Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-02-2015
Ran by User (administrator) on USER-PC on 10-02-2015 22:28:52
Running from C:\Users\User\Desktop
Loaded Profiles: User (Available profiles: User)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe
() C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
() C:\Windows\DAODx.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Over the Rainbow Tech) C:\ProgramData\FlashBeat\ColorMedia.exe
() C:\Program Files (x86)\D-Link\DWA-125 revA\ANIWConnService.exe
() C:\ProgramData\FlashBeat\FlashBeat.exe
(XTab system) C:\Program Files (x86)\XTab\ProtectService.exe
(SearchProtect) C:\Program Files (x86)\XTab\CmdShell.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Users\User\AppData\Roaming\ASPackage\ASSrv.exe
() C:\Users\User\AppData\Local\ConvertAd\CASrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
() C:\Program Files (x86)\Techgile\updateTechgile.exe
() C:\Program Files (x86)\Techgile\bin\utilTechgile.exe
() C:\Program Files (x86)\WordProser_1.10.0.6\Service\wpsvc.exe
(Rational Thought Solutions) C:\ProgramData\dxVxGuHPl\AgBiIIZZKM.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(XTab system) C:\Program Files (x86)\XTab\HPNotify.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
() C:\Users\User\AppData\Local\ConvertAd\ConvertAd.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Guillemot Corporation S.A.) C:\Program Files (x86)\Hercules\Deluxe Optical Glass\XtrCtrl.exe
(D-Link Corp.) C:\Program Files (x86)\D-Link\DWA-125 revA\AirNCFG.exe
(SoftBrain Technologies Ltd.) C:\Users\User\AppData\Local\SmartWeb\SmartWebHelper.exe
(SoftBrain Technologies Ltd.) C:\Users\User\AppData\Local\SmartWeb\SmartWebApp.exe
() C:\Users\User\AppData\Local\wincheck\wincheck.exe
() C:\Program Files (x86)\gmsd_de_187\gmsd_de_187.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
( ) C:\Users\User\AppData\Roaming\ASPackage\ASPackage.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [613024 2010-09-27] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379040 2010-09-27] (Atheros Commnucations)
HKLM\...\Run: [VIAxHCUtl] => C:\Program Files\VIA XHCI UASP Utility\usb3Monitor
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [CamserviceOG] => C:\Program Files (x86)\Hercules\Deluxe Optical Glass\XtrCtrl.exe [2999080 2009-10-19] (Guillemot Corporation S.A.)
HKLM-x32\...\Run: [D-Link D-Link DWA-125] => C:\Program Files (x86)\D-Link\DWA-125 revA\AirNCFG.exe [1095984 2014-03-18] (D-Link Corp.)
HKLM-x32\...\Run: [CamserviceOG] => C:\Program Files (x86)\Hercules\Deluxe Optical Glass\XtrCtrl.exe [2999080 2009-10-19] (Guillemot Corporation S.A.)
HKLM-x32\...\Run: [mbot_de_495] => "C:\Program Files (x86)\mbot_de_495\mbot_de_495.exe"
HKLM-x32\...\Run: [WinCheck] => C:\Users\User\AppData\Local\wincheck\wincheck.exe [306176 2015-02-09] ()
HKLM-x32\...\Run: [gmsd_de_187] => C:\Program Files (x86)\gmsd_de_187\gmsd_de_187.exe [3979408 2015-02-07] ()
HKLM-x32\...\Run: [SmartWeb] => C:\Users\User\AppData\Local\SmartWeb\SmartWebHelper.exe [270368 2015-02-04] (SoftBrain Technologies Ltd.)
HKLM-x32\...\Run: [G Data AntiVirus Tray] => C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG)
HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3928150652-2756980015-3035233101-1000\...\Run: [Driver Updater] => C:\Program Files (x86)\Carambis\Driver Updater\dupdater.exe [3552232 2015-01-12] (MEDIA FOG LTD.)
HKU\S-1-5-21-3928150652-2756980015-3035233101-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31087200 2015-01-23] (Skype Technologies S.A.)
HKU\S-1-5-21-3928150652-2756980015-3035233101-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
HKU\S-1-5-21-3928150652-2756980015-3035233101-1000\...\MountPoints2: D - D:\setup.exe
HKU\S-1-5-21-3928150652-2756980015-3035233101-1000\...\MountPoints2: {d3a1199c-9913-11e4-b413-806e6f6e6963} - D:\Autorun.exe
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk
ShortcutTarget: SmartWeb.lnk -> C:\Users\User\AppData\Local\SmartWeb\SmartWebHelper.exe (SoftBrain Technologies Ltd.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com/?type=hppp&ts=1423475556&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=ds&ts=1423475518&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hppp&ts=1423475556&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?type=ds&ts=1423475518&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-3928150652-2756980015-3035233101-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1423475518&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&q={searchTerms}
SearchScopes: HKLM -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1423475518&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=dspp&ts=1423475556&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=dspp&ts=1423475556&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3928150652-2756980015-3035233101-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=dspp&ts=1423475556&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3928150652-2756980015-3035233101-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://www.better-search.net/?i=53&st=29&src=58&q={searchTerms}&did=11521&ppd=1434,148123,20N9RD1CYufCXkXp1xXpdx1ykKPX000.,,,,spgc-de,,,player.all4search.net&barid=1523567331607694762&terminator=1_sp_ie
SearchScopes: HKU\S-1-5-21-3928150652-2756980015-3035233101-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://istart.webssearches.com/web/?utm_source=b&utm_medium=pjr&utm_campaign=install_ie&utm_content=ds&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&ts=1423475596&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3928150652-2756980015-3035233101-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://istart.webssearches.com/web/?utm_source=b&utm_medium=pjr&utm_campaign=install_ie&utm_content=ds&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&ts=1423475596&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3928150652-2756980015-3035233101-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=dspp&ts=1423475556&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3928150652-2756980015-3035233101-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://istart.webssearches.com/web/?utm_source=b&utm_medium=pjr&utm_campaign=install_ie&utm_content=ds&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680&ts=1423475596&type=default&q={searchTerms}
BHO: youtubeadblocker -> {b10703d0-3302-477d-9685-0e458c90ce7a} -> C:\Program Files (x86)\youtubeadblocker\LgGc5BsJ9IJcoE.x64.dll ()
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\XTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
Winsock: Catalog9 01 C:\Windows\system32\ColorMedia.dll File Not found ()
Winsock: Catalog9 02 C:\Windows\system32\ColorMedia.dll File Not found ()
Winsock: Catalog9 03 C:\Windows\system32\ColorMedia.dll File Not found ()
Winsock: Catalog9 04 C:\Windows\system32\ColorMedia.dll File Not found ()
Winsock: Catalog9 16 C:\Windows\system32\ColorMedia.dll File Not found ()
Winsock: Catalog9-x64 01 C:\Windows\system32\ColorMedia64.dll [364024] (Over the Rainbow Tech)
Winsock: Catalog9-x64 02 C:\Windows\system32\ColorMedia64.dll [364024] (Over the Rainbow Tech)
Winsock: Catalog9-x64 03 C:\Windows\system32\ColorMedia64.dll [364024] (Over the Rainbow Tech)
Winsock: Catalog9-x64 04 C:\Windows\system32\ColorMedia64.dll [364024] (Over the Rainbow Tech)
Winsock: Catalog9-x64 16 C:\Windows\system32\ColorMedia64.dll [364024] (Over the Rainbow Tech)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc&ts=1423475518&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\175vkymt.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: webssearches
FF SelectedSearchEngine: webssearches
FF Homepage: hxxp://istart.webssearches.com/?type=hppp&ts=1423475556&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\webssearches.xml
FF Extension: HDtubeV1.6V09.02 - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\175vkymt.default\Extensions\CUFCV96103896@VLCZ37079202.com [2015-02-09]
FF Extension: Fast Start - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\175vkymt.default\Extensions\faststartff@gmail.com [2015-02-09]
FF Extension: youtubeadblocker - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\175vkymt.default\Extensions\j7@F.org [2015-02-09]
FF Extension: PricceLesss - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\175vkymt.default\Extensions\LLbgbQ9W@6.org [2015-02-09]
FF Extension: SmileysWeLove: Smileys for use with Facebook, GMail, and more - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\175vkymt.default\Extensions\jid1-FB1bBgFMk5H6Wg@jetpack.xpi [2015-02-09]
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\175vkymt.default\extensions\faststartff@gmail.com
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://istart.webssearches.com/?type=sc&ts=1423475518&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680

Chrome: 
=======
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-02-08]
CHR Extension: (Facebook Social Plugin) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdmclgnbhdiklglmmdcaelggigiiigpm [2015-02-09]
CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-06]
CHR HKLM-x32\...\Chrome\Extension: [fjbbjfdilbioabojmcplalojlmdngbjl] - C:\Users\User\AppData\Local\Temp\swlfiles\smileyswelovetoolbar.crx [Not Found]

Opera: 
=======
OPR Extension: (HDtubeV1.6V09.02) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\ofaemmlijemfcopjandkcndefpnacabg [2015-02-09]
StartMenuInternet: (HKLM) OperaStable - C:\Program Files (x86)\Opera\Launcher.exe http://istart.webssearches.com/?type=sc&ts=1423475518&from=pjr&uid=WDCXWD15EADS-00W4B0_WD-WCAVY611368013680

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AgBiIIZZKM; C:\ProgramData\dxVxGuHPl\AgBiIIZZKM.exe [2733552 2015-02-09] (Rational Thought Solutions)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [52896 2010-09-27] (Atheros Commnucations) [File not signed]
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [2555528 2013-08-21] (G Data Software AG)
R2 be0fb33b; c:\Program Files (x86)\Supporter\Supporter.dll [4214272 2015-02-09] () [File not signed]
R2 ColorMedia; C:\ProgramData\FlashBeat\ColorMedia.exe [1546208 2015-02-07] (Over the Rainbow Tech) [File not signed]
R2 D_Link_DWA-125_WPS; C:\Program Files (x86)\D-Link\DWA-125 revA\ANIWConnService.exe [53248 2010-07-12] () [File not signed]
R2 FlashBeat; C:\ProgramData\FlashBeat\FlashBeat.exe [563712 2015-02-07] () [File not signed]
R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [2936616 2013-08-21] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2015-02-09] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2015-02-09] (globalUpdate) [File not signed]
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2015-02-05] ()
R2 serveras; C:\Users\User\AppData\Roaming\ASPackage\ASSrv.exe [97792 2015-02-09] () [File not signed]
R2 serverca; C:\Users\User\AppData\Local\ConvertAd\CASrv.exe [165376 2015-02-09] () [File not signed]
R2 Update Techgile; C:\Program Files (x86)\Techgile\updateTechgile.exe [397552 2015-02-10] () [File not signed]
R2 Util Techgile; C:\Program Files (x86)\Techgile\bin\utilTechgile.exe [397552 2015-02-10] () [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [487056 2015-02-09] () [File not signed]
R2 wpsvc_1.10.0.6; C:\Program Files (x86)\WordProser_1.10.0.6\Service\wpsvc.exe [277584 2015-01-07] () [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 anodlwf; C:\Windows\System32\DRIVERS\anodlwfx.sys [15872 2010-05-29] ()
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2015-02-10] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2015-02-10] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [63320 2015-02-10] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2015-02-10] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2015-02-10] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2015-02-10] (G Data Software AG)
R3 hxctlflt; C:\Windows\System32\DRIVERS\hxctlflt.sys [111104 2009-02-09] (Guillemot Corporation)
R3 L1c; C:\Windows\System32\DRIVERS\l1c51x64.sys [104600 2012-11-19] (Atheros Communications, Inc.)
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] ()
R3 netr28ux; C:\Windows\System32\DRIVERS\Dnetr28ux.sys [1617472 2011-04-28] (Ralink Technology Corp.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [230280 2012-08-27] (Renesas Electronics Corporation)
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [765288 2011-10-01] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [268648 2011-10-01] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [25960 2011-10-01] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [22376 2011-10-01] (Microsoft Corporation)
R3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10684672 2007-07-17] (Sonix Co. Ltd.)
S3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [225792 2013-09-25] (VIA Technologies, Inc.)
S3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [296960 2013-09-25] (VIA Technologies, Inc.)
R1 wpnfd_1_10_0_6; system32\drivers\wpnfd_1_10_0_6.sys [X]
R1 {ab46f924-b0f6-4def-a8e6-edf07f1475f2}Gw64; system32\drivers\{ab46f924-b0f6-4def-a8e6-edf07f1475f2}Gw64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-10 22:28 - 2015-02-10 22:30 - 00022127 _____ () C:\Users\User\Desktop\FRST.txt
2015-02-10 22:25 - 2015-02-10 22:29 - 00000000 ____D () C:\FRST
2015-02-10 22:25 - 2015-02-10 22:21 - 00380416 _____ () C:\Users\User\Desktop\ze4sqtf7.exe
2015-02-10 22:25 - 2015-02-10 22:20 - 02132992 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2015-02-10 21:54 - 2015-02-10 21:45 - 00602112 _____ (OldTimer Tools) C:\Users\User\Desktop\OTL.exe
2015-02-10 21:49 - 2015-02-10 21:47 - 05611930 _____ (Swearware) C:\Users\User\Desktop\ComboFix.exe
2015-02-10 12:17 - 2015-02-10 12:17 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys
2015-02-10 12:17 - 2015-02-10 12:17 - 00019016 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2015-02-10 12:14 - 2015-02-10 21:24 - 00000336 _____ () C:\Windows\setupact.log
2015-02-10 12:14 - 2015-02-10 12:14 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-10 11:47 - 2015-02-10 11:47 - 00063320 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys
2015-02-10 11:47 - 2015-02-10 11:47 - 00002062 _____ () C:\Users\Public\Desktop\G Data InternetSecurity 2014.lnk
2015-02-10 11:47 - 2015-02-10 11:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G Data InternetSecurity 2014
2015-02-10 11:46 - 2015-02-10 11:46 - 00130392 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys
2015-02-10 11:46 - 2015-02-10 11:46 - 00065368 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys
2015-02-10 11:46 - 2015-02-10 11:46 - 00064856 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys
2015-02-10 11:46 - 2015-02-10 11:46 - 00060248 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys
2015-02-10 11:45 - 2015-02-10 11:45 - 00000000 ___DC () C:\Program Files (x86)\G Data
2015-02-10 11:20 - 2015-02-10 11:20 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-02-10 11:20 - 2015-02-10 11:20 - 00000830 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-10 11:20 - 2015-02-10 11:20 - 00000000 ___DC () C:\Program Files\CCleaner
2015-02-10 11:20 - 2015-02-10 11:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-02-10 11:15 - 2015-02-10 12:27 - 00000000 ____D () C:\ProgramData\G Data
2015-02-10 11:06 - 2015-02-10 11:06 - 00000512 __RSH () C:\ProgramData\ntuser.pol
2015-02-09 14:04 - 2015-02-09 14:08 - 00000000 ____D () C:\Users\User\AppData\Local\HealthAlert
2015-02-09 13:32 - 2015-02-09 13:32 - 00000000 ____D () C:\Windows\system32\appmgmt
2015-02-09 13:30 - 2015-02-09 13:30 - 00000000 ____D () C:\ProgramData\2db5390800000427
2015-02-09 13:04 - 2015-02-09 13:04 - 00000000 ____D () C:\Users\User\Documents\Optimizer Pro
2015-02-09 13:03 - 2015-02-09 13:29 - 00000000 ____D () C:\ProgramData\dxVxGuHPl
2015-02-09 13:03 - 2015-02-09 13:03 - 00000000 ____D () C:\ProgramData\HealthAlert
2015-02-09 13:02 - 2015-02-10 12:26 - 00000000 ___DC () C:\Program Files (x86)\Techgile
2015-02-09 12:22 - 2015-02-09 12:22 - 00002213 _____ () C:\Windows\patsearch.bin
2015-02-09 12:22 - 2015-02-09 12:22 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinst_01009.Wdf
2015-02-09 12:21 - 2015-02-10 11:05 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP3.job
2015-02-09 12:21 - 2015-02-10 11:05 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP2.job
2015-02-09 12:21 - 2015-02-09 13:29 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP1.job
2015-02-09 12:21 - 2015-02-09 13:07 - 00002826 _____ () C:\Windows\System32\Tasks\APSnotifierPP1
2015-02-09 12:21 - 2015-02-09 13:07 - 00002824 _____ () C:\Windows\System32\Tasks\APSnotifierPP3
2015-02-09 12:21 - 2015-02-09 13:07 - 00002824 _____ () C:\Windows\System32\Tasks\APSnotifierPP2
2015-02-09 12:21 - 2015-02-09 12:22 - 00000000 ___DC () C:\Program Files (x86)\WordProser_1.10.0.6
2015-02-09 12:21 - 2015-02-09 12:21 - 00000000 ___DC () C:\Program Files (x86)\gmsd_de_187
2015-02-09 12:21 - 2015-02-09 12:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Macromedia
2015-02-09 12:21 - 2015-02-09 12:21 - 00000000 ____D () C:\Users\User\AppData\Local\SmartWeb
2015-02-09 12:21 - 2015-02-09 12:21 - 00000000 ____D () C:\Users\User\AppData\Local\gmsd_de_187
2015-02-09 12:20 - 2015-02-09 12:20 - 00000000 ___DC () C:\Windows\SysWOW64\Flash
2015-02-09 12:20 - 2015-02-09 12:20 - 00000000 ___DC () C:\Program Files (x86)\IGS
2015-02-09 12:19 - 2015-02-09 12:20 - 00000000 ____D () C:\Users\User\AppData\Local\igs
2015-02-09 12:19 - 2015-02-09 12:19 - 00000000 __SHD () C:\Users\User\AppData\Roaming\AnyProtectEx
2015-02-09 11:06 - 2015-02-09 11:06 - 00000000 ____D () C:\ProgramData\41d6815900005912
2015-02-09 11:04 - 2015-02-09 12:23 - 00000000 ____D () C:\Users\User\AppData\Local\ConvertAd
2015-02-09 11:04 - 2015-02-09 11:04 - 00001109 _____ () C:\Users\Public\Desktop\StarCraft II.lnk
2015-02-09 11:04 - 2015-02-09 11:04 - 00000000 ____D () C:\Users\User\AppData\Local\wincheck
2015-02-09 11:03 - 2015-02-10 22:05 - 00001332 _____ () C:\Windows\Tasks\OMSJT.job
2015-02-09 11:03 - 2015-02-10 22:03 - 00003126 _____ () C:\Windows\Tasks\74ebcf50-6c34-4c7f-959d-67604f150421-1-6.job
2015-02-09 11:03 - 2015-02-10 21:24 - 00004482 _____ () C:\Windows\Tasks\74ebcf50-6c34-4c7f-959d-67604f150421-4.job
2015-02-09 11:03 - 2015-02-10 21:24 - 00003462 _____ () C:\Windows\Tasks\74ebcf50-6c34-4c7f-959d-67604f150421-1-7.job
2015-02-09 11:03 - 2015-02-10 21:24 - 00002434 _____ () C:\Windows\Tasks\74ebcf50-6c34-4c7f-959d-67604f150421-5_user.job
2015-02-09 11:03 - 2015-02-10 21:24 - 00002434 _____ () C:\Windows\Tasks\74ebcf50-6c34-4c7f-959d-67604f150421-5.job
2015-02-09 11:03 - 2015-02-09 11:03 - 00007512 _____ () C:\Windows\System32\Tasks\74ebcf50-6c34-4c7f-959d-67604f150421-4
2015-02-09 11:03 - 2015-02-09 11:03 - 00006492 _____ () C:\Windows\System32\Tasks\74ebcf50-6c34-4c7f-959d-67604f150421-1-7
2015-02-09 11:03 - 2015-02-09 11:03 - 00006154 _____ () C:\Windows\System32\Tasks\74ebcf50-6c34-4c7f-959d-67604f150421-1-6
2015-02-09 11:03 - 2015-02-09 11:03 - 00005464 _____ () C:\Windows\System32\Tasks\74ebcf50-6c34-4c7f-959d-67604f150421-5
2015-02-09 11:03 - 2015-02-09 11:03 - 00004354 _____ () C:\Windows\System32\Tasks\OMSJT
2015-02-09 11:03 - 2015-02-09 11:03 - 00003748 _____ () C:\Windows\System32\Tasks\ISFYHFAU
2015-02-09 11:03 - 2015-02-09 11:03 - 00000000 __SHD () C:\Users\User\AppData\Local\EmieUserList
2015-02-09 11:03 - 2015-02-09 11:03 - 00000000 __SHD () C:\Users\User\AppData\Local\EmieSiteList
2015-02-09 11:03 - 2015-02-09 11:03 - 00000000 ____D () C:\ProgramData\FlashBeatData
2015-02-09 11:02 - 2015-02-10 22:02 - 00005506 _____ () C:\Windows\Tasks\74ebcf50-6c34-4c7f-959d-67604f150421-6.job
2015-02-09 11:02 - 2015-02-10 21:25 - 00005264 ____C () C:\Windows\SysWOW64\ColorMedia.ini
2015-02-09 11:02 - 2015-02-10 21:25 - 00002864 ____C () C:\Windows\SysWOW64\ColorMediaOff.ini
2015-02-09 11:02 - 2015-02-10 21:25 - 00002864 _____ () C:\Windows\system32\ColorMediaOff.ini
2015-02-09 11:02 - 2015-02-10 21:25 - 00000938 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-02-09 11:02 - 2015-02-10 21:24 - 00005506 _____ () C:\Windows\Tasks\74ebcf50-6c34-4c7f-959d-67604f150421-7.job
2015-02-09 11:02 - 2015-02-10 21:24 - 00005172 _____ () C:\Windows\Tasks\74ebcf50-6c34-4c7f-959d-67604f150421-11.job
2015-02-09 11:02 - 2015-02-10 21:24 - 00001332 _____ () C:\Windows\Tasks\GAFOM.job
2015-02-09 11:02 - 2015-02-10 13:41 - 00000000 ___DC () C:\Program Files (x86)\HDtubeV1.6V09.02
2015-02-09 11:02 - 2015-02-10 11:07 - 00000942 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-02-09 11:02 - 2015-02-09 11:03 - 00000000 ____D () C:\ProgramData\FlashBeat
2015-02-09 11:02 - 2015-02-09 11:02 - 00008536 _____ () C:\Windows\System32\Tasks\74ebcf50-6c34-4c7f-959d-67604f150421-7
2015-02-09 11:02 - 2015-02-09 11:02 - 00008534 _____ () C:\Windows\System32\Tasks\74ebcf50-6c34-4c7f-959d-67604f150421-6
2015-02-09 11:02 - 2015-02-09 11:02 - 00008202 _____ () C:\Windows\System32\Tasks\74ebcf50-6c34-4c7f-959d-67604f150421-11
2015-02-09 11:02 - 2015-02-09 11:02 - 00004354 _____ () C:\Windows\System32\Tasks\GAFOM
2015-02-09 11:02 - 2015-02-09 11:02 - 00003940 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2015-02-09 11:02 - 2015-02-09 11:02 - 00003686 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2015-02-09 11:02 - 2015-02-09 11:02 - 00000000 ___DC () C:\Program Files (x86)\globalUpdate
2015-02-09 11:02 - 2015-02-09 11:02 - 00000000 ___DC () C:\Program Files (x86)\1ccf7e49-18ed-45cd-8dc4-cb64222cf72f
2015-02-09 11:02 - 2015-02-09 11:02 - 00000000 ____D () C:\Users\User\AppData\Local\globalUpdate
2015-02-09 11:02 - 2015-02-09 11:02 - 00000000 ____D () C:\ProgramData\a47887a3756b4d95a8aa4868e99416bd
2015-02-09 11:02 - 2015-02-07 21:45 - 00364024 _____ (Over the Rainbow Tech) C:\Windows\system32\ColorMedia64.dll
2015-02-09 11:00 - 2015-02-09 11:00 - 00000000 ___DC () C:\Program Files (x86)\Supporter
2015-02-09 10:57 - 2015-02-09 12:24 - 00000000 ____D () C:\Users\User\AppData\Roaming\ASPackage
2015-02-09 10:57 - 2015-02-09 10:57 - 00001078 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-02-09 10:57 - 2015-02-09 10:57 - 00000000 ___DC () C:\Program Files (x86)\VideoLAN
2015-02-09 10:57 - 2015-02-09 10:57 - 00000000 ___DC () C:\Program Files (x86)\Facebook Social Plugin
2015-02-09 10:57 - 2015-02-09 10:57 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2015-02-09 10:57 - 2015-02-09 10:57 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage
2015-02-09 10:57 - 2015-02-09 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-02-09 10:56 - 2015-02-10 12:26 - 00000000 ___DC () C:\Program Files (x86)\youtubeadblocker
2015-02-09 10:56 - 2015-02-09 10:56 - 00000000 ____D () C:\Users\User\AppData\Roaming\smileyswelove
2015-02-09 10:55 - 2015-02-09 10:55 - 00000000 ____D () C:\Users\User\Documents\Add-in Express
2015-02-09 10:54 - 2015-02-09 10:54 - 161331162 _____ () C:\Users\User\AppData\Roaming\CrashDump__20150209_095439.dmp
2015-02-09 10:54 - 2015-02-09 10:54 - 00000000 ____D () C:\ProgramData\11074247383972342202
2015-02-09 10:53 - 2015-02-09 14:06 - 00004010 _____ () C:\Windows\System32\Tasks\LaunchSignup
2015-02-09 10:53 - 2015-02-09 10:53 - 00000000 ___DC () C:\Program Files (x86)\XTab
2015-02-09 10:53 - 2015-02-09 10:53 - 00000000 ____D () C:\ProgramData\IHProtectUpDate
2015-02-09 10:53 - 2015-02-09 10:53 - 00000000 ____D () C:\ProgramData\eeanojfhjfblikcbfbeacbakaehjjeko
2015-02-09 10:52 - 2015-02-10 21:28 - 00000000 ___DC () C:\Program Files (x86)\mbot_de_495
2015-02-09 10:52 - 2015-02-10 12:15 - 00000000 ____D () C:\Users\User\AppData\Local\mbot_de_495
2015-02-09 10:52 - 2015-02-09 10:53 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-02-09 10:52 - 2015-02-09 10:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MYBESTOFFERSTODAY
2015-02-09 10:50 - 2015-02-09 10:57 - 00000000 ____D () C:\Users\User\Documents\vlc
2015-02-09 10:49 - 2015-02-09 10:50 - 00767065 _____ () C:\Users\User\Downloads\setup (1).exe
2015-02-09 10:43 - 2015-02-09 10:43 - 00506912 _____ () C:\Users\User\Downloads\Setup.exe
2015-02-09 10:42 - 2015-02-09 10:43 - 00735904 _____ () C:\Users\User\Downloads\SweetPlayer_TSA1X4DXH.exe
2015-02-09 10:36 - 2015-02-09 11:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
2015-02-06 23:39 - 2015-02-10 11:21 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps
2015-02-06 20:38 - 2015-02-06 20:38 - 00000000 ____D () C:\Users\User\Documents\Diablo III
2015-02-06 18:48 - 2015-02-06 18:48 - 00001168 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2015-02-06 18:46 - 2015-02-06 18:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2015-02-06 18:44 - 2015-02-06 20:37 - 00000000 ___DC () C:\Program Files (x86)\Diablo III
2015-02-06 14:57 - 2015-02-10 11:48 - 00000000 ____D () C:\Users\User\AppData\Local\Battle.net
2015-02-06 14:57 - 2015-02-06 15:01 - 00000000 ____D () C:\Users\User\AppData\Roaming\Battle.net
2015-02-06 14:57 - 2015-02-06 14:57 - 00001130 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2015-02-06 14:57 - 2015-02-06 14:57 - 00000000 ____D () C:\Users\User\AppData\Roaming\NVIDIA
2015-02-06 14:57 - 2015-02-06 14:57 - 00000000 ____D () C:\Users\User\AppData\Local\Blizzard Entertainment
2015-02-06 14:56 - 2015-02-06 14:57 - 00000000 ___DC () C:\Program Files (x86)\Battle.net
2015-02-06 14:56 - 2015-02-06 14:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-02-06 14:45 - 2015-02-10 22:23 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-06 14:45 - 2015-02-09 11:04 - 00000000 ___DC () C:\Program Files (x86)\Google
2015-02-06 14:45 - 2015-02-06 14:46 - 00000000 ____D () C:\Users\User\AppData\Local\Google
2015-02-06 14:45 - 2015-02-06 14:45 - 00701616 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-06 14:45 - 2015-02-06 14:45 - 00071344 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-06 14:45 - 2015-02-06 14:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-06 14:45 - 2015-02-06 14:45 - 00000000 ___DC () C:\Windows\SysWOW64\Macromed
2015-02-06 14:45 - 2015-02-06 14:45 - 00000000 ____D () C:\Windows\system32\Macromed
2015-02-06 14:42 - 2015-02-06 14:46 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2015-02-06 14:21 - 2015-02-09 11:44 - 00000000 ____D () C:\Users\User\Documents\StarCraft II
2015-02-06 14:21 - 2015-02-09 11:42 - 00000000 ___DC () C:\Program Files (x86)\StarCraft II
2015-02-06 14:21 - 2015-02-06 14:57 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2015-02-06 14:14 - 2009-02-09 10:43 - 00111104 _____ (Guillemot Corporation) C:\Windows\system32\Drivers\hxctlflt.sys
2015-02-06 14:14 - 2007-07-20 11:33 - 00015478 _____ () C:\Windows\snpstd3.ini
2015-02-06 14:14 - 2007-07-20 11:18 - 00013003 _____ () C:\Windows\snpstd3.src
2015-02-06 14:14 - 2007-07-17 18:10 - 10684672 _____ (Sonix Co. Ltd.) C:\Windows\system32\Drivers\snpstd3.sys
2015-02-06 14:14 - 2007-04-20 16:26 - 00057344 ____C ( ) C:\Windows\SysWOW64\vsnpstd3.dll
2015-02-06 14:14 - 2005-11-22 20:40 - 00018944 _____ ( ) C:\Windows\system32\csnpstd3.dll
2015-02-06 14:12 - 2015-02-06 14:14 - 33555888 _____ (Macrovision Corporation) C:\Users\User\Downloads\HOPGL_v3.2.2.1.exe
2015-02-06 14:12 - 2015-02-06 14:14 - 33555888 _____ (Macrovision Corporation) C:\Users\User\Downloads\HOPGL_v3.2.2.1 (1).exe
2015-02-06 14:08 - 2015-02-06 14:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hercules
2015-02-06 14:07 - 2015-02-06 14:14 - 00000000 ___DC () C:\Program Files (x86)\Hercules
2015-02-06 13:59 - 2015-02-06 14:02 - 115887608 _____ (Macrovision Corporation) C:\Users\User\Downloads\HWSE_V4.0.2.6.exe
2015-02-05 11:33 - 2015-02-05 11:33 - 00000000 ____D () C:\Users\User\AppData\Roaming\Canneverbe Limited
2015-02-05 11:33 - 2015-02-05 11:33 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2015-02-05 11:27 - 2015-02-09 13:38 - 00103736 ____C () C:\Windows\SysWOW64\PnkBstrB.exe
2015-02-05 11:27 - 2015-02-05 11:28 - 00000000 ____D () C:\Users\User\Documents\NFS ProStreet
2015-02-05 11:27 - 2015-02-05 11:27 - 00066872 ____C () C:\Windows\SysWOW64\PnkBstrA.exe
2015-02-05 11:27 - 2015-02-05 11:27 - 00000000 __RHD () C:\Users\User\AppData\Roaming\SecuROM
2015-02-05 11:27 - 2015-02-05 11:27 - 00000000 ____D () C:\Users\User\AppData\Local\PunkBuster
2015-02-05 11:26 - 2015-02-05 11:26 - 00002140 _____ () C:\Users\Public\Desktop\Need for Speed™ ProStreet.lnk
2015-02-05 11:26 - 2015-02-05 11:26 - 00000778 _____ () C:\Users\User\Desktop\BESTplayer - Verknüpfung.lnk
2015-02-05 11:26 - 2015-02-05 11:26 - 00000000 ____D () C:\Users\User\AppData\Roaming\BESTplayer
2015-02-05 11:26 - 2015-02-05 11:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2015-02-05 11:09 - 2015-02-05 11:09 - 00000000 ___DC () C:\Program Files (x86)\Electronic Arts
2015-02-05 11:09 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2015-02-05 11:09 - 2007-06-20 20:46 - 00266088 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2015-02-05 11:09 - 2007-06-20 20:45 - 00021352 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_2.dll
2015-02-05 11:09 - 2007-06-20 20:45 - 00018280 ____C (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_2.dll
2015-02-05 11:09 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2015-02-05 11:09 - 2007-05-16 16:45 - 03497832 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2015-02-05 11:09 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2015-02-05 11:09 - 2007-05-16 16:45 - 01124720 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2015-02-05 11:09 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2015-02-05 11:09 - 2007-05-16 16:45 - 00443752 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2015-02-05 11:09 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2015-02-05 11:09 - 2007-04-04 18:55 - 00261480 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2015-02-05 11:09 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2015-02-05 11:09 - 2007-04-04 18:53 - 00081768 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2015-02-05 11:09 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2015-02-05 11:09 - 2007-03-15 16:57 - 00443752 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2015-02-05 11:09 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2015-02-05 11:09 - 2007-03-12 16:42 - 03495784 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2015-02-05 11:09 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2015-02-05 11:09 - 2007-03-12 16:42 - 01123696 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2015-02-05 11:09 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2015-02-05 11:09 - 2007-03-05 12:42 - 00015128 ____C (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2015-02-05 11:09 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2015-02-05 11:09 - 2007-01-24 15:27 - 00255848 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2015-02-05 11:04 - 2015-02-05 15:44 - 00000000 ____D () C:\ProgramData\Battle.net
2015-02-05 10:40 - 2015-02-06 12:44 - 00000000 ____D () C:\Neuer Ordner
2015-02-05 10:36 - 2015-02-05 10:36 - 00001428 _____ () C:\Users\User\Desktop\TERA.lnk
2015-02-05 10:34 - 2015-02-10 21:34 - 00000000 ___DC () C:\Program Files (x86)\Opera
2015-02-05 10:34 - 2015-02-10 12:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2015-02-05 10:34 - 2015-02-06 14:01 - 00003850 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1423128877
2015-02-05 10:34 - 2015-02-05 10:34 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-02-05 10:34 - 2015-02-05 10:34 - 00001147 _____ () C:\Users\Public\Desktop\Opera.lnk
2015-02-05 10:34 - 2015-02-05 10:34 - 00001147 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 __RDC () C:\Program Files (x86)\Skype
2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 ____D () C:\Users\User\AppData\Roaming\Opera Software
2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 ____D () C:\ProgramData\Skype
2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-02-05 10:31 - 2015-02-05 10:31 - 00000000 ____D () C:\Users\User\AppData\Roaming\TERA
2015-02-05 02:35 - 2015-02-05 02:36 - 00003858 _____ () C:\Windows\system32\RaCoInst.log
2015-02-05 02:35 - 2015-02-05 02:35 - 00000000 ___DC () C:\Program Files (x86)\D-Link
2015-02-05 02:35 - 2015-02-05 02:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\InstallShield
2015-02-05 02:35 - 2011-04-28 14:20 - 01617472 _____ (Ralink Technology Corp.) C:\Windows\system32\Drivers\Dnetr28ux.sys
2015-02-05 02:35 - 2011-04-28 14:17 - 00327008 _____ (Ralink Technology, Inc.) C:\Windows\system32\RaCoInstx.dll
2015-02-05 02:35 - 2011-04-28 14:17 - 00014119 _____ () C:\Windows\system32\RaCoInst.dat
2015-02-05 02:35 - 2010-07-12 14:39 - 00302080 _____ () C:\Windows\lwd.exe
2015-02-05 02:35 - 2010-05-29 07:58 - 00015872 _____ () C:\Windows\system32\Drivers\anodlwfx.sys
2015-02-05 02:34 - 2015-02-05 02:34 - 00004937 _____ () C:\ProgramData\mtbjfghn.xbe
2015-02-05 02:34 - 2015-02-05 02:34 - 00001198 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Driver Updater.lnk
2015-02-05 02:34 - 2015-02-05 02:34 - 00001192 _____ () C:\Users\Public\Desktop\Driver Updater.lnk
2015-02-05 02:34 - 2015-02-05 02:34 - 00000000 ____D () C:\Users\User\AppData\Roaming\Carambis
2015-02-05 02:34 - 2015-02-05 02:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Carambis
2015-02-05 02:33 - 2015-02-05 02:33 - 00000000 ___DC () C:\Program Files (x86)\Carambis
2015-02-05 02:33 - 2015-02-05 02:33 - 00000000 _____ () C:\Users\User\Documents\APNSetup.exe
2015-02-04 12:39 - 2014-02-27 17:27 - 682299392 _____ () C:\StarCraft (PL).iso
2015-02-04 12:35 - 2014-05-13 12:27 - 968511488 _____ () C:\Heroes.3.Zlota Edycja.PL.iso
2015-02-04 12:34 - 2014-02-25 19:27 - 565276672 _____ () C:\Heroes III Złota Edycja + WoG.iso
2015-02-04 12:32 - 2015-02-04 23:22 - 00000000 ____D () C:\programy
2015-02-04 11:09 - 2015-02-04 11:10 - 45109352 _____ (Skype Technologies S.A.) C:\SkypeSetup71Full.exe
2015-02-04 09:59 - 2015-02-04 23:21 - 00000000 ____D () C:\GameforgeLive
2015-02-03 11:40 - 2015-02-03 11:40 - 01191200 _____ () C:\Media Player Classic Home Cinema 32 Bit - CHIP-Installer.exe
2015-02-03 11:39 - 2015-02-03 11:40 - 32896408 _____ (Opera Software) C:\Opera_27.0.1689.54_Setup.exe
2015-02-03 11:39 - 2015-02-03 11:39 - 36942788 _____ () C:\dwa-125a3-1-51s0039.zip
2015-02-03 11:38 - 2015-02-03 11:39 - 23320495 _____ () C:\DWA-125_drv_reva3_153s0050_ALL_multi_20140421.zip
2015-02-03 11:22 - 2015-02-05 14:10 - 00000000 ____D () C:\dwoch i pol 7

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-10 22:29 - 2011-05-25 03:18 - 01757307 _____ () C:\Windows\WindowsUpdate.log
2015-02-10 21:53 - 2009-07-14 18:58 - 01615296 _____ () C:\Windows\system32\perfh007.dat
2015-02-10 21:53 - 2009-07-14 18:58 - 00433666 _____ () C:\Windows\system32\perfc007.dat
2015-02-10 21:53 - 2009-07-14 06:13 - 00006468 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-10 21:50 - 2013-11-20 13:42 - 00000000 ___DC () C:\Program Files\VIA XHCI UASP Utility
2015-02-10 21:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-10 21:32 - 2009-07-14 05:45 - 00022384 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-10 21:32 - 2009-07-14 05:45 - 00022384 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-10 21:28 - 2011-06-26 21:08 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini
2015-02-10 21:24 - 2013-11-28 02:14 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-10 21:24 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-10 12:25 - 2014-03-23 17:27 - 00000000 ____D () C:\ProgramData\VirtualizedApplications
2015-02-10 11:21 - 2013-07-15 10:49 - 00000000 ____D () C:\Windows\Minidump
2015-02-10 11:21 - 2011-05-25 04:15 - 00000000 ____D () C:\Windows\Panther
2015-02-10 11:15 - 2009-07-14 03:34 - 00000505 _____ () C:\Windows\win.ini
2015-02-09 14:09 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2015-02-09 11:02 - 2013-11-26 12:14 - 00000000 ___DC () C:\Program Files (x86)\ATI Technologies
2015-02-09 10:52 - 2012-04-22 03:16 - 00001661 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-06 14:46 - 2014-03-25 14:06 - 00000000 ____D () C:\Users\User\AppData\Roaming\Adobe
2015-02-06 14:43 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-02-06 14:14 - 2011-05-25 03:25 - 00000000 __HDC () C:\Program Files (x86)\InstallShield Installation Information
2015-02-06 12:41 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-02-05 15:32 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2015-02-05 14:13 - 2014-03-01 00:59 - 00000000 ____D () C:\Two and a half Man 5
2015-02-05 14:09 - 2012-08-20 17:16 - 00000000 ____D () C:\cali sezon 4
2015-02-05 11:27 - 2012-04-22 03:15 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2015-02-04 22:20 - 2009-02-28 10:34 - 00000000 ____D () C:\Fotki
2015-01-12 15:52 - 2015-01-10 23:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-01-12 15:50 - 2015-01-10 23:14 - 00000000 ____D () C:\Users\User\AppData\Local\NVIDIA Corporation
2015-01-12 15:50 - 2013-11-28 02:11 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

==================== Files in the root of some directories =======

2015-02-09 10:54 - 2015-02-09 10:54 - 161331162 _____ () C:\Users\User\AppData\Roaming\CrashDump__20150209_095439.dmp
2015-02-05 02:34 - 2015-02-05 02:34 - 0004937 _____ () C:\ProgramData\mtbjfghn.xbe

Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\CloudBackup6302.exe
C:\Users\User\AppData\Local\Temp\DEF87A3E-A157-B76C-EFC8-AF2610FAE0AF.dll
C:\Users\User\AppData\Local\Temp\System.Data.SQLitea3fe0c6a-7ea5-4eb8-8bed-8dd271b9ed2a.dll
C:\Users\User\AppData\Local\Temp\Uninstall.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-04 23:49

==================== End Of Log ============================