Trojaner-Board - Firefox öffnet selbstständig Tabs mit Werbung

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Firefox öffnet selbstständig Tabs mit Werbung (https://www.trojaner-board.de/163437-firefox-oeffnet-selbststaendig-tabs-werbung.html)

Firefox öffnet selbstständig Tabs mit Werbung

Guten Tag.
Ich habe ein Problem. Firefox öffnet seit einiger Zeit automatisch etwa alle 15 Sekunden ein Tab mit Werbung.

Ich habe dazu dieses Beitrag gefunden
http://www.trojaner-board.de/137905-...s-werbung.html

und die Anleitung befolgt. Leider Ohne Erfolg

Ich würde mich freuen wenn Sie mir helfen können.

ATTFilter

Code:

# AdwCleaner v4.109 - Bericht erstellt am 29/01/2015 um 21:59:21

# Aktualisiert 24/01/2015 von Xplode

# Database : 2015-01-26.1 [Live]

# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)

# Benutzername : Corinna-PC

# Gestartet von : C:\Users\Corinna\Downloads\AdwCleaner_4.109.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 
 

***** [ Tasks ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17496
 
 

-\\ Mozilla Firefox v35.0.1 (x86 de)
 
 

-\\ Google Chrome v40.0.2214.93
 

[C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://istart.webssearches.com/web/?type=ds&ts=1422530051&from=cvs4&uid=SanDiskXSDSSDHP128G_142102411799&q={searchTerms}

[C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://istart.webssearches.com/web/?type=ds&ts=1422530051&from=cvs4&uid=SanDiskXSDSSDHP128G_142102411799&q={searchTerms}

[C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3331617&octid=EB_ORIGINAL_CTID&ISID=M4E026FD5-8890-434C-964F-6E1E66F78E31&SearchSource=58&CUI=&UM=8&UP=SP8BA75DC3-5596-420A-9B25-CCAFF2921BA5&q={searchTerms}&SSPV=
 

*************************
 

AdwCleaner[R1].txt - [7950 octets] - [29/01/2015 15:23:03]

AdwCleaner[R2].txt - [1713 octets] - [29/01/2015 21:58:38]

AdwCleaner[S1].txt - [6086 octets] - [29/01/2015 15:31:55]

AdwCleaner[S2].txt - [1634 octets] - [29/01/2015 21:59:21]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1694 octets] ##########

DDS Logfile dss

Code:

DDS (Ver_2012-11-20.01) - NTFS_AMD64 

Internet Explorer: 11.0.9600.17496  BrowserJavaVersion: 11.25.2

Run by Corinna at 22:03:07 on 2015-01-29

Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.16327.14202 [GMT 1:00]

.

AV: McAfee Anti-Virus und Anti-Spyware *Disabled/Updated* {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: McAfee Anti-Virus und Anti-Spyware *Disabled/Updated* {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}

FW: McAfee Firewall *Disabled* {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}

.

============== Running Processes ===============

.

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\nvvsvc.exe

C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Program Files\Tablet\Wacom\WTabletServicePro.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\WLANExt.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe

C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

C:\Windows\system32\nvvsvc.exe

C:\Windows\SYSTEM32\WISPTIS.EXE

C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe

C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe

C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

C:\Program Files\Microsoft Kinect Drivers\Service\KinectManagementService.exe

C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe

C:\Windows\system32\mfevtps.exe

C:\Windows\system32\mfevtps.exe

C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe

C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

C:\Windows\SysWOW64\PnkBstrA.exe

C:\Program Files (x86)\Skype\Updater\Updater.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

C:\Program Files\McAfee\MSC\McAPExe.exe

C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe

C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

C:\Windows\System32\WUDFHost.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\taskhost.exe

C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

C:\Windows\system32\taskeng.exe

C:\Windows\SYSTEM32\WISPTIS.EXE

C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe

C:\Windows\system32\Dwm.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe

C:\Windows\Explorer.EXE

C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

C:\Windows\system32\taskeng.exe

C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe

C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe

C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe

C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

C:\Users\Corinna\AppData\Local\winengine\rkr0.exe

C:\Users\Corinna\AppData\Local\winengine\rkr1.exe

C:\Users\Corinna\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe

C:\Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe

C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Reader_sl.exe

C:\Users\Corinna\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe

C:\Users\Corinna\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe

C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe

C:\Program Files\Tablet\Wacom\WacomHost.exe

C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe

C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe

C:\Program Files\CCleaner\CCleaner64.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = about:blank

uDefault_Page_URL = hxxp://www.google.com

mStart Page = about:blank

mSearch Page = hxxp://www.google.com

mDefault_Page_URL = hxxp://www.google.com

mDefault_Search_URL = hxxp://www.google.com

mWinlogon: Userinit = userinit.exe,

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll

BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\office15\urlredir.dll

BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll

uRun: [LogitechSoftwareUpdate] "C:\Program Files (x86)\Logitech\Video\ManifestEngine.exe" boot

uRun: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR

uRun: [AshSnap] C:\Program Files (x86)\Ashampoo\Ashampoo Snap 7\ashsnap.exe

uRun: [Akamai NetSession Interface] "C:\Users\Corinna\AppData\Local\Akamai\netsession_win.exe"

uRun: [winengine] C:\Users\Corinna\AppData\Local\winengine\rkr0.exe

uRun: [winengine2] C:\Users\Corinna\AppData\Local\winengine\rkr1.exe

mRun: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"

mRun: [ADSK DLMSession] C:\Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe

mRun: [ADSKAppManager] "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun

mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

mRun: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE

mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

mRun: [mcpltui_exe] "C:\Program Files\Common~1\McAfee\Platform\mcuicnt.exe" /platui /runkey

mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

mRun: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin

StartupFolder: C:\Users\Corinna\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\Corinna\AppData\Roaming\Dropbox\bin\Dropbox.exe

mPolicies-Explorer: NoActiveDesktop = dword:1

mPolicies-Explorer: NoActiveDesktopChanges = dword:1

mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableUIADesktopToggle = dword:0

IE: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000

IE: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office 15\root\office15\onbttnie.dll

IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIELinkedNotes.dll

TCP: NameServer = 192.168.178.1

TCP: Interfaces\{2587BEB7-0345-40DC-BB57-AAC562DEB891} : DHCPNameServer = 192.168.178.1

TCP: Interfaces\{AA937845-EC24-434B-B6DF-5D823438E953} : DHCPNameServer = 192.168.178.1

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll

Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\MSOSB.DLL

SSODL: WebCheck - <orphaned>

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

x64-mStart Page = about:blank

x64-mSearch Page = hxxp://www.google.com

x64-mDefault_Page_URL = hxxp://www.google.com

x64-mDefault_Search_URL = hxxp://www.google.com

x64-BHO: Lync Browser Helper: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll

x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\urlredir.dll

x64-BHO: Microsoft SkyDrive Pro Browser Helper: {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll

x64-Run: [RTHDVCPL] "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s

x64-Run: [IgfxTray] "C:\Windows\System32\igfxtray.exe"

x64-Run: [HotKeysCmds] "C:\Windows\System32\hkcmd.exe"

x64-Run: [Persistence] "C:\Windows\System32\igfxpers.exe"

x64-Run: [IAStorIcon] "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60

x64-Run: [NvBackend] "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"

x64-Run: [ShadowPlay] C:\Windows\System32\rundll32.exe C:\Windows\System32\nvspcap64.dll,ShadowPlayOnSystemStart

x64-Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon

x64-Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnie.dll

x64-IE: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll

x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll

x64-Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll

x64-Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - <orphaned>

x64-Notify: igfxcui - igfxdev.dll

x64-SSODL: WebCheck - <orphaned>

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\Corinna\AppData\Roaming\Mozilla\Firefox\Profiles\i5twp7nq.default-1422564675631\

FF - plugin: c:\PROGRA~2\mcafee\msc\npMcSnFFPl.dll

FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

FF - plugin: C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npdeployJava1.dll

FF - plugin: C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll

FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

FF - plugin: C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll

FF - plugin: C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll

.

============= SERVICES / DRIVERS ===============

.

R0 iaStorA;iaStorA;C:\Windows\System32\drivers\iaStorA.sys [2014-4-11 645480]

R0 iaStorF;iaStorF;C:\Windows\System32\drivers\iaStorF.sys [2014-4-11 28008]

R0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;C:\Windows\System32\drivers\iusb3hcs.sys [2014-8-3 20464]

R0 mfedisk;McAfee AAC Disk Filter Driver;C:\Windows\System32\drivers\mfedisk.sys [2014-12-19 100080]

R0 mfehidk;McAfee Inc. mfehidk;C:\Windows\System32\drivers\mfehidk.sys [2014-10-1 886488]

R0 mfewfpk;McAfee Inc. mfewfpk;C:\Windows\System32\drivers\mfewfpk.sys [2014-10-1 349328]

R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2014-8-6 56208]

R2 AdAppMgrSvc;Autodesk Application Manager Service;C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [2014-8-6 599944]

R2 asComSvc;ASUS Com Service;C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [2014-8-3 936728]

R2 asHmComSvc;ASUS HM Com Service;C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [2014-1-28 954648]

R2 ClickToRunSvc;Microsoft Office ClickToRun Service;C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe [2014-8-6 2449592]

R2 GfExperienceService;NVIDIA GeForce Experience Service;C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-9-21 1148560]

R2 KinectManagement;Kinect Management;C:\Program Files\Microsoft Kinect Drivers\Service\KinectManagementService.exe [2013-8-20 98816]

R2 McAPExe;McAfee AP Service;C:\Program Files\McAfee\MSC\McAPExe.exe [2015-1-10 660544]

R2 McMPFSvc;McAfee Personal Firewall Service;C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2015-1-10 336088]

R2 McProxy;McAfee Proxy Service;C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2015-1-10 336088]

R2 McPvDrv;McPvDrv Driver;C:\Windows\System32\drivers\McPvDrv.sys [2015-1-26 76064]

R2 mfefire;McAfee Firewall Core Service;C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe [2015-1-10 228000]

R2 mfemms;McAfee Service Controller;C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [2015-1-26 312952]

R2 mfevtp;McAfee Validation Trust Protection Service;C:\Windows\System32\mfevtps.exe [2015-1-10 221320]

R2 NvNetworkService;NVIDIA Network Service;C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-8-6 1701520]

R2 NvStreamSvc;NVIDIA Streamer Service;C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-8-6 19823248]

R2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-12-28 410768]

R2 WTabletServicePro;Wacom Professional Service;C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [2014-12-11 671000]

R3 BCMH43XX;Treiber für Broadcom 802.11-USB-Netzwerkadapter;C:\Windows\System32\drivers\bcmwlhigh664.sys [2014-9-27 1256192]

R3 cfwids;McAfee Inc. cfwids;C:\Windows\System32\drivers\cfwids.sys [2014-10-1 70984]

R3 hidkmdf;KMDF Driver;C:\Windows\System32\drivers\hidkmdf.sys [2014-12-11 14136]

R3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;C:\Windows\System32\drivers\iusb3hub.sys [2014-8-3 370672]

R3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;C:\Windows\System32\drivers\iusb3xhc.sys [2014-8-3 791024]

R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2015-1-29 25816]

R3 mfeaack;McAfee Inc. mfeaack;C:\Windows\System32\drivers\mfeaack.sys [2014-12-19 368904]

R3 mfeavfk;McAfee Inc. mfeavfk;C:\Windows\System32\drivers\mfeavfk.sys [2014-10-1 340192]

R3 mfefirek;McAfee Inc. mfefirek;C:\Windows\System32\drivers\mfefirek.sys [2014-10-1 532424]

R3 mfencbdc;McAfee Inc. mfencbdc;C:\Windows\System32\drivers\mfencbdc.sys [2014-11-8 482600]

R3 NvStreamKms;NvStreamKms;C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-8-6 19600]

R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);C:\Windows\System32\drivers\nvvad64v.sys [2014-12-16 38032]

R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2014-8-3 888536]

R3 WacHidRouter;Wacom Hid Router;C:\Windows\System32\drivers\wachidrouter.sys [2014-12-11 100664]

R3 wacomrouterfilter;Wacom Router Filter Driver;C:\Windows\System32\drivers\wacomrouterfilter.sys [2014-12-11 15160]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]

S2 HomeNetSvc;McAfee Home Network;C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2015-1-10 336088]

S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2014-4-11 16232]

S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2014-3-20 154584]

S2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-1-29 969016]

S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe --> c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [?]

S2 mccspsvc;McAfee CSP Service;C:\Program Files\Common Files\McAfee\CSP\1.3.336.0\McCSPServiceHost.exe [2014-11-21 422632]

S2 McNaiAnn;McAfee VirusScan Announcer;C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2015-1-10 336088]

S2 mcpltsvc;McAfee Platform Services;C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2015-1-10 336088]

S3 dmvsc;dmvsc;C:\Windows\System32\drivers\dmvsc.sys [2010-11-21 71168]

S3 FlexNet Licensing Service 64;FlexNet Licensing Service 64;C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe [2014-8-6 1357104]

S3 HipShieldK;McAfee Inc. HipShieldK;C:\Windows\System32\drivers\HipShieldK.sys [2015-1-26 197704]

S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2014-8-6 171632]

S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-12-10 114688]

S3 IntcDAud;Intel(R) Display-Audio;C:\Windows\System32\drivers\IntcDAud.sys [2014-8-3 450520]

S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2014-1-31 887232]

S3 KinectCamera;Kinect for Windows Camera Driver;C:\Windows\System32\drivers\kinectcamera.sys [2013-8-20 192512]

S3 LVRS64;Logitech RightSound Filter Driver;C:\Windows\System32\drivers\lvrs64.sys [2012-1-18 351136]

S3 MBAMWebAccessControl;MBAMWebAccessControl;C:\Windows\System32\drivers\mwac.sys [2015-1-29 63704]

S3 mfencrk;McAfee Inc. mfencrk;C:\Windows\System32\drivers\mfencrk.sys [2014-11-8 100720]

S3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;C:\Windows\System32\drivers\MijXfilt.sys [2014-10-15 121416]

S3 Origin Client Service;Origin Client Service;D:\Software\Origin\OriginClientService.exe [2014-12-27 1903472]

S3 psdrv3;PrimeSense Sensor Device Driver Service v3.x;C:\Windows\System32\drivers\psdrv3.sys [2012-5-24 24472]

S3 StorSvc;Speicherdienst;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]

S3 SwitchBoard;SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-21 59392]

S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-21 31232]

S3 WatAdminSvc;Windows-Aktivierungstechnologieservice;C:\Windows\System32\Wat\WatAdminSvc.exe [2014-11-21 1255736]

S4 AsusFanControlService;AsusFanControlService;C:\Program Files (x86)\ASUS\AsusFanControlService\1.05.08\AsusFanControlService.exe [2014-8-6 387896]

S4 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-1-29 1871160]

.

=============== File Associations ===============

.

FileExt: .js: jsfile="C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS6\Dreamweaver.exe","%1"

ShellExec: dreamweaver.exe: Open="C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS6\dreamweaver.exe", "%1"

.

=============== Created Last 30 ================

.

2015-01-29 16:42:01        129752        ----a-w-        C:\Windows\System32\drivers\MBAMSwissArmy.sys

2015-01-29 16:41:49        93400        ----a-w-        C:\Windows\System32\drivers\mbamchameleon.sys

2015-01-29 16:41:49        63704        ----a-w-        C:\Windows\System32\drivers\mwac.sys

2015-01-29 16:41:49        25816        ----a-w-        C:\Windows\System32\drivers\mbam.sys

2015-01-29 16:41:49        --------        d-----w-        C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-01-29 14:30:11        --------        d-----w-        C:\Users\Corinna\AppData\Local\FileMaker

2015-01-29 14:23:00        --------        d-----w-        C:\AdwCleaner

2015-01-29 11:21:03        --------        d-----w-        C:\Users\Corinna\AppData\Roaming\QuickScan

2015-01-29 11:15:35        --------        d-----w-        C:\Users\Corinna\AppData\Local\winengine

2015-01-29 11:13:48        --------        d-----w-        C:\Users\Corinna\AppData\Local\Programs

2015-01-26 10:47:58        197704        ----a-w-        C:\Windows\System32\drivers\HipShieldK.sys

2015-01-26 10:47:51        76064        ----a-w-        C:\Windows\System32\drivers\McPvDrv.sys

2015-01-25 20:06:07        --------        d-----w-        C:\ProgramData\SYSTEMAX Software Development

2015-01-25 20:03:26        --------        d-----w-        C:\Windows\Paint Tool Sai

2015-01-25 19:58:24        --------        d-----w-        C:\Users\Corinna\AppData\Roaming\SYSTEMAX Software Development

2015-01-16 13:49:11        --------        d-----w-        C:\ProgramData\ALM

2015-01-16 11:14:39        --------        d-----w-        C:\Program Files (x86)\VideoLAN

2015-01-16 01:34:04        --------        d-----w-        C:\Windows\ERUNT

2015-01-16 01:08:35        --------        d-----w-        C:\Program Files (x86)\VS Revo Group

2015-01-16 01:08:05        --------        d-----w-        C:\ProgramData\Malwarebytes

2015-01-13 10:55:52        820072        ----a-w-        C:\Program Files\Common Files\System\SysMenu64.dll

2015-01-13 10:55:50        649064        ----a-w-        C:\Program Files\Common Files\System\SysMenu.dll

2015-01-10 11:53:42        --------        d-----w-        C:\Windows\System32\appmgmt

2015-01-10 10:45:59        --------        d-----w-        C:\Users\Corinna\AppData\Local\McAfee File Lock

2015-01-10 10:45:30        --------        d-----w-        C:\Program Files (x86)\McAfee.com

2015-01-10 10:45:22        --------        d-----w-        C:\Program Files\McAfee.com

2015-01-10 10:45:22        --------        d-----w-        C:\Program Files\McAfee

2015-01-10 10:45:20        --------        d-----w-        C:\Program Files (x86)\McAfee

2015-01-10 10:45:20        --------        d-----w-        C:\Program Files (x86)\Common Files\McAfee

2015-01-10 10:34:27        --------        d-s---w-        C:\Windows\SysWow64\Microsoft

2015-01-10 10:22:18        221320        ----a-w-        C:\Windows\System32\mfevtps.exe

2015-01-10 10:22:17        --------        d-----w-        C:\Program Files\Common Files\McAfee

2015-01-09 20:31:03        11870360        ----a-w-        C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{F95D118F-A313-4C00-9F3F-2E11DA92F56D}\mpengine.dll

2015-01-06 00:57:58        --------        d-----w-        C:\Autodesk

2015-01-01 16:26:29        --------        d-----w-        C:\UltraStar Deluxe CMD Edition

.

==================== Find3M  ====================

.

2015-01-24 22:55:12        71344        ----a-w-        C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2015-01-24 22:55:12        701616        ----a-w-        C:\Windows\SysWow64\FlashPlayerApp.exe

2015-01-16 11:15:40        98216        ----a-w-        C:\Windows\SysWow64\WindowsAccessBridge-32.dll

2015-01-06 03:36:02        298120        ------w-        C:\Windows\System32\MpSigStub.exe

2014-12-19 09:54:16        100080        ----a-w-        C:\Windows\System32\drivers\mfedisk.sys

2014-12-19 09:53:38        368904        ----a-w-        C:\Windows\System32\drivers\mfeaack.sys

2014-12-19 09:53:14        70984        ----a-w-        C:\Windows\System32\drivers\cfwids.sys

2014-12-19 09:51:56        349328        ----a-w-        C:\Windows\System32\drivers\mfewfpk.sys

2014-12-19 09:50:56        886488        ----a-w-        C:\Windows\System32\drivers\mfehidk.sys

2014-12-19 09:50:28        532424        ----a-w-        C:\Windows\System32\drivers\mfefirek.sys

2014-12-19 09:50:06        340192        ----a-w-        C:\Windows\System32\drivers\mfeavfk.sys

2014-12-19 03:06:55        210432        ----a-w-        C:\Windows\System32\profsvc.dll

2014-12-19 01:46:45        141312        ----a-w-        C:\Windows\System32\drivers\mrxdav.sys

2014-12-13 08:03:15        6859408        ----a-w-        C:\Windows\System32\nvcpl.dll

2014-12-13 08:03:15        3513488        ----a-w-        C:\Windows\System32\nvsvc64.dll

2014-12-13 08:03:13        935240        ----a-w-        C:\Windows\System32\nvvsvc.exe

2014-12-13 08:03:13        62608        ----a-w-        C:\Windows\System32\nvshext.dll

2014-12-13 08:03:13        386368        ----a-w-        C:\Windows\System32\nvmctray.dll

2014-12-13 08:03:13        2558608        ----a-w-        C:\Windows\System32\nvsvcr.dll

2014-12-13 05:09:01        144384        ----a-w-        C:\Windows\System32\ieUnatt.exe

2014-12-13 03:33:44        115712        ----a-w-        C:\Windows\SysWow64\ieUnatt.exe

2014-12-13 00:47:38        620176        ----a-w-        C:\Windows\SysWow64\nvStreaming.exe

2014-12-13 00:12:24        2210040        ----a-w-        C:\Windows\SysWow64\nvspcap.dll

2014-12-13 00:12:24        1291464        ----a-w-        C:\Windows\SysWow64\nvspbridge.dll

2014-12-13 00:12:12        2824504        ----a-w-        C:\Windows\System32\nvspcap64.dll

2014-12-13 00:12:12        1715224        ----a-w-        C:\Windows\System32\nvspbridge64.dll

2014-12-12 23:11:01        4151176        ----a-w-        C:\Windows\System32\nvcoproc.bin

2014-12-12 05:35:10        5553592        ----a-w-        C:\Windows\System32\ntoskrnl.exe

2014-12-12 05:31:49        503808        ----a-w-        C:\Windows\System32\srcore.dll

2014-12-12 05:31:49        50176        ----a-w-        C:\Windows\System32\srclient.dll

2014-12-12 05:31:22        296960        ----a-w-        C:\Windows\System32\rstrui.exe

2014-12-12 05:11:44        3971512        ----a-w-        C:\Windows\SysWow64\ntkrnlpa.exe

2014-12-12 05:11:43        3916728        ----a-w-        C:\Windows\SysWow64\ntoskrnl.exe

2014-12-12 05:07:44        43008        ----a-w-        C:\Windows\SysWow64\srclient.dll

2014-12-11 17:47:12        52736        ----a-w-        C:\Windows\System32\TSWbPrxy.exe

2014-12-06 04:17:27        303616        ----a-w-        C:\Windows\System32\nlasvc.dll

2014-12-06 03:50:19        52224        ----a-w-        C:\Windows\SysWow64\nlaapi.dll

2014-12-06 03:50:18        156672        ----a-w-        C:\Windows\SysWow64\ncsi.dll

2014-12-04 02:50:55        413184        ----a-w-        C:\Windows\System32\generaltel.dll

2014-12-04 02:50:45        741376        ----a-w-        C:\Windows\System32\invagent.dll

2014-12-04 02:50:40        396800        ----a-w-        C:\Windows\System32\devinv.dll

2014-12-04 02:50:38        830976        ----a-w-        C:\Windows\System32\appraiser.dll

2014-12-04 02:50:37        227328        ----a-w-        C:\Windows\System32\aepdu.dll

2014-12-04 02:50:37        192000        ----a-w-        C:\Windows\System32\aepic.dll

2014-12-04 02:44:48        1083392        ----a-w-        C:\Windows\System32\aeinv.dll

2014-12-01 23:28:44        1232040        ----a-w-        C:\Windows\System32\aitstatic.exe

2014-11-22 10:46:30        38032        ----a-w-        C:\Windows\System32\drivers\nvvad64v.sys

2014-11-22 10:46:30        35472        ----a-w-        C:\Windows\System32\nvaudcap64v.dll

2014-11-22 10:46:30        32400        ----a-w-        C:\Windows\SysWow64\nvaudcap32v.dll

2014-11-22 03:06:23        2724864        ----a-w-        C:\Windows\System32\mshtml.tlb

2014-11-22 03:06:11        4096        ----a-w-        C:\Windows\System32\ieetwcollectorres.dll

2014-11-22 02:50:39        66560        ----a-w-        C:\Windows\System32\iesetup.dll

2014-11-22 02:50:10        580096        ----a-w-        C:\Windows\System32\vbscript.dll

2014-11-22 02:49:54        48640        ----a-w-        C:\Windows\System32\ieetwproxystub.dll

2014-11-22 02:48:20        88064        ----a-w-        C:\Windows\System32\MshtmlDac.dll

2014-11-22 02:35:29        114688        ----a-w-        C:\Windows\System32\ieetwcollector.exe

2014-11-22 02:34:51        814080        ----a-w-        C:\Windows\System32\jscript9diag.dll

2014-11-22 02:34:07        6039552        ----a-w-        C:\Windows\System32\jscript9.dll

2014-11-22 02:26:31        968704        ----a-w-        C:\Windows\System32\MsSpellCheckingFacility.exe

2014-11-22 02:20:44        2724864        ----a-w-        C:\Windows\SysWow64\mshtml.tlb

2014-11-22 02:14:16        77824        ----a-w-        C:\Windows\System32\JavaScriptCollectionAgent.dll

2014-11-22 02:07:43        501248        ----a-w-        C:\Windows\SysWow64\vbscript.dll

2014-11-22 02:07:17        62464        ----a-w-        C:\Windows\SysWow64\iesetup.dll

2014-11-22 02:06:32        47616        ----a-w-        C:\Windows\SysWow64\ieetwproxystub.dll

2014-11-22 02:05:02        64000        ----a-w-        C:\Windows\SysWow64\MshtmlDac.dll

2014-11-22 01:54:30        620032        ----a-w-        C:\Windows\SysWow64\jscript9diag.dll

2014-11-22 01:47:10        1359360        ----a-w-        C:\Windows\System32\mshtmlmedia.dll

2014-11-22 01:46:58        2125312        ----a-w-        C:\Windows\System32\inetcpl.cpl

2014-11-22 01:40:04        60416        ----a-w-        C:\Windows\SysWow64\JavaScriptCollectionAgent.dll

2014-11-22 01:29:26        4299264        ----a-w-        C:\Windows\SysWow64\jscript9.dll

2014-11-22 01:28:21        2358272        ----a-w-        C:\Windows\System32\wininet.dll

2014-11-22 01:22:49        2052096        ----a-w-        C:\Windows\SysWow64\inetcpl.cpl

2014-11-22 01:21:57        1155072        ----a-w-        C:\Windows\SysWow64\mshtmlmedia.dll

2014-11-22 01:00:20        1888256        ----a-w-        C:\Windows\SysWow64\wininet.dll

2014-11-13 00:20:36        1876296        ----a-w-        C:\Windows\System32\nvdispco6434475.dll

2014-11-13 00:20:36        1540424        ----a-w-        C:\Windows\System32\nvdispgenco6434475.dll

2014-11-11 03:09:06        1424384        ----a-w-        C:\Windows\System32\WindowsCodecs.dll

2014-11-11 03:08:52        241152        ----a-w-        C:\Windows\System32\pku2u.dll

2014-11-11 03:08:48        728064        ----a-w-        C:\Windows\System32\kerberos.dll

2014-11-11 02:44:45        1230336        ----a-w-        C:\Windows\SysWow64\WindowsCodecs.dll

2014-11-11 02:44:32        186880        ----a-w-        C:\Windows\SysWow64\pku2u.dll

2014-11-11 02:44:25        550912        ----a-w-        C:\Windows\SysWow64\kerberos.dll

2014-11-11 01:46:26        119296        ----a-w-        C:\Windows\System32\drivers\tdx.sys

2014-11-08 08:38:32        11720        ----a-w-        C:\Windows\System32\drivers\mfeclnrk.sys

2014-11-08 08:38:00        100720        ----a-w-        C:\Windows\System32\drivers\mfencrk.sys

2014-11-08 08:37:52        482600        ----a-w-        C:\Windows\System32\drivers\mfencbdc.sys

2014-11-08 03:16:08        2048        ----a-w-        C:\Windows\System32\tzres.dll

2014-11-08 02:45:09        2048        ----a-w-        C:\Windows\SysWow64\tzres.dll

2014-11-04 18:49:47        1995544        ----a-w-        C:\Windows\System32\Wacom_Tablet.dll

2014-11-04 18:49:47        1988888        ----a-w-        C:\Windows\System32\Wacom_Touch_Tablet.dll

2014-11-04 18:49:47        1863448        ----a-w-        C:\Windows\System32\Wintab32.dll

2014-11-04 18:49:46        2029336        ----a-w-        C:\Windows\System32\WacomMT.dll

2014-11-04 18:49:45        1497368        ----a-w-        C:\Windows\SysWow64\Wintab32.dll

2014-11-04 18:49:44        1626392        ----a-w-        C:\Windows\SysWow64\WacomMT.dll

2014-11-04 18:49:44        1617176        ----a-w-        C:\Windows\SysWow64\Wacom_Tablet.dll

2014-11-04 18:49:44        1610008        ----a-w-        C:\Windows\SysWow64\Wacom_Touch_Tablet.dll

2014-11-04 00:04:30        1876296        ----a-w-        C:\Windows\System32\nvdispco6434465.dll

2014-11-04 00:04:30        1539272        ----a-w-        C:\Windows\System32\nvdispgenco6434465.dll

.

============= FINISH: 22:03:16,05 ===============

dds attach

Code:

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Professional 

Boot Device: \Device\HarddiskVolume1

Install Date: 03.08.2014 11:55:37

System Uptime: 29.01.2015 22:02:12 (0 hours ago)

.

Motherboard: ASUSTeK COMPUTER INC. |  | H97-PLUS

Processor: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz | SOCKET 1150 | 3601/100mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 119 GiB total, 2,355 GiB free.

D: is FIXED (NTFS) - 932 GiB total, 608,712 GiB free.

Z: is CDROM ()

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP139: 29.01.2015 20:30:45 - Geplanter Prüfpunkt

.

==== Installed Programs ======================

.

7-Zip 9.20 (x64 edition)

Adobe AIR

Adobe Creative Suite 6 Master Collection

Adobe Flash Player 16 NPAPI

Adobe Help Manager

Adobe Reader XI (11.0.10) - Deutsch

Adobe Widget Browser

Apple Application Support

Apple Software Update

Assassin's Creed IV Black Flag

Autodesk Application Manager

Autodesk DirectConnect 2015 64-bit

Autodesk DirectConnect 2015 64-bit Hotfix1

Autodesk Download Manager

Autodesk FBX Converter x64 2013.3

Autodesk Maya 2015

Autodesk Maya 2015 SP2

Autodesk Maya 2015 SP3

Autodesk Maya 2015 SP5

Autodesk MotionBuilder 2015

Autodesk Mudbox 2015

Autodesk Mudbox 2015 SP1

Battle.net

bl

Canon IJ Network Scanner Selector EX

Canon IJ Network Tool

Canon Inkjet Printer/Scanner/Fax Extended Survey Program

Canon MG5300 series Benutzerregistrierung

Canon MG5300 series MP Drivers

Canon MP Navigator EX 5.0

Canon My Printer

CCleaner

DARK SOULS™ II

Diablo III

Die Sims™ 4

Dropbox

faceshift Maya Plugin

faceshift trial 64-bit

Google Chrome

Google Update Helper

Intel(R) Chipset Device Software

Intel(R) Management Engine Components

Intel(R) Processor Graphics

Intel(R) Rapid Storage Technology

Intel(R) USB 3.0 eXtensible Host Controller Driver

Intel® Chipsatz-Gerätesoftware

Intel® Trusted Connect Service Client

iPi Mocap Studio 3

iPi Recorder 3

iPi Shell Extension for Project Files

iPi Shell Extension for Video Files

iPi WinUSB Driver Registration for Sony PS3 Eye Camera x64

Java 7 Update 67

Java 8 Update 25

Java Auto Updater

Kinect for Windows Drivers v1.8

Kinect for Windows Runtime v1.8

Kinect for Windows SDK v1.8

Kinect for Windows Speech Recognition Language Pack (en-US)

Malwarebytes Anti-Malware Version 2.0.4.1028

McAfee Total Protection

mental ray renderer for Autodesk Maya 2015

Microsoft-Maus- und Tastatur-Center

Microsoft .NET Framework 4.5.1

Microsoft .NET Framework 4.5.1 (DEU)

Microsoft .NET Framework 4.5.1 (Deutsch)

Microsoft Application Error Reporting

Microsoft ASP.NET MVC 4 Runtime

Microsoft Office Home and Student 2013 - en-us

Microsoft Office Korrekturhilfen 2013 - Deutsch

Microsoft Server Speech Platform Runtime (x64)

Microsoft Server Speech Platform Runtime (x86)

Microsoft Silverlight

Microsoft SkyDrive

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2005 Redistributable (x64)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501

Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005

Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005

Microsoft XNA Framework Redistributable 3.0

Microsoft_VC80_CRT_x86

Microsoft_VC90_CRT_x86

Microsoft_VC90_MFC_x86

Microsoft_VC90_MFCLOC_x86

MotioninJoy Gamepad tool 0.7.1001

Mozilla Firefox 35.0.1 (x86 de)

Mozilla Maintenance Service

Mozilla Thunderbird 31.4.0 (x86 de)

Notepad++

NVIDIA 3D Vision Controller-Treiber 347.09

NVIDIA 3D Vision Treiber 347.09

NVIDIA GeForce Experience 2.1.5

NVIDIA GeForce Experience Service

NVIDIA Grafiktreiber 347.09

NVIDIA HD-Audiotreiber 1.3.33.0

NVIDIA Install Application

NVIDIA LED Visualizer 1.0

NVIDIA Network Service

NVIDIA PhysX

NVIDIA PhysX-Systemsoftware 9.14.0702

NVIDIA ShadowPlay 16.18.9

NVIDIA Stereoscopic 3D Driver

NVIDIA Systemsteuerung 347.09

NVIDIA Update 16.18.9

NVIDIA Update Core

NVIDIA Virtual Audio 1.2.27

Office 15 Click-to-Run Extensibility Component

Office 15 Click-to-Run Licensing Component

Office 15 Click-to-Run Localization Component

OpenNI 1.5.4.0 for Windows 64-bit

Origin

PDF Settings CS6

ph

PrimeSense Sensor 5.1.2.1 for Windows 64-bit

PrimeSense Sensor KinectMod 5.1.2.1 for Windows 64-bit

PunkBuster Services

QuickTime 7

Realtek Ethernet Controller Driver

Realtek High Definition Audio Driver

Security Update for CAPICOM (KB931906)

Security Update for Microsoft .NET Framework 4.5.1 (KB2894854v2)

Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)

Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)

Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)

Security Update for Microsoft .NET Framework 4.5.1 (KB2972107)

Security Update for Microsoft .NET Framework 4.5.1 (KB2972216)

Security Update for Microsoft .NET Framework 4.5.1 (KB2978128)

Security Update for Microsoft .NET Framework 4.5.1 (KB2979578v2)

SHIELD Streaming

SHIELD Wireless Controller Driver

Skype™ 7.0

Spotify

Steam

The Evil Within

Tomb Raider

UltraStar Creator

UltraStar Deluxe CMD Edition

Universal Adb Driver

Uplay

VLC media player

VLC media player 2.1.3

Wacom Tablett

WebTablet FB Plugin 32 bit

WebTablet FB Plugin 64 bit

Windows-Treiberpaket - PrimeSense (psdrv3) PrimeSense  (05/22/2012 3.1.3.1)

Windows-Treiberpaket - PrimeSense (psdrv3) PrimeSense  (11/21/2011 3.1.3.1)

Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices  (03/07/2012 )

winengine

ZBrush 4R6

.

==== End Of File ===========================

Hallo und :hallo:

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Ich hab eigentlich keine weiteren Virenscans gemacht.
FRST
FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2015

Ran by Corinna (administrator) on VOGEL-PC on 01-02-2015 02:24:15

Running from C:\Users\Corinna\Downloads

Loaded Profiles: Corinna (Available profiles: Admin & Corinna)

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\System32\wisptis.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe

() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Kinect Drivers\Service\KinectManagementService.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Microsoft Corporation) C:\Windows\System32\wisptis.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe

() C:\Users\Corinna\AppData\Local\winengine\rkr0.exe

(Dropbox, Inc.) C:\Users\Corinna\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe

(Autodesk, Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe

(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Autodesk Inc.) C:\Users\Corinna\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe

() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.3.336.0\McCSPServiceHost.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(McAfee, Inc.) C:\Program Files\McAfee\MAT\McPvTray.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_296.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_296.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7569112 2014-03-31] (Realtek Semiconductor)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)

HKLM-x32\...\Run: [ADSK DLMSession] => C:\Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe [1627032 2014-02-05] (Autodesk, Inc.)

HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [493960 2014-12-05] (Autodesk Inc.)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe [643576 2014-11-13] (McAfee, Inc.)

HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2015-01-16] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)

HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKLM\...\Policies\Explorer: [NoFolderOptions] 0

HKLM\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Run: [LogitechSoftwareUpdate] => "C:\Program Files (x86)\Logitech\Video\ManifestEngine.exe" boot

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6482200 2014-09-26] (Piriform Ltd)

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Run: [AshSnap] => C:\Program Files (x86)\Ashampoo\Ashampoo Snap 7\ashsnap.exe

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Run: [Akamai NetSession Interface] => "C:\Users\Corinna\AppData\Local\Akamai\netsession_win.exe"

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Run: [winengine] => C:\Users\Corinna\AppData\Local\winengine\rkr0.exe [511416 2014-12-12] ()

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Run: [winengine2] => C:\Users\Corinna\AppData\Local\winengine\rkr1.exe [511416 2014-12-12] ()

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\MountPoints2: {119444e5-4638-11e4-a3f1-10c37b94eabc} - E:\pushinst.exe

Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Corinna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:59718;https=127.0.0.1:59718

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKU\S-1-5-21-499455562-2807403694-105458192-1003\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-499455562-2807403694-105458192-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-499455562-2807403694-105458192-1003 -> {C0576DF6-8B20-43B6-9816-5B4A839520BF} URL = https://de.search.yahoo.com/search?fr=mcafee&type=B011DE0D20150110&p={SearchTerms}

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.)

Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Corinna\AppData\Roaming\Mozilla\Firefox\Profiles\i5twp7nq.default-1422564675631

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll ()

FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml

FF Extension: Cliqz Beta - C:\Users\Corinna\AppData\Roaming\Mozilla\Firefox\Profiles\i5twp7nq.default-1422564675631\Extensions\cliqz@cliqz.com [2015-01-31]

FF Extension: Adblock Plus - C:\Users\Corinna\AppData\Roaming\Mozilla\Firefox\Profiles\i5twp7nq.default-1422564675631\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-30]

FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2015-01-10]

FF HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Corinna\AppData\Roaming\Mozilla\Firefox\Profiles\i5twp7nq.default-1422564675631\extensions\cliqz@cliqz.com
 

Chrome: 

=======

CHR HomePage: Default -> hxxp://www.trovi.com/?gd=&ctid=CT3331617&octid=EB_ORIGINAL_CTID&ISID=M4E026FD5-8890-434C-964F-6E1E66F78E31&SearchSource=55&CUI=&UM=8&UP=SP8BA75DC3-5596-420A-9B25-CCAFF2921BA5&SSPV=

CHR StartupUrls: Default -> "hxxp://www.trovi.com/?gd=&ctid=CT3331617&octid=EB_ORIGINAL_CTID&ISID=M4E026FD5-8890-434C-964F-6E1E66F78E31&SearchSource=55&CUI=&UM=8&UP=SP8BA75DC3-5596-420A-9B25-CCAFF2921BA5&SSPV="

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}

CHR Profile: C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Präsentationen) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-09]

CHR Extension: (Google Docs) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-09]

CHR Extension: (Google Drive) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-09]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-10]

CHR Extension: (YouTube) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-09]

CHR Extension: (Adblock Plus) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-16]

CHR Extension: (Google-Suche) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-09]

CHR Extension: (Google Tabellen) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-09]

CHR Extension: (Hola Besseres Internet) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2014-12-09]

CHR Extension: (Google Wallet) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-09]

CHR Extension: (Google Mail) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-09]

CHR HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - No Path
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-01-28] ()

R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2014-01-28] (ASUSTeK Computer Inc.)

S4 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.05.08\AsusFanControlService.exe [387896 2014-04-06] (ASUSTeK Computer Inc.)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation)

R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [336088 2014-11-13] (McAfee, Inc.)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)

R2 KinectManagement; C:\Program Files\Microsoft Kinect Drivers\Service\KinectManagementService.exe [98816 2013-08-20] (Microsoft Corporation) [File not signed]

R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [660544 2014-12-04] (McAfee, Inc.)

R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.3.336.0\McCSPServiceHost.exe [422632 2014-11-21] (McAfee, Inc.)

R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [336088 2014-11-13] (McAfee, Inc.)

R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [336088 2014-11-13] (McAfee, Inc.)

S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [604448 2014-12-17] (McAfee, Inc.)

R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [336088 2014-11-13] (McAfee, Inc.)

R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [336088 2014-11-13] (McAfee, Inc.)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [228000 2014-12-19] (McAfee, Inc.)

R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [312952 2014-12-20] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [221320 2014-12-19] (McAfee, Inc.)

R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [336088 2014-11-13] (McAfee, Inc.)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation)

S3 Origin Client Service; D:\Software\Origin\OriginClientService.exe [1903472 2014-12-27] (Electronic Arts)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-10-20] ()

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)

S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [671000 2014-11-04] (Wacom Technology, Corp.)

S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-28] ()

R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-24] ()

S3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70984 2014-12-19] (McAfee, Inc.)

S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-11] (Intel Corporation)

S3 KinectCamera; C:\Windows\System32\Drivers\kinectcamera.sys [192512 2013-08-20] (Microsoft Corporation)

R2 McPvDrv; C:\Windows\system32\drivers\McPvDrv.sys [76064 2014-10-09] (McAfee, Inc.)

R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation)

R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [368904 2014-12-19] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [340192 2014-12-19] (McAfee, Inc.)

R0 mfedisk; C:\Windows\System32\DRIVERS\mfedisk.sys [100080 2014-12-19] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [532424 2014-12-19] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [886488 2014-12-19] (McAfee, Inc.)

R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [482600 2014-11-08] (McAfee, Inc.)

S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [100720 2014-11-08] (McAfee, Inc.)

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [349328 2014-12-19] (McAfee, Inc.)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)

S3 psdrv3; C:\Windows\System32\Drivers\psdrv3.sys [24472 2012-05-24] (Prime Sense Ltd.)

S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

S3 zlportio; \??\C:\UltraStar Deluxe CMD Edition\zlportio.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-01 02:24 - 2015-02-01 02:24 - 00028430 _____ () C:\Users\Corinna\Downloads\FRST.txt

2015-02-01 02:23 - 2015-02-01 02:24 - 00000000 ____D () C:\FRST

2015-02-01 02:23 - 2015-02-01 02:23 - 02131456 _____ (Farbar) C:\Users\Corinna\Downloads\FRST64.exe

2015-01-31 23:31 - 2015-02-01 00:01 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2015-01-31 23:31 - 2015-01-31 23:32 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2015-01-31 23:31 - 2015-01-31 23:31 - 00001397 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk

2015-01-31 23:31 - 2015-01-31 23:31 - 00001385 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk

2015-01-31 23:31 - 2015-01-31 23:31 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2015-01-31 23:31 - 2015-01-31 23:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2

2015-01-31 23:31 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe

2015-01-31 23:24 - 2015-01-31 23:24 - 01191200 _____ () C:\Users\Corinna\Downloads\SpyBot Search Destroy - CHIP-Installer.exe

2015-01-31 23:24 - 2015-01-31 23:24 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\Cliqz

2015-01-30 13:11 - 2015-01-09 23:27 - 00621200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2015-01-30 13:10 - 2015-01-13 05:15 - 01540240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 32102544 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 25459856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 24765584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 20465296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 17250776 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 13295552 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 13210248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 10774544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 10714488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 10274448 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2015-01-30 13:10 - 2015-01-10 09:07 - 03607184 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 03245712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 01895240 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434725.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 01556808 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434725.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00994712 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00969360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00942736 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00929424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00906384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00877488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00496456 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00399688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00390472 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00353040 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00345744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00305320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00177624 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00164568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2015-01-30 12:16 - 2015-01-30 12:16 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2015-01-30 12:15 - 2015-01-30 12:16 - 00000000 ____D () C:\Program Files\Java

2015-01-30 12:15 - 2015-01-30 12:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit

2015-01-30 11:20 - 2015-01-30 11:20 - 00000000 ____D () C:\OETemp

2015-01-29 23:02 - 2015-01-29 23:02 - 00001165 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-01-29 23:02 - 2015-01-29 23:02 - 00001153 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-01-29 15:30 - 2015-01-29 15:30 - 00000000 ____D () C:\Users\Corinna\AppData\Local\FileMaker

2015-01-29 15:23 - 2015-01-29 22:01 - 00000000 ____D () C:\AdwCleaner

2015-01-29 12:21 - 2015-01-29 12:21 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\QuickScan

2015-01-29 12:15 - 2015-01-29 12:15 - 00000000 ____D () C:\Users\Corinna\AppData\Local\winengine

2015-01-26 23:21 - 2015-01-29 23:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-01-26 21:41 - 2015-01-30 13:07 - 00000000 ____D () C:\Users\Corinna\Desktop\Das.ist.das.Ende.German.DL.1080p.BluRay.x264-EXQUiSiTE

2015-01-26 11:47 - 2014-10-09 14:32 - 00076064 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\McPvDrv.sys

2015-01-26 11:47 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys

2015-01-25 21:08 - 2015-01-25 21:08 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\Notepad++

2015-01-25 21:06 - 2015-01-25 21:06 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\SYSTEMAX Software Development

2015-01-25 21:06 - 2015-01-25 21:06 - 00000000 ____D () C:\ProgramData\SYSTEMAX Software Development

2015-01-25 21:03 - 2015-01-25 21:03 - 00000000 ____D () C:\Windows\Paint Tool Sai

2015-01-25 20:58 - 2015-01-25 20:58 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\SYSTEMAX Software Development

2015-01-17 19:03 - 2015-01-30 13:07 - 00000000 ____D () C:\Users\Corinna\Desktop\Taylor Swift

2015-01-16 14:49 - 2015-01-16 14:49 - 00000000 ____D () C:\ProgramData\ALM

2015-01-16 14:47 - 2015-01-16 14:47 - 00000000 ____D () C:\Users\Admin\Adobe Flash Builder 4.6

2015-01-16 14:42 - 2015-01-16 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Master Collection CS6

2015-01-16 14:42 - 2015-01-16 14:51 - 00000000 ____D () C:\Program Files\Common Files\Adobe

2015-01-16 12:14 - 2015-01-16 12:14 - 00000000 ____D () C:\Program Files (x86)\VideoLAN

2015-01-16 02:43 - 2015-01-16 02:43 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\QuickScan

2015-01-16 02:43 - 2015-01-16 02:43 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Opera Software

2015-01-16 02:43 - 2015-01-16 02:43 - 00000000 ____D () C:\Users\Admin\AppData\Local\Opera Software

2015-01-16 02:42 - 2015-01-16 03:04 - 00000000 ____D () C:\Program Files (x86)\Opera

2015-01-16 02:37 - 2015-01-16 02:37 - 00000625 _____ () C:\Users\Admin\Desktop\JRT.txt

2015-01-16 02:34 - 2015-01-16 02:34 - 00000000 ____D () C:\Windows\ERUNT

2015-01-16 02:08 - 2015-01-16 14:30 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2015-01-16 02:08 - 2015-01-16 02:08 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-01-15 15:12 - 2015-01-15 15:12 - 00000000 ____D () C:\Users\Public\Documents\Adobe

2015-01-14 12:47 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2015-01-14 12:47 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2015-01-14 12:47 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-01-14 12:47 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-01-14 12:47 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-01-14 12:47 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-01-14 12:47 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-01-14 12:47 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-01-14 12:47 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-01-14 12:47 - 2014-12-11 18:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2015-01-14 12:47 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2015-01-14 12:47 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll

2015-01-14 12:47 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

2015-01-14 00:29 - 2015-01-14 12:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird

2015-01-10 12:53 - 2015-01-10 12:53 - 00000000 ____D () C:\Windows\system32\appmgmt

2015-01-10 11:45 - 2015-01-31 12:31 - 00000000 __RSD () C:\Users\Corinna\Documents\McAfee-Tresore

2015-01-10 11:45 - 2015-01-31 12:27 - 00000000 ____D () C:\Program Files (x86)\McAfee

2015-01-10 11:45 - 2015-01-29 12:23 - 00000000 ____D () C:\Program Files\McAfee

2015-01-10 11:45 - 2015-01-16 14:42 - 00000000 __RSD () C:\Users\Admin\Documents\McAfee-Tresore

2015-01-10 11:45 - 2015-01-10 11:45 - 00001922 _____ () C:\Users\Public\Desktop\McAfee Total Protection.lnk

2015-01-10 11:45 - 2015-01-10 11:45 - 00000000 ____D () C:\Users\Corinna\AppData\Local\McAfee File Lock

2015-01-10 11:45 - 2015-01-10 11:45 - 00000000 ____D () C:\Users\Admin\AppData\Local\McAfee File Lock

2015-01-10 11:45 - 2015-01-10 11:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee

2015-01-10 11:45 - 2015-01-10 11:45 - 00000000 ____D () C:\Program Files\McAfee.com

2015-01-10 11:45 - 2015-01-10 11:45 - 00000000 ____D () C:\Program Files (x86)\McAfee.com

2015-01-10 11:22 - 2015-01-29 15:33 - 00000000 ____D () C:\ProgramData\McAfee

2015-01-10 11:22 - 2015-01-26 11:48 - 00000000 ____D () C:\Program Files\Common Files\McAfee

2015-01-10 11:22 - 2014-12-19 10:51 - 00221320 _____ (McAfee, Inc.) C:\Windows\system32\mfevtps.exe

2015-01-10 10:19 - 2015-01-10 10:19 - 00000000 _____ () C:\autoexec.bat

2015-01-06 02:19 - 2015-01-06 02:19 - 00000000 ____D () C:\Users\Corinna\Documents\MB

2015-01-06 02:18 - 2015-01-06 02:18 - 00001824 _____ () C:\Users\Public\Desktop\MotionBuilder 2015.lnk

2015-01-06 01:57 - 2015-01-29 11:43 - 00000000 ____D () C:\Autodesk

2015-01-06 01:28 - 2015-01-06 01:28 - 00000000 ____D () C:\Users\Corinna\Documents\FBX Converter 2013.3

2015-01-06 00:55 - 2015-01-06 00:55 - 00000763 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Autodesk FBX Converter x64 2013.lnk
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-01 01:55 - 2014-08-06 19:06 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-02-01 01:36 - 2014-08-03 10:55 - 01142670 _____ () C:\Windows\WindowsUpdate.log

2015-02-01 01:33 - 2014-12-09 17:28 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-01-31 23:22 - 2014-09-29 15:55 - 00000000 ____D () C:\Program Files (x86)\Steam

2015-01-31 17:33 - 2014-12-09 17:28 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-01-31 13:50 - 2014-10-20 10:36 - 00054436 _____ () C:\Windows\setupact.log

2015-01-31 12:35 - 2009-07-14 05:45 - 00032208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-01-31 12:35 - 2009-07-14 05:45 - 00032208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-01-31 12:33 - 2010-11-21 07:50 - 00700130 _____ () C:\Windows\system32\perfh007.dat

2015-01-31 12:33 - 2010-11-21 07:50 - 00149768 _____ () C:\Windows\system32\perfc007.dat

2015-01-31 12:33 - 2009-07-14 06:13 - 01622706 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-01-31 12:30 - 2014-08-03 11:21 - 00006464 _____ () C:\Windows\SysWOW64\Gms.log

2015-01-31 12:29 - 2014-08-07 18:35 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\Dropbox

2015-01-31 12:27 - 2014-10-24 12:26 - 00792886 _____ () C:\Windows\PFRO.log

2015-01-31 12:27 - 2014-08-06 09:19 - 00000000 ____D () C:\ProgramData\NVIDIA

2015-01-31 12:27 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-01-30 13:11 - 2014-08-06 09:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2015-01-30 12:13 - 2014-08-06 19:04 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2015-01-30 12:13 - 2014-08-06 19:04 - 00000000 ____D () C:\Program Files (x86)\Java

2015-01-30 11:20 - 2014-08-03 11:07 - 00000000 ____D () C:\ProgramData\Package Cache

2015-01-30 10:44 - 2014-08-06 18:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-01-29 13:44 - 2014-09-21 18:36 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\vlc

2015-01-29 12:23 - 2014-08-07 18:23 - 00001427 _____ () C:\Users\Corinna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-01-29 11:54 - 2014-08-06 16:07 - 00000000 ____D () C:\Program Files\Autodesk

2015-01-29 11:44 - 2014-08-07 18:23 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\Autodesk

2015-01-27 16:54 - 2014-09-28 16:33 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2015-01-26 17:02 - 2014-08-07 18:23 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\Adobe

2015-01-25 23:15 - 2014-10-20 10:27 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2015-01-25 20:59 - 2014-08-07 18:23 - 00000000 ____D () C:\Users\Corinna\AppData\Local\VirtualStore

2015-01-25 00:55 - 2014-08-06 19:06 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-01-24 23:55 - 2014-08-06 19:06 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-01-24 23:55 - 2014-08-06 19:06 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-01-24 20:46 - 2014-08-07 18:23 - 00000000 ____D () C:\Users\Corinna\AppData\Local\Adobe

2015-01-17 13:02 - 2009-07-14 05:45 - 04964056 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-01-16 15:09 - 2014-05-30 09:50 - 00000000 ___HD () C:\Users\Corinna\AppData\Local\TT8rdoNDbc

2015-01-16 15:03 - 2014-08-07 18:24 - 00070872 _____ () C:\Users\Corinna\AppData\Local\GDIPFONTCACHEV1.DAT

2015-01-16 15:01 - 2014-09-21 14:03 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe

2015-01-16 15:01 - 2014-08-03 11:18 - 00070872 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT

2015-01-16 14:51 - 2014-08-06 20:22 - 00000000 ____D () C:\Program Files (x86)\Adobe

2015-01-16 14:50 - 2014-08-06 20:21 - 00000000 ____D () C:\Program Files\Adobe

2015-01-16 14:47 - 2014-08-03 10:55 - 00000000 ____D () C:\Users\Admin

2015-01-16 14:44 - 2014-08-06 20:20 - 00000000 ____D () C:\ProgramData\Adobe

2015-01-16 13:14 - 2014-08-08 09:14 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\Skype

2015-01-16 12:16 - 2014-08-08 09:14 - 00000000 ___RD () C:\Program Files (x86)\Skype

2015-01-16 12:16 - 2014-08-08 09:14 - 00000000 ____D () C:\ProgramData\Skype

2015-01-16 12:15 - 2014-08-06 19:04 - 00000000 ____D () C:\ProgramData\Oracle

2015-01-16 12:15 - 2014-08-06 19:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-01-16 12:14 - 2014-08-06 18:19 - 00001072 _____ () C:\Users\Public\Desktop\VLC media player.lnk

2015-01-16 07:41 - 2014-08-06 09:58 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll

2015-01-16 07:41 - 2014-08-06 09:58 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll

2015-01-16 07:41 - 2014-08-06 09:19 - 01514528 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2015-01-16 07:41 - 2014-08-06 09:19 - 01278920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2015-01-16 03:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing

2015-01-16 03:04 - 2014-08-03 10:56 - 00001421 _____ () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-01-16 02:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System

2015-01-16 02:17 - 2014-12-18 11:37 - 00000000 ____D () C:\ProgramData\YqqUBiXNSeA

2015-01-16 02:17 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Cursors

2015-01-16 02:08 - 2014-09-28 17:45 - 00183808 ___SH () C:\Users\Corinna\Desktop\Thumbs.db

2015-01-14 21:08 - 2014-08-03 12:02 - 00000000 ____D () C:\Windows\system32\MRT

2015-01-14 21:06 - 2014-08-03 12:02 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-01-13 22:45 - 2014-11-13 16:36 - 00000132 _____ () C:\Users\Corinna\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen

2015-01-12 23:56 - 2014-09-21 19:58 - 00000000 ____D () C:\Users\Public\Documents\ZBrushData

2015-01-10 12:53 - 2014-12-09 17:28 - 00000000 ____D () C:\Users\Admin\AppData\Local\Google

2015-01-10 12:53 - 2014-12-09 17:28 - 00000000 ____D () C:\Program Files (x86)\Google

2015-01-10 12:48 - 2014-12-27 18:48 - 00000000 ____D () C:\ProgramData\Origin

2015-01-10 12:47 - 2014-08-06 18:23 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Dropbox

2015-01-10 12:46 - 2014-08-06 20:58 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2015-01-10 12:44 - 2014-12-29 23:28 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Origin

2015-01-10 11:35 - 2014-08-03 12:40 - 00000000 ____D () C:\ProgramData\AVAST Software

2015-01-10 10:49 - 2014-09-29 09:58 - 00002032 _____ () C:\Users\Corinna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk

2015-01-10 09:07 - 2014-12-28 02:24 - 16009120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2015-01-10 09:07 - 2014-08-06 09:18 - 18566296 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2015-01-10 09:07 - 2014-08-06 09:18 - 14115944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2015-01-10 09:07 - 2014-08-06 09:18 - 03298816 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2015-01-10 09:07 - 2014-08-06 09:18 - 02902456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2015-01-10 09:07 - 2014-08-06 09:18 - 00027441 _____ () C:\Windows\system32\nvinfo.pb

2015-01-10 00:30 - 2014-08-06 09:19 - 06860432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2015-01-10 00:30 - 2014-08-06 09:19 - 03517256 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2015-01-10 00:29 - 2014-08-06 09:19 - 02558608 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2015-01-10 00:29 - 2014-08-06 09:19 - 00935056 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2015-01-10 00:29 - 2014-08-06 09:19 - 00385352 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2015-01-10 00:29 - 2014-08-06 09:19 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2015-01-09 20:47 - 2014-08-06 09:19 - 04173527 _____ () C:\Windows\system32\nvcoproc.bin

2015-01-06 04:36 - 2010-11-21 04:27 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2015-01-06 02:20 - 2014-08-06 11:00 - 00000000 ____D () C:\ProgramData\Autodesk

2015-01-06 02:18 - 2014-08-06 11:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk

2015-01-06 01:58 - 2014-08-06 10:58 - 00000000 ____D () C:\Users\Admin\AppData\Local\Akamai

2015-01-05 11:53 - 2014-12-13 01:56 - 00000000 ___RD () C:\Users\Corinna\Google Drive
 

==================== Files in the root of some directories =======
 

2014-10-15 09:12 - 2014-10-15 09:12 - 4117346 _____ () C:\Program Files (x86)\MotioninJoy_071001_signed.zip

2014-11-13 16:36 - 2015-01-13 22:45 - 0000132 _____ () C:\Users\Corinna\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen

2014-12-17 11:40 - 2014-12-17 12:32 - 0003584 _____ () C:\Users\Corinna\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2014-08-03 11:09 - 2014-08-03 11:09 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 

Some content of TEMP:

====================

C:\Users\Admin\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpex3ofo.dll

C:\Users\Admin\AppData\Local\Temp\insHv7.exe

C:\Users\Admin\AppData\Local\Temp\msscct32.dll

C:\Users\Admin\AppData\Local\Temp\Quarantine.exe

C:\Users\Admin\AppData\Local\Temp\sqlite3.dll

C:\Users\Admin\AppData\Local\Temp\System.Data.SQLite.dll

C:\Users\Admin\AppData\Local\Temp\System.Data.SQLitedcaac091-0d0d-4776-afc9-f74db7594545.dll

C:\Users\Corinna\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuqmgj1.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-01-24 00:10
 

==================== End Of Log ============================

--- --- ---

Addition

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2015

Ran by Corinna at 2015-02-01 02:24:40

Running from C:\Users\Corinna\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}

FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)

Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)

Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)

Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version:  - Ubisoft)

Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk)

Autodesk DirectConnect 2015 64-bit (HKLM\...\Autodesk DirectConnect 2015 64-bit) (Version: 9.0.56.4 - Autodesk)

Autodesk DirectConnect 2015 64-bit (Version: 9.0.56.4 - Autodesk) Hidden

Autodesk DirectConnect 2015 64-bit Hotfix1 (HKLM\...\Autodesk DirectConnect 2015 64-bit_9001) (Version: 9.0.56.4 - Autodesk)

Autodesk Download Manager (HKLM-x32\...\{C897D9EC-13C6-4A22-ABF7-33F2126A7DB6}) (Version: 3.0.8.0 - Autodesk, Inc.)

Autodesk FBX Converter x64 2013.3 (HKLM-x32\...\Autodesk FBX Converter x64 2013.3) (Version:  - Autodesk)

Autodesk Maya 2015 (HKLM\...\Autodesk Maya 2015) (Version: 15.5.2119.0 - Autodesk)

Autodesk Maya 2015 (Version: 15.5.2119.0 - Autodesk) Hidden

Autodesk Maya 2015 SP2 (Version: 15.2.1633.0 - Autodesk) Hidden

Autodesk Maya 2015 SP3 (Version: 15.3.1808.0 - Autodesk) Hidden

Autodesk Maya 2015 SP5 (HKLM\...\Autodesk Maya 2015 SP5) (Version: 15.5.2119.0 - Autodesk)

Autodesk MotionBuilder 2015 (HKLM\...\Autodesk MotionBuilder 2015) (Version: 15.0.0.74 - Autodesk)

Autodesk MotionBuilder 2015 (Version: 15.0.0.74 - Autodesk) Hidden

Autodesk Mudbox 2015 (HKLM\...\Autodesk Mudbox 2015) (Version: 9.0.1.89 - Autodesk)

Autodesk Mudbox 2015 (Version: 9.0.1.89 - Autodesk) Hidden

Autodesk Mudbox 2015 SP1 (HKLM\...\Autodesk Mudbox 2015 SP1) (Version: 9.0.1.89 - Autodesk)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

bl (x32 Version: 1.0.0 - Your Company Name) Hidden

Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - )

Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.)

Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version:  - )

Canon MG5300 series Benutzerregistrierung (HKLM-x32\...\Canon MG5300 series Benutzerregistrierung) (Version:  - )

Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version:  - Canon Inc.)

Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version:  - )

Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )

CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform)

Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.55 - Cliqz.com)

DARK SOULS™ II (HKLM-x32\...\Steam App 236430) (Version:  - FromSoftware, Inc)

Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)

Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.3.18.1010 - Electronic Arts Inc.)

Dropbox (HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)

faceshift Maya Plugin (HKLM-x32\...\faceshiftMayaPlugin) (Version: 1.2.0 - faceshift)

faceshift trial 64-bit (HKLM-x32\...\fsTrial_2014.1.05) (Version: 2014.1.05 - faceshift)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.94 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)

Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)

Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.14 - Intel(R) Corporation) Hidden

iPi Mocap Studio 3 (HKLM-x32\...\{C1FC9B0D-2211-4F42-9201-E7B00CC237BB}) (Version: 3.0.2.171 - iPi Soft LLC)

iPi Recorder 3 (HKLM-x32\...\{D57B9811-DFFB-48C2-8C7D-24AFF68B0BA8}) (Version: 3.0.1.32 - iPi Soft LLC)

iPi Shell Extension for Project Files (HKLM\...\{637F192E-CC0D-443D-988A-B7CB8CD43F84}) (Version: 3.0.9 - iPi Soft LLC)

iPi Shell Extension for Video Files (HKLM\...\{2018A0FA-1DB2-4BC7-9471-D8864C939651}) (Version: 3.0.9 - iPi Soft LLC)

iPi WinUSB Driver Registration for Sony PS3 Eye Camera x64 (HKLM-x32\...\{58F95A3A-124F-4706-8AAE-0B63B02BF3A6}) (Version: 1.4.0 - iPi Soft LLC)

Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)

Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)

Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)

Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Java SE Development Kit 8 Update 31 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180310}) (Version: 8.0.310.13 - Oracle Corporation)

Kinect for Windows Drivers v1.8 (HKLM\...\{AA62B868-5D5C-46CF-BA88-386BE71D4F87}) (Version: 1.8.0.595 - Microsoft Corporation)

Kinect for Windows Runtime v1.8 (HKLM\...\{2700FAD3-F82C-4ED1-862C-5F425B2A88E6}) (Version: 1.8.0.595 - Microsoft Corporation)

Kinect for Windows SDK v1.8 (HKLM\...\{6702DAC4-51E7-440C-8012-9C0AE9D524DB}) (Version: 1.8.0.595 - Microsoft Corporation)

Kinect for Windows Speech Recognition Language Pack (en-US) (HKLM-x32\...\{8AAA44BB-487E-4D01-AF76-484ACB90DBFE}) (Version: 11.0.7400.336 - Microsoft Corporation)

McAfee Total Protection (HKLM-x32\...\MSC) (Version: 14.0.207 - McAfee, Inc.)

mental ray renderer for Autodesk Maya 2015 (HKLM\...\{BDF821F0-D64C-421D-0052-A9B995B20873}) (Version: 15.5.2119.0 - mental ray)

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Office Home and Student 2013 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 15.0.4675.1003 - Microsoft Corporation)

Microsoft Office Korrekturhilfen 2013 - Deutsch (HKLM-x32\...\{90150000-001F-0407-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)

Microsoft Server Speech Platform Runtime (x64) (HKLM\...\{3B433087-E62E-4BF5-97F9-4AF6E1C2409C}) (Version: 11.0.7400.345 - Microsoft Corporation)

Microsoft Server Speech Platform Runtime (x86) (HKLM-x32\...\{22CB8ED7-DF57-4864-BD04-F63B9CE4B494}) (Version: 11.0.7400.345 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SkyDrive (HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\SkyDriveSetup.exe) (Version: 16.4.6012.0828 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 3.0 (HKLM-x32\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation)

Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)

MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)

Mozilla Firefox 35.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 35.0.1 - Mozilla)

Mozilla Thunderbird 31.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.4.0 (x86 de)) (Version: 31.4.0 - Mozilla)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.25 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)

NVIDIA Grafiktreiber 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.25 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden

OpenNI 1.5.4.0 for Windows 64-bit (HKLM\...\{C6EE4454-8B2E-4AA8-BF72-53E12A6E963B}) (Version: 1.5.4.0 - PrimeSense)

Origin (HKLM-x32\...\Origin) (Version: 9.4.11.2806 - Electronic Arts, Inc.)

PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden

ph (x32 Version: 1.0.0 - Your Company Name) Hidden

PrimeSense Sensor 5.1.2.1 for Windows 64-bit (HKLM\...\{DA7BAE65-8220-482C-B0FD-526FC0DD3634}) (Version: 5.1.2.1 - PrimeSense)

PrimeSense Sensor KinectMod 5.1.2.1 for Windows 64-bit (HKLM\...\{535F8038-99AF-416F-B070-466544C50883}) (Version: 5.1.2.1 - PrimeSense)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.77.1126.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7213 - Realtek Semiconductor Corp.)

SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

Spotify (HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Spotify) (Version: 0.9.14.13.gba5645ad - Spotify AB)

Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

The Evil Within (HKLM-x32\...\Steam App 268050) (Version:  - Tango Gameworks)

Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)

UltraStar Creator (HKLM-x32\...\UltraStar Creator) (Version: 1.1.0 - usc Community)

UltraStar Deluxe CMD Edition (HKLM-x32\...\UltraStar Deluxe CMD Edition) (Version: r9.22 - USDX Team)

Universal Adb Driver (HKLM-x32\...\{D9C4202E-6D51-4B06-A8F1-22316E654BCA}) (Version: 1.0.0 - ClockworkMod)

Uplay (HKLM-x32\...\Uplay) (Version: 4.0 - Ubisoft)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)

VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)

Wacom Tablett (HKLM\...\Wacom Tablet Driver) (Version: 6.3.10w2 - Wacom Technology Corp.)

WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)

WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)

Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices  (03/07/2012 ) (HKLM\...\0B624A43DD66DBF5CF3EDFA9741A364E688062A4) (Version: 03/07/2012  - GoPro)

Windows-Treiberpaket - PrimeSense (psdrv3) PrimeSense  (05/22/2012 3.1.3.1) (HKLM\...\306D8A3B302B0969C2826C7D167B3BBB394FC100) (Version: 05/22/2012 3.1.3.1 - PrimeSense)

Windows-Treiberpaket - PrimeSense (psdrv3) PrimeSense  (11/21/2011 3.1.3.1) (HKLM\...\F51BEF9C0C3A82026BF1EBA9F1F5F08EFF1BE870) (Version: 11/21/2011 3.1.3.1 - PrimeSense)

winengine (HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\winengine) (Version: 20.020 - Ad business Crown Solutions)

ZBrush 4R6 (HKLM-x32\...\ZBrush 4R6 4R6) (Version: 4R6 - Pixologic)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{322A9D7C-9DFF-4BCB-B82F-A311CBB7FFC9}\InprocServer32 -> 0x18EA81C906328324EC907DE2327EAB240AD13D32A7A775A07408B8C74D851229FF762871D04BF0154AE762785B67CE9D88 (the data entry has 122 more characters).

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{8C8AF8DA-4E9B-4DE1-B7AE-EF238008A485}\InprocServer32 -> 0x18922E42767FC12C56945AB07A6F6576F8124E8D82D8C5D2DA08981BC51C1BA0A66E5CB73B2AA1FDF5E7E9AE47E418D189 (the data entry has 1786 more characters).

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{9BBDFBEB-1118-46D4-9D66-2E0B56314B7C}\InprocServer32 -> 0x1868380AC98F74360E7484EFCDD07CD1B82F161FC7CA4B240B082F62D236F4065FC3E1A2970B265B1E114ED05371C09424 (the data entry has 154 more characters).

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Corinna\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Corinna\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Corinna\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Corinna\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828\amd64\FileSyncApi64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
 

==================== Restore Points  =========================
 
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 03:34 - 2014-08-06 20:41 - 00002823 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 192.150.14.69

127.0.0.1 192.150.18.101

127.0.0.1 192.150.18.108

127.0.0.1 192.150.22.40

127.0.0.1 192.150.8.100

127.0.0.1 192.150.8.118

127.0.0.1 209-34-83-73.ood.opsource.net

127.0.0.1 3dns-1.adobe.com

127.0.0.1 3dns-2.adobe.com

127.0.0.1 3dns-2.adobe.com

127.0.0.1 3dns-3.adobe.com

127.0.0.1 3dns-3.adobe.com

127.0.0.1 3dns-4.adobe.com

127.0.0.1 3dns.adobe.com

127.0.0.1 activate-sea.adobe.com

127.0.0.1 activate-sea.adobe.com

127.0.0.1 activate-sjc0.adobe.com

127.0.0.1 activate-sjc0.adobe.com

127.0.0.1 activate.adobe.com

127.0.0.1 activate.adobe.com

127.0.0.1 activate.wip.adobe.com

127.0.0.1 activate.wip1.adobe.com

127.0.0.1 activate.wip2.adobe.com

127.0.0.1 activate.wip3.adobe.com

127.0.0.1 activate.wip3.adobe.com

127.0.0.1 activate.wip4.adobe.com

127.0.0.1 adobe-dns-1.adobe.com

127.0.0.1 adobe-dns-2.adobe.com

127.0.0.1 adobe-dns-2.adobe.com
 

There are 36 more lines.
 
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {03100722-6AB9-4D9A-8467-F3A37D0013D4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-09] (Google Inc.)

Task: {04CDE39F-4C20-4F73-99D6-09DD1BB65B16} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)

Task: {0DAF909D-D8BB-4BCA-AB4F-C9E1AB858782} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)

Task: {22E9016A-6CD4-4CD9-BFC6-6F1FF79BE123} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe

Task: {2E761684-FA76-4E6C-8C1D-5D8C39AF69E1} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)

Task: {439BEA75-6F4D-4FB7-8B54-5E9A1CAAFBB7} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe

Task: {4A6B51B4-4900-4A78-8463-48E5D5C3367D} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {52FF6C29-5C26-4C14-8128-BF38946A01D7} - System32\Tasks\{CB59915B-0B9E-4416-A49A-4C26619C0F7E} => pcalua.exe -a C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe -c /M{532F6E8A-AF97-41C3-915F-39F718EC07D1} /l1031

Task: {5E75B899-2215-446C-BF5A-15707993C5F9} - System32\Tasks\ASUS\i-Setup121259 => C:\Windows\MEI1.5M\AsusSetup.exe [2013-09-09] (ASUSTeK Computer Inc.)

Task: {609C546E-7BCF-4FBE-9F4E-B63FF8910E12} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)

Task: {66388678-3B68-4A5A-BF28-5F8E405A42BC} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)

Task: {75642DC0-BE70-4593-977F-455630AA17BA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-24] (Adobe Systems Incorporated)

Task: {7C26A531-C024-4C1E-AC00-4C42F066155A} - System32\Tasks\ASUS\Push Notice Server Execute => C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe [2014-01-10] (ASUSTeK Computer Inc.)

Task: {887651F9-5C1E-4691-9C5E-26730F2B1BB3} - System32\Tasks\ASUS\i-Setup121554 => C:\Windows\Install\AsusSetup.exe [2013-09-09] (ASUSTeK Computer Inc.)

Task: {A6F6375E-F041-4270-9860-E740D223469A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-09-26] (Piriform Ltd)

Task: {A9B78A51-0167-4BF1-BE59-AB5E38DBFDC1} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation)

Task: {C2EB6A34-54C9-4DC8-914F-729E1F304494} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION

Task: {C3AA3EC2-50A5-46B9-90AB-23C3DDB91FD6} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION

Task: {C6298061-F314-4774-BC19-56664DBF6CBE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {D18E40D5-6762-4ED5-B16E-70B8D1116A2D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-09] (Google Inc.)

Task: {D4728F6F-E8AB-47DD-B645-D91CB3018681} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe

Task: {EF68A8DE-9A81-4E79-B6B6-A235A40C1675} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-08-06 09:19 - 2015-01-10 00:29 - 00117392 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-08-03 11:03 - 2014-01-28 04:16 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe

2014-08-06 12:34 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll

2014-09-28 16:33 - 2011-02-07 08:56 - 00138192 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

2014-10-20 11:53 - 2014-10-20 11:53 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-11-22 12:09 - 2014-09-23 14:36 - 08897696 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll

2014-12-12 13:34 - 2014-12-12 13:34 - 00511416 _____ () C:\Users\Corinna\AppData\Local\winengine\rkr0.exe

2014-12-11 14:43 - 2014-11-04 19:49 - 01356568 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll

2014-08-06 17:26 - 2014-04-11 09:53 - 00037176 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe

2014-08-06 15:08 - 2014-12-05 03:27 - 00055688 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll

2014-08-06 15:08 - 2014-12-05 03:27 - 00104328 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll

2014-08-03 11:03 - 2015-01-31 12:27 - 00028672 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll

2014-08-03 11:03 - 2014-01-28 04:16 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll

2014-10-22 01:22 - 2014-10-22 01:22 - 00750080 _____ () C:\Users\Corinna\AppData\Roaming\Dropbox\bin\libGLESv2.dll

2015-01-31 12:29 - 2015-01-31 12:29 - 00043008 _____ () c:\users\corinna\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuqmgj1.dll

2014-10-22 01:22 - 2014-10-22 01:22 - 00047616 _____ () C:\Users\Corinna\AppData\Roaming\Dropbox\bin\libEGL.dll

2014-10-22 01:22 - 2014-10-22 01:22 - 00863744 _____ () C:\Users\Corinna\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll

2014-10-22 01:22 - 2014-10-22 01:22 - 00200704 _____ () C:\Users\Corinna\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll

2015-01-31 12:29 - 2014-12-05 03:27 - 00104328 _____ () C:\Users\Corinna\AppData\Local\Autodesk\.AdskAppManager\R1\qjson0.dll

2015-01-14 00:29 - 2015-01-14 00:29 - 03347056 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll

2015-01-14 00:29 - 2015-01-14 00:29 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll

2015-01-14 00:29 - 2015-01-14 00:29 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll

2015-01-29 23:02 - 2015-01-23 11:37 - 03925104 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2015-01-27 11:34 - 2015-01-25 07:08 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\libglesv2.dll

2015-01-27 11:34 - 2015-01-25 07:08 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\libegl.dll

2015-01-27 11:34 - 2015-01-25 07:08 - 09170760 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\pdf.dll

2014-03-20 10:43 - 2014-03-20 10:43 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

2015-01-31 23:31 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2015-01-31 23:31 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2015-01-31 23:31 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2015-01-31 23:31 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll

2015-01-31 23:31 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll

2015-01-24 23:55 - 2015-01-24 23:55 - 16844976 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\Users\Admin\AppData\Local\Temp:xML8Ondv5vd1nKBlbJ

AlternateDataStreams: C:\Users\Corinna\AppData\Local\TT8rdoNDbc:xYcyt4o7UHNHTZOEB4T7Tza9Dy
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service"
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\Services: asComSvc => 2

MSCONFIG\Services: asHmComSvc => 2

MSCONFIG\Services: AsusFanControlService => 2

MSCONFIG\Services: SkypeUpdate => 2

MSCONFIG\Services: SwitchBoard => 3

MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"

MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

MSCONFIG\startupreg: AdobeBridge => 

MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin

MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR

MSCONFIG\startupreg: EADM => "D:\Software\Origin\Origin.exe" -AutoStart

MSCONFIG\startupreg: YTDownloader => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
 

========================= Accounts: ==========================
 

Admin (S-1-5-21-499455562-2807403694-105458192-1000 - Administrator - Enabled) => C:\Users\Admin

Administrator (S-1-5-21-499455562-2807403694-105458192-500 - Administrator - Disabled)

Corinna (S-1-5-21-499455562-2807403694-105458192-1003 - Administrator - Enabled) => C:\Users\Corinna

Gast (S-1-5-21-499455562-2807403694-105458192-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-499455562-2807403694-105458192-1002 - Limited - Enabled)
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (01/31/2015 00:29:21 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (01/30/2015 00:21:43 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 35.0.1.5500, Zeitstempel: 0x54c1f9f3

Name des fehlerhaften Moduls: mozalloc.dll, Version: 35.0.1.5500, Zeitstempel: 0x54c1f224

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001425

ID des fehlerhaften Prozesses: 0xf84

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 

Error: (01/30/2015 10:45:19 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (01/29/2015 10:21:13 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm setup.exe, Version 2.1002.172.1357 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: efc
 

Startzeit: 01d03c08c68990f8
 

Endzeit: 0
 

Anwendungspfad: C:\Users\Corinna\AppData\Local\Temp\NVIDIA\GeForceExperienceSelfUpdate\17.12.8.0\setup.exe
 

Berichts-ID: b1abbaf2-a7fc-11e4-82d1-10c37b94eabc
 

Error: (01/29/2015 10:02:47 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (01/29/2015 10:00:14 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (01/29/2015 05:50:56 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (01/29/2015 03:34:51 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (01/29/2015 03:23:32 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (01/29/2015 03:23:29 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
 

System errors:

=============

Error: (02/01/2015 01:22:32 AM) (Source: volsnap) (EventID: 36) (User: )

Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 

Error: (01/31/2015 00:28:38 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/31/2015 00:27:57 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (01/30/2015 00:34:29 PM) (Source: volsnap) (EventID: 36) (User: )

Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 

Error: (01/30/2015 11:48:37 AM) (Source: volsnap) (EventID: 36) (User: )

Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 

Error: (01/30/2015 10:45:27 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/30/2015 10:44:45 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (01/29/2015 10:13:47 PM) (Source: volsnap) (EventID: 36) (User: )

Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 

Error: (01/29/2015 10:03:03 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/29/2015 10:02:21 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 
 

Microsoft Office Sessions:

=========================

Error: (01/31/2015 00:29:21 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (01/30/2015 00:21:43 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe35.0.1.550054c1f9f3mozalloc.dll35.0.1.550054c1f2248000000300001425f8401d03c7db7b6614dC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll2a9e240f-a872-11e4-9d00-10c37b94eabc
 

Error: (01/30/2015 10:45:19 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (01/29/2015 10:21:13 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: setup.exe2.1002.172.1357efc01d03c08c68990f80C:\Users\Corinna\AppData\Local\Temp\NVIDIA\GeForceExperienceSelfUpdate\17.12.8.0\setup.exeb1abbaf2-a7fc-11e4-82d1-10c37b94eabc
 

Error: (01/29/2015 10:02:47 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (01/29/2015 10:00:14 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (01/29/2015 05:50:56 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (01/29/2015 03:34:51 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (01/29/2015 03:23:32 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Corinna\Downloads\SoftonicDownloader_fuer_storyboard-pro.exe
 

Error: (01/29/2015 03:23:29 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Corinna\Downloads\SoftonicDownloader_fuer_storyboard-pro.exe
 
 

CodeIntegrity Errors:

===================================

  Date: 2014-12-11 14:36:30.140

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wachidrouter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:36:30.101

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wachidrouter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:35:23.580

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wachidrouter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:35:23.540

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wachidrouter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:32:07.143

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wachidrouter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:32:07.113

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wachidrouter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:29:25.615

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wacomrouterfilter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:29:25.568

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wacomrouterfilter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:28:47.102

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wacomrouterfilter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:28:47.062

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wacomrouterfilter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz

Percentage of memory in use: 27%

Total physical RAM: 16326.63 MB

Available physical RAM: 11827.89 MB

Total Pagefile: 32651.45 MB

Available Pagefile: 27316.95 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: (System) (Fixed) (Total:119.14 GB) (Free:7.71 GB) NTFS

Drive d: (1.Platte) (Fixed) (Total:931.51 GB) (Free:601.63 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 9DBF85DC)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=119.1 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1B33C48C)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Adware/Junkware/Toolbars entfernen

(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!)

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Code:

# AdwCleaner v4.109 - Bericht erstellt am 01/02/2015 um 02:49:41

# Aktualisiert 24/01/2015 von Xplode

# Database : 2015-01-26.1 [Live]

# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)

# Benutzername : Corinna - VOGEL-PC

# Gestartet von : C:\Users\Corinna\Desktop\AdwCleaner_4.109.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 
 

***** [ Tasks ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}

Schlüssel Gelöscht : HKCU\Software\OCS
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17496
 
 

-\\ Mozilla Firefox v35.0.1 (x86 de)
 
 

-\\ Google Chrome v40.0.2214.94
 
 

*************************
 

AdwCleaner[R1].txt - [7950 octets] - [29/01/2015 15:23:03]

AdwCleaner[R2].txt - [1713 octets] - [29/01/2015 21:58:38]

AdwCleaner[R3].txt - [1062 octets] - [29/01/2015 22:01:10]

AdwCleaner[R4].txt - [1357 octets] - [01/02/2015 02:48:51]

AdwCleaner[S1].txt - [6086 octets] - [29/01/2015 15:31:55]

AdwCleaner[S2].txt - [1774 octets] - [29/01/2015 21:59:21]

AdwCleaner[S3].txt - [1124 octets] - [29/01/2015 22:01:54]

AdwCleaner[S4].txt - [1232 octets] - [01/02/2015 02:49:41]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [1292 octets] ##########

Code:

 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.4.1 (12.28.2014:1)

OS: Windows 7 Professional x64

Ran by Corinna on 01.02.2015 at  2:57:28,38

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ Chrome
 

Successfully deleted: [Folder] C:\Users\Corinna\appdata\local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 01.02.2015 at  3:00:30,68

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2015

Ran by Corinna (administrator) on VOGEL-PC on 01-02-2015 03:01:08

Running from C:\Users\Corinna\Desktop

Loaded Profiles: Corinna (Available profiles: Admin & Corinna)

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe

() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\System32\wisptis.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Kinect Drivers\Service\KinectManagementService.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Microsoft Corporation) C:\Windows\System32\wisptis.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

() C:\Users\Corinna\AppData\Local\winengine\rkr0.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe

(Autodesk, Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe

(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe

(Autodesk Inc.) C:\Users\Corinna\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe

(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe

(McAfee, Inc.) C:\Program Files\McAfee\MAT\McPvTray.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.3.336.0\McCSPServiceHost.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\Core\mchost.exe

(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7569112 2014-03-31] (Realtek Semiconductor)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)

HKLM-x32\...\Run: [ADSK DLMSession] => C:\Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe [1627032 2014-02-05] (Autodesk, Inc.)

HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [493960 2014-12-05] (Autodesk Inc.)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe [643576 2014-11-13] (McAfee, Inc.)

HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2015-01-16] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)

HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKLM\...\Policies\Explorer: [NoFolderOptions] 0

HKLM\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Run: [LogitechSoftwareUpdate] => "C:\Program Files (x86)\Logitech\Video\ManifestEngine.exe" boot

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6482200 2014-09-26] (Piriform Ltd)

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Run: [AshSnap] => C:\Program Files (x86)\Ashampoo\Ashampoo Snap 7\ashsnap.exe

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Run: [Akamai NetSession Interface] => "C:\Users\Corinna\AppData\Local\Akamai\netsession_win.exe"

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Run: [winengine] => C:\Users\Corinna\AppData\Local\winengine\rkr0.exe [511416 2014-12-12] ()

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Run: [winengine2] => C:\Users\Corinna\AppData\Local\winengine\rkr1.exe [511416 2014-12-12] ()

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\MountPoints2: {119444e5-4638-11e4-a3f1-10c37b94eabc} - E:\pushinst.exe

Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Corinna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:59718;https=127.0.0.1:59718

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKU\S-1-5-21-499455562-2807403694-105458192-1003\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-499455562-2807403694-105458192-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-499455562-2807403694-105458192-1003 -> {C0576DF6-8B20-43B6-9816-5B4A839520BF} URL = https://de.search.yahoo.com/search?fr=mcafee&type=B011DE0D20150110&p={SearchTerms}

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.)

Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Corinna\AppData\Roaming\Mozilla\Firefox\Profiles\i5twp7nq.default-1422564675631

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll ()

FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml

FF Extension: Adblock Plus - C:\Users\Corinna\AppData\Roaming\Mozilla\Firefox\Profiles\i5twp7nq.default-1422564675631\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-30]

FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2015-01-10]
 

Chrome: 

=======

CHR HomePage: Default -> hxxp://www.trovi.com/?gd=&ctid=CT3331617&octid=EB_ORIGINAL_CTID&ISID=M4E026FD5-8890-434C-964F-6E1E66F78E31&SearchSource=55&CUI=&UM=8&UP=SP8BA75DC3-5596-420A-9B25-CCAFF2921BA5&SSPV=

CHR StartupUrls: Default -> "hxxp://www.trovi.com/?gd=&ctid=CT3331617&octid=EB_ORIGINAL_CTID&ISID=M4E026FD5-8890-434C-964F-6E1E66F78E31&SearchSource=55&CUI=&UM=8&UP=SP8BA75DC3-5596-420A-9B25-CCAFF2921BA5&SSPV="

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}

CHR Profile: C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Präsentationen) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-09]

CHR Extension: (Google Docs) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-09]

CHR Extension: (Google Drive) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-09]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-10]

CHR Extension: (YouTube) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-09]

CHR Extension: (Adblock Plus) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-16]

CHR Extension: (Google-Suche) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-09]

CHR Extension: (Google Tabellen) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-09]

CHR Extension: (Google Wallet) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-09]

CHR Extension: (Google Mail) - C:\Users\Corinna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-09]

CHR HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - No Path
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-01-28] ()

R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2014-01-28] (ASUSTeK Computer Inc.)

S4 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.05.08\AsusFanControlService.exe [387896 2014-04-06] (ASUSTeK Computer Inc.)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation)

R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [336088 2014-11-13] (McAfee, Inc.)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)

R2 KinectManagement; C:\Program Files\Microsoft Kinect Drivers\Service\KinectManagementService.exe [98816 2013-08-20] (Microsoft Corporation) [File not signed]

R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [660544 2014-12-04] (McAfee, Inc.)

R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.3.336.0\McCSPServiceHost.exe [422632 2014-11-21] (McAfee, Inc.)

R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [336088 2014-11-13] (McAfee, Inc.)

R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [336088 2014-11-13] (McAfee, Inc.)

S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [604448 2014-12-17] (McAfee, Inc.)

R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [336088 2014-11-13] (McAfee, Inc.)

R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [336088 2014-11-13] (McAfee, Inc.)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [228000 2014-12-19] (McAfee, Inc.)

R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [312952 2014-12-20] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [221320 2014-12-19] (McAfee, Inc.)

R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [336088 2014-11-13] (McAfee, Inc.)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation)

S3 Origin Client Service; D:\Software\Origin\OriginClientService.exe [1903472 2014-12-27] (Electronic Arts)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-10-20] ()

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)

S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [671000 2014-11-04] (Wacom Technology, Corp.)

S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-28] ()

R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-24] ()

S3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70984 2014-12-19] (McAfee, Inc.)

S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-11] (Intel Corporation)

S3 KinectCamera; C:\Windows\System32\Drivers\kinectcamera.sys [192512 2013-08-20] (Microsoft Corporation)

R2 McPvDrv; C:\Windows\system32\drivers\McPvDrv.sys [76064 2014-10-09] (McAfee, Inc.)

R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation)

R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [368904 2014-12-19] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [340192 2014-12-19] (McAfee, Inc.)

R0 mfedisk; C:\Windows\System32\DRIVERS\mfedisk.sys [100080 2014-12-19] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [532424 2014-12-19] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [886488 2014-12-19] (McAfee, Inc.)

R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [482600 2014-11-08] (McAfee, Inc.)

S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [100720 2014-11-08] (McAfee, Inc.)

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [349328 2014-12-19] (McAfee, Inc.)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)

S3 psdrv3; C:\Windows\System32\Drivers\psdrv3.sys [24472 2012-05-24] (Prime Sense Ltd.)

S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

S3 zlportio; \??\C:\UltraStar Deluxe CMD Edition\zlportio.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-01 03:01 - 2015-02-01 03:01 - 00027243 _____ () C:\Users\Corinna\Desktop\FRST.txt

2015-02-01 03:00 - 2015-02-01 03:00 - 00000786 _____ () C:\Users\Corinna\Desktop\JRT.txt

2015-02-01 02:50 - 2015-02-01 02:50 - 00001372 _____ () C:\Users\Corinna\Desktop\AdwCleaner[S4].txt

2015-02-01 02:46 - 2015-02-01 02:46 - 02194432 _____ () C:\Users\Corinna\Desktop\AdwCleaner_4.109.exe

2015-02-01 02:46 - 2015-02-01 02:46 - 01707939 _____ (Thisisu) C:\Users\Corinna\Desktop\JRT.exe

2015-02-01 02:24 - 2015-02-01 02:25 - 00051147 _____ () C:\Users\Corinna\Downloads\FRST.txt

2015-02-01 02:24 - 2015-02-01 02:25 - 00050971 _____ () C:\Users\Corinna\Downloads\Addition.txt

2015-02-01 02:23 - 2015-02-01 03:01 - 00000000 ____D () C:\FRST

2015-02-01 02:23 - 2015-02-01 02:23 - 02131456 _____ (Farbar) C:\Users\Corinna\Desktop\FRST64.exe

2015-01-31 23:31 - 2015-02-01 00:01 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2015-01-31 23:31 - 2015-01-31 23:32 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2015-01-31 23:31 - 2015-01-31 23:31 - 00001397 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk

2015-01-31 23:31 - 2015-01-31 23:31 - 00001385 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk

2015-01-31 23:31 - 2015-01-31 23:31 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2015-01-31 23:31 - 2015-01-31 23:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2

2015-01-31 23:31 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe

2015-01-31 23:24 - 2015-01-31 23:24 - 01191200 _____ () C:\Users\Corinna\Downloads\SpyBot Search Destroy - CHIP-Installer.exe

2015-01-30 13:11 - 2015-01-09 23:27 - 00621200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2015-01-30 13:10 - 2015-01-13 05:15 - 01540240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 32102544 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 25459856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 24765584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 20465296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 17250776 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 13295552 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 13210248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 10774544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 10714488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 10274448 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2015-01-30 13:10 - 2015-01-10 09:07 - 03607184 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 03245712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 01895240 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434725.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 01556808 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434725.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00994712 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00969360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00942736 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00929424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00906384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00877488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00496456 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00399688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00390472 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00353040 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00345744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00305320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00177624 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2015-01-30 13:10 - 2015-01-10 09:07 - 00164568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2015-01-30 12:16 - 2015-01-30 12:16 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2015-01-30 12:15 - 2015-01-30 12:16 - 00000000 ____D () C:\Program Files\Java

2015-01-30 12:15 - 2015-01-30 12:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit

2015-01-30 11:20 - 2015-01-30 11:20 - 00000000 ____D () C:\OETemp

2015-01-29 23:02 - 2015-01-29 23:02 - 00001165 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-01-29 23:02 - 2015-01-29 23:02 - 00001153 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-01-29 15:30 - 2015-01-29 15:30 - 00000000 ____D () C:\Users\Corinna\AppData\Local\FileMaker

2015-01-29 15:23 - 2015-02-01 02:49 - 00000000 ____D () C:\AdwCleaner

2015-01-29 12:21 - 2015-01-29 12:21 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\QuickScan

2015-01-29 12:15 - 2015-01-29 12:15 - 00000000 ____D () C:\Users\Corinna\AppData\Local\winengine

2015-01-26 23:21 - 2015-01-29 23:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-01-26 21:41 - 2015-01-30 13:07 - 00000000 ____D () C:\Users\Corinna\Desktop\Das.ist.das.Ende.German.DL.1080p.BluRay.x264-EXQUiSiTE

2015-01-26 11:47 - 2014-10-09 14:32 - 00076064 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\McPvDrv.sys

2015-01-26 11:47 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys

2015-01-25 21:08 - 2015-01-25 21:08 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\Notepad++

2015-01-25 21:06 - 2015-01-25 21:06 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\SYSTEMAX Software Development

2015-01-25 21:06 - 2015-01-25 21:06 - 00000000 ____D () C:\ProgramData\SYSTEMAX Software Development

2015-01-25 21:03 - 2015-01-25 21:03 - 00000000 ____D () C:\Windows\Paint Tool Sai

2015-01-25 20:58 - 2015-01-25 20:58 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\SYSTEMAX Software Development

2015-01-17 19:03 - 2015-01-30 13:07 - 00000000 ____D () C:\Users\Corinna\Desktop\Taylor Swift

2015-01-16 14:49 - 2015-01-16 14:49 - 00000000 ____D () C:\ProgramData\ALM

2015-01-16 14:47 - 2015-01-16 14:47 - 00000000 ____D () C:\Users\Admin\Adobe Flash Builder 4.6

2015-01-16 14:42 - 2015-01-16 14:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Master Collection CS6

2015-01-16 14:42 - 2015-01-16 14:51 - 00000000 ____D () C:\Program Files\Common Files\Adobe

2015-01-16 12:14 - 2015-01-16 12:14 - 00000000 ____D () C:\Program Files (x86)\VideoLAN

2015-01-16 02:43 - 2015-01-16 02:43 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\QuickScan

2015-01-16 02:43 - 2015-01-16 02:43 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Opera Software

2015-01-16 02:43 - 2015-01-16 02:43 - 00000000 ____D () C:\Users\Admin\AppData\Local\Opera Software

2015-01-16 02:42 - 2015-01-16 03:04 - 00000000 ____D () C:\Program Files (x86)\Opera

2015-01-16 02:37 - 2015-01-16 02:37 - 00000625 _____ () C:\Users\Admin\Desktop\JRT.txt

2015-01-16 02:34 - 2015-01-16 02:34 - 00000000 ____D () C:\Windows\ERUNT

2015-01-16 02:08 - 2015-01-16 14:30 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2015-01-16 02:08 - 2015-01-16 02:08 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-01-15 15:12 - 2015-01-15 15:12 - 00000000 ____D () C:\Users\Public\Documents\Adobe

2015-01-14 12:47 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2015-01-14 12:47 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2015-01-14 12:47 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-01-14 12:47 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-01-14 12:47 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-01-14 12:47 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-01-14 12:47 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-01-14 12:47 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-01-14 12:47 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-01-14 12:47 - 2014-12-11 18:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2015-01-14 12:47 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2015-01-14 12:47 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll

2015-01-14 12:47 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

2015-01-14 00:29 - 2015-01-14 12:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird

2015-01-10 12:53 - 2015-01-10 12:53 - 00000000 ____D () C:\Windows\system32\appmgmt

2015-01-10 11:45 - 2015-02-01 02:51 - 00000000 __RSD () C:\Users\Corinna\Documents\McAfee-Tresore

2015-01-10 11:45 - 2015-01-31 12:27 - 00000000 ____D () C:\Program Files (x86)\McAfee

2015-01-10 11:45 - 2015-01-29 12:23 - 00000000 ____D () C:\Program Files\McAfee

2015-01-10 11:45 - 2015-01-16 14:42 - 00000000 __RSD () C:\Users\Admin\Documents\McAfee-Tresore

2015-01-10 11:45 - 2015-01-10 11:45 - 00001922 _____ () C:\Users\Public\Desktop\McAfee Total Protection.lnk

2015-01-10 11:45 - 2015-01-10 11:45 - 00000000 ____D () C:\Users\Corinna\AppData\Local\McAfee File Lock

2015-01-10 11:45 - 2015-01-10 11:45 - 00000000 ____D () C:\Users\Admin\AppData\Local\McAfee File Lock

2015-01-10 11:45 - 2015-01-10 11:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee

2015-01-10 11:45 - 2015-01-10 11:45 - 00000000 ____D () C:\Program Files\McAfee.com

2015-01-10 11:45 - 2015-01-10 11:45 - 00000000 ____D () C:\Program Files (x86)\McAfee.com

2015-01-10 11:22 - 2015-01-29 15:33 - 00000000 ____D () C:\ProgramData\McAfee

2015-01-10 11:22 - 2015-01-26 11:48 - 00000000 ____D () C:\Program Files\Common Files\McAfee

2015-01-10 11:22 - 2014-12-19 10:51 - 00221320 _____ (McAfee, Inc.) C:\Windows\system32\mfevtps.exe

2015-01-10 10:19 - 2015-01-10 10:19 - 00000000 _____ () C:\autoexec.bat

2015-01-06 02:19 - 2015-01-06 02:19 - 00000000 ____D () C:\Users\Corinna\Documents\MB

2015-01-06 02:18 - 2015-01-06 02:18 - 00001824 _____ () C:\Users\Public\Desktop\MotionBuilder 2015.lnk

2015-01-06 01:57 - 2015-01-29 11:43 - 00000000 ____D () C:\Autodesk

2015-01-06 01:28 - 2015-01-06 01:28 - 00000000 ____D () C:\Users\Corinna\Documents\FBX Converter 2013.3

2015-01-06 00:55 - 2015-01-06 00:55 - 00000763 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Autodesk FBX Converter x64 2013.lnk
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-01 03:00 - 2014-08-03 10:55 - 01156974 _____ () C:\Windows\WindowsUpdate.log

2015-02-01 02:57 - 2009-07-14 05:45 - 00032208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-02-01 02:57 - 2009-07-14 05:45 - 00032208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-02-01 02:56 - 2010-11-21 07:50 - 00700130 _____ () C:\Windows\system32\perfh007.dat

2015-02-01 02:56 - 2010-11-21 07:50 - 00149768 _____ () C:\Windows\system32\perfc007.dat

2015-02-01 02:56 - 2009-07-14 06:13 - 01622706 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-02-01 02:55 - 2014-08-06 19:06 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-02-01 02:52 - 2014-08-03 11:21 - 00006462 _____ () C:\Windows\SysWOW64\Gms.log

2015-02-01 02:50 - 2014-12-09 17:28 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-02-01 02:50 - 2014-10-24 12:26 - 00793380 _____ () C:\Windows\PFRO.log

2015-02-01 02:50 - 2014-10-20 10:36 - 00054716 _____ () C:\Windows\setupact.log

2015-02-01 02:50 - 2014-08-07 18:35 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\Dropbox

2015-02-01 02:50 - 2014-08-06 09:19 - 00000000 ____D () C:\ProgramData\NVIDIA

2015-02-01 02:50 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-02-01 02:33 - 2014-12-09 17:28 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-01-31 23:22 - 2014-09-29 15:55 - 00000000 ____D () C:\Program Files (x86)\Steam

2015-01-30 13:11 - 2014-08-06 09:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2015-01-30 12:13 - 2014-08-06 19:04 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2015-01-30 12:13 - 2014-08-06 19:04 - 00000000 ____D () C:\Program Files (x86)\Java

2015-01-30 11:20 - 2014-08-03 11:07 - 00000000 ____D () C:\ProgramData\Package Cache

2015-01-30 10:44 - 2014-08-06 18:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-01-29 13:44 - 2014-09-21 18:36 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\vlc

2015-01-29 12:23 - 2014-08-07 18:23 - 00001427 _____ () C:\Users\Corinna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-01-29 11:54 - 2014-08-06 16:07 - 00000000 ____D () C:\Program Files\Autodesk

2015-01-29 11:44 - 2014-08-07 18:23 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\Autodesk

2015-01-27 16:54 - 2014-09-28 16:33 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2015-01-26 17:02 - 2014-08-07 18:23 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\Adobe

2015-01-25 23:15 - 2014-10-20 10:27 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2015-01-25 20:59 - 2014-08-07 18:23 - 00000000 ____D () C:\Users\Corinna\AppData\Local\VirtualStore

2015-01-25 00:55 - 2014-08-06 19:06 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-01-24 23:55 - 2014-08-06 19:06 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-01-24 23:55 - 2014-08-06 19:06 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-01-24 20:46 - 2014-08-07 18:23 - 00000000 ____D () C:\Users\Corinna\AppData\Local\Adobe

2015-01-17 13:02 - 2009-07-14 05:45 - 04964056 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-01-16 15:09 - 2014-05-30 09:50 - 00000000 ___HD () C:\Users\Corinna\AppData\Local\TT8rdoNDbc

2015-01-16 15:03 - 2014-08-07 18:24 - 00070872 _____ () C:\Users\Corinna\AppData\Local\GDIPFONTCACHEV1.DAT

2015-01-16 15:01 - 2014-09-21 14:03 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe

2015-01-16 15:01 - 2014-08-03 11:18 - 00070872 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT

2015-01-16 14:51 - 2014-08-06 20:22 - 00000000 ____D () C:\Program Files (x86)\Adobe

2015-01-16 14:50 - 2014-08-06 20:21 - 00000000 ____D () C:\Program Files\Adobe

2015-01-16 14:47 - 2014-08-03 10:55 - 00000000 ____D () C:\Users\Admin

2015-01-16 14:44 - 2014-08-06 20:20 - 00000000 ____D () C:\ProgramData\Adobe

2015-01-16 13:14 - 2014-08-08 09:14 - 00000000 ____D () C:\Users\Corinna\AppData\Roaming\Skype

2015-01-16 12:16 - 2014-08-08 09:14 - 00000000 ___RD () C:\Program Files (x86)\Skype

2015-01-16 12:16 - 2014-08-08 09:14 - 00000000 ____D () C:\ProgramData\Skype

2015-01-16 12:15 - 2014-08-06 19:04 - 00000000 ____D () C:\ProgramData\Oracle

2015-01-16 12:15 - 2014-08-06 19:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-01-16 12:14 - 2014-08-06 18:19 - 00001072 _____ () C:\Users\Public\Desktop\VLC media player.lnk

2015-01-16 07:41 - 2014-08-06 09:58 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll

2015-01-16 07:41 - 2014-08-06 09:58 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll

2015-01-16 07:41 - 2014-08-06 09:19 - 01514528 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2015-01-16 07:41 - 2014-08-06 09:19 - 01278920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2015-01-16 03:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing

2015-01-16 03:04 - 2014-08-03 10:56 - 00001421 _____ () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-01-16 02:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System

2015-01-16 02:17 - 2014-12-18 11:37 - 00000000 ____D () C:\ProgramData\YqqUBiXNSeA

2015-01-16 02:17 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Cursors

2015-01-16 02:08 - 2014-09-28 17:45 - 00183808 ___SH () C:\Users\Corinna\Desktop\Thumbs.db

2015-01-14 21:08 - 2014-08-03 12:02 - 00000000 ____D () C:\Windows\system32\MRT

2015-01-14 21:06 - 2014-08-03 12:02 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-01-13 22:45 - 2014-11-13 16:36 - 00000132 _____ () C:\Users\Corinna\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen

2015-01-12 23:56 - 2014-09-21 19:58 - 00000000 ____D () C:\Users\Public\Documents\ZBrushData

2015-01-10 12:53 - 2014-12-09 17:28 - 00000000 ____D () C:\Users\Admin\AppData\Local\Google

2015-01-10 12:53 - 2014-12-09 17:28 - 00000000 ____D () C:\Program Files (x86)\Google

2015-01-10 12:48 - 2014-12-27 18:48 - 00000000 ____D () C:\ProgramData\Origin

2015-01-10 12:47 - 2014-08-06 18:23 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Dropbox

2015-01-10 12:46 - 2014-08-06 20:58 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2015-01-10 12:44 - 2014-12-29 23:28 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Origin

2015-01-10 11:35 - 2014-08-03 12:40 - 00000000 ____D () C:\ProgramData\AVAST Software

2015-01-10 10:49 - 2014-09-29 09:58 - 00002032 _____ () C:\Users\Corinna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk

2015-01-10 09:07 - 2014-12-28 02:24 - 16009120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2015-01-10 09:07 - 2014-08-06 09:18 - 18566296 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2015-01-10 09:07 - 2014-08-06 09:18 - 14115944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2015-01-10 09:07 - 2014-08-06 09:18 - 03298816 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2015-01-10 09:07 - 2014-08-06 09:18 - 02902456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2015-01-10 09:07 - 2014-08-06 09:18 - 00027441 _____ () C:\Windows\system32\nvinfo.pb

2015-01-10 00:30 - 2014-08-06 09:19 - 06860432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2015-01-10 00:30 - 2014-08-06 09:19 - 03517256 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2015-01-10 00:29 - 2014-08-06 09:19 - 02558608 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2015-01-10 00:29 - 2014-08-06 09:19 - 00935056 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2015-01-10 00:29 - 2014-08-06 09:19 - 00385352 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2015-01-10 00:29 - 2014-08-06 09:19 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2015-01-09 20:47 - 2014-08-06 09:19 - 04173527 _____ () C:\Windows\system32\nvcoproc.bin

2015-01-06 04:36 - 2010-11-21 04:27 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2015-01-06 02:20 - 2014-08-06 11:00 - 00000000 ____D () C:\ProgramData\Autodesk

2015-01-06 02:18 - 2014-08-06 11:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk

2015-01-06 01:58 - 2014-08-06 10:58 - 00000000 ____D () C:\Users\Admin\AppData\Local\Akamai

2015-01-05 11:53 - 2014-12-13 01:56 - 00000000 ___RD () C:\Users\Corinna\Google Drive
 

==================== Files in the root of some directories =======
 

2014-10-15 09:12 - 2014-10-15 09:12 - 4117346 _____ () C:\Program Files (x86)\MotioninJoy_071001_signed.zip

2014-11-13 16:36 - 2015-01-13 22:45 - 0000132 _____ () C:\Users\Corinna\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen

2014-12-17 11:40 - 2014-12-17 12:32 - 0003584 _____ () C:\Users\Corinna\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2014-08-03 11:09 - 2014-08-03 11:09 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 

Some content of TEMP:

====================

C:\Users\Admin\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpex3ofo.dll

C:\Users\Admin\AppData\Local\Temp\insHv7.exe

C:\Users\Admin\AppData\Local\Temp\msscct32.dll

C:\Users\Admin\AppData\Local\Temp\Quarantine.exe

C:\Users\Admin\AppData\Local\Temp\sqlite3.dll

C:\Users\Admin\AppData\Local\Temp\System.Data.SQLite.dll

C:\Users\Admin\AppData\Local\Temp\System.Data.SQLitedcaac091-0d0d-4776-afc9-f74db7594545.dll

C:\Users\Corinna\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpczpzd6.dll

C:\Users\Corinna\AppData\Local\Temp\Quarantine.exe

C:\Users\Corinna\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-01-24 00:10
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2015

Ran by Corinna at 2015-02-01 03:01:28

Running from C:\Users\Corinna\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}

FW: McAfee Firewall (Disabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)

Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)

Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)

Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version:  - Ubisoft)

Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk)

Autodesk DirectConnect 2015 64-bit (HKLM\...\Autodesk DirectConnect 2015 64-bit) (Version: 9.0.56.4 - Autodesk)

Autodesk DirectConnect 2015 64-bit (Version: 9.0.56.4 - Autodesk) Hidden

Autodesk DirectConnect 2015 64-bit Hotfix1 (HKLM\...\Autodesk DirectConnect 2015 64-bit_9001) (Version: 9.0.56.4 - Autodesk)

Autodesk Download Manager (HKLM-x32\...\{C897D9EC-13C6-4A22-ABF7-33F2126A7DB6}) (Version: 3.0.8.0 - Autodesk, Inc.)

Autodesk FBX Converter x64 2013.3 (HKLM-x32\...\Autodesk FBX Converter x64 2013.3) (Version:  - Autodesk)

Autodesk Maya 2015 (HKLM\...\Autodesk Maya 2015) (Version: 15.5.2119.0 - Autodesk)

Autodesk Maya 2015 (Version: 15.5.2119.0 - Autodesk) Hidden

Autodesk Maya 2015 SP2 (Version: 15.2.1633.0 - Autodesk) Hidden

Autodesk Maya 2015 SP3 (Version: 15.3.1808.0 - Autodesk) Hidden

Autodesk Maya 2015 SP5 (HKLM\...\Autodesk Maya 2015 SP5) (Version: 15.5.2119.0 - Autodesk)

Autodesk MotionBuilder 2015 (HKLM\...\Autodesk MotionBuilder 2015) (Version: 15.0.0.74 - Autodesk)

Autodesk MotionBuilder 2015 (Version: 15.0.0.74 - Autodesk) Hidden

Autodesk Mudbox 2015 (HKLM\...\Autodesk Mudbox 2015) (Version: 9.0.1.89 - Autodesk)

Autodesk Mudbox 2015 (Version: 9.0.1.89 - Autodesk) Hidden

Autodesk Mudbox 2015 SP1 (HKLM\...\Autodesk Mudbox 2015 SP1) (Version: 9.0.1.89 - Autodesk)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

bl (x32 Version: 1.0.0 - Your Company Name) Hidden

Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - )

Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.)

Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version:  - )

Canon MG5300 series Benutzerregistrierung (HKLM-x32\...\Canon MG5300 series Benutzerregistrierung) (Version:  - )

Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version:  - Canon Inc.)

Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version:  - )

Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )

CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform)

DARK SOULS™ II (HKLM-x32\...\Steam App 236430) (Version:  - FromSoftware, Inc)

Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)

Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.3.18.1010 - Electronic Arts Inc.)

Dropbox (HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)

faceshift Maya Plugin (HKLM-x32\...\faceshiftMayaPlugin) (Version: 1.2.0 - faceshift)

faceshift trial 64-bit (HKLM-x32\...\fsTrial_2014.1.05) (Version: 2014.1.05 - faceshift)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.94 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)

Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)

Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.14 - Intel(R) Corporation) Hidden

iPi Mocap Studio 3 (HKLM-x32\...\{C1FC9B0D-2211-4F42-9201-E7B00CC237BB}) (Version: 3.0.2.171 - iPi Soft LLC)

iPi Recorder 3 (HKLM-x32\...\{D57B9811-DFFB-48C2-8C7D-24AFF68B0BA8}) (Version: 3.0.1.32 - iPi Soft LLC)

iPi Shell Extension for Project Files (HKLM\...\{637F192E-CC0D-443D-988A-B7CB8CD43F84}) (Version: 3.0.9 - iPi Soft LLC)

iPi Shell Extension for Video Files (HKLM\...\{2018A0FA-1DB2-4BC7-9471-D8864C939651}) (Version: 3.0.9 - iPi Soft LLC)

iPi WinUSB Driver Registration for Sony PS3 Eye Camera x64 (HKLM-x32\...\{58F95A3A-124F-4706-8AAE-0B63B02BF3A6}) (Version: 1.4.0 - iPi Soft LLC)

Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)

Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)

Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)

Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Java SE Development Kit 8 Update 31 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180310}) (Version: 8.0.310.13 - Oracle Corporation)

Kinect for Windows Drivers v1.8 (HKLM\...\{AA62B868-5D5C-46CF-BA88-386BE71D4F87}) (Version: 1.8.0.595 - Microsoft Corporation)

Kinect for Windows Runtime v1.8 (HKLM\...\{2700FAD3-F82C-4ED1-862C-5F425B2A88E6}) (Version: 1.8.0.595 - Microsoft Corporation)

Kinect for Windows SDK v1.8 (HKLM\...\{6702DAC4-51E7-440C-8012-9C0AE9D524DB}) (Version: 1.8.0.595 - Microsoft Corporation)

Kinect for Windows Speech Recognition Language Pack (en-US) (HKLM-x32\...\{8AAA44BB-487E-4D01-AF76-484ACB90DBFE}) (Version: 11.0.7400.336 - Microsoft Corporation)

McAfee Total Protection (HKLM-x32\...\MSC) (Version: 14.0.207 - McAfee, Inc.)

mental ray renderer for Autodesk Maya 2015 (HKLM\...\{BDF821F0-D64C-421D-0052-A9B995B20873}) (Version: 15.5.2119.0 - mental ray)

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Office Home and Student 2013 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 15.0.4675.1003 - Microsoft Corporation)

Microsoft Office Korrekturhilfen 2013 - Deutsch (HKLM-x32\...\{90150000-001F-0407-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)

Microsoft Server Speech Platform Runtime (x64) (HKLM\...\{3B433087-E62E-4BF5-97F9-4AF6E1C2409C}) (Version: 11.0.7400.345 - Microsoft Corporation)

Microsoft Server Speech Platform Runtime (x86) (HKLM-x32\...\{22CB8ED7-DF57-4864-BD04-F63B9CE4B494}) (Version: 11.0.7400.345 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SkyDrive (HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\SkyDriveSetup.exe) (Version: 16.4.6012.0828 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 3.0 (HKLM-x32\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation)

Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)

MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)

Mozilla Firefox 35.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 35.0.1 - Mozilla)

Mozilla Thunderbird 31.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.4.0 (x86 de)) (Version: 31.4.0 - Mozilla)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.25 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)

NVIDIA Grafiktreiber 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.25 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden

OpenNI 1.5.4.0 for Windows 64-bit (HKLM\...\{C6EE4454-8B2E-4AA8-BF72-53E12A6E963B}) (Version: 1.5.4.0 - PrimeSense)

Origin (HKLM-x32\...\Origin) (Version: 9.4.11.2806 - Electronic Arts, Inc.)

PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden

ph (x32 Version: 1.0.0 - Your Company Name) Hidden

PrimeSense Sensor 5.1.2.1 for Windows 64-bit (HKLM\...\{DA7BAE65-8220-482C-B0FD-526FC0DD3634}) (Version: 5.1.2.1 - PrimeSense)

PrimeSense Sensor KinectMod 5.1.2.1 for Windows 64-bit (HKLM\...\{535F8038-99AF-416F-B070-466544C50883}) (Version: 5.1.2.1 - PrimeSense)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.77.1126.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7213 - Realtek Semiconductor Corp.)

SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

Spotify (HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Spotify) (Version: 0.9.14.13.gba5645ad - Spotify AB)

Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

The Evil Within (HKLM-x32\...\Steam App 268050) (Version:  - Tango Gameworks)

Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)

UltraStar Creator (HKLM-x32\...\UltraStar Creator) (Version: 1.1.0 - usc Community)

UltraStar Deluxe CMD Edition (HKLM-x32\...\UltraStar Deluxe CMD Edition) (Version: r9.22 - USDX Team)

Universal Adb Driver (HKLM-x32\...\{D9C4202E-6D51-4B06-A8F1-22316E654BCA}) (Version: 1.0.0 - ClockworkMod)

Uplay (HKLM-x32\...\Uplay) (Version: 4.0 - Ubisoft)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)

VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)

Wacom Tablett (HKLM\...\Wacom Tablet Driver) (Version: 6.3.10w2 - Wacom Technology Corp.)

WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)

WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)

Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices  (03/07/2012 ) (HKLM\...\0B624A43DD66DBF5CF3EDFA9741A364E688062A4) (Version: 03/07/2012  - GoPro)

Windows-Treiberpaket - PrimeSense (psdrv3) PrimeSense  (05/22/2012 3.1.3.1) (HKLM\...\306D8A3B302B0969C2826C7D167B3BBB394FC100) (Version: 05/22/2012 3.1.3.1 - PrimeSense)

Windows-Treiberpaket - PrimeSense (psdrv3) PrimeSense  (11/21/2011 3.1.3.1) (HKLM\...\F51BEF9C0C3A82026BF1EBA9F1F5F08EFF1BE870) (Version: 11/21/2011 3.1.3.1 - PrimeSense)

winengine (HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\winengine) (Version: 20.020 - Ad business Crown Solutions)

ZBrush 4R6 (HKLM-x32\...\ZBrush 4R6 4R6) (Version: 4R6 - Pixologic)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{322A9D7C-9DFF-4BCB-B82F-A311CBB7FFC9}\InprocServer32 -> 0x18EA81C906328324EC907DE2327EAB240AD13D32A7A775A07408B8C74D851229FF762871D04BF0154AE762785B67CE9D88 (the data entry has 122 more characters).

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{8C8AF8DA-4E9B-4DE1-B7AE-EF238008A485}\InprocServer32 -> 0x18922E42767FC12C56945AB07A6F6576F8124E8D82D8C5D2DA08981BC51C1BA0A66E5CB73B2AA1FDF5E7E9AE47E418D189 (the data entry has 1786 more characters).

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{9BBDFBEB-1118-46D4-9D66-2E0B56314B7C}\InprocServer32 -> 0x1868380AC98F74360E7484EFCDD07CD1B82F161FC7CA4B240B082F62D236F4065FC3E1A2970B265B1E114ED05371C09424 (the data entry has 154 more characters).

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Corinna\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Corinna\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Corinna\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Corinna\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828\amd64\FileSyncApi64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-499455562-2807403694-105458192-1003_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Corinna\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
 

==================== Restore Points  =========================
 
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 03:34 - 2014-08-06 20:41 - 00002823 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 192.150.14.69

127.0.0.1 192.150.18.101

127.0.0.1 192.150.18.108

127.0.0.1 192.150.22.40

127.0.0.1 192.150.8.100

127.0.0.1 192.150.8.118

127.0.0.1 209-34-83-73.ood.opsource.net

127.0.0.1 3dns-1.adobe.com

127.0.0.1 3dns-2.adobe.com

127.0.0.1 3dns-2.adobe.com

127.0.0.1 3dns-3.adobe.com

127.0.0.1 3dns-3.adobe.com

127.0.0.1 3dns-4.adobe.com

127.0.0.1 3dns.adobe.com

127.0.0.1 activate-sea.adobe.com

127.0.0.1 activate-sea.adobe.com

127.0.0.1 activate-sjc0.adobe.com

127.0.0.1 activate-sjc0.adobe.com

127.0.0.1 activate.adobe.com

127.0.0.1 activate.adobe.com

127.0.0.1 activate.wip.adobe.com

127.0.0.1 activate.wip1.adobe.com

127.0.0.1 activate.wip2.adobe.com

127.0.0.1 activate.wip3.adobe.com

127.0.0.1 activate.wip3.adobe.com

127.0.0.1 activate.wip4.adobe.com

127.0.0.1 adobe-dns-1.adobe.com

127.0.0.1 adobe-dns-2.adobe.com

127.0.0.1 adobe-dns-2.adobe.com
 

There are 36 more lines.
 
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {03100722-6AB9-4D9A-8467-F3A37D0013D4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-09] (Google Inc.)

Task: {04CDE39F-4C20-4F73-99D6-09DD1BB65B16} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)

Task: {0DAF909D-D8BB-4BCA-AB4F-C9E1AB858782} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)

Task: {22E9016A-6CD4-4CD9-BFC6-6F1FF79BE123} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe

Task: {2E761684-FA76-4E6C-8C1D-5D8C39AF69E1} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)

Task: {439BEA75-6F4D-4FB7-8B54-5E9A1CAAFBB7} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe

Task: {4A6B51B4-4900-4A78-8463-48E5D5C3367D} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {52FF6C29-5C26-4C14-8128-BF38946A01D7} - System32\Tasks\{CB59915B-0B9E-4416-A49A-4C26619C0F7E} => pcalua.exe -a C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe -c /M{532F6E8A-AF97-41C3-915F-39F718EC07D1} /l1031

Task: {5E75B899-2215-446C-BF5A-15707993C5F9} - System32\Tasks\ASUS\i-Setup121259 => C:\Windows\MEI1.5M\AsusSetup.exe [2013-09-09] (ASUSTeK Computer Inc.)

Task: {609C546E-7BCF-4FBE-9F4E-B63FF8910E12} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)

Task: {66388678-3B68-4A5A-BF28-5F8E405A42BC} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)

Task: {75642DC0-BE70-4593-977F-455630AA17BA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-24] (Adobe Systems Incorporated)

Task: {7C26A531-C024-4C1E-AC00-4C42F066155A} - System32\Tasks\ASUS\Push Notice Server Execute => C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe [2014-01-10] (ASUSTeK Computer Inc.)

Task: {887651F9-5C1E-4691-9C5E-26730F2B1BB3} - System32\Tasks\ASUS\i-Setup121554 => C:\Windows\Install\AsusSetup.exe [2013-09-09] (ASUSTeK Computer Inc.)

Task: {A6F6375E-F041-4270-9860-E740D223469A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-09-26] (Piriform Ltd)

Task: {A9B78A51-0167-4BF1-BE59-AB5E38DBFDC1} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation)

Task: {C2EB6A34-54C9-4DC8-914F-729E1F304494} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION

Task: {C3AA3EC2-50A5-46B9-90AB-23C3DDB91FD6} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION

Task: {C6298061-F314-4774-BC19-56664DBF6CBE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {D18E40D5-6762-4ED5-B16E-70B8D1116A2D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-09] (Google Inc.)

Task: {D4728F6F-E8AB-47DD-B645-D91CB3018681} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe

Task: {EF68A8DE-9A81-4E79-B6B6-A235A40C1675} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-08-03 11:03 - 2014-01-28 04:16 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe

2014-08-06 09:19 - 2015-01-10 00:29 - 00117392 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-08-06 12:34 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll

2014-09-28 16:33 - 2011-02-07 08:56 - 00138192 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

2014-10-20 11:53 - 2014-10-20 11:53 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-12-12 13:34 - 2014-12-12 13:34 - 00511416 _____ () C:\Users\Corinna\AppData\Local\winengine\rkr0.exe

2014-08-06 17:26 - 2014-04-11 09:53 - 00037176 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe

2014-12-11 14:43 - 2014-11-04 19:49 - 01356568 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll

2014-11-22 12:09 - 2014-09-23 14:36 - 08897696 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll

2014-08-06 15:08 - 2014-12-05 03:27 - 00055688 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll

2014-08-06 15:08 - 2014-12-05 03:27 - 00104328 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll

2014-08-03 11:03 - 2015-02-01 02:50 - 00028672 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll

2014-08-03 11:03 - 2014-01-28 04:16 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll

2015-01-31 23:31 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2015-01-31 23:31 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2015-01-31 23:31 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2015-01-31 23:31 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll

2015-01-31 23:31 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll

2015-02-01 02:50 - 2014-12-05 03:27 - 00104328 _____ () C:\Users\Corinna\AppData\Local\Autodesk\.AdskAppManager\R1\qjson0.dll

2014-03-20 10:43 - 2014-03-20 10:43 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\Users\Admin\AppData\Local\Temp:xML8Ondv5vd1nKBlbJ

AlternateDataStreams: C:\Users\Corinna\AppData\Local\TT8rdoNDbc:xYcyt4o7UHNHTZOEB4T7Tza9Dy
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service"
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\Services: asComSvc => 2

MSCONFIG\Services: asHmComSvc => 2

MSCONFIG\Services: AsusFanControlService => 2

MSCONFIG\Services: SkypeUpdate => 2

MSCONFIG\Services: SwitchBoard => 3

MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"

MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

MSCONFIG\startupreg: AdobeBridge => 

MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin

MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR

MSCONFIG\startupreg: EADM => "D:\Software\Origin\Origin.exe" -AutoStart

MSCONFIG\startupreg: YTDownloader => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
 

========================= Accounts: ==========================
 

Admin (S-1-5-21-499455562-2807403694-105458192-1000 - Administrator - Enabled) => C:\Users\Admin

Administrator (S-1-5-21-499455562-2807403694-105458192-500 - Administrator - Disabled)

Corinna (S-1-5-21-499455562-2807403694-105458192-1003 - Administrator - Enabled) => C:\Users\Corinna

Gast (S-1-5-21-499455562-2807403694-105458192-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-499455562-2807403694-105458192-1002 - Limited - Enabled)
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================
 

System errors:

=============
 

Microsoft Office Sessions:

=========================
 

CodeIntegrity Errors:

===================================

  Date: 2014-12-11 14:36:30.140

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wachidrouter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:36:30.101

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wachidrouter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:35:23.580

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wachidrouter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:35:23.540

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wachidrouter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:32:07.143

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wachidrouter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:32:07.113

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wachidrouter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:29:25.615

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wacomrouterfilter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:29:25.568

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wacomrouterfilter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:28:47.102

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wacomrouterfilter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-12-11 14:28:47.062

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\wacomrouterfilter.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz

Percentage of memory in use: 16%

Total physical RAM: 16326.63 MB

Available physical RAM: 13700.64 MB

Total Pagefile: 32651.45 MB

Available Pagefile: 29808.54 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: (System) (Fixed) (Total:119.14 GB) (Free:7.76 GB) NTFS

Drive d: (1.Platte) (Fixed) (Total:931.51 GB) (Free:601.63 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 9DBF85DC)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=119.1 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1B33C48C)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

jetzt kommt keine werbung mehr danke

so hab mein pc heute morgen wider neu gestartet und jetzt ist es wider da?

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Run: [winengine] => C:\Users\Corinna\AppData\Local\winengine\rkr0.exe [511416 2014-12-12] ()

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Run: [winengine2] => C:\Users\Corinna\AppData\Local\winengine\rkr1.exe [511416 2014-12-12] ()

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:59718;https=127.0.0.1:59718

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

CHR HomePage: Default -> http://www.trovi.com/?gd=&ctid=CT3331617&octid=EB_ORIGINAL_CTID&ISID=M4E026FD5-8890-434C-964F-6E1E66F78E31&SearchSource=55&CUI=&UM=8&UP=SP8BA75DC3-5596-420A-9B25-CCAFF2921BA5&SSPV=

CHR StartupUrls: Default -> "http://www.trovi.com/?gd=&ctid=CT3331617&octid=EB_ORIGINAL_CTID&ISID=M4E026FD5-8890-434C-964F-6E1E66F78E31&SearchSource=55&CUI=&UM=8&UP=SP8BA75DC3-5596-420A-9B25-CCAFF2921BA5&SSPV="

CHR HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - No Path

Task: {C2EB6A34-54C9-4DC8-914F-729E1F304494} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION

Task: {C3AA3EC2-50A5-46B9-90AB-23C3DDB91FD6} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION

AlternateDataStreams: C:\Users\Admin\AppData\Local\Temp:xML8Ondv5vd1nKBlbJ

AlternateDataStreams: C:\Users\Corinna\AppData\Local\TT8rdoNDbc:xYcyt4o7UHNHTZOEB4T7Tza9Dy

C:\Users\Corinna\AppData\Local\winengine

C:\PROGRA~1\COMMON~1\System\SysMenu.dll

EmptyTemp:

Hosts:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-02-2015

Ran by Corinna at 2015-02-01 15:54:26 Run:1

Running from C:\Users\Corinna\Desktop

Loaded Profiles: Corinna (Available profiles: Admin & Corinna)

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Run: [winengine] => C:\Users\Corinna\AppData\Local\winengine\rkr0.exe [511416 2014-12-12] ()

HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Run: [winengine2] => C:\Users\Corinna\AppData\Local\winengine\rkr1.exe [511416 2014-12-12] ()

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:59718;https=127.0.0.1:59718

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

CHR HomePage: Default -> hxxp://www.trovi.com/?gd=&ctid=CT3331617&octid=EB_ORIGINAL_CTID&ISID=M4E026FD5-8890-434C-964F-6E1E66F78E31&SearchSource=55&CUI=&UM=8&UP=SP8BA75DC3-5596-420A-9B25-CCAFF2921BA5&SSPV=

CHR StartupUrls: Default -> "hxxp://www.trovi.com/?gd=&ctid=CT3331617&octid=EB_ORIGINAL_CTID&ISID=M4E026FD5-8890-434C-964F-6E1E66F78E31&SearchSource=55&CUI=&UM=8&UP=SP8BA75DC3-5596-420A-9B25-CCAFF2921BA5&SSPV="

CHR HKU\S-1-5-21-499455562-2807403694-105458192-1003\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - No Path

Task: {C2EB6A34-54C9-4DC8-914F-729E1F304494} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION

Task: {C3AA3EC2-50A5-46B9-90AB-23C3DDB91FD6} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION

AlternateDataStreams: C:\Users\Admin\AppData\Local\Temp:xML8Ondv5vd1nKBlbJ

AlternateDataStreams: C:\Users\Corinna\AppData\Local\TT8rdoNDbc:xYcyt4o7UHNHTZOEB4T7Tza9Dy

C:\Users\Corinna\AppData\Local\winengine

C:\PROGRA~1\COMMON~1\System\SysMenu.dll

EmptyTemp:

Hosts:

         

*****************
 

HKU\S-1-5-21-499455562-2807403694-105458192-1003\Software\Microsoft\Windows\CurrentVersion\Run\\winengine => value deleted successfully.

HKU\S-1-5-21-499455562-2807403694-105458192-1003\Software\Microsoft\Windows\CurrentVersion\Run\\winengine2 => value deleted successfully.

HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.

HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.

HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.

HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.

HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.

HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.

Chrome HomePage deleted successfully.

Chrome StartupUrls deleted successfully.

"HKU\S-1-5-21-499455562-2807403694-105458192-1003\SOFTWARE\Google\Chrome\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C2EB6A34-54C9-4DC8-914F-729E1F304494}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C2EB6A34-54C9-4DC8-914F-729E1F304494}" => Key deleted successfully.

C:\Windows\System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Multimedia\SMupdate3" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C3AA3EC2-50A5-46B9-90AB-23C3DDB91FD6}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C3AA3EC2-50A5-46B9-90AB-23C3DDB91FD6}" => Key deleted successfully.

C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Maintenance\SMupdate2" => Key deleted successfully.

C:\Users\Admin\AppData\Local\Temp => ":xML8Ondv5vd1nKBlbJ" ADS removed successfully.

C:\Users\Corinna\AppData\Local\TT8rdoNDbc => ":xYcyt4o7UHNHTZOEB4T7Tza9Dy" ADS removed successfully.

C:\Users\Corinna\AppData\Local\winengine => Moved successfully.

C:\PROGRA~1\COMMON~1\System\SysMenu.dll => Moved successfully.

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.

Hosts was reset successfully.

EmptyTemp: => Removed 995.1 MB temporary data.
 
 

The system needed a reboot. 
 

==== End of Fixlog 15:55:21 ====

Okay, dann Kontrollscans mit MBAM und ESET bitte:

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Code:

 alwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlauf Datum: 01.02.2015

Suchlauf-Zeit: 16:29:36

Logdatei: mbam.txt

Administrator: Ja
 

Version: 2.00.4.1028

Malware Datenbank: v2015.02.01.04

Rootkit Datenbank: v2015.01.14.01

Lizenz: Kostenlos

Malware Schutz: Deaktiviert

Bösartiger Webseiten Schutz: Deaktiviert

Selbstschutz: Deaktiviert
 

Betriebssystem: Windows 7 Service Pack 1

CPU: x64

Dateisystem: NTFS

Benutzer: Corinna
 

Suchlauf-Art: Bedrohungs-Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 426797

Verstrichene Zeit: 4 Min, 15 Sek
 

Speicher: Aktiviert

Autostart: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristik: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(Keine schädliche Elemente erkannt)
 

Module: 0

(Keine schädliche Elemente erkannt)
 

Registrierungsschlüssel: 0

(Keine schädliche Elemente erkannt)
 

Registrierungswerte: 0

(Keine schädliche Elemente erkannt)
 

Registrierungsdaten: 0

(Keine schädliche Elemente erkannt)
 

Ordner: 0

(Keine schädliche Elemente erkannt)
 

Dateien: 0

(Keine schädliche Elemente erkannt)
 

Physische Sektoren: 0

(Keine schädliche Elemente erkannt)
 
 

(end)

Code:

 ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7623

# api_version=3.0.2

# EOSSerial=793fea3677c2c740bfd8053d645dd9d9

# engine=22251

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-02-01 04:56:54

# local_time=2015-02-01 05:56:54 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1='McAfee Anti-Virus and Anti-Spyware'

# compatibility_mode=5125 16777214 88 94 455596 7769600 0 0

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 100 94 1923692 174439664 0 0

# scanned=340235

# found=7

# cleaned=5

# scan_time=4497

sh=0AE6F44A6D15BF13DF19BE1EC38D021D6960BE55 ft=1 fh=69709f074978429f vn="Variante von MSIL/Adware.PullUpdate.K.gen Anwendung" ac=I fn="C:\Users\All Users\YqqUBiXNSeA\dat\svAZreDDMI.dll"

sh=A67E3817FC13A1C440340279CF8DFBBB89077B3D ft=1 fh=8ae44ea6de42b5ae vn="Variante von MSIL/Adware.PullUpdate.K.gen Anwendung" ac=I fn="C:\Users\All Users\YqqUBiXNSeA\dat\VhyWGwpTAW.dll"

sh=0AE6F44A6D15BF13DF19BE1EC38D021D6960BE55 ft=1 fh=69709f074978429f vn="Variante von MSIL/Adware.PullUpdate.K.gen Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\ProgramData\YqqUBiXNSeA\dat\svAZreDDMI.dll"

sh=A67E3817FC13A1C440340279CF8DFBBB89077B3D ft=1 fh=8ae44ea6de42b5ae vn="Variante von MSIL/Adware.PullUpdate.K.gen Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\ProgramData\YqqUBiXNSeA\dat\VhyWGwpTAW.dll"

sh=87F3BCBC115A94EAE51124B13CF6C5328C943228 ft=0 fh=0000000000000000 vn="JS/Kryptik.I Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\d3v0rmmf.default\cache2\entries\6E2E555496351B053B316EA91588ECF3CFA9C7CE"

sh=42D7A8632EB572F9D7E36E61E3B1C805847A4796 ft=0 fh=0000000000000000 vn="JS/Kryptik.I Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\d3v0rmmf.default\cache2\entries\B42CE561E7AF4264559053E6144F156B96424300"

sh=F8002DEE560AC2804D29BD2E66D15CD011A0E43C ft=1 fh=1c2ec74a08fdddcb vn="Win32/AdWare.1ClickDownload.AW Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="D:\temp\alter\vray_for_maya_2015_Free.exe"

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

C:\Users\All Users\YqqUBiXNSeA

C:\ProgramData\YqqUBiXNSeA

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\d3v0rmmf.default\cache2\entries\6E2E555496351B053B316EA91588ECF3CFA9C7CE

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\d3v0rmmf.default\cache2\entries\B42CE561E7AF4264559053E6144F156B96424300

D:\temp\alter\vray_for_maya_2015_Free.exe

EmptyTemp:

Hosts:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Code:

 Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-02-2015

Ran by Corinna at 2015-02-01 23:34:45 Run:2

Running from C:\Users\Corinna\Desktop

Loaded Profiles: Corinna (Available profiles: Admin & Corinna)

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

C:\Users\All Users\YqqUBiXNSeA

C:\ProgramData\YqqUBiXNSeA

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\d3v0rmmf.default\cache2\entries\6E2E555496351B053B316EA91588ECF3CFA9C7CE

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\d3v0rmmf.default\cache2\entries\B42CE561E7AF4264559053E6144F156B96424300

D:\temp\alter\vray_for_maya_2015_Free.exe

EmptyTemp:

Hosts:

*****************
 

C:\Users\All Users\YqqUBiXNSeA => Moved successfully.

"C:\ProgramData\YqqUBiXNSeA" => File/Directory not found.

"C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\d3v0rmmf.default\cache2\entries\6E2E555496351B053B316EA91588ECF3CFA9C7CE" => File/Directory not found.

"C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\d3v0rmmf.default\cache2\entries\B42CE561E7AF4264559053E6144F156B96424300" => File/Directory not found.

"D:\temp\alter\vray_for_maya_2015_Free.exe" => File/Directory not found.

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.

Hosts was reset successfully.

EmptyTemp: => Removed 202.2 MB temporary data.
 
 

The system needed a reboot.

==== End of Fixlog 23:35:07 ====

Sieht soweit ok aus :daumenhoc

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) empfehle ich die Erweiterung Ghostery, diese verhindert weitgehend Usertracking bzw. das Anzeigen von Werbebannern.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?