Justin2000 | 21.05.2014 15:52 | Falls noch einmal benötigt die neue Addition :) Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-05-2014
Ran by Margit at 2014-05-21 16:46:38
Running from C:\Users\Margit\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
1ClickMovieDownloader V6 (HKLM-x32\...\1ClickMovieDownloader V6) (Version: 1.30.153.0 - installdaddy) <==== ATTENTION
AC3Filter 2.6.0b (HKLM-x32\...\AC3Filter_is1) (Version: 2.6.0b - Alexander Vigovsky)
AddLyrics (HKLM-x32\...\addlyrics@addlyrics.net) (Version: - ) <==== ATTENTION
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.7.148 - Adobe Systems, Inc.)
Age of Wulin (HKLM-x32\...\{30B26714-3C49-4E6E-B236-3313B1257DE9}) (Version: 0.0.1.025 - gPotato)
Akamai NetSession Interface (HKCU\...\Akamai) (Version: - Akamai Technologies, Inc)
AMD Accelerated Video Transcoding (Version: 12.5.100.30429 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{047D5657-1DAC-2B16-E110-F4A9C0E7EF2C}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.0429.2313.39747 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.80430.0002 - Advanced Micro Devices, Inc.) Hidden
AMD VISION Engine Control Center (x32 Version: 2013.0429.2313.39747 - Ihr Firmenname) Hidden
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.11 Beta2 - Michael Tippach)
Ask Toolbar Updater (HKCU\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.2.6.44892 - Ask.com) <==== ATTENTION
AVG SafeGuard toolbar (HKLM-x32\...\AVG SafeGuard toolbar) (Version: 15.2.0.5 - AVG Technologies)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Avira Savings Advisor (HKLM-x32\...\{A18A516C-AA41-46A9-92DB-60208917E442}) (Version: 1.5.14 - Avira) <==== ATTENTION
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: - AVM Berlin)
Bandicam (HKLM-x32\...\Bandicam) (Version: 1.9.2.454 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0704.2139.36919 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.11 - Piriform)
Chromer (HKLM-x32\...\Chromer) (Version: 1.27.153.7 - David Rosenau)
DC-Bass Source 1.3.0 (HKLM-x32\...\DC-Bass Source) (Version: - )
Driver Genius Professional Edition (HKLM-x32\...\Driver Genius Professional Edition_is1) (Version: 10.0 - Driver-Soft Inc.)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)
FL Studio 11 (HKLM-x32\...\FL Studio 11) (Version: - Image-Line)
FlowStone FL 3.0 (HKLM-x32\...\FlowStone) (Version: - )
Freemake Audio Converter Version 1.1.0 (HKLM-x32\...\Freemake Audio Converter_is1) (Version: 1.1.0 - Ellora Assets Corporation)
Game Dev Tycoon (HKLM-x32\...\Steam App 239820) (Version: - Greenheart Games)
Gameforge Live 2.0.1 "Baby Genius" (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.1 - Gameforge)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.137 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
Gütertrennung XXL (HKLM-x32\...\{1A0D4C1A-56AB-460F-B9DD-B3E5A5CBB2E2}) (Version: - )
HDvid Codec V6.0 (HKLM-x32\...\HDvid Codec V6.0) (Version: 1.31.153.0 - installdaddy) <==== ATTENTION
High-Definition Video Playback (x32 Version: 7.1.13900.47.0 - Nero AG) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.9.216 - SurfRight B.V.)
HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.10.0.001 - HTC Corporation)
HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.0.52.0 - HTC)
HyperCam 3 (HKLM-x32\...\HyperCam 3 3.5.1210.30) (Version: 3.5.1210.30 - Solveig Multimedia)
IL Shared Libraries (HKLM-x32\...\IL Shared Libraries) (Version: - Image-Line)
Iminent (x32 Version: 6.44.21.0 - Iminent) Hidden <==== ATTENTION
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
Java 7 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417025FF}) (Version: 7.0.250 - Oracle)
Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version: - )
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Lightspark 0.5.3-git (HKLM-x32\...\Lightspark) (Version: 0.5.3-git - Lightspark Team)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.173 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.173 - LogMeIn, Inc.) Hidden
Loong Dragonblood (HKLM-x32\...\{BAE0CFD0-1598-4BC4-9AB3-BD2CF575EED9}) (Version: 2.5.12 - gamigo)
Lost Saga EU (HKLM-x32\...\LostSagaEU) (Version: - IO Entertainment Co., Ltd.)
MAGIX Music Maker MX Premium Download Version (Demo songs) (HKLM-x32\...\{8EA65889-2C9A-4A41-8DD9-531E156ACB48}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Music Maker MX Premium Download Version (HKLM-x32\...\MAGIX_MSI_mm18dlx) (Version: 18.0.0.42 - MAGIX AG)
MAGIX Music Maker MX Premium Download Version (Instrument package 1) (HKLM-x32\...\{17DD30CE-F0AF-4E46-97EE-DEDD59BD6FA0}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Music Maker MX Premium Download Version (Instrument package 3) (HKLM-x32\...\{4A61ACAF-29F5-4939-88DE-E2EF0647A4E7}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Music Maker MX Premium Download Version (Introductory videos) (HKLM-x32\...\{64669F87-F223-4668-8C66-4B2703F30A37}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Music Maker MX Premium Download Version (Sound package) (HKLM-x32\...\{5C19F599-20AD-4A27-8EB4-1B7121D4F603}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Music Maker MX Premium Download Version (Synthesizer and effects) (HKLM-x32\...\{83D6C933-0C42-4448-8A21-625AEE5B9FCB}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Music Maker MX Premium Download Version (Visuals) (HKLM-x32\...\{58ACDDC2-F83B-4BCF-92F2-E98180E7BEC8}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Music Maker MX Premium Download Version (x32 Version: 18.0.0.42 - MAGIX AG) Hidden
MAGIX Screenshare (HKLM-x32\...\{994359E8-D614-4CC6-84DB-415C27D2BA12}) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Speed burnR (MSI) (HKLM-x32\...\{EBCB66BD-328F-421C-96BA-8E66C7B69336}) (Version: 7.0.1.27 - MAGIX AG)
Media Buzz (HKLM-x32\...\MediaBuzzV1mode3625) (Version: 1.1 - Media Buzz)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20125.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyFreeCodec (HKCU\...\MyFreeCodec) (Version: - )
Nero 10 Movie ThemePack 1 (HKLM-x32\...\{43FBAB46-5969-4200-9958-1FF81FEE506F}) (Version: 10.2.10000.11.0 - Nero AG)
Nero 10 Movie ThemePack Basic (x32 Version: 10.2.10000.0.0 - Nero AG) Hidden
Nero BurnRights 10 (HKLM-x32\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.2.10500.1.102 - Nero AG)
Nero BurnRights 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero Control Center 10 (x32 Version: 10.2.11900.1.9 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.18400.9.0 - Nero AG) Hidden
Nero CoverDesigner 10 (HKLM-x32\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.2.11400.11.100 - Nero AG)
Nero CoverDesigner 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.2.10500.2.100 - Nero AG)
Nero DiscSpeed 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.2.11900.20.100 - Nero AG)
Nero Express 10 Help (CHM) (x32 Version: 10.5.10300 - Nero AG) Hidden
Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.2.10400.5.100 - Nero AG)
Nero InfoTool 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero MediaHub 10 (HKLM-x32\...\{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}) (Version: 1.2.13200.33.100 - Nero AG)
Nero MediaHub 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{ADEF1F0B-635E-4041-B50F-A510C1B4D2C5}) (Version: 10.5.10400 - Nero AG)
Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.2.10800.9.100 - Nero AG)
Nero RescueAgent 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.2.11600.14.100 - Nero AG)
Nero StartSmart 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.3.2 - Notepad++ Team)
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
OpenSource Flash Video Splitter 1.0.0.5 (HKLM-x32\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - )
osu! (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284C}) (Version: 0.0.0.0 - peppy)
PC Speed Maximizer v3.2 (HKLM-x32\...\PC Speed Maximizer_is1) (Version: 3.2 - SoftCity)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Pokki (HKCU\...\Pokki) (Version: 0.263.13.325 - Pokki)
Prime World Version 9.14.0 (HKLM-x32\...\{F6F3C462-2729-4555-8A95-CC317A90F8FF}_is1) (Version: 9.14.0 - Nival)
qualitink 2013.11.07.204414 (HKLM\...\qualitink) (Version: 2013.11.07.204414 - qualitink) <==== ATTENTION
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.46.610.2011 - Realtek)
Re-Markable (HKLM-x32\...\ee46287b-b694-4978-b95b-54e40c32b5a3) (Version: - Re-Markable Software) <==== ATTENTION
Rich Media View (HKLM-x32\...\RichMediaViewV1release393) (Version: 1.1 - Rich Media View) <==== ATTENTION
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.1.13105_7 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.1.13105_7 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.6.0 - SAMSUNG Electronics Co., Ltd.)
SavingsbullFilter (HKLM\...\{813BA625-B0FA-48D8-9B75-59759C88C219}) (Version: 1.0.0.0 - SavingsBull Filter) <==== ATTENTION
Skype Click to Call (HKLM-x32\...\{BB285C9F-C821-4770-8970-56C4AB52C87E}) (Version: 7.2.15747.10003 - Microsoft Corporation)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
SlimDrivers (HKLM-x32\...\{A5457401-D56A-43F2-9524-78E54A7FC07A}) (Version: 2.2.32705 - SlimWare Utilities, Inc.)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
SupTab (HKLM-x32\...\SupTab) (Version: 1.1.1.0 - ) <==== ATTENTION
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Update kb77600 (HKLM-x32\...\{79BB0733-58A2-486C-AA02-F9BAB929EFF8}) (Version: 1.0.0 - MSR)
Terraria (HKLM-x32\...\Steam App 105600) (Version: - Re-Logic)
The weDownload Manager (HKLM-x32\...\The weDownload Manager) (Version: 1.34.3.28 - weDownload) <==== ATTENTION
Torntv 2 (HKLM-x32\...\Torntv 2) (Version: 1.27.153.8 - installdaddy) <==== ATTENTION
Treiber-Studio 2013 (HKLM\...\{2D3471B9-8671-46F0-9947-4C0DB6234403}) (Version: 8.1.428 - Publish Data)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.221 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Update for Ultimate Codec (HKCU\...\DSite) (Version: - ) <==== ATTENTION
ValueApps (HKCU\...\ValueApps) (Version: 1.4.0.3 - Conduit) <==== ATTENTION
V-bates 2.0.0.438 (HKLM\...\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}_is1) (Version: 2.0.0.438 - Southstarco) <==== ATTENTION
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VO Package (HKLM-x32\...\VOPackage) (Version: 1.0.0.0 - ) <==== ATTENTION
Windows Utils (HKLM-x32\...\Windows Utils) (Version: - )
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
YouTube (HKCU\...\Pokki_d25e316a7812ebb3c4f8e18291ce53ba535b8659) (Version: 1.0.9.53204 - Pokki)
==================== Restore Points =========================
13-05-2014 06:35:42 Windows Update
14-05-2014 20:55:21 Windows Update
18-05-2014 17:00:30 Windows-Sicherung
21-05-2014 06:33:58 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {03EA357E-52D0-413D-8D49-E1F45E0A4E95} - System32\Tasks\{06818C6F-1EE9-4624-BF19-CF01A8F021B5} => C:\Users\Margit\Downloads\chromeinstall-7u21 (1).exe
Task: {0D6A0BA9-DF4E-4168-8AB5-2A3CA14209C1} - System32\Tasks\{2A83181E-E6A5-40A8-A1E7-0EDC4B1878FC} => C:\Program Files (x86)\Steam\Steam.exe [2014-05-19] (Valve Corporation)
Task: {12FAC780-5C45-4056-B59B-5714B9DB10A6} - System32\Tasks\QtraxPlayer => C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe [2013-01-24] (Microsoft Corporation)
Task: {2086350C-6F78-41D6-992F-CEE0BEAD9069} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe <==== ATTENTION
Task: {24723AB7-117D-437B-89F4-20634CDC8F09} - System32\Tasks\DLL-Files.Com Fixer_MONTHLY => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
Task: {27D18596-A4E7-49C1-8B22-1C09B93019FA} - System32\Tasks\{25E61622-D504-4687-8CA0-DB1AE11A2406} => C:\Program Files (x86)\Steam\Steam.exe [2014-05-19] (Valve Corporation)
Task: {3125A5D9-5466-4492-AB39-C3CC3275B630} - System32\Tasks\SlimDrivers Startup => C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe [2013-09-24] (SlimWare Utilities, Inc.)
Task: {32CEA7F6-400F-412C-BA89-FCF8AC776370} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-17] (Google Inc.)
Task: {333C954D-759E-44B8-8A20-DDFDE24FDC83} - System32\Tasks\{F80032B6-FD8B-4C37-B4C9-F1D860EE2A6E} => C:\Program Files (x86)\GameforgeLive\GameforgeLive.exe [2014-03-25] ()
Task: {335F54DC-ACDD-49E0-8BEC-3AFFE92FB3C6} - System32\Tasks\DealPly => C:\Users\Margit\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {3CD639F6-8AD5-4455-B0E4-320967B3959E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-13] (Adobe Systems Incorporated)
Task: {3EDC7B89-2598-47E3-A893-8654A5120A9E} - System32\Tasks\FF Watcher {9C240B47-73DD-4A6F-B0FE-B3D2076627A3} => C:\Program Files\V-bates\PrefHelper.exe [2014-01-28] ()
Task: {414285DD-F86E-4FCB-91B8-50E84BE70E7A} - System32\Tasks\{9ACF3A99-E37B-43E0-A2AD-257222583004} => C:\Program Files (x86)\Steam\Steam.exe [2014-05-19] (Valve Corporation)
Task: {4F8E87F8-2FF0-472C-BCD4-394B70671400} - System32\Tasks\DealPlyUpdate => C:\Program <==== ATTENTION
Task: {51367041-B77D-410F-AF6F-70B86CD7DEF0} - System32\Tasks\{12D0D921-EA07-4C9E-984C-D9DB7599421C} => C:\Program Files (x86)\Steam\Steam.exe [2014-05-19] (Valve Corporation)
Task: {57E857AC-D073-4F22-878D-3036530C67BC} - System32\Tasks\{127E358C-5CE0-4EC3-8BCE-A39481B22E42} => C:\Program Files (x86)\GameforgeLive\GameforgeLive.exe [2014-03-25] ()
Task: {597DEE36-BDBA-4B26-9FF6-A92D39DFDC16} - System32\Tasks\{25BCCB07-CC7E-41B9-883B-3186D30FAB59} => C:\Program Files (x86)\Steam\Steam.exe [2014-05-19] (Valve Corporation)
Task: {626F3468-8501-4E35-BFE2-45C98209441A} - System32\Tasks\RDReminder => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
Task: {6313AF1E-5AAB-424D-B3B2-BECBAC75A2DE} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe
Task: {81B2819A-2FD4-4C10-A88D-FECDB52F6DA8} - System32\Tasks\ASUS\ASUS RegRun Loader => C:\Program Files (x86)\ASUS\AASP\1.01.12\AsLoader.exe [2010-01-14] (ASUSTeK Computer Inc.)
Task: {8810F4D5-9B97-46B9-ABA0-BD7EDB9BED1B} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {8F1573B8-40CD-4F08-9747-4577890147F9} - System32\Tasks\{10699523-0978-4EEC-B551-6B7DFEBF3E5B} => C:\Program Files (x86)\Steam\Steam.exe [2014-05-19] (Valve Corporation)
Task: {9952CC9E-442F-4C72-8559-FD64B07CFAD6} - System32\Tasks\{749B462B-1FCA-4DAD-9483-A1A03E48C574} => C:\Program Files (x86)\GameforgeLive\GameforgeLive.exe [2014-03-25] ()
Task: {A47A0592-6656-4E9D-82FC-DB24584F8713} - System32\Tasks\DLL-Files.Com Fixer_Updates => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
Task: {B1FF468A-B952-47F5-A60C-5E0B4368198E} - System32\Tasks\GoogleUpdateTaskMachineCore1cf29862a32b79d => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-17] (Google Inc.)
Task: {B2D997F3-3C2B-4580-827C-8D10073AC37D} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3413827966-1155256820-1680526860-1000Core => C:\Users\Margit\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {B41DC9CA-413E-4BFC-ADAF-20114A8D82DB} - System32\Tasks\{891AAF44-5CAE-4B8A-931F-D71ADD64C53D} => C:\Program Files (x86)\Steam\Steam.exe [2014-05-19] (Valve Corporation)
Task: {B6D889B6-80B2-48A8-83E6-6480A4750064} - System32\Tasks\ea727281-8281-467f-bafd-cf5fb6f1777a-1 => C:\Program Files (x86)\The weDownload Manager\The weDownload Manager-codedownloader.exe <==== ATTENTION
Task: {B746A350-8CCC-44B0-A11C-ADACF1731324} - System32\Tasks\{38081923-7D7F-4245-AE6B-B3FD6CADCB7B} => C:\Program Files (x86)\GameforgeLive\GameforgeLive.exe [2014-03-25] ()
Task: {B7BDC3B0-800B-48A1-A1EC-6E182B7AB7BF} - System32\Tasks\{135D557F-798B-4B30-9EF1-83F4CB2E14BF} => C:\Program Files (x86)\GameforgeLive\GameforgeLive.exe [2014-03-25] ()
Task: {BCEA647A-F118-4805-A05B-DA46186DF91B} - System32\Tasks\{19C2391B-B695-4206-ACEC-CFC188BFEAB6} => C:\Users\Margit\Desktop\HGWC Bypass\HGWC Bypass.exe
Task: {C9ABA1C6-99DE-4D91-AEFD-9FFE2ACEF3E8} - System32\Tasks\PC Speed Maximizer Schedule => C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe
Task: {D424A41E-977B-4BC1-8465-571E3CAC97CE} - System32\Tasks\{CEED9F63-5F09-41F1-9A60-A21377CA528B} => C:\Users\Margit\Downloads\chromeinstall-7u21 (1).exe
Task: {D4A1E8FE-F77F-42B3-B38D-32D785A6D231} - System32\Tasks\{CA88250D-EDE0-415D-A7D9-80E1432B7A09} => C:\Program Files (x86)\Steam\Steam.exe [2014-05-19] (Valve Corporation)
Task: {D6FDA0FC-3C68-4B92-ACFE-0CEE5DFE361D} - System32\Tasks\{27FC4681-DE2C-4C93-A5B5-F85ADDA5CD22} => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2014-02-26] (LogMeIn Inc.)
Task: {DF5648D2-25DC-4486-8F81-58F34C2D1376} - System32\Tasks\{C5C32378-3A80-41C0-A496-CB252C3EF91D} => C:\Program Files (x86)\GameforgeLive\GameforgeLive.exe [2014-03-25] ()
Task: {F5DC1BEA-DC5E-4B37-91FC-D34DAEF58010} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-02-20] (Piriform Ltd)
Task: {F80EF664-B8BB-4371-AAA1-B250253DE11D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-17] (Google Inc.)
Task: {F8237811-A5CF-4425-B59D-3FAC773AB9D6} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3413827966-1155256820-1680526860-1000UA => C:\Users\Margit\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\1ClickMovieDownloader V6-chromeinstaller.job => C:\Program Files (x86)\1ClickMovieDownloader V6\1ClickMovieDownloader V6-chromeinstaller.exe
Task: C:\Windows\Tasks\1ClickMovieDownloader V6-updater.job => C:\Program Files (x86)\1ClickMovieDownloader V6\1ClickMovieDownloader V6-updater.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\ea727281-8281-467f-bafd-cf5fb6f1777a-1.job => C:\Program Files (x86)\The weDownload Manager\The weDownload Manager-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\FF Watcher {9C240B47-73DD-4A6F-B0FE-B3D2076627A3}.job => C:\Program Files\V-bates\PrefHelper.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf29862a32b79d.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HDvid Codec V6.0-chromeinstaller.job => C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\HDvid Codec V6.0-updater.job => C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\Re-Markable Update.job => C:\Program Files (x86)\Re-Markable\ReMarkableup.exe
Task: C:\Windows\Tasks\SlimDrivers Startup.job => C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
Task: C:\Windows\Tasks\Torntv 2-codedownloader.job => C:\Program Files (x86)\Torntv 2\Torntv 2-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Torntv 2-enabler.job => C:\Program Files (x86)\Torntv 2\Torntv 2-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Torntv 2-updater.job => C:\Program Files (x86)\Torntv 2\Torntv 2-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\VisualBee-chromeinstaller.job => C:\Program Files (x86)\VisualBee\VisualBee-chromeinstaller.exe
Task: C:\Windows\Tasks\VisualBee-codedownloader.job => C:\Program Files (x86)\VisualBee\VisualBee-codedownloader.exe
Task: C:\Windows\Tasks\VisualBee-enabler.job => C:\Program Files (x86)\VisualBee\VisualBee-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\VisualBee-firefoxinstaller.job => C:\Program Files (x86)\VisualBee\VisualBee-firefoxinstaller.exe
Task: C:\Windows\Tasks\VisualBee-updater.job => C:\Program Files (x86)\VisualBee\VisualBee-updater.exe
==================== Loaded Modules (whitelisted) =============
2014-01-19 01:39 - 2014-05-12 15:28 - 00664584 _____ () C:\Program Files (x86)\Movies Toolbar\SafetyNut\x64\safetycrt.dll
2013-04-29 23:25 - 2013-04-29 23:25 - 00211968 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2012-03-05 16:03 - 2012-03-05 16:03 - 00677376 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2012-02-16 14:53 - 2012-02-16 14:53 - 03642880 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2013-04-29 23:25 - 2013-04-29 23:25 - 00073728 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2013-10-17 15:27 - 2013-10-17 15:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2013-04-15 21:29 - 2013-09-15 08:42 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-16 17:06 - 2014-01-16 17:06 - 00167936 _____ () c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe
2013-11-20 12:34 - 2013-11-20 12:34 - 00317952 _____ () c:\Program Files\SavingsbullFilter\ProtocolFilters.dll
2013-11-20 12:35 - 2013-11-20 12:35 - 00110080 _____ () c:\Program Files\SavingsbullFilter\nfapi.dll
2014-03-26 13:43 - 2014-03-19 17:04 - 00017920 _____ () C:\Windows\Microsoft\System Update kb77600\WindowsUpdater.exe
2013-04-29 23:25 - 2013-04-29 23:25 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2013-06-18 15:49 - 2013-06-18 15:49 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-04-29 23:08 - 2013-04-29 23:08 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-03-24 11:32 - 2014-03-24 11:32 - 00821600 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
2013-11-07 22:44 - 2014-05-21 09:11 - 00317728 _____ () C:\Program Files (x86)\qualitink\updatequalitink.exe
2013-11-16 10:48 - 2014-05-21 08:38 - 00317728 _____ () C:\Program Files (x86)\qualitink\bin\utilqualitink.exe
2014-04-26 13:51 - 2014-04-24 12:29 - 00287008 _____ () C:\Program Files (x86)\qualitink\bin\qualitink.PurBrowse64.exe
2013-11-01 07:31 - 2013-11-01 07:31 - 02329928 _____ () C:\Users\Margit\AppData\Local\Pokki\ocdeskband_0.dll
2014-05-21 16:24 - 2014-05-21 02:56 - 00096544 _____ () C:\Program Files (x86)\qualitink\bin\qualitink.BrowserAdapter.exe
2014-02-20 17:07 - 2014-02-14 12:00 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-19 01:39 - 2014-05-12 15:28 - 00489992 _____ () C:\Program Files (x86)\Movies Toolbar\SafetyNut\safetycrt.dll
2014-03-24 11:31 - 2014-03-24 11:31 - 00031080 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll
2014-03-24 11:32 - 2014-03-24 11:32 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll
2014-03-24 11:32 - 2014-03-24 11:32 - 00059752 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll
2014-03-24 11:32 - 2014-03-24 11:32 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll
2014-03-24 11:32 - 2014-03-24 11:32 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll
2014-03-24 11:34 - 2014-03-24 11:34 - 00129376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll
2014-03-24 11:36 - 2014-03-24 11:36 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll
2014-01-19 01:39 - 2014-05-12 15:28 - 00020488 _____ () C:\Program Files (x86)\Movies Toolbar\SafetyNut\safetyldr.dll
2014-03-26 13:43 - 2014-03-19 17:04 - 00026112 _____ () C:\Windows\Microsoft\System Update kb77600\Installer.dll
2014-03-26 13:43 - 2014-05-21 08:29 - 00086528 _____ () C:\Program Files (x86)\MSR\Privoxy\mgwz.dll
2014-05-01 11:59 - 2014-04-30 02:08 - 01135104 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll
2014-04-17 21:03 - 2014-04-30 02:08 - 00471552 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll
2014-05-01 11:59 - 2014-04-30 02:08 - 00404992 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll
2014-04-17 20:57 - 2014-04-30 02:08 - 00340992 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-04-17 20:57 - 2014-05-17 03:36 - 00756224 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-05-01 11:59 - 2014-04-29 02:37 - 02198720 _____ () C:\Program Files (x86)\Steam\video.dll
2014-05-01 11:59 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll
2014-04-17 20:57 - 2014-05-19 20:02 - 01145536 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-04-17 20:57 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-04-17 20:57 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2014-04-17 20:57 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2014-04-17 20:57 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2013-09-07 04:11 - 2013-09-07 04:11 - 00569856 _____ () C:\Users\Margit\AppData\Local\Pokki\Engine\ppGoogleNaClPluginChrome.dll
2013-09-07 04:11 - 2013-09-07 04:11 - 01400846 _____ () C:\Users\Margit\AppData\Local\Pokki\Engine\avcodec-54.dll
2013-09-07 04:11 - 2013-09-07 04:11 - 00151054 _____ () C:\Users\Margit\AppData\Local\Pokki\Engine\avutil-51.dll
2013-09-07 04:11 - 2013-09-07 04:11 - 00222734 _____ () C:\Users\Margit\AppData\Local\Pokki\Engine\avformat-54.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:07F6D9E4
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^bcbinit.vbs => C:\Windows\pss\bcbinit.vbs.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Margit^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.4.1.lnk => C:\Windows\pss\OpenOffice.org 3.4.1.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Margit^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Severe Weather Alerts App.lnk => C:\Windows\pss\Severe Weather Alerts App.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Margit^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Severe Weather Alerts.lnk => C:\Windows\pss\Severe Weather Alerts.lnk.Startup
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: Clownfish => "C:\Program Files (x86)\Clownfish\Clownfish.exe"
MSCONFIG\startupreg: FixMyRegistry => C:\Program Files (x86)\SmartTweak\FixMyRegistry\FixMyRegistry.exe /ot /as /ss
MSCONFIG\startupreg: FLV Player => C:\Users\Margit\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe
MSCONFIG\startupreg: GameforgeLive => "C:\Program Files (x86)\GameforgeLive\gfl_client.exe" -autostart
MSCONFIG\startupreg: GoogleChromeAutoLaunch_7D78684C04D130A2BFD725AA212F80C4 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: IminentMessenger => C:\Program Files (x86)\Iminent\Iminent.Messengers.exe
MSCONFIG\startupreg: KiesAirMessage => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
MSCONFIG\startupreg: Pokki => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
MSCONFIG\startupreg: SandboxieControl => "C:\Program Files\Sandboxie\SbieCtrl.exe"
MSCONFIG\startupreg: SDP => C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SpeedUpMyComputer => C:\Program Files (x86)\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe /ot /as /ss
MSCONFIG\startupreg: Spotify => "C:\Users\Margit\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Margit\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: uTorrent => "C:\Users\Margit\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
==================== Faulty Device Manager Devices =============
Name: hamachi
Description: hamachi
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (05/21/2014 04:45:23 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm adwcleaner_3.210.exe, Version 3.2.1.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1858
Startzeit: 01cf750164f8005d
Endzeit: 0
Anwendungspfad: C:\Users\Margit\Desktop\adwcleaner_3.210.exe
Berichts-ID: 88b9ce83-e0f6-11e3-b2c9-001f3f0b7467
System errors:
=============
Microsoft Office Sessions:
=========================
Error: (05/21/2014 04:45:23 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: adwcleaner_3.210.exe3.2.1.0185801cf750164f8005d0C:\Users\Margit\Desktop\adwcleaner_3.210.exe88b9ce83-e0f6-11e3-b2c9-001f3f0b7467 Die Neue FRST :) [/CODE]
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-05-2014
Ran by Margit (administrator) on JUSTIN-PC on 21-05-2014 16:45:59
Running from C:\Users\Margit\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Somoto LTD) C:\Program Files (x86)\Movies Toolbar\SafetyNut\SafetyNutManager.exe
() C:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe
(Somoto LTD) C:\Program Files (x86)\Movies Toolbar\SafetyNut\SafetyNutManager.exe
() C:\Windows\Microsoft\System Update kb77600\WindowsUpdater.exe
(The Privoxy team - Privoxy - Home Page) C:\Program Files (x86)\MSR\Privoxy\privoxy.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(DealPly Technologies Ltd) C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(SlimWare Utilities, Inc.) C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
(Smart PC Solutions) C:\Program Files (x86)\PC Speed Maximizer\SPMSmartScan.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Spotify Ltd) C:\Users\Margit\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Akamai Technologies, Inc.) C:\Users\Margit\AppData\Local\Akamai\netsession_win.exe
(Windows Net) C:\Users\Margit\AppData\Roaming\Windows Net Data\net.exe
(Pokki) C:\Users\Margit\AppData\Local\Pokki\Engine\pokki.exe
(Akamai Technologies, Inc.) C:\Users\Margit\AppData\Local\Akamai\netsession_win.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(Pokki) C:\Users\Margit\AppData\Local\Pokki\Engine\pokki.exe
(Somoto LTD) C:\Program Files (x86)\Movies Toolbar\SafetyNut\safetynut.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Program Files (x86)\qualitink\updatequalitink.exe
() C:\Program Files (x86)\qualitink\bin\utilqualitink.exe
() C:\Program Files (x86)\qualitink\bin\qualitink.PurBrowse64.exe
() C:\Program Files (x86)\qualitink\bin\qualitink.BrowserAdapter.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [1904640 2009-03-20] (AVM Berlin)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [1226928 2013-06-08] (AVG Secure Search)
HKLM-x32\...\Run: [tmp92DF] => wscript.exe //B "C:\Users\Margit\AppData\Roaming\tmp92DF.tmp.vbs"
HKLM-x32\...\Run: [tmp7F5F] => wscript.exe //B "C:\Users\Margit\AppData\Roaming\tmp7F5F.tmp.vbs"
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKU\S-1-5-21-3413827966-1155256820-1680526860-1000\...\Run: [tmp710D] => wscript.exe //B "C:\Users\Margit\AppData\Roaming\tmp710D.tmp.vbs"
HKU\S-1-5-21-3413827966-1155256820-1680526860-1000\...\Run: [tmp92DF] => wscript.exe //B "C:\Users\Margit\AppData\Roaming\tmp92DF.tmp.vbs"
HKU\S-1-5-21-3413827966-1155256820-1680526860-1000\...\Run: [tmp7F5F] => wscript.exe //B "C:\Users\Margit\AppData\Roaming\tmp7F5F.tmp.vbs"
HKU\S-1-5-21-3413827966-1155256820-1680526860-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1775808 2014-05-19] (Valve Corporation)
HKU\S-1-5-21-3413827966-1155256820-1680526860-1000\...\Run: [Spotify Web Helper] => C:\Users\Margit\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-13] (Spotify Ltd)
HKU\S-1-5-21-3413827966-1155256820-1680526860-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Margit\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3413827966-1155256820-1680526860-1000\...\RunOnce: [Application Restart #1] - C:\Users\Margit\AppData\Local\Pokki\Engine\pokki.exe [8252744 2013-11-01] (Pokki)
HKU\S-1-5-21-3413827966-1155256820-1680526860-1000\...\CurrentVersion\Windows: [Load] C:\Users\Margit\LOCALS~1\Temp\msaxvbua.scr <===== ATTENTION
HKU\S-1-5-21-3413827966-1155256820-1680526860-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x91000000
HKU\S-1-5-21-3413827966-1155256820-1680526860-1000\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-3413827966-1155256820-1680526860-1000\...\MountPoints2: {2bbf67ef-4872-11e2-abca-806e6f6e6963} - G:\pushinst.exe
HKU\S-1-5-21-3413827966-1155256820-1680526860-1000\...\MountPoints2: {56d2ac12-482c-11e2-b9a4-806e6f6e6963} - E:\Setup\Setup.exe
HKU\S-1-5-21-3413827966-1155256820-1680526860-1000\...\MountPoints2: {79c16e3d-9319-11e3-9d8b-001f3f0b7467} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3413827966-1155256820-1680526860-1000\...\MountPoints2: {90bbfc16-9f7a-11e3-a1e1-001f3f0b7467} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3413827966-1155256820-1680526860-1000\...\MountPoints2: {ba1eb395-7797-11e3-bf2e-001f3f0b7467} - G:\Startme.exe
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
Startup: C:\Users\Margit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Margit\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
HKLM\...\AppCertDlls: [x86] -> C:\Program Files (x86)\Movies Toolbar\SafetyNut\safetycrt.dll [489992 2014-05-12] ()
HKLM\...\AppCertDlls: [x64] -> C:\Program Files (x86)\Movies Toolbar\SafetyNut\x64\safetycrt.dll [664584 2014-05-12] ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:8118;https=127.0.0.1:8118
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Upgrade to Google Chrome
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = Delta Search
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = GIGA - Leidenschaft für Technik und Games
Software Downloads - die sichere Download Quelle - GIGA
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1391510627&from=amt&uid=HitachiXHDS721050CLA360_JP1572FR1P92PK1P92PKX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Awesomehp
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Awesomehp
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1391510627&from=amt&uid=HitachiXHDS721050CLA360_JP1572FR1P92PK1P92PKX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1391510627&from=amt&uid=HitachiXHDS721050CLA360_JP1572FR1P92PK1P92PKX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1391510627&from=amt&uid=HitachiXHDS721050CLA360_JP1572FR1P92PK1P92PKX&q={searchTerms}
URLSearchHook: HKCU - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1391510627&from=amt&uid=HitachiXHDS721050CLA360_JP1572FR1P92PK1P92PKX&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1391510627&from=amt&uid=HitachiXHDS721050CLA360_JP1572FR1P92PK1P92PKX&q={searchTerms}
SearchScopes: HKLM - {52db1893-8a90-4192-aede-08e00b8f8473} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=103&systemid=473&v=a12627-231&apn_uid=1409679344264255&apn_dtid=BND101&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=1005728233624163&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - 22EA1A12B3E24133B4CA4C7B0B813C8D URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP263FBD7A-DDBA-474A-BBD4-F66725079B11&q={searchTerms}
SearchScopes: HKCU - D69E9EE4B4C84532AC514227F15EED0C URL = hxxp://feed.snapdo.com/?publisher=VertiTechnologyYB&dpid=VertiTechnologyYB&co=DE&userid=44264814-f76a-4edf-a8dd-c26e4f5313e9&searchtype=ds&q={searchTerms}&installDate=01/01/1970
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {856F3102-7FB0-4CD9-A33C-C59566A25268} URL = hxxp://search.ividi.org/?q={searchTerms}&src=tbsp&id=ea1b6174000000000000001f3f0b7467&affilt=3&r=360
BHO: V-bates - {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} - C:\Program Files\V-bates\Extension64.dll ()
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: ValueApps - {93DBF2BB-A2B3-4683-A92E-57E60751F346} - C:\Program Files\Conduit\ValueApps\IE\ValueAppsLoader.dll (Conduit Ltd.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: V-bates - {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} - C:\Program Files\V-bates\Extension32.dll ()
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: flash-Enhancer - {5A60B6BB-FA81-4EFA-AB9C-A820E2143736} - C:\Program Files (x86)\AmiExt\flashEnhancer\ie\flashEnhancer.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: ValueApps - {93DBF2BB-A2B3-4683-A92E-57E60751F346} - C:\Program Files (x86)\Conduit\ValueApps\IE\ValueAppsLoader.dll No File
BHO-x32: Avira Savings Advisor BHO - {A18A516C-AA41-46A9-92DB-60208917E442} - C:\Program Files (x86)\avira\Internet Explorer\avira32.dll ()
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - No Name - {C424171E-592A-415A-9EB1-DFD6D95D3530} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default
FF user.js: detected! => C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\user.js
FF NetworkProxy: "type", 1);user_pref("network.proxy.http", "127.0.0.1");user_pref("network.proxy.http_port", 8118);user_pref("network.proxy.ssl", "127.0.0.1");user_pref("network.proxy.ssl_port", 8118);user_pref("extensions.autoDisableScopes", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1210150.dll No File
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.2.0\\npsitesafety.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.dpliveupdate.com/DealPlyLive Update;version=3 - C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.dpliveupdate.com/DealPlyLive Update;version=9 - C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll ( )
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Margit\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF SearchPlugin: C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\searchplugins\askcomsearch.xml
FF SearchPlugin: C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\searchplugins\BrowserDefender.xml
FF SearchPlugin: C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\searchplugins\iminent.xml
FF SearchPlugin: C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\searchplugins\ividi.xml
FF SearchPlugin: C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\searchplugins\MyStart Search.xml
FF SearchPlugin: C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\searchplugins\privitize.xml
FF SearchPlugin: C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\searchplugins\Search_Results.xml
FF SearchPlugin: C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\searchplugins\softonic.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\StartWeb.xml
FF Extension: hosts - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com [2013-09-27]
FF Extension: Plus-HD-2.2 - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com [2013-10-20]
FF Extension: VisualBee - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\67314b39-24e6-4f05-99f3-3f88c7cddd17@6c5fa560-13a3-4d42-8e90-53d9930111f9.com [2013-10-20]
FF Extension: MAegniPic - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\a5nh629uk@eymnswds-u.edu [2013-04-03]
FF Extension: Chromer - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\a79355a6-705c-4b6e-8e41-2b6ad7b74baa@e48c7a6f-59fc-4c7a-8b0b-cc3c270ee6a3.com [2013-06-23]
FF Extension: Amazon-Icon - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\amazon-icon@giga.de [2014-02-02]
FF Extension: Delta Toolbar - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\ffxtlbr@delta.com [2013-07-22]
FF Extension: Iminent Toolbar - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\ffxtlbr@iminent.com [2014-01-19]
FF Extension: incredibar.com - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\ffxtlbr@incredibar.com [2012-12-26]
FF Extension: Firefox Update Hotfix - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\firefox-hotfix@mozilla.org [2013-10-20]
FF Extension: qualitink - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\firefox@qualitink.net [2013-11-16]
FF Extension: No Name - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\staged [2014-02-02]
FF Extension: DealPly Shopping - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\{906000a4-88d9-4d52-b209-7a772970d91f} [2013-07-08]
FF Extension: Search-Results Toolbar - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\{f34c9277-6577-4dff-b2d7-7d58092f272f} [2013-01-19]
FF Extension: Firefox Update Hotfix - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\firefox-hotfix@mozilla.org.xpi [2013-10-20]
FF Extension: GoPhotoIt - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\gophoto@gophoto.it.xpi [2013-08-08]
FF Extension: Torntv 3 - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\trtv3@trtv.com.xpi [2013-06-30]
FF Extension: Iminent - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\Extensions\webbooster@iminent.com.xpi [2014-01-19]
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\Firefox
FF HKLM\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\IB Updater\Firefox
FF HKLM\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF Extension: V-bates - C:\Program Files\V-bates\Firefox [2014-03-26]
FF HKLM-x32\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\IB Updater\Firefox
FF HKLM-x32\...\Firefox\Extensions: [a5nh629uk@eymnswds-u.edu] - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\extensions\a5nh629uk@eymnswds-u.edu
FF Extension: MAegniPic - C:\Users\Margit\AppData\Roaming\Mozilla\Firefox\Profiles\qmvnd1sk.default\extensions\a5nh629uk@eymnswds-u.edu [2013-04-03]
FF HKLM-x32\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff
FF HKLM-x32\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF Extension: V-bates - C:\Program Files\V-bates\Firefox [2014-03-26]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaBuzzV1mode3625.net] - C:\Program Files (x86)\MediaBuzzV1\MediaBuzzV1mode3625\ff
FF Extension: Media Buzz - C:\Program Files (x86)\MediaBuzzV1\MediaBuzzV1mode3625\ff [2014-04-25]
FF HKLM-x32\...\Firefox\Extensions: [ext@RichMediaViewV1release393.net] - C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release393\ff
FF Extension: Rich Media View - C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release393\ff [2014-05-13]
FF HKCU\...\Firefox\Extensions: [addlyrics@addlyrics.net] - C:\Program Files (x86)\AddLyrics\FF\
FF Extension: Add Lyrics - C:\Program Files (x86)\AddLyrics\FF\ []
FF HKCU\...\Firefox\Extensions: [{4444b3b9-67e2-4ab0-b4b6-2ed87c311594}] - C:\Program Files (x86)\Re-Markable\150.xpi
FF Extension: Re-Markable - C:\Program Files (x86)\Re-Markable\150.xpi [2014-01-18]
Chrome:
=======
CHR HomePage: hxxp://www.search.ask.com/?o=APN10640A&gct=hp&d=473-103&v=a12627-231&t=4
CHR StartupUrls: "hxxp://www.search.ask.com/?o=APN10640A&gct=hp&d=473-103&v=a12627-231&t=4"
CHR DefaultSearchKeyword: ask.com
CHR DefaultSearchProvider: Ask.com
CHR DefaultSearchURL: hxxp://dts.search.ask.com/sr?src=crb&gct=ds&appid=103&systemid=473&v=a12627-231&apn_uid=1409679344264255&apn_dtid=BND101&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
CHR DefaultNewTabURL:
CHR Extension: (Google Drive) - C:\Users\Margit\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-27]
CHR Extension: (YouTube) - C:\Users\Margit\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-27]
CHR Extension: (Adblock Plus) - C:\Users\Margit\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-03-29]
CHR Extension: (Google-Suche) - C:\Users\Margit\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-27]
CHR Extension: (Google Wallet) - C:\Users\Margit\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR Extension: (Google Mail) - C:\Users\Margit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-27]
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [2014-03-27]
CHR HKCU\...\Chrome\Extension: [dapejillpcnbpfidhfkpidklcombbmel] - C:\Users\Margit\AppData\Local\CRE\dapejillpcnbpfidhfkpidklcombbmel.crx [2014-03-27]
CHR HKCU\...\Chrome\Extension: [leocdeigfnkaojcapikdjcdbedcjmffc] - C:\Users\Margit\AppData\Local\CRE\leocdeigfnkaojcapikdjcdbedcjmffc.crx [2013-07-27]
CHR HKLM-x32\...\Chrome\Extension: [cgbealecnakbhfoeeipcnoboempfkbjd] - C:\Program Files (x86)\AmiExt\flashEnhancer\ch\flashEnhancer.crx [2013-07-27]
CHR HKLM-x32\...\Chrome\Extension: [cojnmaaohncijldefpkpkkakjonfmgeb] - C:\Program Files (x86)\avira\Chrome\avira-1.5.14.crx [2013-12-11]
CHR HKLM-x32\...\Chrome\Extension: [dapejillpcnbpfidhfkpidklcombbmel] - C:\Users\Margit\AppData\Local\CRE\dapejillpcnbpfidhfkpidklcombbmel.crx [2013-12-11]
CHR HKLM-x32\...\Chrome\Extension: [ejdfidgapfiokiphmcjpmmjbdndepoja] - C:\Program Files (x86)\Re-Markable\150.crx [2014-01-18]
CHR HKLM-x32\...\Chrome\Extension: [hfimjncgpflkpkhbnnblhblobjjjhjhd] - C:\Program Files (x86)\qualitink\hfimjncgpflkpkhbnnblhblobjjjhjhd.crx [2014-01-18]
CHR HKLM-x32\...\Chrome\Extension: [jpfpfhlafnadialopcnmpnnonkoncnej] - C:\Program Files (x86)\MediaBuzzV1\MediaBuzzV1mode3625\ch\MediaBuzzV1mode3625.crx [2014-04-24]
CHR HKLM-x32\...\Chrome\Extension: [leocdeigfnkaojcapikdjcdbedcjmffc] - C:\Users\Margit\AppData\Local\CRE\leocdeigfnkaojcapikdjcdbedcjmffc.crx [2013-07-27]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
CHR HKLM-x32\...\Chrome\Extension: [ljkcijnbckdflhifmbnfnkjacokloacf] - C:\Program Files (x86)\qualitink\ljkcijnbckdflhifmbnfnkjacokloacf.crx [2014-04-11]
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\Margit\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2014-02-02]
CHR HKLM-x32\...\Chrome\Extension: [oeajfgfbfkoagohfgaimemkippdnedli] - C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release393\ch\RichMediaViewV1release393.crx [2014-05-13]
CHR HKLM-x32\...\Chrome\Extension: [pfmopbbadnfoelckkcmjjeaaegjpjjbk] - C:\Program Files (x86)\Gophoto.it\gophotoit16.crx [2013-08-08]
CHR HKLM-x32\...\Chrome\Extension: [pkndmigholgfjlniaohblojbhgjbkakn] - C:\Users\Margit\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv2.crx [2014-02-04]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-04-29] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-14] (Avira Operations GmbH & Co. KG)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [96896 2009-12-29] (ASUSTeK Computer Inc.)
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [368640 2009-03-20] (AVM Berlin)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [127752 2014-03-28] (SurfRight B.V.)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-11-18] (Nero AG)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-26] (LogMeIn, Inc.)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-09-15] ()
R2 SafetyNutManager; C:\Program Files (x86)\Movies Toolbar\SafetyNut\SafetyNutManager.exe [3544072 2014-05-12] (Somoto LTD)
R2 SavingsbullFilterService64; c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe [167936 2014-01-16] ()
R2 System Update kb77600; C:\Windows\Microsoft\System Update kb77600\WindowsUpdater.exe [17920 2014-03-19] ()
R2 Update qualitink; C:\Program Files (x86)\qualitink\updatequalitink.exe [317728 2014-05-21] ()
R2 Util qualitink; C:\Program Files (x86)\qualitink\bin\utilqualitink.exe [317728 2014-05-21] ()
S2 V-bates Updater; C:\Program Files\V-bates\ExtensionUpdaterService.exe [209408 2014-01-28] ()
S2 TuneUp.UtilitiesSvc; "C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe" [X]
==================== Drivers (Whitelisted) ====================
R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-25] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-07] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-02-14] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-06-08] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-02-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-14] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2009-03-20] (AVM Berlin)
S3 drvr; C:\Windows\SysWOW64\drivers\drvr.sys [8704 2010-03-09] ()
R1 F06DEFF2-5B9C-490D-910F-35D3A91196222; C:\Program Files (x86)\Movies Toolbar\SafetyNut\x64\configmgrc1.cfg [36224 2014-05-12] (Somoto LTD)
R3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2009-03-20] (AVM GmbH)
S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-18] ()
R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-05-21] ()
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)
R1 {50c078f1-4117-4aad-852a-0b3bbfb46b18}Gw64; C:\Windows\System32\drivers\{50c078f1-4117-4aad-852a-0b3bbfb46b18}Gw64.sys [61112 2014-04-24] (StdLib)
S3 ALSysIO; \??\C:\Users\Margit\AppData\Local\Temp\ALSysIO64.sys [X]
S3 Andbus; system32\DRIVERS\lgandbus64.sys [X]
S3 AndDiag; system32\DRIVERS\lganddiag64.sys [X]
S3 AndGps; system32\DRIVERS\lgandgps64.sys [X]
S3 ANDModem; system32\DRIVERS\lgandmodem64.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [X]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [X]
S3 X6va012; \??\C:\Windows\SysWOW64\Drivers\X6va012 [X]
S3 X6va013; \??\C:\Windows\SysWOW64\Drivers\X6va013 [X]
S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [X]
S3 X6va016; \??\C:\Windows\SysWOW64\Drivers\X6va016 [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-21 16:28 - 2014-05-21 16:28 - 00044963 _____ () C:\Users\Margit\Desktop\JRT.txt
2014-05-21 16:19 - 2014-05-21 16:19 - 00000000 ____D () C:\Windows\ERUNT
2014-05-21 16:18 - 2014-05-21 16:18 - 01016261 _____ (Thisisu) C:\Users\Margit\Downloads\JRT.exe
2014-05-21 13:59 - 2014-05-21 16:31 - 00000000 ____D () C:\AdwCleaner
2014-05-21 13:57 - 2014-05-21 13:57 - 01326389 _____ () C:\Users\Margit\Desktop\adwcleaner_3.210.exe
2014-05-21 12:15 - 2014-05-21 12:15 - 00007274 _____ () C:\Users\Margit\Downloads\Ereignisse (4).rar
2014-05-21 12:15 - 2014-05-21 12:15 - 00007274 _____ () C:\Users\Margit\Downloads\Ereignisse (3).rar
2014-05-21 12:15 - 2014-05-21 12:15 - 00007274 _____ () C:\Users\Margit\Downloads\Ereignisse (2).rar
2014-05-21 12:15 - 2014-05-21 12:15 - 00007274 _____ () C:\Users\Margit\Downloads\Ereignisse (1).rar
2014-05-21 09:04 - 2014-05-21 09:04 - 00023618 _____ () C:\Users\Margit\Desktop\_0225084741_001.tif
2014-05-20 16:44 - 2014-05-20 16:44 - 00007274 _____ () C:\Users\Margit\Downloads\Ereignisse.rar
2014-05-20 16:32 - 2014-05-20 16:32 - 00007274 _____ () C:\Users\Margit\Desktop\Ereignisse.rar
2014-05-20 16:09 - 2014-05-20 16:09 - 00000074 _____ () C:\Users\Margit\Downloads\Neues Textdokument (1).txt
2014-05-20 16:08 - 2014-05-20 16:08 - 00000074 _____ () C:\Users\Margit\Downloads\Neues Textdokument.txt
2014-05-19 10:44 - 2014-05-21 16:45 - 00000000 ____D () C:\ProgramData\SafetyNut
2014-05-16 19:11 - 2014-05-16 19:14 - 00049138 _____ () C:\Users\Margit\Downloads\Addition.txt
2014-05-16 19:10 - 2014-05-21 16:46 - 00034035 _____ () C:\Users\Margit\Downloads\FRST.txt
2014-05-16 19:10 - 2014-05-21 16:45 - 00000000 ____D () C:\FRST
2014-05-16 19:09 - 2014-05-16 19:09 - 02067456 _____ (Farbar) C:\Users\Margit\Downloads\FRST64.exe
2014-05-16 15:59 - 2014-05-17 19:31 - 00000208 _____ () C:\Users\Margit\Desktop\Neues Textdokument (2).txt
2014-05-16 15:36 - 2014-05-16 15:36 - 00293500 _____ () C:\Users\Margit\Desktop\Ereignisse.txt
2014-05-14 22:58 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-14 22:58 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-14 22:58 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-14 22:58 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-14 22:58 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-14 22:58 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 09:51 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 09:51 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 09:51 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 09:51 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 09:50 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 09:50 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 09:50 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 09:50 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 09:50 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 09:50 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 09:50 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 09:50 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 09:50 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 09:50 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 09:50 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 09:50 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 09:50 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 09:50 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 09:50 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 09:50 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 09:50 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 09:50 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 09:50 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 09:50 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 09:50 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 09:50 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 09:50 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 09:50 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 09:50 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 09:50 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 09:50 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 09:50 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 09:50 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 09:50 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 09:50 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 09:50 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 09:50 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 09:50 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 09:50 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 09:50 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 09:50 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 09:50 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 09:50 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 09:50 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 09:50 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-13 16:38 - 2014-05-13 16:38 - 00000000 ____D () C:\Program Files (x86)\RichMediaViewV1
2014-05-11 13:50 - 2014-05-11 13:50 - 00001798 _____ () C:\Windows\PFRO.log
2014-05-10 20:42 - 2014-05-10 20:42 - 00000000 ____D () C:\Users\Margit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lost Saga EU
2014-05-10 20:42 - 2014-05-10 20:42 - 00000000 ____D () C:\Program Files (x86)\NexonEU
2014-05-09 21:27 - 2014-05-09 21:27 - 00000000 __SHD () C:\Users\Margit\AppData\Local\EmieUserList
2014-05-09 21:27 - 2014-05-09 21:27 - 00000000 __SHD () C:\Users\Margit\AppData\Local\EmieSiteList
2014-05-09 19:58 - 2014-05-21 12:47 - 00000000 ____D () C:\Users\Margit\Desktop\Fusion FlyFF v19
2014-05-07 01:30 - 2014-05-15 09:05 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-04 18:34 - 2014-05-04 18:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gütertrennung XXL
2014-05-04 18:34 - 2014-05-04 18:34 - 00000000 ____D () C:\Phenomedia AG
2014-05-04 18:33 - 2014-05-04 18:33 - 00003048 _____ () C:\Windows\System32\Tasks\{F42E840F-C5C0-4AE3-B967-3B87823AF4F0}
2014-05-03 22:36 - 2014-05-03 22:45 - 834385776 _____ () C:\Users\Margit\Documents\LostSagaEU_Full.exe
2014-05-03 22:34 - 2014-05-03 22:35 - 00000000 ____D () C:\Users\Margit\AppData\Local\Akamai
2014-05-01 22:03 - 2014-05-01 22:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\osu!
2014-05-01 17:42 - 2014-05-21 08:29 - 00001512 _____ () C:\Windows\setupact.log
2014-05-01 17:42 - 2014-05-01 17:42 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-30 03:01 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-30 03:00 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-30 03:00 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-30 03:00 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-30 03:00 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-30 03:00 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-30 03:00 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-30 03:00 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-30 03:00 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-30 03:00 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-30 03:00 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-30 03:00 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-30 03:00 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-30 03:00 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-30 03:00 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-30 03:00 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-30 03:00 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-30 03:00 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-30 03:00 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-30 03:00 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-30 03:00 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-30 03:00 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-30 03:00 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-30 03:00 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-30 03:00 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-30 03:00 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-30 03:00 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-30 03:00 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-30 03:00 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-30 03:00 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-30 03:00 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-30 03:00 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-30 03:00 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-30 03:00 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-30 03:00 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-30 03:00 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-30 03:00 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-30 03:00 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-30 03:00 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-30 03:00 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-30 03:00 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-30 03:00 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-30 03:00 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-30 03:00 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-26 20:16 - 2014-05-21 13:33 - 00003254 _____ () C:\Windows\System32\Tasks\PC Speed Maximizer Schedule
2014-04-26 20:16 - 2014-04-26 20:16 - 00000000 ____D () C:\Users\Margit\Documents\PC Speed Maximizer
2014-04-26 20:11 - 2014-05-21 16:23 - 00000000 ____D () C:\Program Files (x86)\PC Speed Maximizer
2014-04-26 20:11 - 2014-05-21 14:11 - 00001466 _____ () C:\Windows\Tasks\ea727281-8281-467f-bafd-cf5fb6f1777a-1.job
2014-04-26 20:11 - 2014-04-26 20:11 - 00004496 _____ () C:\Windows\System32\Tasks\ea727281-8281-467f-bafd-cf5fb6f1777a-1
2014-04-26 20:11 - 2014-04-26 20:11 - 00000000 ____D () C:\Users\Margit\AppData\Local\SearchProtect
2014-04-26 20:11 - 2014-04-26 20:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer
2014-04-25 21:38 - 2014-04-25 21:38 - 00000000 ____D () C:\Program Files (x86)\MediaBuzzV1
2014-04-25 17:33 - 2014-04-30 17:32 - 00000000 ____D () C:\Users\Margit\AppData\Roaming\.minecraft
2014-04-25 17:21 - 2014-04-25 17:21 - 00000000 ____D () C:\Users\Margit\Documents\libraries
2014-04-25 17:20 - 2014-04-25 17:25 - 00000447 _____ () C:\Users\Margit\Documents\launcher_profiles.json
2014-04-25 17:19 - 2014-04-25 17:25 - 00000000 ____D () C:\Users\Margit\Documents\versions
2014-04-25 13:23 - 2014-04-24 12:29 - 00061112 _____ (StdLib) C:\Windows\system32\Drivers\{50c078f1-4117-4aad-852a-0b3bbfb46b18}Gw64.sys
2014-04-23 17:06 - 2014-05-09 11:34 - 00135680 ___SH () C:\Users\Margit\Desktop\Thumbs.db
2014-04-22 18:58 - 2014-05-21 13:59 - 00000000 ____D () C:\Users\Margit\Desktop\benny bewerbung
2014-04-21 17:48 - 2014-04-21 19:08 - 00000000 ____D () C:\Users\Margit\AppData\Local\Warframe
2014-04-21 16:03 - 2014-04-21 16:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\gamigo
2014-04-21 16:02 - 2014-04-21 16:02 - 00000000 ____D () C:\gamigo
==================== One Month Modified Files and Folders =======
2014-05-21 16:46 - 2014-05-16 19:10 - 00034035 _____ () C:\Users\Margit\Downloads\FRST.txt
2014-05-21 16:45 - 2014-05-19 10:44 - 00000000 ____D () C:\ProgramData\SafetyNut
2014-05-21 16:45 - 2014-05-16 19:10 - 00000000 ____D () C:\FRST
2014-05-21 16:44 - 2014-03-26 13:44 - 00000284 _____ () C:\Windows\Tasks\FF Watcher {9C240B47-73DD-4A6F-B0FE-B3D2076627A3}.job
2014-05-21 16:31 - 2014-05-21 13:59 - 00000000 ____D () C:\AdwCleaner
2014-05-21 16:28 - 2014-05-21 16:28 - 00044963 _____ () C:\Users\Margit\Desktop\JRT.txt
2014-05-21 16:24 - 2009-07-14 04:34 - 00000568 _____ () C:\Windows\win.ini
2014-05-21 16:23 - 2014-04-26 20:11 - 00000000 ____D () C:\Program Files (x86)\PC Speed Maximizer
2014-05-21 16:23 - 2013-11-16 00:26 - 00000000 ____D () C:\Program Files (x86)\qualitink
2014-05-21 16:23 - 2013-07-08 22:26 - 00000000 ____D () C:\Program Files (x86)\DealPlyLive
2014-05-21 16:23 - 2012-12-17 11:39 - 00000000 ____D () C:\Users\Margit
2014-05-21 16:19 - 2014-05-21 16:19 - 00000000 ____D () C:\Windows\ERUNT
2014-05-21 16:18 - 2014-05-21 16:18 - 01016261 _____ (Thisisu) C:\Users\Margit\Downloads\JRT.exe
2014-05-21 16:18 - 2012-12-17 14:21 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-21 14:11 - 2014-04-26 20:11 - 00001466 _____ () C:\Windows\Tasks\ea727281-8281-467f-bafd-cf5fb6f1777a-1.job
2014-05-21 13:59 - 2014-04-22 18:58 - 00000000 ____D () C:\Users\Margit\Desktop\benny bewerbung
2014-05-21 13:57 - 2014-05-21 13:57 - 01326389 _____ () C:\Users\Margit\Desktop\adwcleaner_3.210.exe
2014-05-21 13:33 - 2014-04-26 20:16 - 00003254 _____ () C:\Windows\System32\Tasks\PC Speed Maximizer Schedule
2014-05-21 12:47 - 2014-05-09 19:58 - 00000000 ____D () C:\Users\Margit\Desktop\Fusion FlyFF v19
2014-05-21 12:15 - 2014-05-21 12:15 - 00007274 _____ () C:\Users\Margit\Downloads\Ereignisse (4).rar
2014-05-21 12:15 - 2014-05-21 12:15 - 00007274 _____ () C:\Users\Margit\Downloads\Ereignisse (3).rar
2014-05-21 12:15 - 2014-05-21 12:15 - 00007274 _____ () C:\Users\Margit\Downloads\Ereignisse (2).rar
2014-05-21 12:15 - 2014-05-21 12:15 - 00007274 _____ () C:\Users\Margit\Downloads\Ereignisse (1).rar
2014-05-21 09:04 - 2014-05-21 09:04 - 00023618 _____ () C:\Users\Margit\Desktop\_0225084741_001.tif
2014-05-21 08:40 - 2014-04-17 21:18 - 00002840 _____ () C:\Windows\System32\Tasks\SlimDrivers Startup
2014-05-21 08:40 - 2014-04-17 21:18 - 00000412 _____ () C:\Windows\Tasks\SlimDrivers Startup.job
2014-05-21 08:40 - 2013-07-08 23:24 - 00000000 ____D () C:\Users\Margit\AppData\Local\Pokki
2014-05-21 08:39 - 2014-04-17 21:18 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-05-21 08:39 - 2014-04-17 20:56 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-21 08:39 - 2014-04-14 15:13 - 00000000 ____D () C:\Users\Margit\AppData\Local\HTC MediaHub
2014-05-21 08:39 - 2014-02-14 15:10 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf29862a32b79d.job
2014-05-21 08:37 - 2009-07-14 06:45 - 00033344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-21 08:37 - 2009-07-14 06:45 - 00033344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-21 08:34 - 2012-12-17 11:33 - 01256185 _____ () C:\Windows\WindowsUpdate.log
2014-05-21 08:29 - 2014-05-01 17:42 - 00001512 _____ () C:\Windows\setupact.log
2014-05-21 08:29 - 2013-06-13 13:10 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-05-21 08:29 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-20 16:44 - 2014-05-20 16:44 - 00007274 _____ () C:\Users\Margit\Downloads\Ereignisse.rar
2014-05-20 16:32 - 2014-05-20 16:32 - 00007274 _____ () C:\Users\Margit\Desktop\Ereignisse.rar
2014-05-20 16:09 - 2014-05-20 16:09 - 00000074 _____ () C:\Users\Margit\Downloads\Neues Textdokument (1).txt
2014-05-20 16:08 - 2014-05-20 16:08 - 00000074 _____ () C:\Users\Margit\Downloads\Neues Textdokument.txt
2014-05-20 13:14 - 2012-12-17 20:27 - 00699432 _____ () C:\Windows\system32\perfh007.dat
2014-05-20 13:14 - 2012-12-17 20:27 - 00149572 _____ () C:\Windows\system32\perfc007.dat
2014-05-20 13:14 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-20 13:09 - 2013-02-16 19:14 - 00000000 ____D () C:\Users\Margit\AppData\Local\LogMeIn Hamachi
2014-05-20 07:49 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-05-20 07:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing
2014-05-17 19:31 - 2014-05-16 15:59 - 00000208 _____ () C:\Users\Margit\Desktop\Neues Textdokument (2).txt
2014-05-16 19:14 - 2014-05-16 19:11 - 00049138 _____ () C:\Users\Margit\Downloads\Addition.txt
2014-05-16 19:09 - 2014-05-16 19:09 - 02067456 _____ (Farbar) C:\Users\Margit\Downloads\FRST64.exe
2014-05-16 15:36 - 2014-05-16 15:36 - 00293500 _____ () C:\Users\Margit\Desktop\Ereignisse.txt
2014-05-15 12:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-15 09:10 - 2012-12-17 11:40 - 00000000 ___RD () C:\Users\Margit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-15 09:10 - 2012-12-17 11:40 - 00000000 ___RD () C:\Users\Margit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 09:05 - 2014-05-07 01:30 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 09:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-14 22:58 - 2013-07-13 03:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-14 22:56 - 2012-12-17 13:29 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 19:57 - 2014-02-06 17:57 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-05-14 18:57 - 2014-03-09 21:49 - 00000000 ____D () C:\Users\Margit\AppData\Roaming\Spotify
2014-05-13 21:18 - 2012-12-17 14:21 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-13 21:18 - 2012-12-17 14:21 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-13 21:18 - 2012-12-17 14:21 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-13 16:38 - 2014-05-13 16:38 - 00000000 ____D () C:\Program Files (x86)\RichMediaViewV1
2014-05-13 16:38 - 2014-03-22 22:38 - 00000718 __RSH () C:\ProgramData\ntuser.pol
2014-05-11 13:50 - 2014-05-11 13:50 - 00001798 _____ () C:\Windows\PFRO.log
2014-05-11 01:39 - 2012-12-21 12:53 - 00000000 ____D () C:\Users\Margit\AppData\Roaming\Skype
2014-05-10 20:42 - 2014-05-10 20:42 - 00000000 ____D () C:\Users\Margit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lost Saga EU
2014-05-10 20:42 - 2014-05-10 20:42 - 00000000 ____D () C:\Program Files (x86)\NexonEU
2014-05-10 14:37 - 2013-04-15 21:52 - 00000000 ____D () C:\Users\Margit\AppData\Local\Spotify
2014-05-10 13:24 - 2013-07-09 15:26 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-2.2
2014-05-10 12:31 - 2012-12-17 11:51 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-09 21:27 - 2014-05-09 21:27 - 00000000 __SHD () C:\Users\Margit\AppData\Local\EmieUserList
2014-05-09 21:27 - 2014-05-09 21:27 - 00000000 __SHD () C:\Users\Margit\AppData\Local\EmieSiteList
2014-05-09 20:20 - 2014-04-05 16:47 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cf29862a32b79d
2014-05-09 20:20 - 2012-12-17 11:51 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-09 11:34 - 2014-04-23 17:06 - 00135680 ___SH () C:\Users\Margit\Desktop\Thumbs.db
2014-05-09 08:14 - 2014-05-14 09:51 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-14 09:51 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-06 06:40 - 2014-05-14 22:58 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-14 22:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-14 22:58 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-14 22:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-14 22:58 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-14 22:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-04 18:34 - 2014-05-04 18:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gütertrennung XXL
2014-05-04 18:34 - 2014-05-04 18:34 - 00000000 ____D () C:\Phenomedia AG
2014-05-04 18:34 - 2012-12-17 11:54 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-04 18:33 - 2014-05-04 18:33 - 00003048 _____ () C:\Windows\System32\Tasks\{F42E840F-C5C0-4AE3-B967-3B87823AF4F0}
2014-05-03 22:45 - 2014-05-03 22:36 - 834385776 _____ () C:\Users\Margit\Documents\LostSagaEU_Full.exe
2014-05-03 22:35 - 2014-05-03 22:34 - 00000000 ____D () C:\Users\Margit\AppData\Local\Akamai
2014-05-03 20:11 - 2014-04-20 02:54 - 00000637 _____ () C:\attach.ini
2014-05-03 19:46 - 2014-04-20 02:54 - 00000417 _____ () C:\mapui.ini
2014-05-02 14:47 - 2012-12-21 18:45 - 00000000 ____D () C:\Users\Margit\Desktop\NosTale
2014-05-01 22:03 - 2014-05-01 22:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\osu!
2014-05-01 17:42 - 2014-05-01 17:42 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-30 17:32 - 2014-04-25 17:33 - 00000000 ____D () C:\Users\Margit\AppData\Roaming\.minecraft
2014-04-29 18:44 - 2012-12-21 12:53 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-26 20:16 - 2014-04-26 20:16 - 00000000 ____D () C:\Users\Margit\Documents\PC Speed Maximizer
2014-04-26 20:11 - 2014-04-26 20:11 - 00004496 _____ () C:\Windows\System32\Tasks\ea727281-8281-467f-bafd-cf5fb6f1777a-1
2014-04-26 20:11 - 2014-04-26 20:11 - 00000000 ____D () C:\Users\Margit\AppData\Local\SearchProtect
2014-04-26 20:11 - 2014-04-26 20:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer
2014-04-25 21:38 - 2014-04-25 21:38 - 00000000 ____D () C:\Program Files (x86)\MediaBuzzV1
2014-04-25 17:25 - 2014-04-25 17:20 - 00000447 _____ () C:\Users\Margit\Documents\launcher_profiles.json
2014-04-25 17:25 - 2014-04-25 17:19 - 00000000 ____D () C:\Users\Margit\Documents\versions
2014-04-25 17:21 - 2014-04-25 17:21 - 00000000 ____D () C:\Users\Margit\Documents\libraries
2014-04-24 12:29 - 2014-04-25 13:23 - 00061112 _____ (StdLib) C:\Windows\system32\Drivers\{50c078f1-4117-4aad-852a-0b3bbfb46b18}Gw64.sys
2014-04-22 01:38 - 2014-04-20 11:18 - 00000005 _____ () C:\mail.ini
2014-04-21 19:08 - 2014-04-21 17:48 - 00000000 ____D () C:\Users\Margit\AppData\Local\Warframe
2014-04-21 16:03 - 2014-04-21 16:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\gamigo
2014-04-21 16:02 - 2014-04-21 16:02 - 00000000 ____D () C:\gamigo
Files to move or delete:
====================
C:\Users\Margit\Desktopasdasd.exe
C:\Users\Margit\S4_League.exe
Some content of TEMP:
====================
C:\Users\Margit\AppData\Local\Temp\applinstall.exe
C:\Users\Margit\AppData\Local\Temp\avgnt.exe
C:\Users\Margit\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe
[2014-05-14 09:50] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-09 12:09
==================== End Of Log ============================ --- --- ---
--- --- --- |