Hi,
danke für die antwort.
Hier die log files:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2013
Ran by zoOky (administrator) on ZOOKY-PC on 10-11-2013 17:37:54
Running from C:\Users\zoOky\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Bitdefender) D:\Programme\Bitdefender\Bitdefender\vsserv.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(The Within Network, LLC) C:\Windows\UnsignedThemesSvc.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Nero AG) D:\Programme\HTC\HSMServiceEntry.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Razer) C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe
(SplitCam Co.) D:\Programme\SplitCam\SplitCamService.exe
(Rocket Division Software) D:\Programme\Alcohol 120\StarWind\StarWindServiceAE.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Bitdefender) D:\Programme\Bitdefender\Bitdefender\updatesrv.exe
(Microsoft) C:\Program Files (x86)\Yontoo\Y2Desktop.Updater.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
() D:\Programme\Sapphire TRIXX\TRIXX.exe
() C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe
(Bitdefender) D:\Programme\Bitdefender\Bitdefender\bdagent.exe
(Valve Corporation) D:\Games\STEAM\Steam.exe
() D:\Programme\HTC\HTC Sync\adb.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() D:\Programme\RocketDock\RocketDock.exe
(Bitdefender) D:\Programme\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) D:\Programme\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Dropbox, Inc.) C:\Users\zoOky\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe
() D:\Programme\Rainmeter.exe
(Razer USA Ltd) C:\Program Files (x86)\Razer\Imperator\RazerImperatorSysTray.exe
(Xfire Inc.) D:\Programme\XFire\Xfire.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CTXFISPI.EXE
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Xfire Inc.) D:\Programme\XFire\Xfire.exe
() D:\Programme\XFire\xfire64.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Yontoo LLC) C:\Users\zoOky\AppData\Roaming\Yontoo\YontooDesktop.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Malwarebytes Corporation) D:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) D:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) D:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe
(ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
(Bitdefender) D:\Programme\Bitdefender\Bitdefender\seccenter.exe
() C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(TeamSpeak Systems GmbH) D:\Programme\TS\ts3client_win32.exe
(Solid State Networks) D:\Games\TERA\TERA-Launcher.exe
() D:\Games\TERA\Client\TL.exe
() D:\Games\TERA\Client\Binaries\TERA.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Bdagent] - D:\Programme\Bitdefender\Bitdefender\bdagent.exe [1738968 2013-10-30] (Bitdefender)
HKLM-x32\...\RunOnce: [EasyTuneVI] - C:\Program Files (x86)\GIGABYTE\ET6\ETCall.exe [40960 2012-07-09] ()
HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware] - D:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation)
HKCU\...\Run: [Steam] - D:\Games\STEAM\Steam.exe [1820584 2013-10-30] (Valve Corporation)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20472992 2013-10-02] (Skype Technologies S.A.)
HKCU\...\Run: [RocketDock] - D:\Programme\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKCU\...\Run: [DAEMON Tools Lite] - D:\Programme\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - D:\Programme\Bitdefender\Bitdefender\pmbxag.exe [564256 2013-10-30] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse] - D:\Programme\Bitdefender\Bitdefender\pwdmanui.exe [1004608 2013-10-30] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - D:\Programme\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [621448 2013-10-30] (Bitdefender)
HKCU\...\Run: [Google Update] - C:\Users\zoOky\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-01-07] (Google Inc.)
MountPoints2: G - G:\HTC_Sync_Manager_PC.exe
MountPoints2: {3cc854aa-4f72-11e2-ae3b-806e6f6e6963} - G:\HTC_Sync_Manager_PC.exe
MountPoints2: {59b966de-5411-11e2-ba4f-001fd0dc171d} - K:\HTC_Sync_Manager_PC.exe
MountPoints2: {8e59e9de-c097-11e2-bab5-001fd0dc171d} - I:\SETUP.EXE
MountPoints2: {c90a6927-4f51-11e2-a44e-001fd0dc171d} - G:\HTC_Sync_Manager_PC.exe
MountPoints2: {c90a6a8e-4f51-11e2-a44e-001fd0dc171d} - G:\HTC_Sync_Manager_PC.exe
HKLM-x32\...\Run: [CTxfiHlp] - C:\Windows\\SysWOW64\CTXFIHLP.EXE [25600 2010-05-05] (Creative Technology Ltd)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Razer Imperator Driver] - C:\Program Files (x86)\Razer\Imperator\RazerImperatorSysTray.exe [979360 2012-02-09] (Razer USA Ltd)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.)
Startup: C:\Users\zoOky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\zoOky\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\zoOky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> D:\Programme\Rainmeter.exe ()
Startup: C:\Users\zoOky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk
ShortcutTarget: Xfire.lnk -> D:\Programme\XFire\Xfire.exe (Xfire Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD79BF8D408E2CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoW3i&dpid=SnapdoW3i&co=DE&userid=88c03465-5def-4a6b-8379-33a304977184&searchtype=ds&q={searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoW3i&dpid=SnapdoW3i&co=DE&userid=88c03465-5def-4a6b-8379-33a304977184&searchtype=ds&q={searchTerms}
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3314932&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP1491FE71-97E1-4635-96D7-6E5A540C5D1F&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoW3i&dpid=SnapdoW3i&co=DE&userid=88c03465-5def-4a6b-8379-33a304977184&searchtype=ds&q={searchTerms}
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3314932&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP1491FE71-97E1-4635-96D7-6E5A540C5D1F&q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.searchgol.com/?q={searchTerms}&affID=121845&tt=gc_&babsrc=SP_ss_Btisdt7&mntrId=A289001FD0DC171D
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - D:\Programme\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: No Name - {E4EF8A64-0A30-48F5-B3FE-5FDA978DA775} - No File
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - D:\Programme\Bitdefender\Bitdefender\antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Yontoo - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM - No Name - {CF0F43AB-9C23-4D7B-8040-201B82844854} - No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 82.212.62.62 78.42.43.62
FireFox:
========
FF ProfilePath: C:\Users\zoOky\AppData\Roaming\Mozilla\Firefox\Profiles\p1hkmspx.default
FF user.js: detected! => C:\Users\zoOky\AppData\Roaming\Mozilla\Firefox\Profiles\p1hkmspx.default\user.js
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20(shExpMatch(host%2C%20'(*.turntable.fm%7Cturntable.fm)')%20%26%26%20url.indexOf('.css')%20%3D%3D%20-1%20%26%26%20url.indexOf('.js')%20%3D%3D%20-1)%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1))%20%7B%20return%20'PROXY%20ab-us17.personalitycores.com%3A8000%3B%20PROXY%20ab-us20.personalitycores.com%3A8000%3B%20PROXY%20ab-us22.personalitycores.com%3A8000%3B%20PROXY%20ab-us11.personalitycores.com%3A8000%3B%20PROXY%20ab-us15.personalitycores.com%3A8000%3B%20PROXY%20ab-us07.personalitycores.com%3A8000%3B%20PROXY%20ab-us13.personalitycores.com%3A8000%3B%20PROXY%20ab-us12.personalitycores.com%3A8000%3B%20PROXY%20ab-us10.personalitycores.com%3A8000%3B%20PROXY%20ab-us09.personalitycores.com%3A8000%3B%20PROXY%20ab-us02.personalitycores.com%3A8000%3B%20PROXY%20ab-us14.personalitycores.com%3A8000%3B%20PROXY%20ab-us01.personalitycores.com%3A8000%3B%20PROXY%20ab-us18.personalitycores.com%3A8000%3B%20PROXY%20ab-us08.personalitycores.com%3A8000%3B%20PROXY%20ab-us21.personalitycores.com%3A8000%3B%20PROXY%20ab-us03.personalitycores.com%3A8000%3B%20PROXY%20ab-us16.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 - D:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Programme\itunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Bitdefender.com/PasswordManager;version=17.8 - D:\Programme\Bitdefender\Bitdefender\Antispam32\pmbxnp.dll (Bitdefender)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\zoOky\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\zoOky\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\zoOky\AppData\Roaming\Mozilla\Firefox\Profiles\p1hkmspx.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Users\zoOky\AppData\Roaming\Mozilla\Firefox\Profiles\p1hkmspx.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\zoOky\AppData\Roaming\Mozilla\Firefox\Profiles\p1hkmspx.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\zoOky\AppData\Roaming\Mozilla\Firefox\Profiles\p1hkmspx.default\Extensions\ich@maltegoetz.de
FF Extension: jid1-QpHD8URtZWJC2A - C:\Users\zoOky\AppData\Roaming\Mozilla\Firefox\Profiles\p1hkmspx.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi
FF Extension: stylish - C:\Users\zoOky\AppData\Roaming\Mozilla\Firefox\Profiles\p1hkmspx.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi
FF Extension: Adblock Plus - C:\Users\zoOky\AppData\Roaming\Mozilla\Firefox\Profiles\p1hkmspx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF HKLM-x32\...\Firefox\Extensions: [ffpwdman@bitdefender.com] - D:\Programme\Bitdefender\Bitdefender\Antispam32\ffpwdman\
FF Extension: Bitdefender Wallet - D:\Programme\Bitdefender\Bitdefender\Antispam32\ffpwdman\
Chrome:
=======
CHR HomePage: hxxp://google.de/
CHR RestoreOnStartup: "hxxp://google.de/"
CHR Plugin: (Shockwave Flash) - C:\Users\zoOky\AppData\Local\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\zoOky\AppData\Local\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\zoOky\AppData\Local\Google\Chrome\Application\30.0.1599.101\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Google Update) - C:\Users\zoOky\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll No File
CHR Extension: (ProxTube) - C:\Users\zoOky\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.2.4_0
CHR Extension: (Google Drive) - C:\Users\zoOky\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\zoOky\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Bitdefender Wallet) - C:\Users\zoOky\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl\17.19.0_0
CHR Extension: (Google Search) - C:\Users\zoOky\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Free Smileys & Emoticons) - C:\Users\zoOky\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjbbjfdilbioabojmcplalojlmdngbjl\3.0.24.0_0
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\zoOky\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_0
CHR Extension: (Google Wallet) - C:\Users\zoOky\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\zoOky\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - D:\Programme\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx
CHR HKLM-x32\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Program Files (x86)\Yontoo\YontooLayers.crx
==================== Services (Whitelisted) =================
R2 HTCMonitorService; D:\Programme\HTC\HSMServiceEntry.exe [87368 2013-04-12] (Nero AG)
R2 MBAMScheduler; D:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; D:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [5124464 2012-12-16] (INCA Internet Co., Ltd.)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-31] ()
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [31448 2013-05-03] (Razer)
R2 SpliCamService; D:\Programme\SplitCam\SplitCamService.exe [311456 2013-10-17] (SplitCam Co.)
R2 StarWindServiceAE; D:\Programme\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-09-09] (TuneUp Software)
R2 UnsignedThemes; C:\Windows\UnsignedThemesSvc.exe [24168 2009-07-13] (The Within Network, LLC)
R2 UPDATESRV; D:\Programme\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-23] (Bitdefender)
R2 VSSERV; D:\Programme\Bitdefender\Bitdefender\vsserv.exe [1506736 2013-10-30] (Bitdefender)
R2 Yontoo Desktop Updater; C:\Program Files (x86)\Yontoo\Y2Desktop.Updater.exe [23552 2013-05-17] (Microsoft)
==================== Drivers (Whitelisted) ====================
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-07-19] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-07-19] (BitDefender)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2013-07-23] (BitDefender SRL)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-02-15] (DT Soft Ltd)
S3 etdrv; C:\Windows\etdrv.sys [25640 2013-10-20] (Windows (R) Server 2003 DDK provider)
R3 gdrv; C:\Windows\gdrv.sys [25640 2013-11-10] (Windows (R) Server 2003 DDK provider)
R3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-11-10] ()
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-10-02] (BitDefender LLC)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [128856 2013-05-03] (Razer USA Ltd)
R0 RzFilter; C:\Windows\System32\drivers\RzFilter.sys [74456 2013-05-03] (Razer USA Ltd)
R3 scvad_simple; C:\Windows\System32\drivers\SplitCamAudio.sys [23552 2013-04-24] (Windows (R) Win 7 DDK provider)
R3 splitcam_hd_driver; C:\Windows\System32\DRIVERS\splitcam_hd_driver.sys [37496 2013-07-12] (Windows (R) Win 7 DDK provider)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [868848 2013-05-19] ()
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-10-02] (BitDefender S.R.L.)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
R2 uxpatch; C:\Windows\system32\drivers\uxpatch.sys [30568 2009-07-13] ()
U3 a6tpyuja; C:\Windows\System32\Drivers\a6tpyuja.sys [0 ] (Microsoft Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
R3 TRIXX; \??\C:\Users\zoOky\AppData\Local\Temp\TRIXX.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-11-10 17:37 - 2013-11-10 17:37 - 01957562 _____ (Farbar) C:\Users\zoOky\Downloads\FRST64.exe
2013-11-10 17:37 - 2013-11-10 17:37 - 00000000 ____D C:\FRST
2013-11-10 13:54 - 2013-11-10 13:54 - 00000000 ____D C:\Users\zoOky\Desktop\Praktikum
2013-11-10 13:46 - 2013-11-10 13:46 - 00001382 _____ C:\Users\zoOky\AppData\Roaming\Microsoft\Windows\Start Menu\Install Windows.lnk
2013-11-10 13:46 - 2013-11-10 13:46 - 00001380 _____ C:\Users\zoOky\Desktop\Install Windows.lnk
2013-11-10 12:42 - 2013-11-10 12:42 - 00000000 ____D C:\Program Files (x86)\ESET
2013-11-10 12:41 - 2013-11-10 12:41 - 02347384 _____ (ESET) C:\Users\zoOky\Downloads\esetsmartinstaller_enu.exe
2013-11-10 12:30 - 2013-11-10 12:30 - 00000736 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-11-10 12:30 - 2013-11-10 12:30 - 00000000 ____D C:\Users\zoOky\AppData\Roaming\Malwarebytes
2013-11-10 12:30 - 2013-11-10 12:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-10 12:30 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-10 12:29 - 2013-11-10 12:29 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\zoOky\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-10 12:23 - 2013-11-10 12:23 - 04379048 _____ (Piriform Ltd) C:\Users\zoOky\Downloads\ccsetup407.exe
2013-11-10 12:23 - 2013-11-10 12:23 - 04379048 _____ (Piriform Ltd) C:\Users\zoOky\Downloads\ccsetup407(1).exe
2013-11-10 12:11 - 2013-11-10 12:11 - 00000000 __RHD C:\ESD
2013-11-10 12:07 - 2013-11-10 12:07 - 04954736 _____ (Microsoft Corporation) C:\Users\zoOky\Downloads\WindowsSetupBox.exe
2013-11-10 12:06 - 2013-11-10 12:06 - 00293321 _____ C:\Users\zoOky\Desktop\bookmarks.html
2013-11-10 12:00 - 2013-11-10 12:01 - 00000000 ____D C:\Users\zoOky\Downloads\backups
2013-11-10 11:58 - 2013-11-10 12:38 - 00013449 _____ C:\Users\zoOky\Downloads\hijackthis.log
2013-11-10 11:58 - 2013-11-10 11:58 - 00388608 _____ (Trend Micro Inc.) C:\Users\zoOky\Downloads\HiJackThis204.exe
2013-11-09 11:12 - 2013-11-09 11:14 - 182549774 _____ C:\Users\zoOky\Downloads\Die_111_besten_Multi-Monitoring-Wallpaper.zip
2013-11-08 14:31 - 2013-11-08 14:31 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-08 14:31 - 2013-11-08 14:31 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-08 14:31 - 2013-11-08 14:31 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-08 14:31 - 2013-11-08 14:31 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-11-08 14:30 - 2013-11-08 14:30 - 00000000 ____D C:\Program Files\Java
2013-11-08 14:28 - 2013-11-08 14:31 - 00000000 ____D C:\ProgramData\Oracle
2013-11-08 14:28 - 2013-11-08 14:28 - 30694824 _____ (Oracle Corporation) C:\Users\zoOky\Downloads\jre-7u45-windows-x64(1).exe
2013-11-08 14:27 - 2013-11-08 14:27 - 30694824 _____ (Oracle Corporation) C:\Users\zoOky\Downloads\jre-7u45-windows-x64.exe
2013-11-01 17:09 - 2013-10-25 02:02 - 00000000 ____D C:\Users\zoOky\Desktop\kkkkaaaayyyy
2013-10-31 14:21 - 2013-10-31 14:23 - 00000000 ____D C:\Users\zoOky\Documents\Battlefield 3
2013-10-30 15:34 - 2013-10-30 15:34 - 00000000 ____D C:\Users\zoOky\AppData\Roaming\Guild Wars 2
2013-10-30 10:58 - 2013-10-30 10:58 - 08945660 _____ C:\Users\zoOky\Downloads\pcsx2-1.0.0-r5350-setup.exe
2013-10-30 10:58 - 2013-10-30 10:58 - 00000788 _____ C:\Users\Public\Desktop\PCSX2 1.0.0 (r5350).lnk
2013-10-29 22:05 - 2013-10-29 22:05 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-10-29 22:04 - 2013-10-29 22:04 - 23123208 _____ (Mozilla) C:\Users\zoOky\Downloads\Firefox_Setup_25.0.exe
2013-10-20 17:16 - 2013-10-20 17:16 - 00000849 _____ C:\Users\Public\Desktop\Battlefield 3.lnk
2013-10-20 14:05 - 2013-11-10 10:38 - 00000004 _____ C:\Windows\SysWOW64\GVTunner.ref
2013-10-20 10:58 - 2013-11-10 11:57 - 00000000 ____D C:\Users\zoOky\AppData\Roaming\GlarySoft
2013-10-20 10:56 - 2013-11-10 10:38 - 00000304 _____ C:\Windows\Tasks\GlaryInitialize.job
2013-10-20 10:56 - 2013-10-20 10:56 - 00002582 _____ C:\Windows\System32\Tasks\GlaryInitialize
2013-10-20 10:56 - 2013-10-20 10:56 - 00000703 _____ C:\Users\zoOky\Desktop\Glary Utilities.lnk
2013-10-20 10:51 - 2013-11-10 12:23 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-10-20 10:51 - 2013-11-10 12:23 - 00000000 ____D C:\Program Files\CCleaner
2013-10-20 10:51 - 2013-10-20 10:51 - 00002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-10-20 10:46 - 2013-10-20 10:46 - 06685392 _____ (Glarysoft Ltd ) C:\Users\zoOky\Downloads\gusetup_slim_2.56.exe
2013-10-19 16:40 - 2013-10-19 16:40 - 00130673 _____ C:\Users\zoOky\Downloads\Ps2_Save_Builder_0.8x.zip
2013-10-19 16:37 - 2013-10-19 16:37 - 00012559 _____ C:\Users\zoOky\Downloads\state1.zip
2013-10-18 08:07 - 2013-04-24 09:45 - 00810496 _____ C:\Windows\SysWOW64\xvidcore.dll
2013-10-18 08:07 - 2013-04-24 09:45 - 00183808 _____ C:\Windows\SysWOW64\xvidvfw.dll
2013-10-18 08:07 - 2013-04-24 09:45 - 00080896 _____ C:\Windows\SysWOW64\ff_vfw.dll
2013-10-18 08:07 - 2013-04-24 09:45 - 00000590 _____ C:\Windows\SysWOW64\ff_vfw.dll.manifest
2013-10-18 08:03 - 2013-10-20 10:47 - 00000000 ____D C:\Program Files (x86)\SqueakyChocolate
2013-10-18 08:03 - 2013-10-18 08:03 - 00000000 ____D C:\Users\zoOky\Documents\Add-in Express
2013-10-18 08:00 - 2013-10-18 08:00 - 00000000 ____D C:\Users\zoOky\Documents\PC Speed Maximizer
2013-10-18 07:55 - 2013-10-18 07:55 - 00000000 _____ C:\END
2013-10-14 13:40 - 2013-10-14 13:42 - 00000000 ____D C:\Users\zoOky\Documents\Battlefield 4 Beta
2013-10-12 09:14 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-12 09:14 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-12 09:14 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-12 09:14 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-12 09:14 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-12 09:14 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-12 09:14 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
==================== One Month Modified Files and Folders =======
2013-11-10 17:38 - 2012-12-17 20:47 - 00000000 ____D C:\Users\zoOky\AppData\Roaming\Skype
2013-11-10 17:37 - 2013-11-10 17:37 - 01957562 _____ (Farbar) C:\Users\zoOky\Downloads\FRST64.exe
2013-11-10 17:37 - 2013-11-10 17:37 - 00000000 ____D C:\FRST
2013-11-10 17:20 - 2012-12-17 21:06 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-10 16:44 - 2013-01-07 22:08 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3474958773-3223843518-2572617103-1001UA.job
2013-11-10 16:28 - 2013-05-19 15:31 - 00000000 ____D C:\Users\zoOky\AppData\Roaming\Yontoo
2013-11-10 16:15 - 2012-12-17 20:29 - 01535540 _____ C:\Windows\WindowsUpdate.log
2013-11-10 14:23 - 2013-06-29 16:50 - 00000000 ____D C:\Users\zoOky\AppData\Roaming\TS3Client
2013-11-10 13:56 - 2009-07-14 06:13 - 00778834 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-10 13:54 - 2013-11-10 13:54 - 00000000 ____D C:\Users\zoOky\Desktop\Praktikum
2013-11-10 13:46 - 2013-11-10 13:46 - 00001382 _____ C:\Users\zoOky\AppData\Roaming\Microsoft\Windows\Start Menu\Install Windows.lnk
2013-11-10 13:46 - 2013-11-10 13:46 - 00001380 _____ C:\Users\zoOky\Desktop\Install Windows.lnk
2013-11-10 13:26 - 2013-05-19 15:31 - 00000000 ____D C:\Program Files (x86)\Yontoo
2013-11-10 12:42 - 2013-11-10 12:42 - 00000000 ____D C:\Program Files (x86)\ESET
2013-11-10 12:41 - 2013-11-10 12:41 - 02347384 _____ (ESET) C:\Users\zoOky\Downloads\esetsmartinstaller_enu.exe
2013-11-10 12:38 - 2013-11-10 11:58 - 00013449 _____ C:\Users\zoOky\Downloads\hijackthis.log
2013-11-10 12:30 - 2013-11-10 12:30 - 00000736 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-11-10 12:30 - 2013-11-10 12:30 - 00000000 ____D C:\Users\zoOky\AppData\Roaming\Malwarebytes
2013-11-10 12:30 - 2013-11-10 12:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-10 12:29 - 2013-11-10 12:29 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\zoOky\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-10 12:25 - 2013-04-29 20:07 - 00000000 ____D C:\Users\zoOky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\eFusion
2013-11-10 12:23 - 2013-11-10 12:23 - 04379048 _____ (Piriform Ltd) C:\Users\zoOky\Downloads\ccsetup407.exe
2013-11-10 12:23 - 2013-11-10 12:23 - 04379048 _____ (Piriform Ltd) C:\Users\zoOky\Downloads\ccsetup407(1).exe
2013-11-10 12:23 - 2013-10-20 10:51 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-10 12:23 - 2013-10-20 10:51 - 00000000 ____D C:\Program Files\CCleaner
2013-11-10 12:11 - 2013-11-10 12:11 - 00000000 __RHD C:\ESD
2013-11-10 12:07 - 2013-11-10 12:07 - 04954736 _____ (Microsoft Corporation) C:\Users\zoOky\Downloads\WindowsSetupBox.exe
2013-11-10 12:06 - 2013-11-10 12:06 - 00293321 _____ C:\Users\zoOky\Desktop\bookmarks.html
2013-11-10 12:01 - 2013-11-10 12:00 - 00000000 ____D C:\Users\zoOky\Downloads\backups
2013-11-10 11:58 - 2013-11-10 11:58 - 00388608 _____ (Trend Micro Inc.) C:\Users\zoOky\Downloads\HiJackThis204.exe
2013-11-10 11:57 - 2013-10-20 10:58 - 00000000 ____D C:\Users\zoOky\AppData\Roaming\GlarySoft
2013-11-10 10:45 - 2009-07-14 05:45 - 00021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-10 10:45 - 2009-07-14 05:45 - 00021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-10 10:39 - 2012-12-26 16:42 - 00000000 ____D C:\Users\zoOky\AppData\Local\HTC MediaHub
2013-11-10 10:38 - 2013-10-20 14:05 - 00000004 _____ C:\Windows\SysWOW64\GVTunner.ref
2013-11-10 10:38 - 2013-10-20 10:56 - 00000304 _____ C:\Windows\Tasks\GlaryInitialize.job
2013-11-10 10:38 - 2013-04-27 18:21 - 00000000 ___RD C:\Users\zoOky\Dropbox
2013-11-10 10:38 - 2013-04-27 18:19 - 00000000 ____D C:\Users\zoOky\AppData\Roaming\Dropbox
2013-11-10 10:38 - 2012-12-27 20:07 - 00030528 _____ C:\Windows\GVTDrv64.sys
2013-11-10 10:38 - 2012-12-27 11:35 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2013-11-10 10:38 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-09 18:40 - 2013-01-07 22:08 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3474958773-3223843518-2572617103-1001Core.job
2013-11-09 11:14 - 2013-11-09 11:12 - 182549774 _____ C:\Users\zoOky\Downloads\Die_111_besten_Multi-Monitoring-Wallpaper.zip
2013-11-08 16:44 - 2012-12-21 20:22 - 00000000 ____D C:\Users\zoOky\AppData\Local\PMB Files
2013-11-08 16:44 - 2012-12-21 20:22 - 00000000 ____D C:\ProgramData\PMB Files
2013-11-08 16:09 - 2012-12-17 20:47 - 00000000 ____D C:\Users\zoOky\AppData\Roaming\Xfire
2013-11-08 14:31 - 2013-11-08 14:31 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-08 14:31 - 2013-11-08 14:31 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-08 14:31 - 2013-11-08 14:31 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-08 14:31 - 2013-11-08 14:31 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-11-08 14:31 - 2013-11-08 14:28 - 00000000 ____D C:\ProgramData\Oracle
2013-11-08 14:30 - 2013-11-08 14:30 - 00000000 ____D C:\Program Files\Java
2013-11-08 14:28 - 2013-11-08 14:28 - 30694824 _____ (Oracle Corporation) C:\Users\zoOky\Downloads\jre-7u45-windows-x64(1).exe
2013-11-08 14:27 - 2013-11-08 14:27 - 30694824 _____ (Oracle Corporation) C:\Users\zoOky\Downloads\jre-7u45-windows-x64.exe
2013-11-08 00:03 - 2013-05-01 11:43 - 00000000 ____D C:\Users\zoOky\AppData\Roaming\Spotify
2013-11-07 15:02 - 2013-05-01 11:43 - 00000000 ____D C:\Users\zoOky\AppData\Local\Spotify
2013-11-07 13:48 - 2012-12-17 20:47 - 00000000 ____D C:\ProgramData\Xfire
2013-10-31 14:31 - 2012-12-18 16:34 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-10-31 14:31 - 2012-12-17 21:23 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-10-31 14:31 - 2012-12-17 21:23 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-10-31 14:24 - 2012-12-17 21:23 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-10-31 14:23 - 2013-10-31 14:21 - 00000000 ____D C:\Users\zoOky\Documents\Battlefield 3
2013-10-30 15:34 - 2013-10-30 15:34 - 00000000 ____D C:\Users\zoOky\AppData\Roaming\Guild Wars 2
2013-10-30 15:34 - 2012-12-24 15:24 - 00000000 ____D C:\Users\zoOky\Documents\Guild Wars 2
2013-10-30 15:32 - 2009-07-14 06:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-30 10:58 - 2013-10-30 10:58 - 08945660 _____ C:\Users\zoOky\Downloads\pcsx2-1.0.0-r5350-setup.exe
2013-10-30 10:58 - 2013-10-30 10:58 - 00000788 _____ C:\Users\Public\Desktop\PCSX2 1.0.0 (r5350).lnk
2013-10-30 10:58 - 2013-09-03 10:58 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-10-30 10:09 - 2013-02-11 17:10 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-30 10:09 - 2012-12-17 20:47 - 00000000 ____D C:\ProgramData\Skype
2013-10-30 10:07 - 2012-12-17 20:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-29 22:05 - 2013-10-29 22:05 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-10-29 22:05 - 2013-09-18 00:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-29 22:04 - 2013-10-29 22:04 - 23123208 _____ (Mozilla) C:\Users\zoOky\Downloads\Firefox_Setup_25.0.exe
2013-10-25 02:02 - 2013-11-01 17:09 - 00000000 ____D C:\Users\zoOky\Desktop\kkkkaaaayyyy
2013-10-20 17:16 - 2013-10-20 17:16 - 00000849 _____ C:\Users\Public\Desktop\Battlefield 3.lnk
2013-10-20 11:03 - 2012-12-29 18:10 - 00000000 ____D C:\Windows\system32\appmgmt
2013-10-20 11:03 - 2012-12-18 20:01 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-10-20 11:00 - 2012-12-30 20:29 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\etdrv.sys
2013-10-20 10:58 - 2012-12-18 16:29 - 00000000 ____D C:\Users\zoOky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-10-20 10:56 - 2013-10-20 10:56 - 00002582 _____ C:\Windows\System32\Tasks\GlaryInitialize
2013-10-20 10:56 - 2013-10-20 10:56 - 00000703 _____ C:\Users\zoOky\Desktop\Glary Utilities.lnk
2013-10-20 10:52 - 2013-02-15 19:07 - 00000000 ____D C:\Users\zoOky\AppData\Roaming\DAEMON Tools Lite
2013-10-20 10:52 - 2012-12-18 05:23 - 00000000 ____D C:\Windows\Panther
2013-10-20 10:51 - 2013-10-20 10:51 - 00002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-10-20 10:48 - 2012-12-17 21:10 - 00000000 ____D C:\Program Files\Creative
2013-10-20 10:47 - 2013-10-18 08:03 - 00000000 ____D C:\Program Files (x86)\SqueakyChocolate
2013-10-20 10:47 - 2012-12-17 20:45 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-20 10:46 - 2013-10-20 10:46 - 06685392 _____ (Glarysoft Ltd ) C:\Users\zoOky\Downloads\gusetup_slim_2.56.exe
2013-10-19 16:40 - 2013-10-19 16:40 - 00130673 _____ C:\Users\zoOky\Downloads\Ps2_Save_Builder_0.8x.zip
2013-10-19 16:37 - 2013-10-19 16:37 - 00012559 _____ C:\Users\zoOky\Downloads\state1.zip
2013-10-18 15:48 - 2012-12-17 20:30 - 00000000 ____D C:\Users\zoOky
2013-10-18 08:03 - 2013-10-18 08:03 - 00000000 ____D C:\Users\zoOky\Documents\Add-in Express
2013-10-18 08:00 - 2013-10-18 08:00 - 00000000 ____D C:\Users\zoOky\Documents\PC Speed Maximizer
2013-10-18 07:55 - 2013-10-18 07:55 - 00000000 _____ C:\END
2013-10-14 13:42 - 2013-10-14 13:40 - 00000000 ____D C:\Users\zoOky\Documents\Battlefield 4 Beta
2013-10-13 22:27 - 2013-07-13 15:55 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-13 16:39 - 2013-01-07 22:08 - 00004090 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3474958773-3223843518-2572617103-1001UA
2013-10-13 16:39 - 2013-01-07 22:08 - 00003694 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3474958773-3223843518-2572617103-1001Core
2013-10-12 09:31 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-10-11 12:50 - 2009-07-14 05:45 - 00477488 _____ C:\Windows\system32\FNTCACHE.DAT
Some content of TEMP:
====================
C:\Users\zoOky\AppData\Local\Temp\i4jdel0.exe
C:\Users\zoOky\AppData\Local\Temp\uninst1.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2012-12-22 11:12] - [2010-04-11 23:03] - 2870272 ____A (Microsoft Corporation) EE79A736D8ACF23A080FC00E36486C98
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-31 09:39
==================== End Of Log ============================
--- --- ---
--- --- --- Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2013
Ran by zoOky at 2013-11-10 17:38:33
Running from C:\Users\zoOky\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Bitdefender Antivirus (Enabled - Up to date) {9B5F5313-CAF9-DD97-C460-E778420237B4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {203EB2F7-ECC3-D219-FED0-DC0A39857D09}
==================== Installed Programs ======================
@BIOS (x32 Version: 2.28)
«Fifa Manager 2013» 1.0.0.0 (x32 Version: 1.0.0.0)
Adobe AIR (x32 Version: 3.2.0.2070)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Aion (x32 Version: 1.0.0.2)
AION Free-to-Play Version 1.0 (x32 Version: 1.0)
AMD Accelerated Video Transcoding (Version: 12.10.100.30328)
AMD APP SDK Runtime (Version: 10.0.1084.4)
AMD Catalyst Install Manager (Version: 8.0.911.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Media Foundation Decoders (Version: 1.0.80328.2204)
AMD Wireless Display v3.0 (Version: 1.0.0.10)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Battlefield 3™ (x32 Version: 1.6.0.0)
Battlefield 4™ Beta (x32 Version: 1.0.0.0)
Battlelog Web Plugins (x32 Version: 2.3.0)
Bitdefender Antivirus Plus (Version: 17.15.0.682)
Bonjour (Version: 3.0.0.10)
CABAL Online Europe (Europe) (x32)
Call of Duty: Modern Warfare 3 - Multiplayer (x32)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2013.0328.2218.38225)
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0328.2218.38225)
Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225)
Catalyst Control Center Localization All (x32 Version: 2013.0328.2218.38225)
CCC Help Chinese Standard (x32 Version: 2013.0328.2217.38225)
CCC Help Chinese Traditional (x32 Version: 2013.0328.2217.38225)
CCC Help Czech (x32 Version: 2013.0328.2217.38225)
CCC Help Danish (x32 Version: 2013.0328.2217.38225)
CCC Help Dutch (x32 Version: 2013.0328.2217.38225)
CCC Help English (x32 Version: 2013.0328.2217.38225)
CCC Help Finnish (x32 Version: 2013.0328.2217.38225)
CCC Help French (x32 Version: 2013.0328.2217.38225)
CCC Help German (x32 Version: 2013.0328.2217.38225)
CCC Help Greek (x32 Version: 2013.0328.2217.38225)
CCC Help Hungarian (x32 Version: 2013.0328.2217.38225)
CCC Help Italian (x32 Version: 2013.0328.2217.38225)
CCC Help Japanese (x32 Version: 2013.0328.2217.38225)
CCC Help Korean (x32 Version: 2013.0328.2217.38225)
CCC Help Norwegian (x32 Version: 2013.0328.2217.38225)
CCC Help Polish (x32 Version: 2013.0328.2217.38225)
CCC Help Portuguese (x32 Version: 2013.0328.2217.38225)
CCC Help Russian (x32 Version: 2013.0328.2217.38225)
CCC Help Spanish (x32 Version: 2013.0328.2217.38225)
CCC Help Swedish (x32 Version: 2013.0328.2217.38225)
CCC Help Thai (x32 Version: 2013.0328.2217.38225)
CCC Help Turkish (x32 Version: 2013.0328.2217.38225)
ccc-utility64 (Version: 2013.0328.2218.38225)
CCleaner (Version: 4.07)
Core Temp 1.0 RC4 (Version: 1.0)
Counter-Strike: Global Offensive (x32)
CPUID CPU-Z 1.62
Creative Audio-Systemsteuerung (x32 Version: 2.00)
Creative Konsole Starter (x32)
Creative Software AutoUpdate (x32 Version: 1.40)
DAEMON Tools Lite (x32 Version: 4.46.1.0327)
Dead Space™ 3 (x32 Version: 1.0.0.0)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition
Diablo III (x32 Version: 1.0.8.16603)
DMC Devi May Cry (c) Capcom version 1 (x32 Version: 1)
Dropbox (HKCU Version: 2.0.22)
Easy Tune 6 B12.1121.1 (x32 Version: 1.00.0000)
ESET Online Scanner v3 (x32)
ESN Sonar (x32 Version: 0.70.4)
FIFA 14 Demo (x32 Version: 1.0.0.0)
Free YouTube to MP3 Converter version 3.11.37.1212 (x32 Version: 3.11.37.1212)
Gameforge Live 1.0 "Legend" (x32 Version: 1.1.1724)
Glary Utilities 2.56.0.1822 (x32 Version: 2.56.0.1822)
Google Chrome (HKCU Version: 30.0.1599.101)
Guild Wars 2 (x32)
HTC BMP USB Driver (x32 Version: 1.0.5375)
HTC Driver Installer (x32 Version: 4.3.0.001)
HTC Sync (x32 Version: 3.3.7)
HTC Sync Manager (x32 Version: 2.1.54.0)
ImgBurn (x32 Version: 2.5.7.0)
IPTInstaller (x32 Version: 4.0.8)
iTunes (Version: 11.0.4.4)
Java 7 Update 25 (x32 Version: 7.0.250)
Java 7 Update 45 (64-bit) (Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.5)
League of Legends (x32 Version: 1.3)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Mouse and Keyboard Center (Version: 2.1.177.0)
Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017)
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017)
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017)
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017)
Mirror's Edge™ (x32 Version: 1.0.1.0)
Mozilla Firefox 25.0 (x86 de) (x32 Version: 25.0)
Mozilla Maintenance Service (x32 Version: 25.0)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
NCSOFT Game Launcher (x32)
NCsoft Launcher (x32 Version: 1.5.19002)
Need for Speed™ Most Wanted (x32 Version: 1.5.0.0)
NVIDIA PhysX v8.10.17 (x32 Version: 8.10.17)
OpenAL (x32)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
Origin (x32 Version: 9.1.3.2637)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017)
PakkISO 0.4 (x32 Version: PakkISO 0.4 by zorted, installer by BitLooter)
Pando Media Booster (x32 Version: 2.6.0.8)
PCSX2 - Playstation 2 Emulator (x32)
PunkBuster Services (x32 Version: 0.991)
Rainmeter (x32 Version: 2.4 r1678)
Razer Comms (x32)
Razer Core (x32 Version: 0.01.144)
Razer Imperator (x32 Version: 2.02.00)
RocketDock 1.3.5 (x32)
Sapphire TRIXX (x32)
Secure Download Manager (x32 Version: 3.1.10)
SimCity™ (x32 Version: 1.0.0.0)
Skype™ 6.9 (x32 Version: 6.9.106)
Smileys We Love Toolbar for IE (x32 Version: 3.0.17)
SpeedFan (remove only) (x32)
SplitCam (x32 Version: 5.14.4.1)
Spotify (HKCU Version: 0.9.4.185.g7545a404)
Steam (x32 Version: 1.0.0.0)
TeamSpeak 3 Client (HKCU Version: 3.0.13)
TERA (x32 Version: 18.10.03)
Theme Resource Changer X64 v1.0
TmNationsForever (x32)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.110)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.110)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
Update for Microsoft Access 2013 (KB2768008) 64-Bit Edition
Update for Microsoft InfoPath 2013 (KB2752078) 64-Bit Edition
Update for Microsoft Lync 2013 (KB2817621) 64-Bit Edition
Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition
Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition
Update for Microsoft Office 2013 (KB2737954) 64-Bit Edition
Update for Microsoft Office 2013 (KB2738038) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760242) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760257) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760267) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760539) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760553) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition
Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition
Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817309) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817311) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817314) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817316) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817493) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817626) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817640) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827225) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827228) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827230) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827235) 64-Bit Edition
Update for Microsoft OneNote 2013 (KB2810016) 64-Bit Edition
Update for Microsoft Outlook 2013 (KB2825632) 64-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2726947) 64-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2817625) 64-Bit Edition
Update for Microsoft Project 2013 (KB2767859) 64-Bit Edition
Update for Microsoft Publisher 2013 (KB2752097) 64-Bit Edition
Update for Microsoft SkyDrive Pro (KB2825633) 64-Bit Edition
Update for Microsoft Visio 2013 (KB2752018) 64-Bit Edition
Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition
Update for Microsoft Word 2013 (KB2817631) 64-Bit Edition
Update for Microsoft Word 2013 (KB2827218) 64-Bit Edition
UxStyle Core Beta (Version: 0.2.1.1)
Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1)
VLC media player 2.0.5 (Version: 2.0.5)
WinMerge 2.14.0 (x32 Version: 2.14.0)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
Xfire (x32)
==================== Restore Points =========================
10-11-2013 11:25:54 Removed Smileys We Love Toolbar for IE
10-11-2013 11:36:39 Removed Smileys We Love Toolbar for IE
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {05622429-4A19-4952-B2B2-6A6517C5A26D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3474958773-3223843518-2572617103-1001UA => C:\Users\zoOky\AppData\Local\Google\Update\GoogleUpdate.exe [2013-01-07] (Google Inc.)
Task: {0F0AEB0D-2F66-4F37-AFFC-7CB3681E8A09} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2012-05-29] ()
Task: {117A9638-FC0F-4C51-9922-634B569E9465} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10] (Adobe Systems Incorporated)
Task: {175BEC22-4A53-41DB-9EAA-FFDC3FFD1748} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {37F2675B-16C1-49FE-A5D8-35ADCFF8E5AD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {55AB4294-9210-480B-9FB5-006BFEBAD76D} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {6B26C148-6DC4-4D87-A088-360069B2092B} - System32\Tasks\Google Updater and Installer => C:\Users\zoOky\AppData\Local\Google\Update\GoogleUpdate.exe [2013-01-07] (Google Inc.)
Task: {715FE8C9-0B31-41FB-88A1-4B58A9A53FC5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {82FE0479-B4A5-4303-A20F-CEC53AAF5950} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {8B9735A0-E195-4F93-9575-F36A7C939B55} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {8EDA1BEC-CD67-480F-9B20-6F0C88C588C7} - System32\Tasks\Sapphire TRIXX => D:\Programme\Sapphire TRIXX\TRIXX.exe [2013-02-07] ()
Task: {9D98A4FC-FE39-4C6D-A29E-A3324297D584} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {9EA78E21-A6AF-4865-A977-69FAB038148F} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {9EC9D126-B639-4B97-9201-E99A5E2B34ED} - System32\Tasks\GlaryInitialize => D:\Programme\Glary Utilities\initialize.exe [2013-05-27] (Glarysoft Ltd)
Task: {A8FC602F-62C7-42DC-8E17-A4047095804E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {B3A8506E-21D6-4D88-8547-079285BCCDAD} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {B49A1B05-9181-40DB-A801-38ECE8D2D046} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-09-09] (TuneUp Software)
Task: {D01F3F7A-6DA6-4AFD-ACCB-75CEF18B518A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3474958773-3223843518-2572617103-1001Core => C:\Users\zoOky\AppData\Local\Google\Update\GoogleUpdate.exe [2013-01-07] (Google Inc.)
Task: {D11FB221-7F2D-4D46-8BF2-B54C9C667AD2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {F616E482-9F2A-4591-B2C8-6D3703298451} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\MouseKeyboardCenter.exe [2013-01-29] (Microsoft)
Task: {FDB2CF3E-4102-4FB7-8E06-DDE2F79DEB40} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GlaryInitialize.job => D:\Programme\Glary Utilities\initialize.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3474958773-3223843518-2572617103-1001Core.job => C:\Users\zoOky\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3474958773-3223843518-2572617103-1001UA.job => C:\Users\zoOky\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-08-20 18:43 - 2013-06-19 11:45 - 00265080 _____ () D:\Programme\Bitdefender\Bitdefender\txmlutil.dll
2012-11-04 15:25 - 2012-11-04 15:25 - 00736968 _____ () D:\Programme\Rainmeter.dll
2012-11-04 15:22 - 2012-11-04 15:22 - 00026624 _____ () D:\Programme\Plugins\InputText.dll
2013-10-02 17:43 - 2013-10-02 17:43 - 00101328 _____ () D:\Programme\Bitdefender\Bitdefender\bdmetrics.dll
2013-10-23 17:35 - 2013-10-23 17:35 - 00480296 _____ () D:\Programme\Bitdefender\Bitdefender\bdidntconp.dll
2013-09-04 14:11 - 2013-09-04 14:11 - 00201728 _____ () D:\Programme\Bitdefender\Bitdefender\UI\bdidntconp.ui
2013-01-28 13:08 - 2013-01-28 13:08 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-01-28 13:08 - 2013-01-28 13:08 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-08-15 15:40 - 2013-08-15 15:40 - 00030056 _____ () D:\Programme\HTC\DbAccess.dll
2013-08-15 15:41 - 2013-08-15 15:41 - 00607376 _____ () D:\Programme\HTC\sqlite3.dll
2013-08-15 15:41 - 2013-08-15 15:41 - 00044392 _____ () D:\Programme\HTC\NAdvLog.dll
2013-08-15 15:41 - 2013-08-15 15:41 - 00036216 _____ () D:\Programme\HTC\NFileCacheDBAccess.dll
2013-08-15 15:42 - 2013-08-15 15:42 - 00080248 _____ () D:\Programme\HTC\ninstallerhelper.dll
2013-08-15 15:49 - 2013-08-15 15:49 - 00223592 _____ () D:\Programme\HTC\DevConnMon.dll
2013-10-17 13:24 - 2013-10-17 13:24 - 00114336 _____ () D:\Programme\SplitCam\splitcam_hd_driver_ProxyPlugin.ax
2012-11-14 14:44 - 2012-11-14 14:44 - 02875463 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Normal.dll
2012-11-14 10:42 - 2012-11-14 10:42 - 00651331 _____ () C:\Program Files (x86)\GIGABYTE\ET6\work.dll
2012-09-17 16:25 - 2012-09-17 16:25 - 00106496 _____ () C:\Program Files (x86)\GIGABYTE\ET6\SF.dll
2008-05-07 15:22 - 2008-05-07 15:22 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\CIAMIB.dll
2012-05-08 15:01 - 2012-05-08 15:01 - 00069632 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GPTT.dll
2011-09-14 17:12 - 2011-09-14 17:12 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\ycc.dll
2010-06-24 15:50 - 2010-06-24 15:50 - 00094208 _____ () C:\Program Files (x86)\GIGABYTE\ET6\IccLibDll.dll
2011-03-01 19:00 - 2011-03-01 19:00 - 00126976 _____ () C:\Program Files (x86)\GIGABYTE\ET6\StabilityLib.dll
2011-10-18 09:26 - 2011-10-18 09:26 - 00024576 _____ () C:\Program Files (x86)\GIGABYTE\ET6\STT.dll
2012-11-14 14:00 - 2012-11-14 14:00 - 01499204 _____ () C:\Program Files (x86)\GIGABYTE\ET6\OCK.dll
2012-09-18 14:45 - 2012-09-18 14:45 - 01335362 _____ () C:\Program Files (x86)\GIGABYTE\ET6\HM.dll
2012-11-09 16:51 - 2012-11-09 16:51 - 01429582 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GVTunner.dll
2003-02-14 14:11 - 2003-02-14 14:11 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Sound.dll
2010-06-10 15:52 - 2010-06-10 15:52 - 00110592 _____ () C:\Program Files (x86)\GIGABYTE\ET6\AMD8.dll
2010-03-12 05:40 - 2010-03-12 05:40 - 04449632 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Platform.dll
2010-03-12 05:40 - 2010-03-12 05:40 - 00423256 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Device.dll
2012-11-20 17:38 - 2012-11-20 17:38 - 00311296 _____ () C:\Program Files (x86)\GIGABYTE\ET6\MFCCPU.DLL
2013-03-25 19:34 - 2007-09-02 13:57 - 00069632 _____ () D:\Programme\RocketDock\RocketDock.dll
2013-03-25 13:23 - 2013-10-24 18:45 - 00691200 _____ () D:\Games\STEAM\SDL2.dll
2013-01-01 15:24 - 2013-10-30 20:25 - 01123240 _____ () D:\Games\STEAM\bin\chromehtml.DLL
2013-01-01 15:24 - 2013-10-23 21:07 - 20625832 _____ () D:\Games\STEAM\bin\libcef.dll
2013-01-01 15:24 - 2013-06-15 00:49 - 01100800 _____ () D:\Games\STEAM\bin\avcodec-53.dll
2013-01-01 15:24 - 2013-06-15 00:49 - 00124416 _____ () D:\Games\STEAM\bin\avutil-51.dll
2013-01-01 15:24 - 2013-06-15 00:49 - 00192000 _____ () D:\Games\STEAM\bin\avformat-53.dll
2013-10-17 13:24 - 2013-10-17 13:24 - 00153760 _____ () D:\Programme\SplitCam\SplitCamFilter.ax
2013-07-02 05:36 - 2013-07-02 05:36 - 02088960 _____ () D:\Programme\SplitCam\opencv_core246.dll
2013-07-02 05:37 - 2013-07-02 05:37 - 01905664 _____ () D:\Programme\SplitCam\opencv_imgproc246.dll
2013-07-02 05:37 - 2013-07-02 05:37 - 02092544 _____ () D:\Programme\SplitCam\opencv_highgui246.dll
2013-08-20 18:43 - 2013-06-19 11:44 - 00204280 _____ () D:\Programme\Bitdefender\Bitdefender\antispam32\txmlutil.dll
2013-03-13 21:48 - 2013-03-13 21:48 - 24978944 _____ () C:\Users\zoOky\AppData\Roaming\Dropbox\bin\libcef.dll
2012-12-17 21:10 - 2006-06-09 15:20 - 00003072 _____ () C:\Windows\system32\CTXFIGER.DLL
2012-12-17 21:10 - 2009-03-26 14:46 - 00148480 _____ () C:\Windows\SysWOW64\APOMngr.DLL
2013-05-19 15:31 - 2013-11-10 10:39 - 00013600 _____ () C:\Users\zoOky\AppData\Roaming\Yontoo\dat\Desktop.OS.Plugin.dll
2013-09-18 00:36 - 2013-10-26 02:53 - 03368048 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-10-10 13:20 - 2013-10-10 13:20 - 16233864 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll
2013-04-04 09:38 - 2013-10-01 15:41 - 00230376 _____ () D:\Programme\TS\soundbackends\directsound_win32.dll
2013-04-04 09:38 - 2013-10-01 15:41 - 00237032 _____ () D:\Programme\TS\soundbackends\windowsaudiosession_win32.dll
2013-04-04 09:38 - 2013-10-01 15:41 - 00159208 _____ () D:\Programme\TS\plugins\appscanner_plugin.dll
2013-04-04 09:38 - 2013-10-01 15:41 - 00431080 _____ () D:\Programme\TS\plugins\clientquery_plugin.dll
2013-10-01 15:41 - 2013-10-01 15:41 - 00555496 _____ () D:\Programme\TS\plugins\teamspeak_control_plugin.dll
2013-03-03 21:51 - 2012-10-01 12:36 - 20452352 _____ () D:\Games\TERA\libcef.dll
2013-03-03 21:51 - 2013-04-23 08:45 - 00115240 _____ () D:\Games\TERA\CopyCub.dll
2013-03-03 22:59 - 2013-10-17 09:36 - 20645216 _____ () D:\Games\TERA\Client\Binaries\awesomium.dll
2013-03-03 22:59 - 2013-10-17 09:36 - 00166992 _____ () D:\Games\TERA\Client\Binaries\PhysXExtensions.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Users\zoOky\Downloads\ccsetup407(1).exe:BDU
AlternateDataStreams: C:\Users\zoOky\Downloads\ccsetup407.exe:BDU
AlternateDataStreams: C:\Users\zoOky\Downloads\esetsmartinstaller_enu.exe:BDU
AlternateDataStreams: C:\Users\zoOky\Downloads\Firefox_Setup_25.0.exe:BDU
AlternateDataStreams: C:\Users\zoOky\Downloads\FRST64.exe:BDU
AlternateDataStreams: C:\Users\zoOky\Downloads\gusetup_slim_2.56.exe:BDU
AlternateDataStreams: C:\Users\zoOky\Downloads\HiJackThis204.exe:BDU
AlternateDataStreams: C:\Users\zoOky\Downloads\jre-7u45-windows-x64(1).exe:BDU
AlternateDataStreams: C:\Users\zoOky\Downloads\jre-7u45-windows-x64.exe:BDU
AlternateDataStreams: C:\Users\zoOky\Downloads\mbam-setup-1.75.0.1300.exe:BDU
AlternateDataStreams: C:\Users\zoOky\Downloads\pcsx2-1.0.0-r5350-setup.exe:BDU
AlternateDataStreams: C:\Users\zoOky\Downloads\WindowsSetupBox.exe:BDU
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/10/2013 01:14:59 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (11/10/2013 00:42:04 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (11/10/2013 00:42:02 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (11/10/2013 00:37:31 PM) (Source: MsiInstaller) (User: zoOky-PC)
Description: Product: Smileys We Love Toolbar for IE -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: _974FD6A7_FA08_4F5F_8F11_FD5D14F1680E, location: C:\Program Files (x86)\Smileys We Love Toolbar for IE\adxregistrator.exe, command: /uninstall="C:\Program Files (x86)\Smileys We Love Toolbar for IE\SmileysWeLoveToolbar.dll" /privileges=admin
Error: (11/10/2013 00:26:57 PM) (Source: MsiInstaller) (User: zoOky-PC)
Description: Product: Smileys We Love Toolbar for IE -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: _974FD6A7_FA08_4F5F_8F11_FD5D14F1680E, location: C:\Program Files (x86)\Smileys We Love Toolbar for IE\adxregistrator.exe, command: /uninstall="C:\Program Files (x86)\Smileys We Love Toolbar for IE\SmileysWeLoveToolbar.dll" /privileges=admin
Error: (11/10/2013 00:18:38 PM) (Source: MsiInstaller) (User: zoOky-PC)
Description: Product: Smileys We Love Toolbar for IE -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: _974FD6A7_FA08_4F5F_8F11_FD5D14F1680E, location: C:\Program Files (x86)\Smileys We Love Toolbar for IE\adxregistrator.exe, command: /uninstall="C:\Program Files (x86)\Smileys We Love Toolbar for IE\SmileysWeLoveToolbar.dll" /privileges=admin
Error: (11/10/2013 00:14:45 PM) (Source: MsiInstaller) (User: zoOky-PC)
Description: Product: Smileys We Love Toolbar for IE -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: _974FD6A7_FA08_4F5F_8F11_FD5D14F1680E, location: C:\Program Files (x86)\Smileys We Love Toolbar for IE\adxregistrator.exe, command: /uninstall="C:\Program Files (x86)\Smileys We Love Toolbar for IE\SmileysWeLoveToolbar.dll" /privileges=admin
Error: (11/10/2013 00:02:29 PM) (Source: MsiInstaller) (User: zoOky-PC)
Description: Product: Smileys We Love Toolbar for IE -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: _974FD6A7_FA08_4F5F_8F11_FD5D14F1680E, location: C:\Program Files (x86)\Smileys We Love Toolbar for IE\adxregistrator.exe, command: /uninstall="C:\Program Files (x86)\Smileys We Love Toolbar for IE\SmileysWeLoveToolbar.dll" /privileges=admin
Error: (11/10/2013 11:57:15 AM) (Source: MsiInstaller) (User: zoOky-PC)
Description: Product: Smileys We Love Toolbar for IE -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: _974FD6A7_FA08_4F5F_8F11_FD5D14F1680E, location: C:\Program Files (x86)\Smileys We Love Toolbar for IE\adxregistrator.exe, command: /uninstall="C:\Program Files (x86)\Smileys We Love Toolbar for IE\SmileysWeLoveToolbar.dll" /privileges=admin
Error: (11/10/2013 11:55:56 AM) (Source: MsiInstaller) (User: zoOky-PC)
Description: Product: Smileys We Love Toolbar for IE -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: _974FD6A7_FA08_4F5F_8F11_FD5D14F1680E, location: C:\Program Files (x86)\Smileys We Love Toolbar for IE\adxregistrator.exe, command: /uninstall="C:\Program Files (x86)\Smileys We Love Toolbar for IE\SmileysWeLoveToolbar.dll" /privileges=admin
System errors:
=============
Error: (11/10/2013 03:55:32 PM) (Source: Service Control Manager) (User: )
Description: The Peer Networking Grouping service depends on the Peer Name Resolution Protocol service which failed to start because of the following error:
%%-2140993535
Error: (11/10/2013 03:55:32 PM) (Source: Service Control Manager) (User: )
Description: The Peer Name Resolution Protocol service terminated with the following error:
%%-2140993535
Error: (11/10/2013 03:55:32 PM) (Source: Service Control Manager) (User: )
Description: The Peer Networking Grouping service depends on the Peer Name Resolution Protocol service which failed to start because of the following error:
%%-2140993535
Error: (11/10/2013 03:55:32 PM) (Source: Service Control Manager) (User: )
Description: The Peer Name Resolution Protocol service terminated with the following error:
%%-2140993535
Error: (11/10/2013 03:55:32 PM) (Source: PNRPSvc) (User: )
Description: 0x80630801
Error: (11/10/2013 03:55:32 PM) (Source: PNRPSvc) (User: )
Description: 0x80630801
Error: (11/10/2013 01:55:08 PM) (Source: VDS Basic Provider) (User: )
Description: Unexpected failure. Error code: 490@01010004
Error: (11/10/2013 01:55:03 PM) (Source: VDS Basic Provider) (User: )
Description: Unexpected failure. Error code: 490@01010004
Error: (11/10/2013 00:06:19 PM) (Source: Service Control Manager) (User: )
Description: The Peer Networking Grouping service depends on the Peer Name Resolution Protocol service which failed to start because of the following error:
%%-2140993535
Error: (11/10/2013 00:06:19 PM) (Source: Service Control Manager) (User: )
Description: The Peer Name Resolution Protocol service terminated with the following error:
%%-2140993535
Microsoft Office Sessions:
=========================
Error: (11/10/2013 01:14:59 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\zoOky\Downloads\esetsmartinstaller_enu.exe
Error: (11/10/2013 00:42:04 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\zoOky\Downloads\esetsmartinstaller_enu.exe
Error: (11/10/2013 00:42:02 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\zoOky\Downloads\esetsmartinstaller_enu.exe
Error: (11/10/2013 00:37:31 PM) (Source: MsiInstaller)(User: zoOky-PC)
Description: Product: Smileys We Love Toolbar for IE -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: _974FD6A7_FA08_4F5F_8F11_FD5D14F1680E, location: C:\Program Files (x86)\Smileys We Love Toolbar for IE\adxregistrator.exe, command: /uninstall="C:\Program Files (x86)\Smileys We Love Toolbar for IE\SmileysWeLoveToolbar.dll" /privileges=admin (NULL)(NULL)(NULL)(NULL)(NULL)
Error: (11/10/2013 00:26:57 PM) (Source: MsiInstaller)(User: zoOky-PC)
Description: Product: Smileys We Love Toolbar for IE -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: _974FD6A7_FA08_4F5F_8F11_FD5D14F1680E, location: C:\Program Files (x86)\Smileys We Love Toolbar for IE\adxregistrator.exe, command: /uninstall="C:\Program Files (x86)\Smileys We Love Toolbar for IE\SmileysWeLoveToolbar.dll" /privileges=admin (NULL)(NULL)(NULL)(NULL)(NULL)
Error: (11/10/2013 00:18:38 PM) (Source: MsiInstaller)(User: zoOky-PC)
Description: Product: Smileys We Love Toolbar for IE -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: _974FD6A7_FA08_4F5F_8F11_FD5D14F1680E, location: C:\Program Files (x86)\Smileys We Love Toolbar for IE\adxregistrator.exe, command: /uninstall="C:\Program Files (x86)\Smileys We Love Toolbar for IE\SmileysWeLoveToolbar.dll" /privileges=admin (NULL)(NULL)(NULL)(NULL)(NULL)
Error: (11/10/2013 00:14:45 PM) (Source: MsiInstaller)(User: zoOky-PC)
Description: Product: Smileys We Love Toolbar for IE -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: _974FD6A7_FA08_4F5F_8F11_FD5D14F1680E, location: C:\Program Files (x86)\Smileys We Love Toolbar for IE\adxregistrator.exe, command: /uninstall="C:\Program Files (x86)\Smileys We Love Toolbar for IE\SmileysWeLoveToolbar.dll" /privileges=admin (NULL)(NULL)(NULL)(NULL)(NULL)
Error: (11/10/2013 00:02:29 PM) (Source: MsiInstaller)(User: zoOky-PC)
Description: Product: Smileys We Love Toolbar for IE -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: _974FD6A7_FA08_4F5F_8F11_FD5D14F1680E, location: C:\Program Files (x86)\Smileys We Love Toolbar for IE\adxregistrator.exe, command: /uninstall="C:\Program Files (x86)\Smileys We Love Toolbar for IE\SmileysWeLoveToolbar.dll" /privileges=admin (NULL)(NULL)(NULL)(NULL)(NULL)
Error: (11/10/2013 11:57:15 AM) (Source: MsiInstaller)(User: zoOky-PC)
Description: Product: Smileys We Love Toolbar for IE -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: _974FD6A7_FA08_4F5F_8F11_FD5D14F1680E, location: C:\Program Files (x86)\Smileys We Love Toolbar for IE\adxregistrator.exe, command: /uninstall="C:\Program Files (x86)\Smileys We Love Toolbar for IE\SmileysWeLoveToolbar.dll" /privileges=admin (NULL)(NULL)(NULL)(NULL)(NULL)
Error: (11/10/2013 11:55:56 AM) (Source: MsiInstaller)(User: zoOky-PC)
Description: Product: Smileys We Love Toolbar for IE -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: _974FD6A7_FA08_4F5F_8F11_FD5D14F1680E, location: C:\Program Files (x86)\Smileys We Love Toolbar for IE\adxregistrator.exe, command: /uninstall="C:\Program Files (x86)\Smileys We Love Toolbar for IE\SmileysWeLoveToolbar.dll" /privileges=admin (NULL)(NULL)(NULL)(NULL)(NULL)
==================== Memory info ===========================
Percentage of memory in use: 87%
Total physical RAM: 8190.3 MB
Available physical RAM: 1007.89 MB
Total Pagefile: 16378.79 MB
Available Pagefile: 8939.58 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:119.24 GB) (Free:31.12 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:416.93 GB) (Free:53.78 GB) NTFS
Drive e: (Windows 7) (Fixed) (Total:48.83 GB) (Free:23.14 GB) NTFS
Drive g: (Metro: Last Light Disc2) (CDROM) (Total:0.6 GB) (Free:0 GB) UDF
Drive i: (15.0.4420.1017) (CDROM) (Total:0.76 GB) (Free:0 GB) UDF
Drive j: (VOLUME) (Fixed) (Total:297.94 GB) (Free:59.89 GB) FAT32
Drive k: (ESD-USB) (Removable) (Total:3.73 GB) (Free:0.66 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: 777EC869)
Partition 1: (Active) - (Size=119 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 8D243882)
Partition 1: (Not Active) - (Size=417 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=49 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 298 GB) (Disk ID: B986EA92)
Partition 1: (Not Active) - (Size=298 GB) - (Type=0C)
========================================================
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 4 GB) (Disk ID: 00000000)
Partition 1: (Active) - (Size=4 GB) - (Type=0B)
==================== End Of Log ============================
und der log vom eset: Code:
C:\Program Files (x86)\Yontoo\YontooIEClient.dll a variant of Win32/Adware.Yontoo.A application
C:\Program Files (x86)\Yontoo\YontooLayers.crx multiple threats
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll a variant of Win32/Adware.Yontoo.B application
C:\Users\All Users\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll a variant of Win32/Adware.Yontoo.B application
C:\Users\zoOky\Downloads\backups\backup-20131110-120025-761.dll a variant of Win32/Adware.Yontoo.A application
C:\Users\zoOky\Downloads\backups\backup-20131110-120133-760.dll a variant of Win32/Adware.Yontoo.A application
C:\Users\zoOky\Downloads\backups\backup-20131110-120158-494.dll a variant of Win32/Adware.Yontoo.A application
wie kann ich die jez löschen? :O |
FRST 32-Bit | FRST 64-Bit
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
