?

Und achja, die beiden Programme sollten nun geupdatet sein ;)

schrauber 24.07.2014 09:37
Revo Uninstaller - Download - Filepony
damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.google.com/chrome/answer/3296214?hl=de


frisches FRST Log bitte.

Terrenay 24.07.2014 11:10
Super, Chrome geht wieder wie geschmiert :)


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-07-2014
Ran by Sven (administrator) on MirjamZanetti on 24-07-2014 12:06:24
Running from C:\Users\Sven\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.EXE
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [DisableClock] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoNetworkConnections] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoCommonGroups] 0
ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-1536315646-4119356758-1407283469-1001\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {FBC74BB4-EFB2-4CD0-A19E-91D3FCDB1C71} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {FBC74BB4-EFB2-4CD0-A19E-91D3FCDB1C71} URL = https://www.google.com/search?q={searchTerms}
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: SNT -> {76F9D91C-56F3-3618-2D80-F6734BE2E498} -> C:\Program Files (x86)\SNT\5AJN.dll No File
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File
BHO-x32: Media View -> {fed65192-d64e-4d7b-91f6-37d5f033d528} -> C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Sven\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: SNT - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\Extensions\hcfai@pbgqo-.co.uk [2014-03-24]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff

Chrome:
=======
CHR HomePage: hxxp://google.ch/
CHR StartupUrls: "hxxp://www.google.ch/"
CHR Extension: (Google Docs) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-24]
CHR Extension: (Google Drive) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-24]
CHR Extension: (YouTube) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-24]
CHR Extension: (Google-Suche) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-24]
CHR Extension: (Avira Browser Safety) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-07-24]
CHR Extension: (Google Wallet) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-24]
CHR Extension: (Google Mail) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-24]
CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2014-07-24]
CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2014-07-24]
CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2014-07-24]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)
S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)
R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed]
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed]
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed]
S2 APNMCP; "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)
R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-24] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk
2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-24 11:52 - 2014-07-24 11:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-24 11:52 - 2014-07-24 11:57 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira
2014-07-23 09:45 - 2014-07-24 11:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-23 09:37 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-23 09:37 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-23 09:37 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-23 09:37 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-23 09:36 - 2014-07-23 09:37 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe
2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-22 13:14 - 2014-07-22 13:15 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe
2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe
2014-07-20 21:19 - 2014-07-20 21:20 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe
2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira
2014-07-11 13:32 - 2014-07-24 12:06 - 00019164 _____ () C:\Users\Sven\Desktop\FRST.txt
2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt
2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe
2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt
2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt
2014-07-11 13:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe
2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt
2014-07-11 12:14 - 2014-07-24 12:06 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion
2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira
2014-07-10 16:48 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-10 16:48 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-10 16:48 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-10 15:30 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Avira
2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe
2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt
2014-07-10 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-07-10 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-07-10 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-07-10 11:34 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-10 11:34 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-10 11:34 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-10 11:34 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-10 11:34 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-10 11:34 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-10 11:34 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-10 11:34 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-10 11:34 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-10 11:34 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-10 11:34 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-10 11:34 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-10 11:34 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-10 11:34 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-10 11:34 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-10 11:34 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-10 11:34 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-10 11:34 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-10 11:34 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-10 11:34 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-10 11:34 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-10 11:34 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-10 11:34 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-10 11:34 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-10 11:34 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-10 11:34 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-10 11:34 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-10 11:34 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-10 11:34 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-10 11:34 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-10 11:34 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-10 11:34 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-10 11:34 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-10 11:34 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-10 11:34 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-10 11:34 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-10 11:34 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-10 11:34 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-10 11:34 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-10 11:34 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-10 11:34 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-10 11:34 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-10 11:34 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-10 11:34 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-10 11:34 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-10 11:34 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-10 11:34 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-10 11:34 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-10 11:34 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-10 11:34 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-10 11:34 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-10 11:34 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-10 11:34 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-10 11:34 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-10 11:34 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-10 11:34 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-10 11:28 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-10 11:28 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-10 11:28 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-10 11:28 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-10 11:28 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-10 11:28 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-10 11:28 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-10 11:28 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-10 11:23 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-10 11:23 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-10 11:23 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk
2014-07-09 14:10 - 2014-07-10 14:52 - 00000000 ____D () C:\Qoobox
2014-07-09 14:09 - 2014-07-10 14:48 - 00000000 ____D () C:\Windows\erdnt
2014-07-09 14:08 - 2014-07-10 13:55 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe
2014-07-09 13:21 - 2014-07-09 13:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe
2014-07-08 11:06 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz
2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame
2014-07-07 20:25 - 2014-07-07 20:28 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe
2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe
2014-07-07 19:27 - 2014-07-24 12:06 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe
2014-07-07 19:27 - 2014-07-24 12:06 - 00000000 ____D () C:\FRST
2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc
2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk
2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
2014-07-07 14:44 - 2014-07-08 06:36 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment
2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe
2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download
2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-24 12:07 - 2014-07-11 13:32 - 00019164 _____ () C:\Users\Sven\Desktop\FRST.txt
2014-07-24 12:06 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion
2014-07-24 12:06 - 2014-07-07 19:27 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe
2014-07-24 12:06 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST
2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk
2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-24 11:57 - 2014-07-24 11:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-24 11:57 - 2014-07-24 11:52 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-24 11:57 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-24 11:57 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-24 11:51 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-24 11:51 - 2013-03-03 20:30 - 00000000 ____D () C:\Users\Sven\AppData\Local\LogMeIn Hamachi
2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Deployment
2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Apps\2.0
2014-07-24 11:51 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-24 11:48 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-24 11:48 - 2009-07-14 06:51 - 00102540 _____ () C:\Windows\setupact.log
2014-07-24 11:47 - 2012-06-29 12:21 - 02021108 _____ () C:\Windows\WindowsUpdate.log
2014-07-24 11:47 - 2010-11-21 05:47 - 01748832 _____ () C:\Windows\PFRO.log
2014-07-24 11:33 - 2014-07-23 09:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-24 11:23 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job
2014-07-24 11:09 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job
2014-07-23 22:45 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent
2014-07-23 22:27 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype
2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira
2014-07-23 20:53 - 2013-03-01 12:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi
2014-07-23 17:23 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job
2014-07-23 14:30 - 2014-03-02 13:27 - 00000000 ____D () C:\Program Files (x86)\NextCouuP
2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-23 09:45 - 2012-03-23 02:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-23 09:45 - 2012-03-23 02:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-23 09:38 - 2013-12-21 11:39 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-23 09:37 - 2014-07-23 09:36 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-23 09:37 - 2013-12-21 11:38 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe
2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-22 13:15 - 2014-07-22 13:14 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe
2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe
2014-07-22 10:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-21 21:38 - 2013-02-28 23:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi
2014-07-21 15:17 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012
2014-07-20 21:20 - 2014-07-20 21:19 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe
2014-07-19 19:28 - 2012-06-24 20:13 - 00742794 _____ () C:\Windows\system32\perfh010.dat
2014-07-19 19:28 - 2012-06-24 20:13 - 00152352 _____ () C:\Windows\system32\perfc010.dat
2014-07-19 19:28 - 2012-06-24 20:06 - 00748104 _____ () C:\Windows\system32\perfh00C.dat
2014-07-19 19:28 - 2012-06-24 20:06 - 00154994 _____ () C:\Windows\system32\perfc00C.dat
2014-07-19 19:28 - 2012-06-24 19:58 - 00710502 _____ () C:\Windows\system32\perfh007.dat
2014-07-19 19:28 - 2012-06-24 19:58 - 00154832 _____ () C:\Windows\system32\perfc007.dat
2014-07-19 19:28 - 2009-07-14 07:13 - 03450454 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira
2014-07-11 14:27 - 2009-07-14 06:45 - 00435760 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-11 14:26 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-11 14:20 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-11 14:20 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt
2014-07-11 13:22 - 2014-01-05 15:48 - 00000000 ____D () C:\Windows\ERUNT
2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe
2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt
2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt
2014-07-11 13:07 - 2013-12-22 10:49 - 00000000 ____D () C:\AdwCleaner
2014-07-11 13:03 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim
2014-07-11 13:03 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven
2014-07-11 13:03 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti
2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe
2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt
2014-07-11 03:02 - 2014-07-23 09:37 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-11 02:56 - 2014-07-23 09:37 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-11 02:56 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-11 02:55 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-10 21:29 - 2013-10-08 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE
2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira
2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-10 16:48 - 2014-07-10 15:30 - 00000000 ____D () C:\ProgramData\Avira
2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe
2014-07-10 15:30 - 2013-02-18 22:07 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt
2014-07-10 14:52 - 2014-07-09 14:10 - 00000000 ____D () C:\Qoobox
2014-07-10 14:52 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-07-10 14:48 - 2014-07-09 14:09 - 00000000 ____D () C:\Windows\erdnt
2014-07-10 14:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-07-10 14:40 - 2014-01-24 17:54 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\convert
2014-07-10 14:40 - 2013-12-02 21:20 - 00000000 ____D () C:\Program Files (x86)\PSupport
2014-07-10 14:38 - 2012-12-21 13:42 - 00000000 ____D () C:\Users\Sven\AppData\Local\CrashDumps
2014-07-10 14:18 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-10 14:10 - 2012-11-07 14:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-10 14:08 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-10 13:55 - 2014-07-09 14:08 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe
2014-07-10 10:43 - 2012-12-02 21:28 - 00000680 __RSH () C:\Users\Tim\ntuser.pol
2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk
2014-07-09 19:58 - 2012-12-01 11:05 - 00000680 __RSH () C:\Users\Mirjam Zanetti\ntuser.pol
2014-07-09 19:15 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET
2014-07-09 14:28 - 2014-02-24 18:05 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-07-09 14:28 - 2012-12-01 11:20 - 00001326 __RSH () C:\Users\Sven\ntuser.pol
2014-07-09 13:23 - 2014-07-09 13:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe
2014-07-09 13:23 - 2014-01-02 14:48 - 00001272 _____ () C:\Users\Sven\Desktop\Revo Uninstaller.lnk
2014-07-09 13:23 - 2014-01-02 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-08 11:07 - 2014-07-08 11:06 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz
2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-08 06:40 - 2013-09-19 19:37 - 00000000 ____D () C:\ArcTemp
2014-07-08 06:36 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment
2014-07-07 22:05 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame
2014-07-07 20:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-07-07 20:28 - 2014-07-07 20:25 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe
2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe
2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc
2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk
2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe
2014-07-02 13:06 - 2014-07-10 16:48 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-02 13:06 - 2014-07-10 16:48 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-02 13:06 - 2014-07-10 16:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download
2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download
2014-06-30 04:09 - 2014-07-10 11:28 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-30 04:04 - 2014-07-10 11:28 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-26 20:49 - 2014-01-05 20:23 - 00000000 ____D () C:\Users\Sven\AppData\Local\Purplizer
2014-06-26 20:48 - 2014-05-26 18:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Raptr
2014-06-26 20:48 - 2014-04-25 20:59 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-06-26 20:48 - 2014-01-01 16:14 - 00000000 ____D () C:\Users\Sven\AppData\Local\Overwolf

Some content of TEMP:
====================
C:\Users\Mirjam Zanetti\AppData\Local\Temp\avgnt.exe
C:\Users\Sven\AppData\Local\Temp\avgnt.exe
C:\Users\Sven\AppData\Local\Temp\Quarantine.exe
C:\Users\Tim\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2013-03-25 09:03

==================== End Of Log ============================
--- --- ---

schrauber 24.07.2014 19:19
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-1536315646-4119356758-1407283469-1001\User: Group Policy restriction detected <======= ATTENTION

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.





Fertig :)

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun :)

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Terrenay 25.07.2014 18:18
Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 24-07-2014
Ran by Sven at 2014-07-25 19:01:24 Run:1
Running from C:\Users\Sven\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-1536315646-4119356758-1407283469-1001\User: Group Policy restriction detected <======= ATTENTION
       
*****************

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
C:\Windows\system32\GroupPolicyUsers\S-1-5-21-1536315646-4119356758-1407283469-1001\User => Moved successfully.


The system needed a reboot.

==== End of Fixlog ====
Erstmal: Vielen Dank für die Hilfe! Alles ist verschwunden und der Computer läuft wieder viel schneller!
...Auf meinem Account..

Ich hab grad, nachdem ich den Neustart von FRST durchgeführt habe, kurz auf dem Account meiner Mutter (Computer-Administrator) geschaut, ob auch dort alles OK ist.
Aber dort ist sogar immer noch die "save.on"-Erweiterung installiert und es öffnen sich in Chrome dauern Webseiten, die Werbung etc beinhalten.
Kann es sein, dass wir uns hier nur um die Viren auf meinem Account gekümmert haben?

lg

schrauber 26.07.2014 10:51
Ich weiß ja nit auf welchem Account du die ganzen Scans machst.

FRST bitte aus dem Account der Mutter laufen lassen, Logs posten.

Terrenay 26.07.2014 20:29

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014
Ran by Mirjam Zanetti (administrator) on MirjamZanetti on 26-07-2014 21:22:33
Running from C:\Users\Mirjam Zanetti\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.EXE
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\HPNetworkCommunicator.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [HP Photosmart 7520 series (NET)] => C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [se] => C:\Users\user\AppData\Roaming\SkypEmoticons\SE.exe  /minimized 
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\system: [DisableClock] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoNetworkConnections] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoCommonGroups] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\MountPoints2: {2bcee651-c1d5-11e1-9a2e-806e6f6e6963} - E:\Setup.exe
ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.holasearch.com/?affID=121962&tt=gc_&babsrc=HP_ss&mntrId=7C1DF80F415692A8
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=559&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=5608402600834153&q={searchTerms}
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.holasearch.com/?q={searchTerms}&affID=121962&tt=gc_&babsrc=SP_ss&mntrId=7C1DF80F415692A8
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=559&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=5608402600834153&q={searchTerms}
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: SNT -> {76F9D91C-56F3-3618-2D80-F6734BE2E498} -> C:\Program Files (x86)\SNT\5AJN.dll No File
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File
BHO-x32: Media View -> {fed65192-d64e-4d7b-91f6-37d5f033d528} -> C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

FireFox:
========
FF ProfilePath: C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Mirjam Zanetti\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\Extensions\staged [2013-12-31]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff
FF HKCU\...\Firefox\Extensions: [happylyrics@hpyproductions.net] - C:\Program Files (x86)\HappyLyrics\FF

Chrome:
=======
CHR HomePage:
CHR DefaultSearchKeyword: ask search
CHR DefaultSearchProvider: Ask Search
CHR DefaultSearchURL: hxxp://www.search.ask.com/web?p2=%5EBBK%5EOSJ000%5EYY%5ECH&gct=&o=APN11412&tpid=ORJ-V7C&itbv=12.7.0.15&doi=2014-02-07&apn_uid=695C426C-942E-46F5-A9B6-D0BEE434F5D8&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5ECH&apn_dbr=cr_32.0.1700.76&psv=&trgb=CR&q={searchTerms}
CHR DefaultNewTabURL:
CHR Extension: (Inbox Toolbar) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\apgjagobplilmcdfelodhgefiidomnfl [2014-05-28]
CHR Extension: (No Name) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23]
CHR Extension: (MySearch) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf [2014-06-23]
CHR Extension: (Google Wallet) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26]
CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2013-08-26]
CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2013-08-26]
CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2013-08-26]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)
S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)
R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed]
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed]
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed]
S2 APNMCP; "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)
R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-26] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-26 21:22 - 2014-07-26 21:23 - 00020722 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt
2014-07-26 21:21 - 2014-07-26 21:22 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe
2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS
2014-07-24 15:43 - 2014-07-24 15:42 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk
2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-24 11:52 - 2014-07-26 21:13 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-24 11:52 - 2014-07-26 20:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira
2014-07-23 09:45 - 2014-07-26 20:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-23 09:37 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-23 09:37 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-23 09:37 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-23 09:37 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-23 09:36 - 2014-07-23 09:37 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe
2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-22 13:14 - 2014-07-22 13:15 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe
2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe
2014-07-20 21:19 - 2014-07-20 21:20 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe
2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira
2014-07-11 13:32 - 2014-07-24 12:07 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt
2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt
2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe
2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt
2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt
2014-07-11 13:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe
2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt
2014-07-11 12:14 - 2014-07-24 12:06 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion
2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira
2014-07-10 16:48 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-10 16:48 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-10 16:48 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-10 15:30 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Avira
2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe
2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt
2014-07-10 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-07-10 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-07-10 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-07-10 11:34 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-10 11:34 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-10 11:34 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-10 11:34 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-10 11:34 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-10 11:34 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-10 11:34 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-10 11:34 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-10 11:34 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-10 11:34 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-10 11:34 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-10 11:34 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-10 11:34 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-10 11:34 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-10 11:34 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-10 11:34 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-10 11:34 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-10 11:34 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-10 11:34 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-10 11:34 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-10 11:34 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-10 11:34 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-10 11:34 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-10 11:34 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-10 11:34 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-10 11:34 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-10 11:34 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-10 11:34 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-10 11:34 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-10 11:34 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-10 11:34 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-10 11:34 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-10 11:34 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-10 11:34 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-10 11:34 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-10 11:34 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-10 11:34 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-10 11:34 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-10 11:34 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-10 11:34 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-10 11:34 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-10 11:34 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-10 11:34 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-10 11:34 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-10 11:34 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-10 11:34 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-10 11:34 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-10 11:34 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-10 11:34 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-10 11:34 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-10 11:34 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-10 11:34 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-10 11:34 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-10 11:34 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-10 11:34 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-10 11:34 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-10 11:28 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-10 11:28 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-10 11:28 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-10 11:28 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-10 11:28 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-10 11:28 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-10 11:28 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-10 11:28 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-10 11:23 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-10 11:23 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-10 11:23 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk
2014-07-09 14:10 - 2014-07-10 14:52 - 00000000 ____D () C:\Qoobox
2014-07-09 14:09 - 2014-07-10 14:48 - 00000000 ____D () C:\Windows\erdnt
2014-07-09 14:08 - 2014-07-10 13:55 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe
2014-07-09 13:21 - 2014-07-09 13:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe
2014-07-08 11:06 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz
2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame
2014-07-07 20:25 - 2014-07-07 20:28 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe
2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe
2014-07-07 19:27 - 2014-07-26 21:22 - 00000000 ____D () C:\FRST
2014-07-07 19:27 - 2014-07-24 12:06 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe
2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc
2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk
2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
2014-07-07 14:44 - 2014-07-08 06:36 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment
2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe
2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download
2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-26 21:23 - 2014-07-26 21:22 - 00020722 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt
2014-07-26 21:23 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job
2014-07-26 21:22 - 2014-07-26 21:21 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe
2014-07-26 21:22 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST
2014-07-26 21:22 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-26 21:22 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-26 21:19 - 2012-06-29 12:21 - 01207747 _____ () C:\Windows\WindowsUpdate.log
2014-07-26 21:16 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-26 21:16 - 2013-02-28 23:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi
2014-07-26 21:13 - 2014-07-24 11:52 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-26 21:13 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-26 21:13 - 2009-07-14 06:51 - 00102820 _____ () C:\Windows\setupact.log
2014-07-26 21:09 - 2010-11-21 05:47 - 01755708 _____ () C:\Windows\PFRO.log
2014-07-26 20:57 - 2014-07-24 11:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-26 20:48 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent
2014-07-26 20:34 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype
2014-07-26 20:33 - 2014-07-23 09:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-26 20:23 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job
2014-07-26 18:18 - 2013-03-01 12:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi
2014-07-26 17:23 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job
2014-07-26 10:55 - 2013-03-03 20:30 - 00000000 ____D () C:\Users\Sven\AppData\Local\LogMeIn Hamachi
2014-07-25 22:34 - 2012-12-02 21:28 - 00000008 __RSH () C:\Users\Tim\ntuser.pol
2014-07-25 22:34 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim
2014-07-25 19:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-07-25 19:13 - 2012-12-01 11:20 - 00000326 __RSH () C:\Users\Sven\ntuser.pol
2014-07-25 19:13 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven
2014-07-25 19:09 - 2014-02-24 18:05 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-07-25 19:09 - 2012-12-01 11:05 - 00000008 __RSH () C:\Users\Mirjam Zanetti\ntuser.pol
2014-07-25 19:09 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti
2014-07-25 19:07 - 2014-01-07 00:07 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS
2014-07-25 19:01 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-07-24 15:42 - 2014-07-24 15:43 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-24 12:07 - 2014-07-11 13:32 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt
2014-07-24 12:06 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion
2014-07-24 12:06 - 2014-07-07 19:27 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe
2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk
2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Deployment
2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Apps\2.0
2014-07-24 11:51 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira
2014-07-23 14:30 - 2014-03-02 13:27 - 00000000 ____D () C:\Program Files (x86)\NextCouuP
2014-07-23 14:30 - 2013-12-16 13:29 - 00000000 ____D () C:\Program Files (x86)\SK Supporter
2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-23 09:45 - 2012-03-23 02:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-23 09:45 - 2012-03-23 02:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-23 09:38 - 2013-12-21 11:39 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-23 09:37 - 2014-07-23 09:36 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-23 09:37 - 2013-12-21 11:38 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe
2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-22 13:15 - 2014-07-22 13:14 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe
2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe
2014-07-22 10:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-21 15:17 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012
2014-07-20 21:20 - 2014-07-20 21:19 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe
2014-07-19 19:28 - 2012-06-24 20:13 - 00742794 _____ () C:\Windows\system32\perfh010.dat
2014-07-19 19:28 - 2012-06-24 20:13 - 00152352 _____ () C:\Windows\system32\perfc010.dat
2014-07-19 19:28 - 2012-06-24 20:06 - 00748104 _____ () C:\Windows\system32\perfh00C.dat
2014-07-19 19:28 - 2012-06-24 20:06 - 00154994 _____ () C:\Windows\system32\perfc00C.dat
2014-07-19 19:28 - 2012-06-24 19:58 - 00710502 _____ () C:\Windows\system32\perfh007.dat
2014-07-19 19:28 - 2012-06-24 19:58 - 00154832 _____ () C:\Windows\system32\perfc007.dat
2014-07-19 19:28 - 2009-07-14 07:13 - 03450454 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira
2014-07-11 14:27 - 2009-07-14 06:45 - 00435760 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-11 14:26 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-11 14:20 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-11 14:20 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt
2014-07-11 13:22 - 2014-01-05 15:48 - 00000000 ____D () C:\Windows\ERUNT
2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe
2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt
2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt
2014-07-11 13:07 - 2013-12-22 10:49 - 00000000 ____D () C:\AdwCleaner
2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe
2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt
2014-07-11 03:02 - 2014-07-23 09:37 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-11 02:56 - 2014-07-23 09:37 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-11 02:56 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-11 02:55 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-10 21:29 - 2013-10-08 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE
2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira
2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-10 16:48 - 2014-07-10 15:30 - 00000000 ____D () C:\ProgramData\Avira
2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe
2014-07-10 15:30 - 2013-02-18 22:07 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt
2014-07-10 14:52 - 2014-07-09 14:10 - 00000000 ____D () C:\Qoobox
2014-07-10 14:52 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-07-10 14:48 - 2014-07-09 14:09 - 00000000 ____D () C:\Windows\erdnt
2014-07-10 14:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-07-10 14:40 - 2014-01-24 17:54 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\convert
2014-07-10 14:40 - 2013-12-02 21:20 - 00000000 ____D () C:\Program Files (x86)\PSupport
2014-07-10 14:38 - 2012-12-21 13:42 - 00000000 ____D () C:\Users\Sven\AppData\Local\CrashDumps
2014-07-10 14:18 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-10 14:10 - 2012-11-07 14:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-10 14:08 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-10 13:55 - 2014-07-09 14:08 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe
2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk
2014-07-09 19:15 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET
2014-07-09 13:23 - 2014-07-09 13:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe
2014-07-09 13:23 - 2014-01-02 14:48 - 00001272 _____ () C:\Users\Sven\Desktop\Revo Uninstaller.lnk
2014-07-09 13:23 - 2014-01-02 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-08 11:07 - 2014-07-08 11:06 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz
2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-08 06:40 - 2013-09-19 19:37 - 00000000 ____D () C:\ArcTemp
2014-07-08 06:36 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment
2014-07-07 22:05 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame
2014-07-07 20:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-07-07 20:28 - 2014-07-07 20:25 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe
2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe
2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc
2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk
2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe
2014-07-02 13:06 - 2014-07-10 16:48 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-02 13:06 - 2014-07-10 16:48 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-02 13:06 - 2014-07-10 16:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download
2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download
2014-06-30 04:09 - 2014-07-10 11:28 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-30 04:04 - 2014-07-10 11:28 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-26 20:49 - 2014-01-05 20:23 - 00000000 ____D () C:\Users\Sven\AppData\Local\Purplizer
2014-06-26 20:48 - 2014-05-26 18:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Raptr
2014-06-26 20:48 - 2014-04-25 20:59 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-06-26 20:48 - 2014-01-01 16:14 - 00000000 ____D () C:\Users\Sven\AppData\Local\Overwolf

Some content of TEMP:
====================
C:\Users\Mirjam Zanetti\AppData\Local\temp\avgnt.exe
C:\Users\Sven\AppData\Local\temp\avgnt.exe
C:\Users\Sven\AppData\Local\temp\Quarantine.exe
C:\Users\Tim\AppData\Local\temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2013-03-25 09:03

==================== End Of Log ============================
--- --- ---

Terrenay 26.07.2014 20:29
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-07-2014
Ran by Mirjam Zanetti at 2014-07-26 21:24:22
Running from C:\Users\Mirjam Zanetti\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 clear.fi SDK - MVP 2 (x32 Version: 2.0.1505 - CyberLink Corp.) Hidden
 clear.fi SDK- Movie 2 (x32 Version: 2.0.1502 - CyberLink Corp.) Hidden
 Tools for .Net 3.5 - DEU Lang Pack (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden
 Tools for .Net 3.5 (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden
4Story DE 4.2.213 (HKLM-x32\...\4Story_DE_is1) (Version:  - )
4story_cycle (HKCU\...\Kalydo App 4story_cycle) (Version: 4.01.00.22 - )
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Acer eDisplay Management (HKLM-x32\...\{A586DC50-B18D-48FB-B7CC-A598200457C2}) (Version: 1.37.007 - Portrait Displays, Inc.)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3507 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3506 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0609.2011 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 13.0.0.111 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.1.151 - Adobe Systems, Inc.)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.5 - Sereby Corporation)
AMD Accelerated Video Transcoding (Version: 13.30.100.40417 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.873.1 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2014.0417.2226.38446 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In  (Version: 2.07.0000 - AMD) Hidden
AMD USB 3.0 Device Detector (Version: 2.1.29.0 - Advanced Micro Devices, Inc.) Hidden
AMD VISION Engine Control Center (x32 Version: 2012.0126.1906.34079 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden
Ancient Magic (HKLM-x32\...\Ancient Magic) (Version: 0.0.0.1 - Sven Zanetti)
Any Video Converter 5.5.5 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)
Ask Toolbar (HKLM-x32\...\{4F524A2D-5637-4300-76A7-A758B70C0A03}) (Version: 12.10.3.28 - APN, LLC) <==== ATTENTION
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 2.9.4272 - DsNET Corp)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Avidemux 2.6 (32-bit) (HKLM-x32\...\Avidemux 2.6) (Version: 2.6.7.8981 - )
Avira (HKLM-x32\...\{142be4a8-895b-4ed9-b1ff-11c76357e3df}) (Version: 1.1.17.31000 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.17.31000 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.5.464 - Avira)
Benutzerhandbuch - Grundlagen EPSON XP-402 403 405 406 Series (HKLM-x32\...\EPSON XP-402 403 405 406 Series Bog) (Version:  - )
Benutzerhandbuch EPSON XP-402 403 405 406 Series (HKLM-x32\...\EPSON XP-402 403 405 406 Series Useg) (Version:  - )
Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
BitComet 1.36 64-bit (HKLM-x32\...\BitComet_x64) (Version: 1.36 - CometNetwork)
Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Blend for Visual Studio 2012 ENU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blender (HKLM\...\Blender) (Version: 2.70a - Blender Foundation)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.7.17.916 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{7E6316CA-5ED0-4EF9-9920-A92115E286B7}) (Version: 0.7.17.916 - BlueStack Systems, Inc.)
Camtasia Studio 8 (HKLM-x32\...\{A7727F03-5311-4A12-9A63-2ACD20BA0497}) (Version: 8.2.1.1423 - TechSmith Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Chat Mapper (HKLM-x32\...\{498F0DC0-3B5E-4DC7-B571-578F61306058}) (Version: 1.7.0.0 - Urban Brain Studios, Inc.)
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.00.3004 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.00.3004 - Acer Incorporated)
CPU Miner (HKLM-x32\...\CPUMiner) (Version: 1.0 - WinTuneUp Apps. )
CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1720_38230 - CyberLink Corp.)
CyberLink MediaEspresso (x32 Version: 6.5.1720_38230 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
DirectX 9.0c Extra Files (x86, x64) (HKLM\...\{8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1) (Version: 1.10.06.0 - Sereby Corporation)
DirectX for Managed Code (HKLM\...\{FDF7187F-3960-4BEC-916D-98C9A83E3A68}_is1) (Version: 1.0.0.0 - Sereby Corporation)
Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden
Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden
Download Navigator (HKLM-x32\...\{E728441A-7820-4B1C-87C9-DE7BE37B2953}) (Version: 1.1.0 - SEIKO EPSON CORPORATION)
Druckerdeinstallation für EPSON XP-402 403 405 406 Series (HKLM\...\EPSON XP-402 403 405 406 Series) (Version:  - SEIKO EPSON Corporation)
eBay Worldwide (HKLM-x32\...\{D3E5A972-9A15-427D-AE78-8181A5FD943C}) (Version: 2.2.0409 - OEM)
Elsword_DE (HKLM-x32\...\Elsword_DE_is1) (Version:  - )
Entity Framework Designer für Visual Studio 2012 - DEU (HKLM-x32\...\{B2BDC072-BE01-432D-B281-30891D597FBB}) (Version: 11.1.30729.00 - Microsoft Corporation)
Epson Easy Photo Print 2 (HKLM-x32\...\{30E01116-5666-4807-8EF1-D80E9FF16717}) (Version: 2.3.2.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)
Epson Event Manager (HKLM-x32\...\{BECE9CCD-83F6-4BAA-9B26-227DF7D2E932}) (Version: 3.01.0000 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.5.00 - SEIKO EPSON CORPORATION)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
FileZilla Client 3.8.1 (HKLM-x32\...\FileZilla Client) (Version: 3.8.1 - Tim Kosse)
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fotogaléria (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalerija (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalleri (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalleriet (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotoğraf Galerisi (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotótár (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Freemake Video Converter Version 4.1.3 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.3 - Ellora Assets Corporation)
Galeria de Fotografias (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria de Fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria fotogràfica (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria fotografii (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerija fotografija (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Gameforge Live 2.0.3 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.3 - Gameforge)
GIMP 2.8.4 (HKLM\...\GIMP-2_is1) (Version: 2.8.4 - The GIMP Team)
GLBasic SDK (HKLM-x32\...\GLBasic_SDK) (Version: 12.096 - Dream Design Entertainment)
GnuWin32: CoreUtils version 5.3.0 (HKLM-x32\...\CoreUtils-5.3.0_is1) (Version: 5.3.0 - GnuWin32)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{2A83AD05-56E6-3FBD-8752-B4143162EF59}) (Version: 4.9.1.16010 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
Hotkey Utility (HKLM-x32\...\Hotkey Utility) (Version: 2.05.3510 - Acer Incorporated)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.12412 - HP)
HP Photosmart 7520 series - Grundlegende Software für das Gerät (HKLM\...\{62883BA5-32F6-44D0-AF9D-9CBED778F36F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
HyperCam 3 (HKLM-x32\...\HyperCam 3 3.5.1211.29) (Version: 3.5.1211.29 - Solveig Multimedia)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version:  - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version:  - )
Iminent (x32 Version: 6.46.1.0 - Iminent) Hidden <==== ATTENTION
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
InstallForge (HKLM-x32\...\InstallForge) (Version: 1.2.9.1 - solicus)
Interdiscount Fotoservice (HKLM-x32\...\Interdiscount Fotoservice) (Version: 4.8.6 - CEWE COLOR AG u Co. OHG)
Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.650 - Oracle)
Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden
JavaScript Tooling (Version: 11.0.60315 - Microsoft Corporation) Hidden
JavaScript Tooling (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
JetBrains ReSharper 7.0.1 (HKLM-x32\...\{1322DAC7-A713-4015-8F36-035F07A06ECA}) (Version: 7.0.1098 - JetBrains Inc)
Jewel Quest Mysteries: The Seventh Gate Collector's Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Kalydo Player 5.00.01 (HKCU\...\KalydoPlayer) (Version: 5.00.01 - Eximion B.V.)
Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version:  - Last.fm)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
LocalESPC (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
LocalESPCui for de-de (x32 Version: 8.59.25584 - Microsoft) Hidden
LocalESPCui for en-us (x32 Version: 8.59.25584 - Microsoft) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.227 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.227 - LogMeIn, Inc.) Hidden
MAESTIA Version 201207 (HKLM-x32\...\{8F50EC3D-C482-4445-9E4B-991A766047D5}_is1) (Version: 201207 - RocWorks)
Magicka - Demo (HKLM-x32\...\Steam App 73050) (Version:  - Arrowhead Game Studios)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Hidden
Microsoft .NET Framework 1.1 Security Update (KB2656370) (HKLM-x32\...\M2656370) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version:  - )
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (HKLM-x32\...\{98B45D1C-6EB1-460D-A87D-2B60678DC105}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft ASP.NET and Web Tools 2012.3 - Visual Studio 2012 - deu (x32 Version: 1.4.41009.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET and Web Tools 2012.3 - Visual Studio 2012 (x32 Version: 1.4.41009.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 3 - DEU (HKLM-x32\...\{07AC2D83-E795-4AD5-970D-B9BD14A1E411}) (Version: 3.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update - DEU (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 4 Runtime - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages - DEU (HKLM-x32\...\{93EEC4E9-EEFE-4027-ACD3-6E8C1D085975}) (Version: 1.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools - DEU (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages 2 Runtime - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden
Microsoft Expression Blend SDK for .NET 4 (x32 Version: 2.0.20525.0 - Microsoft Corporation) Hidden
Microsoft Expression Blend SDK for Silverlight 4 (x32 Version: 2.0.20525.0 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden
Microsoft Help Viewer 2.0 Language Pack - DEU (HKLM-x32\...\Microsoft Help Viewer 2.0 Language Pack - DEU) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2012 Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2012 CoreRes - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2012 v3.0 Core (x32 Version: 11.0.61011 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - DEU (x32 Version: 11.0.61011 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - ENU (x32 Version: 11.0.61011 - Microsoft Corporation) Hidden
Microsoft LightSwitch für Visual Studio 2012 CoreRes - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft NuGet - Visual Studio 2012 (x32 Version: 2.6.40627.9000 - Microsoft Corporation) Hidden
Microsoft NuGet - Visual Studio Express 2012 for Windows Desktop (x32 Version: 2.6.40627.9000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISER) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.60418.17931 - Microsoft Corporation) Hidden
Microsoft Portable Library Multi-Targeting Pack Language Pack - deu (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden
Microsoft Portable Library Multi-Targeting Pack Language Pack - enu (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden
Microsoft Report Viewer Add-On for Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden
Microsoft Report Viewer Add-On für Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.10411.0 - Microsoft Corporation)
Microsoft Silverlight 4 SDK - Deutsch (HKLM-x32\...\{8EA792A5-38AA-4F0E-8DFE-D1BAF1145431}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{A106D33E-6B43-42C0-9BFC-D03303261FA7}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{13D558FE-A863-402C-B115-160007277033}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (x64) (HKLM\...\{FA0A244E-F3C2-4589-B42A-3D522DE79A42}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL Compiler Service  (HKLM\...\{BEB0F91E-F2EA-48A1-B938-7857ABF2A93D}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - DEU (11.1.20828.01) (HKLM-x32\...\{E511AE89-54BB-481D-BC4A-1B1F1E1B7693}) (Version: 11.1.20828.01 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20828.01) (HKLM-x32\...\{00C84D22-DB8F-4159-BF70-682B8EA56A1E}) (Version: 11.1.20828.01 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{C668416A-9213-4058-B7F2-01A42D85559D}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{1E6ED082-E32D-4B2B-8B6A-70B094815135}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft Visual C# 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C# 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C# 2010 Express - DEU (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012  x64 Designtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 32bit Compilers - ENU Resources (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Compilers - ENU Resources (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Compilers (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Extended Libraries (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{ac3600d2-e1b3-4573-bef7-73f9409d6393}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{aec97477-921a-4289-985a-9e29506625b6}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version:  - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (Version: 2.0.50728 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Devenv (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Devenv Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Express Prerequisites x64 - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTrace Core amd64 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTrace Core x86 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTrace Front End x86 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTraceFrontEndLoc (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTraceLoc (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTraceLoc (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Language Pack - DEU (x32 Version: 11.0.50727.1 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Performance Collection Tools - ENU (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Performance Collection Tools (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Preparation (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell (Minimum) Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Tools for SQL Server Compact 4.0 SP1 ENU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012-Leistungserfassungstools - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Express 2012 for Windows Desktop (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (HKLM-x32\...\{69ec32be-d994-44de-9eae-6d86ced6f352}) (Version: 11.0.50727.42 - Microsoft Corporation)
Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Premium 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Premium 2012 - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Premium 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Professional 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Professional 2012 - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Professional 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Storyboarding (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Storyboarding Language Pack - ENU (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 (HKLM-x32\...\{ae17ae9b-af38-40d2-a194-6102c56ed502}) (Version: 11.0.50727.26 - Microsoft Corporation)
Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 XAML UI Designer enu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Web Deploy 3.5 (HKLM\...\{3674F088-9B90-473A-AAC3-20A00D8D810C}) (Version: 3.1237.1762 - Microsoft Corporation)
Microsoft Web Deploy dbSqlPackage Provider - DEU (HKLM-x32\...\{86756584-C41A-4CA3-B42D-4768C7720F56}) (Version: 10.3.20225.0 - Microsoft Corporation)
Microsoft Web Deploy dbSqlPackage Provider - enu (HKLM-x32\...\{E4C33F5B-1B2F-466E-957E-B274F08151A0}) (Version: 10.3.20225.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Microsoft XNA Game Studio 4.0 Refresh (Shared Components) (x32 Version: 4.0.30901.0 - Microsoft Corporation) Hidden
Microsoft XNA Game Studio Platform Tools (HKLM-x32\...\{89690B51-2E21-4E93-914E-F9CAC5B24A84}) (Version: 1.4.0.0 - Microsoft Corporation)
Minecraft Editor 64 bits (HKLM\...\{042CC934-54B5-4BEB-948D-F3780B2CE4D7}) (Version: 1.6.6 - Axialmedia)
MonoGame (HKLM-x32\...\MonoGame) (Version: 3.0 - MonoGame)
MorphVOX Pro (HKLM-x32\...\{53AB1F25-D607-4B4D-8FD5-74E03F2F9414}) (Version: 4.4.7 - Screaming Bee)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MP4 To MP3 Converter V3.0.5 (HKLM-x32\...\MP4 To MP3 Converter_is1) (Version:  - hxxp://www.MP4ToMP3Converter.net)
MpcStar 5.4 (HKLM-x32\...\MpcStar) (Version: 5.4 - www.mpcstar.com)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT Redists (x32 Version: 1.0 - Sony Creative Software Inc.) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.18 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.18 - Egis Technology Inc.) Hidden
Nero Control Center 10 (x32 Version: 10.6.13200.0.12 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.6.10800 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.20500.9.16 - Nero AG) Hidden
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.4.10500.1.100 - Nero AG)
Nero DiscSpeed 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.6.10700.5.100 - Nero AG)
Nero Express 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden
Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86}) (Version: 10.6.10300 - Nero AG)
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.6.10600.4.100 - Nero AG)
Nero StartSmart 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.10022.15.0 - Nero AG) Hidden
Netzwerkhandbuch EPSON XP-402 403 405 406 Series (HKLM-x32\...\EPSON XP-402 403 405 406 Series Netg) (Version:  - )
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.4.5 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
Online Weather (HKCU\...\Online Weather) (Version: 1.0 - )
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.76.1.0 - Overwolf Ltd.)
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Pivot Pro Plugin (x32 Version: 9.50.110 - Portrait Displays, Inc.) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Poczta usługi Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Pokemon Online 2.0.1 (HKLM-x32\...\{2C08D7E7-9EE1-4A08-AFE0-745F02DCD6A4}_is1) (Version:  - Dreambelievers)
POKéMON Simulator 4.5 (HKLM-x32\...\POKéGAME32) (Version: 4.5 - Birdiesoft)
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Pošta Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden
Prerequisites for SSDT  (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation)
Prompt Downloader (HKLM-x32\...\Prompt Downloader) (Version:  - )
Raccolta foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6392 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SDK (x32 Version: 2.32.010 - Portrait Displays, Inc.) Hidden
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Software Updater (HKLM-x32\...\{7B3A525D-9D3D-4618-AE52-A31DE98C8AC3}) (Version: 4.1.4 - SEIKO EPSON CORPORATION)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Steuer 2012 13.0.3 (HKLM-x32\...\1382-8438-0790-3872) (Version: 13.0.3 - Information Factory AG)
Steuer 2013 14.0.1 (HKLM-x32\...\0166-6433-7072-1489) (Version: 14.0.1 - Information Factory AG)
Studie zur Verbesserung von HP Photosmart 7520 series Produkten (HKLM\...\{D662A279-973A-42A0-8D4B-8747C56C0501}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Update kb70007 (x32 Version: 1.0.0 - MSR) Hidden
Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISER_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883030) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{F5DCAB53-C2FD-4E5A-8C83-0F37485E5E89}) (Version:  - Microsoft)
Update for Microsoft Visual Studio 2012 (KB2781514) (HKLM-x32\...\{56ef8912-352f-4fab-9c73-6f1c92a7127f}) (Version: 11.0.51219 - Microsoft Corporation)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISER_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISER_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISER_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
UpdateStar (HKLM-x32\...\{4B75C1B1-D0C7-4E70-9EE4-09CE7F734B0C}) (Version: 10.0.1265 - UpdateStar GmbH)
Valokuvavalikoima (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Vegas Movie Studio HD 11.0 (HKLM-x32\...\{6E3FD14F-858B-11E1-BC4A-F04DA23A5C58}) (Version: 11.0.75 - Sony)
VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 3.14 - NCH Software)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)
Visual Studio 2012 Prerequisites - DEU Language Pack (Version: 11.0.50727 - Microsoft Corporation) Hidden
Visual Studio 2012 Prerequisites - ENU Language Pack (Version: 11.0.50727 - Microsoft Corporation) Hidden
Visual Studio 2012 Prerequisites (Version: 11.0.50727 - Microsoft Corporation) Hidden
Visual Studio 2012 Update 4 (KB2707250) (HKLM-x32\...\{312d9252-c71c-4c84-b171-f4ad46e22098}) (Version: 11.0.61030 - Microsoft Corporation)
Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.9202.20789 - Microsoft Corporation) Hidden
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 5.71 - NCH Software)
WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden
WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{3A523AF9-D32F-4C85-8388-0335731F3405}) (Version: 4.1.61829.0 - Microsoft Corporation)
weblica - 3.6.3 (HKLM-x32\...\weblica) (Version: 3.6.3 - empros gmbh)
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
Windows App Certification Kit Native Components (Version: 8.59.29736 - Microsoft Corporation) Hidden
Windows App Certification Kit x64 (x32 Version: 8.59.29750 - Microsoft Corporation) Hidden
Windows Azure Tools for LightSwitch HTML Client for Visual Studio 2012 (x32 Version: 1.8.60301.1601 - Microsoft) Hidden
Windows Azure Tools für LightSwitch HTML Client für Visual Studio 2012 (DEU) (x32 Version: 1.8.60301.1601 - Microsoft) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3528.0331 - společnost Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - společnost Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Liven peruspaketti (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Runtime Intellisense Content - de-de (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Runtime Intellisense Content - en-us (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows XP Targeting with C++ (Version: 11.0.51106 - Microsoft Corporation) Hidden
Windows XP Targeting with C++ (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
WinRAR 5.10 Beta 4 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)
WinTuneUp 1.0 (HKLM-x32\...\WinTuneUp) (Version: 1.0 - WinTuneUp Apps. )
WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DF}) (Version: 18.0.10661 - WinZip Computing, S.L. )
Wondershare Video Editor(Build 3.5.0) (HKLM-x32\...\Wondershare Video Editor_is1) (Version:  - Wondershare Software)
Zerius Vocoder (remove only) (HKLM-x32\...\VocoderGUI) (Version:  - )
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 16.4.3528.0331 - Корпорация Майкрософт) Hidden
Фотоальбом (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Фотогалерия (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Фотографии (общедоступная версия) (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
גלריית התמונות (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
معرض الصور (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
影像中心 (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1536315646-4119356758-1407283469-1000_Classes\CLSID\{F7D4B6AD-AB5F-4fe8-9469-3A4697E41129}\InprocServer32 -> C:\Users\Mirjam Zanetti\AppData\Roaming\Kalydo\KalydoPlayer\bin2\kalydoplayer64.dll (Eximion B.V.)

==================== Restore Points  =========================

14-07-2014 12:00:11 Windows Update
15-07-2014 19:25:05 Windows Update
15-07-2014 19:53:43 Windows Update
19-07-2014 19:32:05 Windows Update
20-07-2014 12:00:16 Windows Update
21-07-2014 12:00:15 Windows Update
22-07-2014 08:30:54 Windows Update
22-07-2014 12:00:11 Windows Update
23-07-2014 07:35:52 Installed Java 7 Update 65
23-07-2014 12:00:14 Windows Update
24-07-2014 09:34:21 Revo Uninstaller's restore point - Google Chrome
24-07-2014 12:00:16 Windows Update
25-07-2014 17:01:30 Windows Update
25-07-2014 17:15:33 Windows Update
26-07-2014 12:00:19 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-07-10 14:46 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {13FBF219-AB2F-4E15-9513-29FDD61F4A20} - \BrowserProtect No Task File <==== ATTENTION
Task: {1B396549-A773-464C-B9B3-B4C49CF28A10} - System32\Tasks\GPU Grid Computing => C:\Windows\SysWOW64\dfrg\runner.exe
Task: {1C72B99D-EB1B-418B-9229-06888E65E40E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-24] (Google Inc.)
Task: {44A54D41-E818-466E-A807-D50B1E9D910E} - \PileFile reminder No Task File <==== ATTENTION
Task: {48840F86-1F7C-4F8A-A451-7370C9EE42CA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-26] (Google Inc.)
Task: {4BEA3EE7-26F9-419C-9225-FBFDE19FE80E} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {4F8E5131-8941-4329-B11F-3413CA5D0960} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-24] (Google Inc.)
Task: {6A733201-6137-4277-98D7-56AAB8FB7F8A} - System32\Tasks\RunAsStdUser Task => C:\Users\Sven\AppData\Local\Oxy\Application\oxy.exe <==== ATTENTION
Task: {6C8BDFDF-A6E7-4549-B494-C0D1A4F9A07B} - \PileFile logon No Task File <==== ATTENTION
Task: {87E712A9-9E69-4B7C-9F54-5A79A168AF42} - System32\Tasks\HPCustParticipation HP Photosmart 7520 series => C:\Program Files\HP\HP Photosmart 7520 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {AC774A6E-8700-4848-B0FE-1657D3DCAC3A} - \Funmoods No Task File <==== ATTENTION
Task: {CA415D1F-7A72-4B84-8880-31511E6E3DB6} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2014-06-10] (Overwolf LTD)
Task: {CFC139DF-686C-45F9-A5F4-DCF738E94779} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-23] (Adobe Systems Incorporated)
Task: {E14BE1A6-9A64-40D3-940C-A52A49596E45} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2014-01-23] ()
Task: {E45F4C4B-41F0-4A5B-983B-DB6815BF7334} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-26] (Google Inc.)
Task: {F87AF6AD-1E2B-445F-A72D-DB91FB0F505A} - \BackgroundContainer Startup Task No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

==================== Loaded Modules (whitelisted) =============

2014-05-01 21:29 - 2014-05-01 21:29 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-07-07 13:53 - 2014-07-07 13:53 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-07-07 13:52 - 2014-07-07 13:52 - 00065616 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-07-11 21:08 - 2014-07-07 13:53 - 00049744 _____ () C:\Users\Mirjam Zanetti\AppData\Local\temp\avgnt.exe\Avira.OE.ExtApi.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:AD022376
AlternateDataStreams: C:\Users\Sven\Downloads\message.eml:OECustomProperty

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: WdiSystemHost => 3
MSCONFIG\Services: WebClient => 3
MSCONFIG\Services: Wecsvc => 3
MSCONFIG\Services: wercplsupport => 3
MSCONFIG\Services: WerSvc => 3
MSCONFIG\Services: WinDefend => 2
MSCONFIG\Services: WinHttpAutoProxySvc => 3
MSCONFIG\Services: Winmgmt => 2
MSCONFIG\Services: WinRM => 3
MSCONFIG\Services: Wlansvc => 3
MSCONFIG\Services: wlidsvc => 3
MSCONFIG\Services: wmiApSrv => 3
MSCONFIG\Services: WMPNetworkSvc => 3
MSCONFIG\Services: WPCSvc => 3
MSCONFIG\Services: WPDBusEnum => 3
MSCONFIG\Services: wscsvc => 2
MSCONFIG\Services: WSearch => 2
MSCONFIG\Services: wuauserv => 2
MSCONFIG\Services: wudfsvc => 3
MSCONFIG\Services: WwanSvc => 3
MSCONFIG\startupfolder: C:^Users^Tim^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup
MSCONFIG\startupreg: 24x7HELP => "C:\Program Files (x86)\24x7Help\App24x7Help.exe" /STARTUP
MSCONFIG\startupreg: 4StoryPrePatch => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: ApnTBMon => "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: CommonToolkitTray => C:\Program Files (x86)\Fighters\Tray\FightersTray.exe
MSCONFIG\startupreg: DT ACR => C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe -ACR
MSCONFIG\startupreg: EEventManager => "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
MSCONFIG\startupreg: EgisTecPMMUpdate => "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
MSCONFIG\startupreg: EgisUpdate => "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
MSCONFIG\startupreg: EPLTarget =>
MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
MSCONFIG\startupreg: Hotkey Utility => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: InboxToolbar => "C:\Program Files (x86)\Inbox Toolbar\Inbox.exe" /STARTUP
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: mobilegeni daemon => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
MSCONFIG\startupreg: NextLive => C:\Windows\SysWOW64\rundll32.exe "C:\Users\Tim\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
MSCONFIG\startupreg: Norton Online Backup => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
MSCONFIG\startupreg: NUSB3MON => "C:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe"
MSCONFIG\startupreg: Optimizer Pro => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe
MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
MSCONFIG\startupreg: Pando Media Booster => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
MSCONFIG\startupreg: PC Speed Maximizer => C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe
MSCONFIG\startupreg: PivotSoftware => "C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe" -delay=10
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup
MSCONFIG\startupreg: RebateInformer => C:\Program Files (x86)\RebateInformer\RebateInf.exe /STARTUP
MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: SiteRanker => "C:\Program Files (x86)\SiteRanker\SiteRankTray.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: SuiteTray => "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: UpdateStar => "C:\Users\Sven\AppData\Roaming\UpdateStar\UpdateStar.exe" -A
MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/26/2014 09:14:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/26/2014 09:13:52 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
  bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
  bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (07/26/2014 09:10:53 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/26/2014 09:09:57 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
  bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
  bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (07/26/2014 02:01:58 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT-AUTORITÄT)
Description: Produkt: Microsoft Silverlight - Update "Microsoft Silverlight Developer Package 5.1.30514.0" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\Windows\TEMP\SilverlightMSI.log enthalten.

Error: (07/26/2014 02:01:58 PM) (Source: MsiInstaller) (EventID: 10005) (User: NT-AUTORITÄT)
Description: Product: Microsoft Silverlight -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2705. The arguments are: Directory, ,

Error: (07/26/2014 02:01:56 PM) (Source: MsiInstaller) (EventID: 10005) (User: NT-AUTORITÄT)
Description: Product: Microsoft Silverlight -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2753. The arguments are: XAPAuthenticodeSIPDLL, ,

Error: (07/26/2014 10:51:00 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/26/2014 10:50:11 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
  bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
  bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (07/25/2014 07:19:18 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT-AUTORITÄT)
Description: Produkt: Microsoft Silverlight - Update "Microsoft Silverlight Developer Package 5.1.30514.0" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\Windows\TEMP\SilverlightMSI.log enthalten.


System errors:
=============
Error: (07/26/2014 09:15:05 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (07/26/2014 09:15:05 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)

Error: (07/26/2014 09:13:52 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064

Error: (07/26/2014 09:13:17 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎26.‎07.‎2014 um 21:12:24 unerwartet heruntergefahren.

Error: (07/26/2014 09:11:12 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)

Error: (07/26/2014 09:10:53 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMService erreicht.

Error: (07/26/2014 09:09:57 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064

Error: (07/26/2014 09:09:24 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎26.‎07.‎2014 um 21:07:40 unerwartet heruntergefahren.

Error: (07/26/2014 02:02:58 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Update für Microsoft Silverlight (KB2977218)

Error: (07/26/2014 10:53:10 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)


Microsoft Office Sessions:
=========================
Error: (06/08/2014 05:44:56 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6695.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 25 seconds with 0 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2014-07-10 14:40:33.475
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-07-10 14:40:33.163
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 41%
Total physical RAM: 3540.71 MB
Available physical RAM: 2053.84 MB
Total Pagefile: 7079.59 MB
Available Pagefile: 5283.79 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:456.45 GB) (Free:262.07 GB) NTFS
Drive d: (DATA) (Fixed) (Total:456.96 GB) (Free:456.72 GB) NTFS
Drive e: (acer_ P227HQV) (CDROM) (Total:0.2 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 6CE78890)
Partition 1: (Not Active) - (Size=18 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=456 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=457 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber 27.07.2014 10:15
Adware & Co. deinstallieren

Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter:




Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

Terrenay 27.07.2014 14:38
Malwarebytes hat um die 70 Dateien in Quarantäne gestellt, darunter war auch eine Trojan.Agent.Irgendwas, aber das Log ist ziemlich leer :o

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 27.07.2014
Suchlauf-Zeit: 14:04:05
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.07.27.04
Rootkit Datenbank: v2014.07.17.01
Lizenz: Premium
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Aktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Mirjam Zanetti

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 493475
Verstrichene Zeit: 30 Min, 22 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)
Code:
# AdwCleaner v3.216 - Bericht erstellt am 27/07/2014 um 15:03:54
# Aktualisiert 17/07/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Mirjam Zanetti - MirjamZanetti
# Gestartet von : C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\Users\Mirjam Zanetti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather\Uninstall.lnk

***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [happylyrics@hpyproductions.net]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Optimizer Pro]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [se]
Schlüssel Gelöscht : HKCU\Software\5c55df8db669ec14
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{59C0C5BD-2579-433A-BBB8-AFFD59642BAF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\24x7help
Schlüssel Gelöscht : HKCU\Software\Alexa Internet
Schlüssel Gelöscht : HKCU\Software\APN DTX
Schlüssel Gelöscht : HKCU\Software\BabylonToolbar
Schlüssel Gelöscht : HKCU\Software\BI
Schlüssel Gelöscht : HKCU\Software\DataMngr
[#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\distromatic
Schlüssel Gelöscht : HKCU\Software\Funmoods
Schlüssel Gelöscht : HKCU\Software\ilivid
Schlüssel Gelöscht : HKCU\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\Optimizer Pro
Schlüssel Gelöscht : HKCU\Software\RegisteredApplicationsEx
Schlüssel Gelöscht : HKCU\Software\SearchProtect
Schlüssel Gelöscht : HKCU\Software\SiteRanker
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\Solvusoft
Schlüssel Gelöscht : HKCU\Software\SweetIM
Schlüssel Gelöscht : HKCU\Software\Webplayer
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\HappyLyrics
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17207


-\\ Mozilla Firefox v

[ Datei : C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\prefs.js ]


[ Datei : C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\42h3y7h3.default\prefs.js ]


[ Datei : C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\prefs.js ]


[ Datei : C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\4b32mscn.default\prefs.js ]


[ Datei : C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\prefs.js ]


-\\ Google Chrome v36.0.1985.125

[ Datei : C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Search Provider] : hxxp://www.holasearch.com/?q={searchTerms}&affID=121962&tt=gc_&babsrc=SP_ss&mntrId=7C1DF80F415692A8
Gelöscht [Search Provider] : hxxp://mystart.incredibar.com/mb106/?search={searchTerms}&loc=IB_DS&a=6PQwntg4IO&i=26
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=109986&babsrc=SP_ss&mntrId=dcc1a6b9000000000000f80f4129ff48
Gelöscht [Search Provider] : hxxp://www2.delta-search.com/?q={searchTerms}&affID=119556&tt=gc_&babsrc=SP_ss&mntrId=7C1DF80F415692A8
Gelöscht [Search Provider] : hxxp://dts.search-results.com/sr?src=crb&gct=ds&appid=559&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=5608402600834153&q={searchTerms}
Gelöscht [Search Provider] : hxxp://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=nv2&cd=2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyEyDyBtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1G2XtB&cr=253778042&ir=
Gelöscht [Search Provider] : hxxp://www.nationzoom.com/web/?type=ds&ts=1387620009&from=ild&uid=ST31000524AS_6VPK855EXXXX6VPK855E&q={searchTerms}
Gelöscht [Search Provider] : hxxp://isearch.babylon.com/?q={searchTerms}&affID=120307&babsrc=SP_ss&mntrId=7C1DF80F415692A8

[ Datei : C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [54398 octets] - [11/07/2014 12:59:49]
AdwCleaner[R1].txt - [41537 octets] - [11/07/2014 13:04:58]
AdwCleaner[R2].txt - [7714 octets] - [27/07/2014 14:52:57]
AdwCleaner[S0].txt - [13288 octets] - [11/07/2014 13:02:04]
AdwCleaner[S1].txt - [40111 octets] - [11/07/2014 13:06:54]
AdwCleaner[S2].txt - [5896 octets] - [27/07/2014 15:03:54]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [5956 octets] ##########
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Mirjam Zanetti on 27.07.2014 at 15:21:16.95
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1536315646-4119356758-1407283469-1000\Software\sweetim



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{001048D3-294A-4CDA-A17A-51A2D04C086B}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{001427FC-4209-43F8-AA6F-CFFFA44C9078}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{001C3F2B-822C-48BB-8A18-885402131C5F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{003C2E72-933C-4E15-BC47-121CAF8C4D75}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{00B69F4E-A72A-41BA-8FEB-43CF7E704D3F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{018FB44D-EF4B-4383-B5B6-5567AE3823CC}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0349CC65-3667-4741-B7E0-DB5C7007F28D}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{03DA18BE-C820-4B8C-8563-C772F3999E87}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{04DD1F21-5381-430B-A374-51B30F247497}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{05D5C397-6C47-445C-A102-97D5917F8593}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{075E535C-E40F-411E-A1DF-3E2CA5179D64}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0862F236-4003-4DD8-BFFB-4D24651A1AF4}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{08BC8F91-B10C-442D-BACA-B8D169C843EB}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0B2573C4-BB15-42BA-9882-F6DAFFC324E3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0BECB8D7-AAF7-437F-A7B0-8D241ED39115}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0D46A79A-5288-411A-9B06-1C73034004B1}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0EDA6312-2318-40B2-9310-E388FAEAC484}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0FAB5D99-6693-4DD5-9CD3-E7F4E0C06378}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{14DEC5E6-1C4F-4DF0-8D3F-2E0510581B2F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1556CD4E-4F30-4F92-AC42-00B57B1284C0}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{15D8EE5B-554A-4018-B1A9-A08A590D4DFB}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{166999E6-1CE5-470D-ADC5-5107F118802B}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{169F4864-3CA7-49B7-A1AB-D3ADB404429B}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1707E4A7-CEAD-4738-821A-ED5409504C86}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{173435D1-713B-4972-83A1-8E3DD9C599C4}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1A87B844-0E76-4134-ABD2-2B84E00E1D1C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1B784D16-C4E8-42E6-BF9C-121638182E2A}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1BC8C91E-B47D-47E6-B13C-687897F3A9E9}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1C1037CD-D94D-44CD-B8AE-4DCFC94608EB}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1E3BDDC2-98E4-4C9B-B751-C3DA9EA75D01}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1EB18C3B-E67D-42B3-B9BF-29CBBF1C7117}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1EFAC82D-ED09-4F4C-A19D-837B447A026C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1F5D4F0B-51D5-4D2F-BA96-6D0B11521E18}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{21B1C6EE-4898-486D-A0A5-E28D7C284F5E}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2338D82F-479C-4173-84B5-395A5DB8AD77}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{23C84535-2353-4A8B-A287-8A88C96E9C4A}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{23ECF433-5672-46B1-B41B-4B40DDEC1B88}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2697B3BD-3512-4F0F-B29A-3F0D100044C6}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2826245F-2184-407C-954A-9F1EEA2B4E7A}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{29ADEA81-083C-4597-BE00-57F507E96D57}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{29F097C1-87F4-4986-93F0-6C59AA625205}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2AC3AA20-1753-4389-A565-9FB66EC2AE95}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2BFC90E2-CBE4-4E0E-B223-4A933BCDD766}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2CCAE2D2-DC82-40FF-92F3-E53D3BCEDE46}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2CCEDFEF-1CCD-47D1-BB76-72EFD6EB0A66}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2E6616C2-459F-46D6-B85B-E9ACC591CB4C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{30D0F7C5-BA05-4F52-8E4E-653D740B9593}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{32C2A792-4F39-4A01-8B82-AEB568DC135A}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{354CA703-9178-4200-982F-6F3F71DC9A47}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{356992C4-8207-4240-B0E6-DD3F4A8F67B8}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{37BA0D53-A0A8-429B-90CE-6463877DB78C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3835D28F-8E9B-4B78-BFC9-524805636F08}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{384F5E87-9F25-4E7B-96AA-E5F11C62915D}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{38D4A321-4100-4BF9-83A9-529A633D4037}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3A4CBDFF-1095-49B8-8879-ABE3AAFB7DD7}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3D949276-70AF-4F4D-9B82-A03ED129F102}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3DF5E7FD-D7AA-43A3-86B2-B680AAA04909}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3E11254D-5BAC-42CC-A5D6-CAB7829A934F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3EA3D35C-1C50-4B8B-B1D2-763BAF183F9B}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4248DE69-D1FA-4066-8C50-E768B7C8BE6A}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{43FC2119-AC5E-4A65-8305-24A737D5A269}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{445A78D9-A17B-4A78-B94F-E23215FE37B8}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{463CB620-9333-48B6-A0F6-DDF1997BEF7F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{46E1978A-49C4-4ADC-8616-2050A36003F9}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{481189F8-A67F-4A37-887B-3EF200062ECD}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{492BC164-AE9C-40ED-A6DC-CBDD466CA0C2}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{49887326-CDE0-486A-A870-17F09EFDD750}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4ABBA807-2A5D-44C3-893D-28DB65AC3519}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4DB21EC0-DF3D-431D-89A6-79AA90A59A81}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4E2E2624-4078-4601-9592-727987A79677}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4EBA5256-AA10-4233-A4A8-1F3D23188C1C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4F1311E4-7503-434A-859B-BAC763919082}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{51523AF7-3BC6-4455-8F15-6F58664077F3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{5348964B-86F6-43C8-A7A2-22A2F87A6925}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{576FCAE9-B26F-4CD7-B2C5-848B62DBBF30}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{585952C3-52DB-46D2-811E-AC91C8006037}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{5BEF7603-5AAE-4330-9A89-11A0E5861A20}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{5F01BBDC-0FCB-4B5B-B8F4-3CEA2EA15B2B}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{60538968-4E00-4770-B792-5FCC05837683}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6105637B-FE5A-40CA-94D5-EB3AAF54C0D7}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{62880CED-175F-45FE-92F3-AA1A620A9BC7}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{63413761-CA77-405B-9F03-8302444BE677}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{63FDB144-6214-4121-8271-CDD5F66E6055}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{68ADF529-0E04-4648-AC70-97E077713196}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{69BF8703-066E-4F49-94DE-B3B0160BD1C7}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6A5C721A-18D4-4751-AB51-BAA53D02D40C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6AA77B6E-C946-45F3-B64B-50AAE20B3243}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6AF54B64-306C-463E-8EDF-4B7EF3D5B122}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6BB03D55-5CB6-48D6-B2B6-2874E2BE2C77}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6F6768E3-E654-4058-8C4B-27BC25C2590E}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6FCE5AC1-8164-4A43-B7BE-A1FD28371D61}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{720A529F-47E8-4C4D-B730-21A73E2A40EC}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{767FB82C-539E-4E2C-8357-DF4C6241F621}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{77249B16-96A1-437E-9738-5AC82F624E07}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{77282672-1D93-4822-A172-880EE23477E8}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7730D470-7D35-4FC9-80EA-E7083C5DBB92}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{775292E6-4DD0-446C-B917-5E27962B1AF0}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7784369D-D2B1-4F86-BBDE-05B59336B8E2}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7962C34D-580C-4168-B37D-11BD8532E761}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7A217C21-E30E-49C3-956A-9801828E7AEB}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7D132F5E-6B25-4D26-9D63-954AE0609506}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7D542172-0ACA-48A9-B342-87888A8372EE}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7E222F3B-D1E4-47D0-9ED0-6C5F3B280285}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7E7DDF3F-7498-4EB1-B189-797827062888}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7E94F26B-B909-4941-9130-8DDD61977A4B}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{80822FE5-725C-4F9B-ABD4-0D9523AD8C8F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{81CC1FF0-30DC-479D-8FF6-A943A89BA4A5}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8281AB2F-4CF6-4EF7-8150-228074F65FE2}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{829167BD-2857-4FD6-80D5-6698E8383F82}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8355B800-DCC2-41C9-857A-0E63F5AB3E9E}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{861C0410-4697-42B4-A102-19F17C6F27FA}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{86392B1E-C3A8-4C1F-87C8-0431B3BF9F93}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{86581B70-6460-4846-A407-96E810F9DD90}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{872DC44F-E86F-4DE2-AE73-452894129D0C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{88124506-9E48-48B6-8AB2-E267CE48B7DD}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8835B369-8946-4616-919B-32E643F2417F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8A592CA4-DB70-4573-9238-07EC736374A8}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8D75D763-A943-4E1A-B02D-998B09EAAF81}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8D9BF486-BAA6-459C-9E25-42B11C62568F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8F431B6C-2062-46B8-B6B1-8309D3A1FDD8}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{90FC0EA7-4D7D-4A0C-8FBC-B3D3F3CC73EC}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{91F75464-32E8-4A6A-87F0-6EBEA68C4925}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{920DAC0B-53A9-4DD6-8B69-38068BD8F842}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{92340515-AF42-4AE0-90A0-F5AEB36574E2}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{96059079-9037-4DAC-AD6D-A4C58618E095}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{967536DD-033E-4F09-9A37-CA6ACBE456E0}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{979F67D3-4F08-4C75-883A-33AC58E0D2F0}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{97F9E578-E6B2-4991-B88D-D8F1DCDE140B}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{9826E91B-99CC-4EA9-901B-5D66821CF34C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{985189A4-A423-4BD8-ADB8-4948811E0822}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{989E0FCE-F6DB-4AB7-8D72-0FA219955FC6}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{98EC8C92-84B1-4558-AF3B-2070D0C47F89}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{98FF7317-C7C0-4E67-9F8C-5E922AAC1F5F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{996ECF16-EFE5-407B-9615-DBA3D8B6A942}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{999E6196-591A-4F39-91C4-050CCE7795FE}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{9A24A226-4213-479A-8902-4C0C1050C1AB}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{9B3A01F1-0312-41C0-ACF7-BA58C7A1F116}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{9F6A4995-4D89-4B8D-8C4C-57A2948AD664}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{9FB78AD4-8C80-408D-8388-CDE2EEE5AB69}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A0E8627D-D51A-4676-B7FC-AEADBFA6FE19}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A2419EF0-D222-4869-AEA5-4B5FAB6A625E}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A4DE0C52-C1BD-4F4D-98F7-A28A39865B98}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A51241D6-BA54-4796-9B17-9E1CA4BF59D6}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A67341BD-9300-4E15-A852-82E9A6297179}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A6FD4982-1E95-449F-8A44-1C0AD964DD88}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A7116CF3-8832-4DB8-9E86-25562786A6A7}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A88742A8-8A68-4655-A69B-804EFDF15133}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A933E9C8-0405-45B4-9988-58EC563077F3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A95E21D1-0B45-4E31-8AB8-466547155288}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AAB58BB8-F46A-4D68-84E5-16DBF5474E48}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AB35ED35-D0CE-42FE-A240-83CC7762C341}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AB4F61F4-0655-4CBE-A88A-73712DECC2A3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AB910F2C-09CA-49D8-AB57-B5E36BC2756D}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AC2402CE-CE5A-446B-9A4E-BF2A7C62DADA}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AF4CB8A4-BCE2-416D-86D0-6B82FFEF84B2}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AF8CBD4A-917A-4632-8AFF-14ABA8FD01DF}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B0FE29A3-6E42-4184-9B49-39C075AB2307}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B2318EAC-416F-425C-9832-99A249A11576}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B2F36011-08B1-4307-BBE1-705AC42C0A8E}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B5B3FDFC-D596-4F81-A17B-0D68101C5830}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B6032455-9ABA-4D83-A575-8791E59471D1}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B7DEC381-C980-4A9A-A968-C88F4F61427F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B8C7CAAB-D0B5-4830-96E6-1984382E6442}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B9F1C8F9-ABC4-4CD6-A6A9-81C19ED93A44}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{BB567315-D678-445D-98C0-F361C6849DB7}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{BE692022-D3A3-4953-905D-9FE204910C4D}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{BE75401A-CA58-44BE-A040-82177A93EDB1}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{BF6DE305-24D3-42BB-AD89-66DDE6F42A6C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C22CF54D-7FE5-4553-A104-EA634F7B8215}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C3854701-3DA3-4E2C-B199-DC807FBACA92}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C458830B-C2F4-4810-9911-55A5EBE8820B}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C56CE98E-6394-4424-BB15-A0EDE1564230}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C624B7EE-B27D-4D88-A717-1EBA7D90BCD1}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C63F761A-4B01-4E3D-A659-4BF90271F3D5}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C72F5DBD-6EBE-4576-A5E9-E071EDDEB290}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C783AC9A-4C0F-4F2B-84C3-5429D280B36D}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C99AA38E-BF2F-4F99-A2E1-466383F83E10}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{CFE2DF3C-9647-4163-BDE9-80436DD0DE18}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D1079905-4CFA-4D8D-881B-BF0B39A9D175}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D1524D66-0BC3-4B5B-A878-F9CC80F6BC9A}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D1CEBD73-2F97-44F5-85A1-222E4C904B89}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D300D924-4636-447D-BD9D-F381A03ADCB1}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D3665EC1-BC34-49B8-931F-87187EB64FFF}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D3C55E6A-3F1F-499E-B00C-B7B3CD965564}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D3D9BA71-5CA7-4D4A-9022-E5CE66C98F0E}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D471BA3E-0D25-4C2B-BB11-4AC13217A370}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D491FB06-5229-4B44-A387-5C526FC4F3A9}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D6C9D66B-A137-4141-B325-16733073DBF3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D7671A35-C4ED-4982-B094-67686940B25C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D79EE6A3-DD7F-4A2F-99A3-71FB1CB79BC7}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D87CE7D8-1BF3-4353-A956-2BFBFA0F5C2F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D9062EC1-27E3-46B6-A76A-2D98BCD7AC09}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DA02389A-82E5-4BD7-A978-F546AB5D869F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DA5A3BE7-2EA1-4DD1-9225-7631257D8232}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DAB6F8A6-C31E-474F-9BAE-7A5EA73B02CF}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DB91E6F1-D674-4C29-92FC-36C54D64D1A2}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DC25708B-4742-4E9C-8C84-EB87A2337897}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DCA74457-88A7-4452-A193-038A613CF6E4}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DD96C9B8-1CA6-4BA1-ACC0-7E33631BA9D3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E07F1766-1354-4574-B66D-33F49CB01F71}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E0C6F95E-98A4-4909-A53B-1D9ABF569FED}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E2E55586-23B5-46F0-97AC-2A40DC5211CC}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E32267B9-8A5A-4415-8859-E83965D940A1}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E3A088A2-52B3-4B45-BC43-30D30B0DF7EC}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E3E2F16B-CC68-472A-A785-33100F24BF42}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E47F7AC1-FBB5-4FC1-8D4F-C30C2593448F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E82A2B4A-7469-4E23-89A6-D82D577BD232}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E8BF4EC1-83C4-4934-9168-833A1FE9884C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E90AFE39-30F6-4F5E-B694-CC2813D158A3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E937D622-C969-42DC-85BD-B87A81737624}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E9418E1B-4AC3-4740-801C-FA0E3F25A45E}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E9561C0F-EDD6-4772-959A-03931E3066C3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{EB503035-51DB-428B-8378-D3F8B2C7E389}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{EBA4FC68-3E43-48E0-8966-2896CB29CEC0}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{EC7BFF69-6348-4AD4-A057-CB76C198219C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{ED5DEE0C-62C7-4ABC-A8FC-FB91683F5472}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{EE806F14-1D31-4ECF-B605-D4F67EDD5995}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{EFC0BEED-30A6-44F1-9742-179C0B583C19}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F045DDDB-E096-4424-819F-D1F0A37B9ED5}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F18F54F1-DE4D-4274-AEFE-49CFCE58A3DE}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F27DE02D-D90F-4D6F-9C0E-CC5DCE6C1CA6}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F46C0F15-41DF-4ACC-8034-A207E067BDB9}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F5A137CA-93E7-463C-B567-265E42447FB3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F83ECA74-2920-45E8-A147-0315CA7C1663}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F9783BA1-F515-4401-93A2-3A1F7261ADED}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F9823311-FF5D-496B-807F-941CB7669AF5}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{FA291353-0F8B-48E0-8C2C-43FACE088744}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{FAD3C3A8-0445-4FA2-BD2D-E00C9D48EBF2}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{FE338805-31C8-4541-B3F8-B76362AFB509}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{FE993800-AC4C-46DC-B39E-E698E549307F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{FFB6E2CD-C493-469D-B29E-013B03779E83}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 27.07.2014 at 15:30:59.73
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014
Ran by Mirjam Zanetti (administrator) on MirjamZanetti on 27-07-2014 15:34:06
Running from C:\Users\Mirjam Zanetti\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [HP Photosmart 7520 series (NET)] => C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\system: [DisableClock] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoNetworkConnections] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoCommonGroups] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\MountPoints2: {2bcee651-c1d5-11e1-9a2e-806e6f6e6963} - E:\Setup.exe
ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: SNT -> {76F9D91C-56F3-3618-2D80-F6734BE2E498} -> C:\Program Files (x86)\SNT\5AJN.dll No File
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File
BHO-x32: Media View -> {fed65192-d64e-4d7b-91f6-37d5f033d528} -> C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Mirjam Zanetti\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\Extensions\staged [2013-12-31]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff

Chrome:
=======
CHR HomePage:
CHR DefaultSearchKeyword: ask search
CHR DefaultSearchProvider: Ask Search
CHR DefaultSearchURL: hxxp://www.search.ask.com/web?p2=%5EBBK%5EOSJ000%5EYY%5ECH&gct=&o=APN11412&tpid=ORJ-V7C&itbv=12.7.0.15&doi=2014-02-07&apn_uid=695C426C-942E-46F5-A9B6-D0BEE434F5D8&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5ECH&apn_dbr=cr_32.0.1700.76&psv=&trgb=CR&q={searchTerms}
CHR DefaultNewTabURL:
CHR Extension: (Inbox Toolbar) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\apgjagobplilmcdfelodhgefiidomnfl [2014-05-28]
CHR Extension: (No Name) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23]
CHR Extension: (MySearch) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf [2014-06-23]
CHR Extension: (Google Wallet) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26]
CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2013-08-26]
CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2013-08-26]
CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2013-08-26]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)
S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)
R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed]
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed]
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)
R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-27 15:34 - 2014-07-27 15:34 - 00018910 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt
2014-07-27 15:31 - 2014-07-27 15:30 - 00027492 _____ () C:\Users\Mirjam Zanetti\Desktop\JRT.txt
2014-07-27 15:20 - 2014-07-27 15:20 - 01016261 _____ (Thisisu) C:\Users\Mirjam Zanetti\Desktop\JRT.exe
2014-07-27 15:12 - 2014-07-27 15:12 - 00006036 _____ () C:\Users\Mirjam Zanetti\Desktop\AdwCleaner[S2].txt
2014-07-27 14:52 - 2014-07-27 14:52 - 01354223 _____ () C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe
2014-07-27 14:50 - 2014-07-27 14:50 - 00001160 _____ () C:\Users\Mirjam Zanetti\Desktop\mbam.txt
2014-07-27 13:55 - 2014-07-27 13:55 - 00001272 _____ () C:\Users\Mirjam Zanetti\Desktop\Revo Uninstaller.lnk
2014-07-27 13:54 - 2014-07-27 13:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mirjam Zanetti\Desktop\revosetup95.exe
2014-07-26 21:21 - 2014-07-26 21:22 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe
2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS
2014-07-24 15:43 - 2014-07-24 15:42 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk
2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-24 11:52 - 2014-07-27 15:09 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-24 11:52 - 2014-07-27 14:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira
2014-07-23 09:45 - 2014-07-27 15:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-23 09:37 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-23 09:37 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-23 09:37 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-23 09:37 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-23 09:36 - 2014-07-23 09:37 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe
2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-22 13:14 - 2014-07-22 13:15 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe
2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe
2014-07-20 21:19 - 2014-07-20 21:20 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe
2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira
2014-07-11 13:32 - 2014-07-24 12:07 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt
2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt
2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe
2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt
2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt
2014-07-11 13:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe
2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt
2014-07-11 12:14 - 2014-07-24 12:06 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion
2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira
2014-07-10 16:48 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-10 16:48 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-10 16:48 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-10 15:30 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Avira
2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe
2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt
2014-07-10 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-07-10 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-07-10 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-07-10 11:34 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-10 11:34 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-10 11:34 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-10 11:34 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-10 11:34 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-10 11:34 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-10 11:34 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-10 11:34 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-10 11:34 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-10 11:34 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-10 11:34 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-10 11:34 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-10 11:34 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-10 11:34 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-10 11:34 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-10 11:34 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-10 11:34 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-10 11:34 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-10 11:34 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-10 11:34 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-10 11:34 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-10 11:34 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-10 11:34 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-10 11:34 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-10 11:34 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-10 11:34 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-10 11:34 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-10 11:34 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-10 11:34 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-10 11:34 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-10 11:34 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-10 11:34 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-10 11:34 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-10 11:34 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-10 11:34 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-10 11:34 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-10 11:34 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-10 11:34 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-10 11:34 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-10 11:34 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-10 11:34 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-10 11:34 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-10 11:34 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-10 11:34 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-10 11:34 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-10 11:34 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-10 11:34 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-10 11:34 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-10 11:34 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-10 11:34 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-10 11:34 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-10 11:34 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-10 11:34 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-10 11:34 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-10 11:34 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-10 11:34 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-10 11:28 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-10 11:28 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-10 11:28 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-10 11:28 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-10 11:28 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-10 11:28 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-10 11:28 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-10 11:28 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-10 11:23 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-10 11:23 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-10 11:23 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk
2014-07-09 14:10 - 2014-07-10 14:52 - 00000000 ____D () C:\Qoobox
2014-07-09 14:09 - 2014-07-10 14:48 - 00000000 ____D () C:\Windows\erdnt
2014-07-09 14:08 - 2014-07-10 13:55 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe
2014-07-09 13:21 - 2014-07-09 13:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe
2014-07-08 11:06 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz
2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame
2014-07-07 20:25 - 2014-07-07 20:28 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe
2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe
2014-07-07 19:27 - 2014-07-27 15:34 - 00000000 ____D () C:\FRST
2014-07-07 19:27 - 2014-07-24 12:06 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe
2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc
2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk
2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
2014-07-07 14:44 - 2014-07-08 06:36 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment
2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe
2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download
2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-27 15:34 - 2014-07-27 15:34 - 00018910 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt
2014-07-27 15:34 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST
2014-07-27 15:33 - 2014-07-23 09:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-27 15:30 - 2014-07-27 15:31 - 00027492 _____ () C:\Users\Mirjam Zanetti\Desktop\JRT.txt
2014-07-27 15:23 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job
2014-07-27 15:20 - 2014-07-27 15:20 - 01016261 _____ (Thisisu) C:\Users\Mirjam Zanetti\Desktop\JRT.exe
2014-07-27 15:18 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-27 15:18 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-27 15:12 - 2014-07-27 15:12 - 00006036 _____ () C:\Users\Mirjam Zanetti\Desktop\AdwCleaner[S2].txt
2014-07-27 15:12 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-27 15:12 - 2013-02-28 23:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi
2014-07-27 15:09 - 2014-07-24 11:52 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-27 15:09 - 2010-11-21 05:47 - 01757666 _____ () C:\Windows\PFRO.log
2014-07-27 15:09 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-27 15:09 - 2009-07-14 06:51 - 00102932 _____ () C:\Windows\setupact.log
2014-07-27 15:04 - 2013-12-22 10:49 - 00000000 ____D () C:\AdwCleaner
2014-07-27 15:04 - 2012-06-29 12:21 - 01261315 _____ () C:\Windows\WindowsUpdate.log
2014-07-27 15:03 - 2013-03-30 16:36 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather
2014-07-27 14:57 - 2014-07-24 11:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-27 14:52 - 2014-07-27 14:52 - 01354223 _____ () C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe
2014-07-27 14:50 - 2014-07-27 14:50 - 00001160 _____ () C:\Users\Mirjam Zanetti\Desktop\mbam.txt
2014-07-27 14:09 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job
2014-07-27 13:55 - 2014-07-27 13:55 - 00001272 _____ () C:\Users\Mirjam Zanetti\Desktop\Revo Uninstaller.lnk
2014-07-27 13:54 - 2014-07-27 13:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mirjam Zanetti\Desktop\revosetup95.exe
2014-07-27 13:54 - 2014-01-02 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-27 10:35 - 2013-03-03 20:30 - 00000000 ____D () C:\Users\Sven\AppData\Local\LogMeIn Hamachi
2014-07-26 21:22 - 2014-07-26 21:21 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe
2014-07-26 20:48 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent
2014-07-26 20:34 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype
2014-07-26 18:18 - 2013-03-01 12:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi
2014-07-26 17:23 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job
2014-07-25 22:34 - 2012-12-02 21:28 - 00000008 __RSH () C:\Users\Tim\ntuser.pol
2014-07-25 22:34 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim
2014-07-25 19:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-07-25 19:13 - 2012-12-01 11:20 - 00000326 __RSH () C:\Users\Sven\ntuser.pol
2014-07-25 19:13 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven
2014-07-25 19:09 - 2014-02-24 18:05 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-07-25 19:09 - 2012-12-01 11:05 - 00000008 __RSH () C:\Users\Mirjam Zanetti\ntuser.pol
2014-07-25 19:09 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti
2014-07-25 19:07 - 2014-01-07 00:07 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS
2014-07-25 19:01 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-07-24 15:42 - 2014-07-24 15:43 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-24 12:07 - 2014-07-11 13:32 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt
2014-07-24 12:06 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion
2014-07-24 12:06 - 2014-07-07 19:27 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe
2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk
2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Deployment
2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Apps\2.0
2014-07-24 11:51 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira
2014-07-23 14:30 - 2014-03-02 13:27 - 00000000 ____D () C:\Program Files (x86)\NextCouuP
2014-07-23 14:30 - 2013-12-16 13:29 - 00000000 ____D () C:\Program Files (x86)\SK Supporter
2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-23 09:45 - 2012-03-23 02:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-23 09:45 - 2012-03-23 02:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-23 09:38 - 2013-12-21 11:39 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-23 09:37 - 2014-07-23 09:36 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-23 09:37 - 2013-12-21 11:38 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe
2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-22 13:15 - 2014-07-22 13:14 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe
2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe
2014-07-22 10:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-21 15:17 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012
2014-07-20 21:20 - 2014-07-20 21:19 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe
2014-07-19 19:28 - 2012-06-24 20:13 - 00742794 _____ () C:\Windows\system32\perfh010.dat
2014-07-19 19:28 - 2012-06-24 20:13 - 00152352 _____ () C:\Windows\system32\perfc010.dat
2014-07-19 19:28 - 2012-06-24 20:06 - 00748104 _____ () C:\Windows\system32\perfh00C.dat
2014-07-19 19:28 - 2012-06-24 20:06 - 00154994 _____ () C:\Windows\system32\perfc00C.dat
2014-07-19 19:28 - 2012-06-24 19:58 - 00710502 _____ () C:\Windows\system32\perfh007.dat
2014-07-19 19:28 - 2012-06-24 19:58 - 00154832 _____ () C:\Windows\system32\perfc007.dat
2014-07-19 19:28 - 2009-07-14 07:13 - 03450454 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira
2014-07-11 14:27 - 2009-07-14 06:45 - 00435760 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-11 14:26 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-11 14:20 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-11 14:20 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt
2014-07-11 13:22 - 2014-01-05 15:48 - 00000000 ____D () C:\Windows\ERUNT
2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe
2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt
2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt
2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe
2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt
2014-07-11 03:02 - 2014-07-23 09:37 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-11 02:56 - 2014-07-23 09:37 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-11 02:56 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-11 02:55 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-10 21:29 - 2013-10-08 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE
2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira
2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-10 16:48 - 2014-07-10 15:30 - 00000000 ____D () C:\ProgramData\Avira
2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe
2014-07-10 15:30 - 2013-02-18 22:07 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt
2014-07-10 14:52 - 2014-07-09 14:10 - 00000000 ____D () C:\Qoobox
2014-07-10 14:52 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-07-10 14:48 - 2014-07-09 14:09 - 00000000 ____D () C:\Windows\erdnt
2014-07-10 14:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-07-10 14:40 - 2014-01-24 17:54 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\convert
2014-07-10 14:40 - 2013-12-02 21:20 - 00000000 ____D () C:\Program Files (x86)\PSupport
2014-07-10 14:38 - 2012-12-21 13:42 - 00000000 ____D () C:\Users\Sven\AppData\Local\CrashDumps
2014-07-10 14:18 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-10 14:10 - 2012-11-07 14:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-10 14:08 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-10 13:55 - 2014-07-09 14:08 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe
2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk
2014-07-09 19:15 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET
2014-07-09 13:23 - 2014-07-09 13:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe
2014-07-09 13:23 - 2014-01-02 14:48 - 00001272 _____ () C:\Users\Sven\Desktop\Revo Uninstaller.lnk
2014-07-08 11:07 - 2014-07-08 11:06 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz
2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-08 06:40 - 2013-09-19 19:37 - 00000000 ____D () C:\ArcTemp
2014-07-08 06:36 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment
2014-07-07 22:05 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame
2014-07-07 20:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-07-07 20:28 - 2014-07-07 20:25 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe
2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe
2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc
2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk
2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe
2014-07-02 13:06 - 2014-07-10 16:48 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-02 13:06 - 2014-07-10 16:48 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-02 13:06 - 2014-07-10 16:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download
2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download
2014-06-30 04:09 - 2014-07-10 11:28 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-30 04:04 - 2014-07-10 11:28 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Some content of TEMP:
====================
C:\Users\Mirjam Zanetti\AppData\Local\temp\avgnt.exe
C:\Users\Mirjam Zanetti\AppData\Local\temp\Quarantine.exe
C:\Users\Sven\AppData\Local\temp\avgnt.exe
C:\Users\Sven\AppData\Local\temp\Quarantine.exe
C:\Users\Tim\AppData\Local\temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2013-03-25 09:03

==================== End Of Log ============================
--- --- ---

schrauber 27.07.2014 20:12

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Terrenay 28.07.2014 12:50
Moin,
ich hab statt ESET wieder nen Vollscan mit Avira gemacht, hoffe das ist in Ordnung ;)

Code:

Avira Free Antivirus
Erstellungsdatum der Reportdatei: Montag, 28. Juli 2014  08:38


Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer  : Avira Antivirus Free
Seriennummer  : 0000149996-AVHOE-0000001
Plattform      : Windows 7 Home Premium
Windowsversion : (Service Pack 1)  [6.1.7601]
Boot Modus    : Normal gebootet
Benutzername  : Mirjam Zanetti
Computername  : MirjamZanetti

Versionsinformationen:
BUILD.DAT      : 14.0.5.464    91868 Bytes  02.07.2014 13:06:00
AVSCAN.EXE    : 14.0.5.396  1042512 Bytes  02.07.2014 11:06:43
AVSCANRC.DLL  : 14.0.5.364    62544 Bytes  02.07.2014 11:06:43
LUKE.DLL      : 14.0.5.336    57936 Bytes  02.07.2014 11:06:46
AVSCPLR.DLL    : 14.0.5.376    89680 Bytes  02.07.2014 11:06:43
AVREG.DLL      : 14.0.5.356    261200 Bytes  02.07.2014 11:06:43
avlode.dll    : 14.0.5.396    588368 Bytes  02.07.2014 11:06:42
avlode.rdf    : 14.0.4.42      65114 Bytes  19.07.2014 17:26:05
XBV00008.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00009.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00010.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00011.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00012.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00013.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00014.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00015.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00016.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00017.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00018.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00019.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00020.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00021.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00022.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00023.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00024.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00025.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00026.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00027.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00028.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00029.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00030.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00031.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00032.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00033.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00034.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00035.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00036.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00037.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00038.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00039.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00040.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00041.VDF  : 8.11.153.142    2048 Bytes  06.06.2014 11:06:47
XBV00195.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:24
XBV00196.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:24
XBV00197.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00198.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00199.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00200.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00201.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00202.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00203.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00204.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00205.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00206.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00207.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00208.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00209.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:25
XBV00210.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00211.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00212.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00213.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00214.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00215.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00216.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00217.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00218.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00219.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00220.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00221.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00222.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00223.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:26
XBV00224.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00225.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00226.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00227.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00228.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00229.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00230.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00231.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00232.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00233.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00234.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00235.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00236.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00237.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00238.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:27
XBV00239.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00240.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00241.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00242.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00243.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00244.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00245.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00246.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00247.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00248.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00249.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00250.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00251.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:28
XBV00252.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:29
XBV00253.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:29
XBV00254.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:29
XBV00255.VDF  : 8.11.159.102    2048 Bytes  08.07.2014 14:51:29
XBV00000.VDF  : 7.11.70.0  66736640 Bytes  04.04.2013 11:06:47
XBV00001.VDF  : 7.11.74.226  2201600 Bytes  30.04.2013 11:06:47
XBV00002.VDF  : 7.11.80.60  2751488 Bytes  28.05.2013 11:06:47
XBV00003.VDF  : 7.11.85.214  2162688 Bytes  21.06.2013 11:06:47
XBV00004.VDF  : 7.11.91.176  3903488 Bytes  23.07.2013 11:06:47
XBV00005.VDF  : 7.11.98.186  6822912 Bytes  29.08.2013 11:06:47
XBV00006.VDF  : 7.11.139.38 15708672 Bytes  27.03.2014 11:06:47
XBV00007.VDF  : 7.11.152.100  4193792 Bytes  02.06.2014 11:06:47
XBV00042.VDF  : 8.11.153.142  710656 Bytes  06.06.2014 11:06:47
XBV00043.VDF  : 8.11.155.44  1013760 Bytes  16.06.2014 11:06:47
XBV00044.VDF  : 8.11.159.102  1662976 Bytes  08.07.2014 14:50:53
XBV00045.VDF  : 8.11.159.104    13824 Bytes  08.07.2014 14:50:53
XBV00046.VDF  : 8.11.159.108    13312 Bytes  08.07.2014 14:50:53
XBV00047.VDF  : 8.11.159.112    30720 Bytes  09.07.2014 14:50:54
XBV00048.VDF  : 8.11.159.114    6144 Bytes  09.07.2014 14:50:54
XBV00049.VDF  : 8.11.159.116    10240 Bytes  09.07.2014 14:50:54
XBV00050.VDF  : 8.11.159.118    5632 Bytes  09.07.2014 14:50:54
XBV00051.VDF  : 8.11.159.122    7168 Bytes  09.07.2014 14:50:54
XBV00052.VDF  : 8.11.159.126  180736 Bytes  09.07.2014 14:50:58
XBV00053.VDF  : 8.11.159.148  174080 Bytes  09.07.2014 14:51:04
XBV00054.VDF  : 8.11.159.168    2560 Bytes  09.07.2014 14:51:04
XBV00055.VDF  : 8.11.159.188    15360 Bytes  09.07.2014 14:51:05
XBV00056.VDF  : 8.11.159.210    25600 Bytes  09.07.2014 14:51:05
XBV00057.VDF  : 8.11.159.212    7168 Bytes  09.07.2014 14:51:05
XBV00058.VDF  : 8.11.159.218    27648 Bytes  10.07.2014 14:51:06
XBV00059.VDF  : 8.11.159.220    2048 Bytes  10.07.2014 14:51:06
XBV00060.VDF  : 8.11.159.222    29696 Bytes  10.07.2014 14:51:07
XBV00061.VDF  : 8.11.159.224  167936 Bytes  10.07.2014 14:51:13
XBV00062.VDF  : 8.11.159.226    35328 Bytes  10.07.2014 14:51:14
XBV00063.VDF  : 8.11.159.230  186368 Bytes  10.07.2014 20:49:51
XBV00064.VDF  : 8.11.159.250    16896 Bytes  10.07.2014 20:49:51
XBV00065.VDF  : 8.11.159.252    2048 Bytes  10.07.2014 20:49:51
XBV00066.VDF  : 8.11.160.16    6144 Bytes  10.07.2014 20:49:51
XBV00067.VDF  : 8.11.160.40    17408 Bytes  10.07.2014 10:12:52
XBV00068.VDF  : 8.11.160.42    2048 Bytes  11.07.2014 10:12:54
XBV00069.VDF  : 8.11.160.46  179200 Bytes  11.07.2014 10:12:55
XBV00070.VDF  : 8.11.160.48  203264 Bytes  11.07.2014 14:37:58
XBV00071.VDF  : 8.11.160.50    6144 Bytes  11.07.2014 14:37:58
XBV00072.VDF  : 8.11.160.52    2048 Bytes  11.07.2014 14:37:58
XBV00073.VDF  : 8.11.160.54    2048 Bytes  11.07.2014 14:37:58
XBV00074.VDF  : 8.11.160.58    22016 Bytes  11.07.2014 14:37:58
XBV00075.VDF  : 8.11.160.60    2048 Bytes  11.07.2014 14:37:58
XBV00076.VDF  : 8.11.160.62    8192 Bytes  11.07.2014 14:37:58
XBV00077.VDF  : 8.11.160.66  198656 Bytes  12.07.2014 14:38:00
XBV00078.VDF  : 8.11.160.68    7168 Bytes  12.07.2014 14:38:00
XBV00079.VDF  : 8.11.160.70    14848 Bytes  12.07.2014 14:38:00
XBV00080.VDF  : 8.11.160.72    7168 Bytes  12.07.2014 14:38:00
XBV00081.VDF  : 8.11.160.92    40448 Bytes  13.07.2014 14:37:40
XBV00082.VDF  : 8.11.160.112    2048 Bytes  13.07.2014 14:37:40
XBV00083.VDF  : 8.11.160.130  193024 Bytes  13.07.2014 14:37:42
XBV00084.VDF  : 8.11.160.132    2048 Bytes  13.07.2014 14:37:42
XBV00085.VDF  : 8.11.160.152    20480 Bytes  13.07.2014 20:37:37
XBV00086.VDF  : 8.11.160.154    2048 Bytes  13.07.2014 20:37:37
XBV00087.VDF  : 8.11.160.156    20992 Bytes  14.07.2014 08:37:41
XBV00088.VDF  : 8.11.160.158    2560 Bytes  14.07.2014 08:37:41
XBV00089.VDF  : 8.11.160.160    11264 Bytes  14.07.2014 14:37:42
XBV00090.VDF  : 8.11.160.162    2560 Bytes  14.07.2014 14:37:42
XBV00091.VDF  : 8.11.160.166    14336 Bytes  14.07.2014 14:37:42
XBV00092.VDF  : 8.11.160.168    5120 Bytes  14.07.2014 14:37:42
XBV00093.VDF  : 8.11.160.178    7168 Bytes  14.07.2014 20:37:41
XBV00094.VDF  : 8.11.160.180    2048 Bytes  14.07.2014 20:37:41
XBV00095.VDF  : 8.11.160.182    2048 Bytes  14.07.2014 20:37:41
XBV00096.VDF  : 8.11.160.188  256000 Bytes  14.07.2014 02:37:43
XBV00097.VDF  : 8.11.160.190    7680 Bytes  14.07.2014 02:37:43
XBV00098.VDF  : 8.11.160.194    18432 Bytes  15.07.2014 08:37:38
XBV00099.VDF  : 8.11.160.212  184832 Bytes  15.07.2014 19:24:53
XBV00100.VDF  : 8.11.160.230  289792 Bytes  15.07.2014 19:24:55
XBV00101.VDF  : 8.11.160.232    2048 Bytes  15.07.2014 19:24:55
XBV00102.VDF  : 8.11.160.234  176128 Bytes  15.07.2014 19:24:56
XBV00103.VDF  : 8.11.160.254    18432 Bytes  15.07.2014 17:26:06
XBV00104.VDF  : 8.11.161.16    6144 Bytes  16.07.2014 17:26:06
XBV00105.VDF  : 8.11.161.32    2048 Bytes  16.07.2014 17:26:06
XBV00106.VDF  : 8.11.161.34    2048 Bytes  16.07.2014 17:26:06
XBV00107.VDF  : 8.11.161.52    26624 Bytes  16.07.2014 17:26:07
XBV00108.VDF  : 8.11.161.68  184832 Bytes  16.07.2014 17:26:08
XBV00109.VDF  : 8.11.161.84    2048 Bytes  16.07.2014 17:26:08
XBV00110.VDF  : 8.11.162.2      2560 Bytes  16.07.2014 17:26:08
XBV00111.VDF  : 8.11.162.6    16896 Bytes  16.07.2014 17:26:08
XBV00112.VDF  : 8.11.162.8    24064 Bytes  16.07.2014 17:26:08
XBV00113.VDF  : 8.11.162.10    2560 Bytes  16.07.2014 17:26:09
XBV00114.VDF  : 8.11.162.14    41472 Bytes  17.07.2014 17:26:09
XBV00115.VDF  : 8.11.162.16    2048 Bytes  17.07.2014 17:26:09
XBV00116.VDF  : 8.11.162.18  215040 Bytes  17.07.2014 17:26:10
XBV00117.VDF  : 8.11.162.22  184320 Bytes  17.07.2014 17:26:12
XBV00118.VDF  : 8.11.162.40  258048 Bytes  17.07.2014 17:26:14
XBV00119.VDF  : 8.11.162.42    3584 Bytes  17.07.2014 17:26:14
XBV00120.VDF  : 8.11.162.58    3072 Bytes  17.07.2014 17:26:14
XBV00121.VDF  : 8.11.162.78    2048 Bytes  17.07.2014 17:26:14
XBV00122.VDF  : 8.11.162.94    2048 Bytes  17.07.2014 17:26:14
XBV00123.VDF  : 8.11.162.110    35840 Bytes  17.07.2014 17:26:14
XBV00124.VDF  : 8.11.162.112    2048 Bytes  18.07.2014 17:26:14
XBV00125.VDF  : 8.11.162.130    23040 Bytes  18.07.2014 17:26:14
XBV00126.VDF  : 8.11.162.134  184320 Bytes  18.07.2014 17:26:16
XBV00127.VDF  : 8.11.162.136    2048 Bytes  18.07.2014 17:26:16
XBV00128.VDF  : 8.11.162.152  231424 Bytes  18.07.2014 17:26:22
XBV00129.VDF  : 8.11.162.154    2048 Bytes  18.07.2014 17:26:22
XBV00130.VDF  : 8.11.162.170  108032 Bytes  18.07.2014 17:26:25
XBV00131.VDF  : 8.11.162.172    9728 Bytes  18.07.2014 17:26:25
XBV00132.VDF  : 8.11.162.174    2048 Bytes  18.07.2014 17:26:25
XBV00133.VDF  : 8.11.162.188    20992 Bytes  18.07.2014 17:26:25
XBV00134.VDF  : 8.11.162.192    2048 Bytes  18.07.2014 17:26:25
XBV00135.VDF  : 8.11.162.194    2048 Bytes  18.07.2014 17:26:26
XBV00136.VDF  : 8.11.162.200    19968 Bytes  18.07.2014 17:26:26
XBV00137.VDF  : 8.11.162.204    2048 Bytes  18.07.2014 17:26:26
XBV00138.VDF  : 8.11.162.212    2048 Bytes  18.07.2014 17:26:26
XBV00139.VDF  : 8.11.162.228  227840 Bytes  19.07.2014 17:26:27
XBV00140.VDF  : 8.11.162.244    2048 Bytes  19.07.2014 17:26:27
XBV00141.VDF  : 8.11.163.2    31232 Bytes  19.07.2014 17:26:28
XBV00142.VDF  : 8.11.163.16    62464 Bytes  20.07.2014 16:13:15
XBV00143.VDF  : 8.11.163.20  202752 Bytes  20.07.2014 16:13:17
XBV00144.VDF  : 8.11.163.22    2048 Bytes  20.07.2014 16:13:17
XBV00145.VDF  : 8.11.163.26    50176 Bytes  21.07.2014 10:13:04
XBV00146.VDF  : 8.11.163.28    23040 Bytes  21.07.2014 10:13:05
XBV00147.VDF  : 8.11.163.42    6144 Bytes  21.07.2014 10:13:05
XBV00148.VDF  : 8.11.163.44    2560 Bytes  21.07.2014 10:13:05
XBV00149.VDF  : 8.11.163.56    5120 Bytes  21.07.2014 10:13:05
XBV00150.VDF  : 8.11.163.68    8192 Bytes  21.07.2014 16:13:27
XBV00151.VDF  : 8.11.163.74  213504 Bytes  21.07.2014 16:13:28
XBV00152.VDF  : 8.11.163.78    22528 Bytes  22.07.2014 04:13:04
XBV00153.VDF  : 8.11.163.82    2560 Bytes  22.07.2014 10:13:30
XBV00154.VDF  : 8.11.163.84  181248 Bytes  22.07.2014 10:13:31
XBV00155.VDF  : 8.11.163.86    9728 Bytes  22.07.2014 10:13:31
XBV00156.VDF  : 8.11.163.92    2560 Bytes  22.07.2014 16:13:16
XBV00157.VDF  : 8.11.163.98  230400 Bytes  22.07.2014 22:13:15
XBV00158.VDF  : 8.11.163.100    2048 Bytes  22.07.2014 22:13:15
XBV00159.VDF  : 8.11.163.102    2048 Bytes  22.07.2014 22:13:15
XBV00160.VDF  : 8.11.163.108    22528 Bytes  22.07.2014 22:13:15
XBV00161.VDF  : 8.11.163.112    17920 Bytes  22.07.2014 04:13:11
XBV00162.VDF  : 8.11.163.116    2048 Bytes  23.07.2014 04:13:11
XBV00163.VDF  : 8.11.163.130  194048 Bytes  23.07.2014 10:13:40
XBV00164.VDF  : 8.11.163.142    20992 Bytes  23.07.2014 10:13:40
XBV00165.VDF  : 8.11.163.154    11776 Bytes  23.07.2014 16:13:16
XBV00166.VDF  : 8.11.163.158    17920 Bytes  23.07.2014 16:13:16
XBV00167.VDF  : 8.11.163.164    2048 Bytes  23.07.2014 16:13:17
XBV00168.VDF  : 8.11.163.170    14848 Bytes  23.07.2014 07:42:57
XBV00169.VDF  : 8.11.163.174  193024 Bytes  23.07.2014 07:43:00
XBV00170.VDF  : 8.11.163.176    3072 Bytes  23.07.2014 07:43:01
XBV00171.VDF  : 8.11.163.178    3072 Bytes  23.07.2014 07:43:01
XBV00172.VDF  : 8.11.163.184  199168 Bytes  24.07.2014 07:43:09
XBV00173.VDF  : 8.11.163.186  421376 Bytes  24.07.2014 13:42:49
XBV00174.VDF  : 8.11.163.198    2048 Bytes  24.07.2014 13:42:49
XBV00175.VDF  : 8.11.163.200    2048 Bytes  24.07.2014 13:42:49
XBV00176.VDF  : 8.11.163.212  212992 Bytes  24.07.2014 19:42:59
XBV00177.VDF  : 8.11.163.222    34816 Bytes  24.07.2014 19:42:59
XBV00178.VDF  : 8.11.163.226    2048 Bytes  24.07.2014 19:42:59
XBV00179.VDF  : 8.11.163.230    21504 Bytes  24.07.2014 08:55:39
XBV00180.VDF  : 8.11.163.234    18944 Bytes  25.07.2014 08:55:39
XBV00181.VDF  : 8.11.163.236    6656 Bytes  25.07.2014 08:55:39
XBV00182.VDF  : 8.11.163.238    2048 Bytes  25.07.2014 08:55:39
XBV00183.VDF  : 8.11.163.240  198144 Bytes  25.07.2014 08:55:39
XBV00184.VDF  : 8.11.163.244    38400 Bytes  25.07.2014 08:55:39
XBV00185.VDF  : 8.11.163.246    2048 Bytes  25.07.2014 08:55:39
XBV00186.VDF  : 8.11.163.248    6144 Bytes  25.07.2014 08:55:39
XBV00187.VDF  : 8.11.163.252    11776 Bytes  25.07.2014 08:55:39
XBV00188.VDF  : 8.11.163.254    2048 Bytes  25.07.2014 08:55:39
XBV00189.VDF  : 8.11.164.2      2048 Bytes  26.07.2014 08:55:39
XBV00190.VDF  : 8.11.164.6      5120 Bytes  26.07.2014 14:55:17
XBV00191.VDF  : 8.11.164.8      2048 Bytes  26.07.2014 14:55:17
XBV00192.VDF  : 8.11.164.20    32768 Bytes  26.07.2014 08:39:11
XBV00193.VDF  : 8.11.164.30    2048 Bytes  26.07.2014 08:39:11
XBV00194.VDF  : 8.11.164.42    37376 Bytes  27.07.2014 14:38:27
LOCAL001.VDF  : 8.11.164.42 108966400 Bytes  27.07.2014 14:38:45
Engineversion  : 8.3.22.12
AEVDF.DLL      : 8.3.0.4      118976 Bytes  02.07.2014 11:06:41
AESCRIPT.DLL  : 8.2.0.12      426184 Bytes  21.07.2014 16:13:27
AESCN.DLL      : 8.3.2.2      139456 Bytes  21.07.2014 16:13:25
AESBX.DLL      : 8.2.20.24    1409224 Bytes  02.07.2014 11:06:41
AERDL.DLL      : 8.2.0.138    704888 Bytes  02.07.2014 11:06:41
AEPACK.DLL    : 8.4.0.42      786632 Bytes  10.07.2014 14:50:04
AEOFFICE.DLL  : 8.3.0.14      213192 Bytes  21.07.2014 16:13:25
AEHEUR.DLL    : 8.1.4.1166  7233736 Bytes  21.07.2014 16:13:24
AEHELP.DLL    : 8.3.1.0      278728 Bytes  02.07.2014 11:06:41
AEGEN.DLL      : 8.1.7.28      450752 Bytes  02.07.2014 11:06:41
AEEXP.DLL      : 8.4.2.6      237760 Bytes  02.07.2014 11:06:41
AEEMU.DLL      : 8.1.3.2      393587 Bytes  02.07.2014 11:06:41
AEDROID.DLL    : 8.4.2.24      442568 Bytes  02.07.2014 11:06:41
AECORE.DLL    : 8.3.2.2      241864 Bytes  21.07.2014 16:13:03
AEBB.DLL      : 8.1.1.4        53619 Bytes  02.07.2014 11:06:41
AVWINLL.DLL    : 14.0.5.320    24144 Bytes  02.07.2014 11:06:44
AVPREF.DLL    : 14.0.5.320    50256 Bytes  02.07.2014 11:06:43
AVREP.DLL      : 14.0.5.320    219216 Bytes  02.07.2014 11:06:43
AVARKT.DLL    : 14.0.5.368    226384 Bytes  02.07.2014 11:06:42
AVEVTLOG.DLL  : 14.0.5.320    182352 Bytes  02.07.2014 11:06:42
SQLITE3.DLL    : 14.0.5.320    452176 Bytes  02.07.2014 11:06:47
AVSMTP.DLL    : 14.0.5.320    76368 Bytes  02.07.2014 11:06:44
NETNT.DLL      : 14.0.5.320    13392 Bytes  02.07.2014 11:06:46
RCIMAGE.DLL    : 14.0.5.320  4998224 Bytes  02.07.2014 11:06:46
RCTEXT.DLL    : 14.0.5.322    73808 Bytes  02.07.2014 11:06:46

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, D:,
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert

Beginn des Suchlaufs: Montag, 28. Juli 2014  08:38

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'HDD0(C:, D:)'
    [INFO]      Es wurde kein Virus gefunden!

Der Suchlauf nach versteckten Objekten wird begonnen.

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'atiesrxx.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '87' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '78' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '163' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '89' Modul(e) wurden durchsucht
Durchsuche Prozess 'atieclxx.exe' - '43' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '97' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '61' Modul(e) wurden durchsucht
Durchsuche Prozess 'armsvc.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '107' Modul(e) wurden durchsucht
Durchsuche Prozess 'HD-LogRotatorService.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'dtsrvc.exe' - '25' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '50' Modul(e) wurden durchsucht
Durchsuche Prozess 'GREGsvc.exe' - '23' Modul(e) wurden durchsucht
Durchsuche Prozess 'UpdaterService.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMIGuardianSvc.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'mbamscheduler.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'mbamservice.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'NOBuAgent.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'pdisrvc.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'sqlwriter.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '68' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLIDSVC.EXE' - '75' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.ServiceHost.exe' - '131' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLIDSvcM.exe' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'EscSvc64.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'hamachi-2.exe' - '73' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'mbam.exe' - '96' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '160' Modul(e) wurden durchsucht
Durchsuche Prozess 'ScanToPCActivationApp.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskeng.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'GoogleUpdate.exe' - '58' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.Systray.exe' - '136' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '122' Modul(e) wurden durchsucht
Durchsuche Prozess 'jusched.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'hamachi-2-ui.exe' - '58' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '147' Modul(e) wurden durchsucht
Durchsuche Prozess 'NASvc.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '117' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'wuauclt.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'SeaPort.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '64' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '31' Modul(e) wurden durchsucht

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '11298' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\' <Acer>
Beginne mit der Suche in 'D:\' <DATA>


Ende des Suchlaufs: Montag, 28. Juli 2014  13:16
Benötigte Zeit:  4:38:30 Stunde(n)

Der Suchlauf wurde vollständig durchgeführt.

 106320 Verzeichnisse wurden überprüft
 2498227 Dateien wurden geprüft
      0 Viren bzw. unerwünschte Programme wurden gefunden
      0 Dateien wurden als verdächtig eingestuft
      0 Dateien wurden gelöscht
      0 Viren bzw. unerwünschte Programme wurden repariert
      0 Dateien wurden in die Quarantäne verschoben
      0 Dateien wurden umbenannt
      0 Dateien konnten nicht durchsucht werden
 2498227 Dateien ohne Befall
  26157 Archive wurden durchsucht
      0 Warnungen
      0 Hinweise
 1732524 Objekte wurden beim Rootkitscan durchsucht
      0 Versteckte Objekte wurden gefunden
Code:
Results of screen317's Security Check version 0.99.85 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
Avira Desktop 
 Antivirus up to date!  (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
 WinTuneUp 1.0   
 Visual Studio Extensions for Windows Library for JavaScript
 Java 7 Update 65 
 JavaScript Tooling   
 Java version out of Date!
 Adobe Flash Player 14.0.0.145 
 Adobe Reader XI 
 Google Chrome 35.0.1916.114 
 Google Chrome 36.0.1985.125 
````````Process Check: objlist.exe by Laurent```````` 
 Malwarebytes Anti-Malware mbamservice.exe 
 Malwarebytes Anti-Malware mbam.exe 
 Avira Antivir avgnt.exe
 Avira Antivir avguard.exe
 Malwarebytes Anti-Malware mbamscheduler.exe 
 Symantec Norton Online Backup NOBuAgent.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````
Wieso Java nicht up to date ist weiss ich nicht, habs grad letztens geupdatet und es sollte sich ja eig auch automatisch updaten, oder nicht?


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014
Ran by Mirjam Zanetti (administrator) on MirjamZanetti on 28-07-2014 13:41:32
Running from C:\Users\Mirjam Zanetti\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [HP Photosmart 7520 series (NET)] => C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\system: [DisableClock] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoNetworkConnections] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoCommonGroups] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\MountPoints2: {2bcee651-c1d5-11e1-9a2e-806e6f6e6963} - E:\Setup.exe
ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: SNT -> {76F9D91C-56F3-3618-2D80-F6734BE2E498} -> C:\Program Files (x86)\SNT\5AJN.dll No File
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File
BHO-x32: Media View -> {fed65192-d64e-4d7b-91f6-37d5f033d528} -> C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Mirjam Zanetti\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\Extensions\staged [2013-12-31]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff

Chrome:
=======
CHR HomePage:
CHR DefaultSearchKeyword: ask search
CHR DefaultSearchProvider: Ask Search
CHR DefaultSearchURL: hxxp://www.search.ask.com/web?p2=%5EBBK%5EOSJ000%5EYY%5ECH&gct=&o=APN11412&tpid=ORJ-V7C&itbv=12.7.0.15&doi=2014-02-07&apn_uid=695C426C-942E-46F5-A9B6-D0BEE434F5D8&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5ECH&apn_dbr=cr_32.0.1700.76&psv=&trgb=CR&q={searchTerms}
CHR DefaultNewTabURL:
CHR Extension: (Inbox Toolbar) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\apgjagobplilmcdfelodhgefiidomnfl [2014-05-28]
CHR Extension: (No Name) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23]
CHR Extension: (MySearch) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf [2014-06-23]
CHR Extension: (Google Wallet) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26]
CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2013-08-26]
CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2013-08-26]
CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2013-08-26]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)
S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)
R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed]
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed]
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)
R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-28] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-28 13:41 - 2014-07-28 13:41 - 00019484 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt
2014-07-28 13:41 - 2014-07-28 13:41 - 00001141 _____ () C:\Users\Mirjam Zanetti\Desktop\security.txt
2014-07-28 13:40 - 2014-07-28 13:41 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Notepad++
2014-07-28 13:28 - 2014-07-28 13:28 - 00854390 _____ () C:\Users\Mirjam Zanetti\Desktop\SecurityCheck.exe
2014-07-27 19:03 - 2014-07-27 19:03 - 00000803 _____ () C:\Users\Sven\Desktop\Super Hexagon.exe - Verknüpfung.lnk
2014-07-27 19:03 - 2014-07-27 19:03 - 00000000 ____D () C:\Users\Sven\Desktop\Super Hexagon
2014-07-27 18:46 - 2014-07-27 18:49 - 23940629 _____ () C:\Users\Sven\Downloads\Super Hexagon by Andy Wale.rar
2014-07-27 15:20 - 2014-07-27 15:20 - 01016261 _____ (Thisisu) C:\Users\Mirjam Zanetti\Desktop\JRT.exe
2014-07-27 14:52 - 2014-07-27 14:52 - 01354223 _____ () C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe
2014-07-27 13:55 - 2014-07-27 13:55 - 00001272 _____ () C:\Users\Mirjam Zanetti\Desktop\Revo Uninstaller.lnk
2014-07-27 13:54 - 2014-07-27 13:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mirjam Zanetti\Desktop\revosetup95.exe
2014-07-26 21:21 - 2014-07-26 21:22 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe
2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS
2014-07-24 15:43 - 2014-07-24 15:42 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk
2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-24 11:52 - 2014-07-28 12:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-24 11:52 - 2014-07-28 11:57 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira
2014-07-23 09:45 - 2014-07-28 13:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-23 09:37 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-23 09:37 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-23 09:37 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-23 09:37 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-23 09:36 - 2014-07-23 09:37 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe
2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-22 13:14 - 2014-07-22 13:15 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe
2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe
2014-07-20 21:19 - 2014-07-20 21:20 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe
2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira
2014-07-11 13:32 - 2014-07-24 12:07 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt
2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt
2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe
2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt
2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt
2014-07-11 13:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe
2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt
2014-07-11 12:14 - 2014-07-24 12:06 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion
2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira
2014-07-10 16:48 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-10 16:48 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-10 16:48 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-10 15:30 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Avira
2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe
2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt
2014-07-10 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-07-10 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-07-10 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-07-10 11:34 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-10 11:34 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-10 11:34 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-10 11:34 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-10 11:34 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-10 11:34 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-10 11:34 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-10 11:34 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-10 11:34 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-10 11:34 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-10 11:34 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-10 11:34 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-10 11:34 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-10 11:34 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-10 11:34 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-10 11:34 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-10 11:34 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-10 11:34 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-10 11:34 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-10 11:34 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-10 11:34 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-10 11:34 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-10 11:34 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-10 11:34 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-10 11:34 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-10 11:34 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-10 11:34 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-10 11:34 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-10 11:34 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-10 11:34 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-10 11:34 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-10 11:34 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-10 11:34 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-10 11:34 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-10 11:34 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-10 11:34 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-10 11:34 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-10 11:34 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-10 11:34 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-10 11:34 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-10 11:34 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-10 11:34 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-10 11:34 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-10 11:34 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-10 11:34 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-10 11:34 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-10 11:34 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-10 11:34 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-10 11:34 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-10 11:34 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-10 11:34 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-10 11:34 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-10 11:34 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-10 11:34 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-10 11:34 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-10 11:34 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-10 11:28 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-10 11:28 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-10 11:28 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-10 11:28 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-10 11:28 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-10 11:28 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-10 11:28 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-10 11:28 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-10 11:23 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-10 11:23 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-10 11:23 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk
2014-07-09 14:10 - 2014-07-10 14:52 - 00000000 ____D () C:\Qoobox
2014-07-09 14:09 - 2014-07-10 14:48 - 00000000 ____D () C:\Windows\erdnt
2014-07-09 14:08 - 2014-07-10 13:55 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe
2014-07-09 13:21 - 2014-07-09 13:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe
2014-07-08 11:06 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz
2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame
2014-07-07 20:25 - 2014-07-07 20:28 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe
2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe
2014-07-07 19:27 - 2014-07-28 13:41 - 00000000 ____D () C:\FRST
2014-07-07 19:27 - 2014-07-24 12:06 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe
2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc
2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk
2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
2014-07-07 14:44 - 2014-07-08 06:36 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment
2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe
2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download
2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-28 13:42 - 2014-07-28 13:41 - 00019484 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt
2014-07-28 13:41 - 2014-07-28 13:41 - 00001141 _____ () C:\Users\Mirjam Zanetti\Desktop\security.txt
2014-07-28 13:41 - 2014-07-28 13:40 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Notepad++
2014-07-28 13:41 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST
2014-07-28 13:33 - 2014-07-23 09:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-28 13:28 - 2014-07-28 13:28 - 00854390 _____ () C:\Users\Mirjam Zanetti\Desktop\SecurityCheck.exe
2014-07-28 13:23 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job
2014-07-28 13:09 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job
2014-07-28 12:57 - 2014-07-24 11:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-28 11:57 - 2014-07-24 11:52 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-28 09:47 - 2012-06-29 12:21 - 01291444 _____ () C:\Windows\WindowsUpdate.log
2014-07-28 09:20 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-28 08:42 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-28 08:42 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-28 08:36 - 2013-02-28 23:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi
2014-07-28 08:34 - 2010-11-21 05:47 - 01759436 _____ () C:\Windows\PFRO.log
2014-07-28 08:34 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-28 08:34 - 2009-07-14 06:51 - 00102988 _____ () C:\Windows\setupact.log
2014-07-27 19:38 - 2014-04-25 20:59 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-27 19:05 - 2012-12-21 13:42 - 00000000 ____D () C:\Users\Sven\AppData\Local\CrashDumps
2014-07-27 19:03 - 2014-07-27 19:03 - 00000803 _____ () C:\Users\Sven\Desktop\Super Hexagon.exe - Verknüpfung.lnk
2014-07-27 19:03 - 2014-07-27 19:03 - 00000000 ____D () C:\Users\Sven\Desktop\Super Hexagon
2014-07-27 18:49 - 2014-07-27 18:46 - 23940629 _____ () C:\Users\Sven\Downloads\Super Hexagon by Andy Wale.rar
2014-07-27 17:23 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job
2014-07-27 16:08 - 2013-03-03 20:30 - 00000000 ____D () C:\Users\Sven\AppData\Local\LogMeIn Hamachi
2014-07-27 15:20 - 2014-07-27 15:20 - 01016261 _____ (Thisisu) C:\Users\Mirjam Zanetti\Desktop\JRT.exe
2014-07-27 15:04 - 2013-12-22 10:49 - 00000000 ____D () C:\AdwCleaner
2014-07-27 15:03 - 2013-03-30 16:36 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather
2014-07-27 14:52 - 2014-07-27 14:52 - 01354223 _____ () C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe
2014-07-27 13:55 - 2014-07-27 13:55 - 00001272 _____ () C:\Users\Mirjam Zanetti\Desktop\Revo Uninstaller.lnk
2014-07-27 13:54 - 2014-07-27 13:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mirjam Zanetti\Desktop\revosetup95.exe
2014-07-27 13:54 - 2014-01-02 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-26 21:22 - 2014-07-26 21:21 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe
2014-07-26 20:48 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent
2014-07-26 20:34 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype
2014-07-26 18:18 - 2013-03-01 12:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi
2014-07-25 22:34 - 2012-12-02 21:28 - 00000008 __RSH () C:\Users\Tim\ntuser.pol
2014-07-25 22:34 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim
2014-07-25 19:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-07-25 19:13 - 2012-12-01 11:20 - 00000326 __RSH () C:\Users\Sven\ntuser.pol
2014-07-25 19:13 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven
2014-07-25 19:09 - 2014-02-24 18:05 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-07-25 19:09 - 2012-12-01 11:05 - 00000008 __RSH () C:\Users\Mirjam Zanetti\ntuser.pol
2014-07-25 19:09 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti
2014-07-25 19:07 - 2014-01-07 00:07 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS
2014-07-25 19:01 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-07-24 15:42 - 2014-07-24 15:43 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-24 12:07 - 2014-07-11 13:32 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt
2014-07-24 12:06 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion
2014-07-24 12:06 - 2014-07-07 19:27 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe
2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk
2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Deployment
2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Apps\2.0
2014-07-24 11:51 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira
2014-07-23 14:30 - 2014-03-02 13:27 - 00000000 ____D () C:\Program Files (x86)\NextCouuP
2014-07-23 14:30 - 2013-12-16 13:29 - 00000000 ____D () C:\Program Files (x86)\SK Supporter
2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-23 09:45 - 2012-03-23 02:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-23 09:45 - 2012-03-23 02:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-23 09:38 - 2013-12-21 11:39 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-23 09:37 - 2014-07-23 09:36 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-23 09:37 - 2013-12-21 11:38 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe
2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-22 13:15 - 2014-07-22 13:14 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe
2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe
2014-07-22 10:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-21 15:17 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012
2014-07-20 21:20 - 2014-07-20 21:19 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe
2014-07-19 19:28 - 2012-06-24 20:13 - 00742794 _____ () C:\Windows\system32\perfh010.dat
2014-07-19 19:28 - 2012-06-24 20:13 - 00152352 _____ () C:\Windows\system32\perfc010.dat
2014-07-19 19:28 - 2012-06-24 20:06 - 00748104 _____ () C:\Windows\system32\perfh00C.dat
2014-07-19 19:28 - 2012-06-24 20:06 - 00154994 _____ () C:\Windows\system32\perfc00C.dat
2014-07-19 19:28 - 2012-06-24 19:58 - 00710502 _____ () C:\Windows\system32\perfh007.dat
2014-07-19 19:28 - 2012-06-24 19:58 - 00154832 _____ () C:\Windows\system32\perfc007.dat
2014-07-19 19:28 - 2009-07-14 07:13 - 03450454 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira
2014-07-11 14:27 - 2009-07-14 06:45 - 00435760 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-11 14:26 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-11 14:20 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-11 14:20 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt
2014-07-11 13:22 - 2014-01-05 15:48 - 00000000 ____D () C:\Windows\ERUNT
2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe
2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt
2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt
2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe
2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt
2014-07-11 03:02 - 2014-07-23 09:37 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-11 02:56 - 2014-07-23 09:37 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-11 02:56 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-11 02:55 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-10 21:29 - 2013-10-08 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE
2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira
2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-10 16:48 - 2014-07-10 15:30 - 00000000 ____D () C:\ProgramData\Avira
2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe
2014-07-10 15:30 - 2013-02-18 22:07 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt
2014-07-10 14:52 - 2014-07-09 14:10 - 00000000 ____D () C:\Qoobox
2014-07-10 14:52 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-07-10 14:48 - 2014-07-09 14:09 - 00000000 ____D () C:\Windows\erdnt
2014-07-10 14:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-07-10 14:40 - 2014-01-24 17:54 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\convert
2014-07-10 14:40 - 2013-12-02 21:20 - 00000000 ____D () C:\Program Files (x86)\PSupport
2014-07-10 14:18 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-10 14:10 - 2012-11-07 14:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-10 14:08 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-10 13:55 - 2014-07-09 14:08 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe
2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk
2014-07-09 19:15 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET
2014-07-09 13:23 - 2014-07-09 13:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe
2014-07-09 13:23 - 2014-01-02 14:48 - 00001272 _____ () C:\Users\Sven\Desktop\Revo Uninstaller.lnk
2014-07-08 11:07 - 2014-07-08 11:06 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz
2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-08 06:40 - 2013-09-19 19:37 - 00000000 ____D () C:\ArcTemp
2014-07-08 06:36 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment
2014-07-07 22:05 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame
2014-07-07 20:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-07-07 20:28 - 2014-07-07 20:25 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe
2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe
2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc
2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk
2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe
2014-07-02 13:06 - 2014-07-10 16:48 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-02 13:06 - 2014-07-10 16:48 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-02 13:06 - 2014-07-10 16:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download
2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download
2014-06-30 04:09 - 2014-07-10 11:28 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-30 04:04 - 2014-07-10 11:28 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Some content of TEMP:
====================
C:\Users\Mirjam Zanetti\AppData\Local\temp\avgnt.exe
C:\Users\Mirjam Zanetti\AppData\Local\temp\Quarantine.exe
C:\Users\Sven\AppData\Local\temp\avgnt.exe
C:\Users\Sven\AppData\Local\temp\Quarantine.exe
C:\Users\Tim\AppData\Local\temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2013-03-25 09:03

==================== End Of Log ============================
--- --- ---



Die Erweiterung ist weiterhin in Chrome installiert, allerdings ist sie deaktiviert und aktiviert sich nicht mehr von allein.

schrauber 29.07.2014 07:19
Java gibt es schon in Version 8.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
CHR Extension: (No Name) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23]
CHR Extension: (MySearch) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf [2014-06-23]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


Terrenay 29.07.2014 09:23
Guten Morgen

Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-07-2014
Ran by Mirjam Zanetti at 2014-07-29 10:20:28 Run:2
Running from C:\Users\Mirjam Zanetti\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
CHR Extension: (No Name) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23]
CHR Extension: (MySearch) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf [2014-06-23]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
       
*****************

HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce\\HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} => Value not found.
C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm => Moved successfully.
C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
esgiguard => Service deleted successfully.

==== End of Fixlog ====
Erweiterung immer noch da :(

schrauber 29.07.2014 11:45
Revo Uninstaller - Download - Filepony
damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.google.com/chrome/answer/3296214?hl=de


Frisches FRST log bitte. Verbindest Du Chrome mit einem Google Konto?


Alle Zeitangaben in WEZ +1. Es ist jetzt 15:38 Uhr.
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131