Ok, in Arbeit!

ok

der Farbar Scannt immer noch!

Der Scannt immer noch! Wahrscheinlich hab ich soviel Müll drauf, dass der so lange Scannt!
Gruß Lisa

Das kann ein wenig dauern

FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-07-2013
Ran by lisa (administrator) on 03-07-2013 11:40:26
Running from C:\Users\lisa\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\PROGRA~2\AVG\AVG2013\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Hewlett-Packard Company) C:\Windows\system32\Hpservice.exe
(AMD) C:\Windows\system32\atieclxx.exe
() C:\Program Files (x86)\AAVUpdateManager\aavus.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Nero AG) C:\Program Files (x86)\Motorola Media Link\Lite\NServiceEntry.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\2.0.189\SSScheduler.exe
(Facebook) C:\Users\lisa\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
() C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Motorola) C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney Business 5.0\ouservice\StarMoneyOnlineUpdate.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpConnectionManager.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2012\seccenter.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2012\odscanui.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2012\downloader.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-03-11] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [Easy-PrintToolBox] C:\Program Files (x86)\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon [398944 2006-10-17] (CANON INC.)
HKLM\...\Run: [BDAgent] "C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe" [1091200 2013-06-14] (Bitdefender)
HKCU\...\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [39408 2011-12-25] (Google Inc.)
HKCU\...\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1104824 2012-11-12] (Samsung)
HKCU\...\Run: [HijackThis startup scan] G:\HijackThis.exe /startupscan [x]
MountPoints2: F - F:\AutoRun.exe
MountPoints2: G - G:\AutoRun.exe
MountPoints2: {1c5eb3cd-c4af-11e0-9a98-101f740a9c70} - F:\AutoRun.exe
MountPoints2: {1c5eb3e1-c4af-11e0-9a98-101f740a9c70} - F:\AutoRun.exe
MountPoints2: {1c5eb3ea-c4af-11e0-9a98-101f740a9c70} - F:\AutoRun.exe
MountPoints2: {1c5eb3fb-c4af-11e0-9a98-101f740a9c70} - G:\AutoRun.exe
MountPoints2: {2c9f57af-c764-11e0-9691-806e6f6e6963} - G:\AutoRun.exe
MountPoints2: {6af6a92d-e8fb-11e0-9dae-101f740a9c70} - G:\AutoRun.exe
MountPoints2: {869dbc6a-c764-11e0-99af-101f740a9c70} - G:\AutoRun.exe
MountPoints2: {cca738f2-58af-11e2-a74f-101f740a9c70} - G:\HTC_Sync_Manager_PC.exe
MountPoints2: {cca7392f-58af-11e2-a74f-101f740a9c70} - G:\setup.exe -a
MountPoints2: {f40ffb3a-bae1-11e2-8b31-101f740a9c70} - G:\HTC_Sync_Manager_PC.exe
HKLM-x32\...\Run: []  [x]
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [336384 2011-04-01] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [HTC Sync Loader] "C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup [651264 2012-04-17] ()
HKLM-x32\...\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [103992 2011-05-23] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY [3147384 2012-12-11] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [574008 2011-07-11] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-02] (Apple Inc.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\2.0.189\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\lisa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk
ShortcutTarget: Facebook Messenger.lnk -> C:\Users\lisa\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe (Facebook)
Startup: C:\Users\lisa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
SearchScopes: HKLM - {840CBA39-00BA-4137-9607-C2B1076209F6} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {840CBA39-00BA-4137-9607-C2B1076209F6} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - {03595C39-4494-4F94-8CEA-4C2C81D017D8} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3196716
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {4F0EDE64-5B3B-4425-8598-3C26DF5FF8BF} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
SearchScopes: HKCU - {840CBA39-00BA-4137-9607-C2B1076209F6} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ�± vË°!×—(ä¼48иpatm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†�x¢8€ÙjÀÿþ*´Ñ;áa´[¦†8*º~�RÙxœòÜ8'£-)x*ä* URL = 
BHO: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll No File
Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll No File
Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll No File
Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll No File
Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll No File
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWow64\EZUPBH~1.DLL [52920 2011-05-07] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{00B87E99-B03B-47CF-851D-007197A54B75}: [NameServer]10.111.81.129 10.129.32.1
Tcpip\..\Interfaces\{0C73F8FF-16C6-4979-AA4A-6E199DF63EAA}: [NameServer]10.129.32.1 10.111.81.129
Tcpip\..\Interfaces\{8C58ABC7-4C7C-49AA-B65A-00C12433B4A4}: [NameServer]10.111.81.129 10.129.32.1
Tcpip\..\Interfaces\{C67691B4-649B-4EAD-A4F7-E0DA720B01B0}: [NameServer]10.111.81.129 10.129.32.1

FireFox:
========
FF ProfilePath: C:\Users\lisa\AppData\Roaming\Mozilla\Firefox\Profiles\hkgxigbt.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @VideoDownloadConverter_4z.com/Plugin - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\lisa\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\lisa\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\lisa\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: No Name - C:\Users\lisa\AppData\Roaming\Mozilla\Firefox\Profiles\hkgxigbt.default\Extensions\{26647ca4-a2a7-4eac-8a72-761aa9141de7}
FF Extension: ytd - C:\Users\lisa\AppData\Roaming\Mozilla\Firefox\Profiles\hkgxigbt.default\Extensions\ytd@mybrowserbar.com
FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon@truesuite.com
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext\
FF Extension: No Name - C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext\
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon
FF HKLM-x32\...\Firefox\Extensions: [ocr@babylon.com] C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\ocr@babylon.com
FF HKLM-x32\...\Firefox\Extensions: [4zffxtbr@VideoDownloadConverter_4z.com] C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext\
FF Extension: No Name - C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext\
FF HKCU\...\Firefox\Extensions: [YTKaraoke@DacSoft.org] C:\Program Files (x86)\YTKaraoke\FF\

Chrome: 
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Users\lisa\AppData\Local\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\lisa\AppData\Local\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\lisa\AppData\Local\Google\Chrome\Application\27.0.1453.116\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Nero Kwik Media Helper) - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (WildTangent Games App V2 Presence Detector) - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility for IJ) - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
CHR Plugin: (Facebook Desktop) - C:\Users\lisa\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Website Logon) - C:\Users\lisa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aepeildmfnnehghlknddebgjghlompfe\1.0_0
CHR Extension: (Toggle Chrome Toolbar) - C:\Users\lisa\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpgmjapfkjpfkeffiijiebgjhikjogem\1.0_0

==================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Program Files (x86)\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-04-01] (Advanced Micro Devices, Inc.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [5814904 2012-11-15] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [196664 2012-10-22] (AVG Technologies CZ, s.r.o.)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [344928 2011-01-28] ()
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [99936 2006-11-10] ()
S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [224096 2011-08-13] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\2.0.189\McCHSvc.exe [227232 2010-09-02] (McAfee, Inc.)
S2 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [120728 2012-10-02] ()
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
S3 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [75384 2013-06-14] (Bitdefender)
R2 StarMoney Business 5.0 OnlineUpdate; C:\Program Files (x86)\StarMoney Business 5.0\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 Update Server; C:\Program Files\Common Files\Bitdefender\Bitdefender Arrakis Server\bin\arrakis3.exe [466736 2011-11-04] (BitDefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe [67904 2013-06-14] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe [1957912 2013-06-14] (Bitdefender)

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [705552 2013-06-14] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2013-06-14] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [587024 2013-06-14] (BitDefender)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [154464 2012-10-22] (AVG Technologies CZ, s.r.o. )
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [63328 2012-10-15] (AVG Technologies CZ, s.r.o. )
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [185696 2012-10-02] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [225120 2012-09-21] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [111968 2012-11-15] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [40800 2012-09-14] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [200032 2012-09-21] (AVG Technologies CZ, s.r.o.)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93160 2013-06-14] (BitDefender LLC)
R0 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [442088 2012-02-07] (BitDefender)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-23] (BitDefender LLC)
S3 bdsandbox; C:\Windows\system32\drivers\bdsandbox.sys [79952 2012-02-07] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [103944 2010-01-19] (BitDefender)
R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2011-08-13] (Bytemobile, Inc.)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [212992 2011-08-13] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2011-08-13] (Bytemobile, Inc.)
R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2011-08-13] (Bytemobile, Inc.)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [329800 2011-11-04] (BitDefender S.R.L.)
S3 CpqDfw; system32\drivers\CpqDfw.sys [x]
S3 motusbdevice; system32\DRIVERS\motusbdevice.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-03 13:16 - 2013-07-03 13:16 - 00000328 ____A C:\Windows\Tasks\HPCeeScheduleForlisa.job
2013-07-03 09:17 - 2013-07-03 09:18 - 00005561 ____A C:\Users\lisa\Desktop\RKreport[0]_D_07032013_091746.txt
2013-07-03 09:14 - 2013-07-03 09:14 - 00005006 ____A C:\Users\lisa\Desktop\RKreport[0]_S_07032013_091429.txt
2013-07-02 22:10 - 2013-07-02 22:10 - 00004650 ____A C:\Users\lisa\Desktop\RKreport[0]_S_07022013_221037.txt
2013-07-02 21:28 - 2013-07-02 21:29 - 00002352 ____A C:\Users\lisa\Desktop\Google Chrome.lnk
2013-07-02 20:56 - 2013-07-02 20:56 - 00004939 ____A C:\Users\lisa\Desktop\RKreport[0]_S_07022013_205606.txt
2013-07-02 20:37 - 2013-07-03 09:17 - 00000000 ____D C:\Users\lisa\Desktop\RK_Quarantine
2013-07-02 19:48 - 2013-07-02 19:48 - 00003224 ____N C:\bootsqm.dat
2013-07-02 18:38 - 2013-07-02 18:38 - 00793536 ____A C:\Users\lisa\Downloads\ZipOpenerSetup.exe
2013-07-02 18:23 - 2013-07-02 18:24 - 01933556 ____A (Farbar) C:\Users\lisa\Downloads\FRST64.exe
2013-07-02 18:13 - 2013-07-02 18:13 - 00000276 ____A C:\Users\lisa\Desktop\Fixlist.txt
2013-07-02 15:37 - 2013-07-02 15:37 - 00001548 ____A C:\Windows\PFRO.log
2013-07-02 15:23 - 2013-07-02 15:23 - 00000320 ____A C:\Users\lisa\Desktop\SecurityCheck - Verknüpfung.lnk
2013-07-02 10:25 - 2013-07-02 11:36 - 00001081 ____A C:\Users\lisa\Desktop\Continue Download Helper Installation.lnk
2013-07-02 08:50 - 2013-07-03 09:31 - 00000448 ____A C:\Windows\setupact.log
2013-07-02 08:50 - 2013-07-02 15:40 - 00000000 ____D C:\users\TEMP.lisa-lisa.002
2013-07-02 08:50 - 2013-07-02 08:50 - 00000000 ____A C:\Windows\setuperr.log
2013-07-02 08:03 - 2013-07-02 08:03 - 00000000 ____D C:\Users\TEMP.lisa-lisa.000\AppData\Roaming\Bitdefender
2013-07-02 08:02 - 2013-07-02 08:02 - 00000000 ____D C:\Users\TEMP.lisa-lisa.000\AppData\Local\VirtualStore
2013-07-02 08:01 - 2013-07-02 18:36 - 00000000 ____D C:\users\TEMP.lisa-lisa.000
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Vorlagen
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Startmenü
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Netzwerkumgebung
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Lokale Einstellungen
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Eigene Dateien
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Druckumgebung
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Documents\Eigene Musik
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Documents\Eigene Bilder
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\AppData\Local\Verlauf
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\AppData\Local\Anwendungsdaten
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Anwendungsdaten
2013-07-02 08:01 - 2012-02-26 21:28 - 00000000 ____D C:\Users\TEMP.lisa-lisa.000\AppData\Roaming\Macromedia
2013-07-02 08:01 - 2011-08-18 13:48 - 00000000 ____D C:\Users\TEMP.lisa-lisa.000\AppData\Local\Microsoft Help
2013-07-01 21:13 - 2013-07-01 21:13 - 00000000 ____D C:\Windows\ERUNT
2013-07-01 16:27 - 2013-07-01 16:27 - 00084447 ____A C:\Users\lisa\Documents\FRST.txt
2013-07-01 16:27 - 2013-07-01 16:27 - 00040844 ____A C:\Users\lisa\Documents\Addition.txt
2013-07-01 14:38 - 2013-07-01 14:38 - 00000000 ____D C:\FRST
2013-07-01 10:46 - 2013-07-01 10:46 - 00297313 ____A C:\Users\lisa\Documents\Malwarebytes Anti-Malware 1.pptx
2013-07-01 08:54 - 2013-07-01 08:54 - 00000000 ____D C:\Users\TEMP.lisa-lisa.001\AppData\Roaming\Bitdefender
2013-07-01 08:52 - 2013-07-02 18:36 - 00000000 ____D C:\users\TEMP.lisa-lisa.001
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Vorlagen
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Startmenü
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Netzwerkumgebung
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Lokale Einstellungen
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Eigene Dateien
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Druckumgebung
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Documents\Eigene Musik
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Documents\Eigene Bilder
2013-07-01 08:52 - 2012-02-26 21:28 - 00000000 ____D C:\Users\TEMP.lisa-lisa.001\AppData\Roaming\Macromedia
2013-06-30 19:49 - 2013-07-02 18:36 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2013
2013-06-30 19:38 - 2013-06-30 19:44 - 00029898 ____A C:\Users\lisa\Documents\cc_20130630_190551.reg
2013-06-30 19:32 - 2013-06-30 19:35 - 28181408 ____A (TuneUp Software) C:\Users\lisa\Downloads\TuneUpUtilities2013_de-DE (2).exe
2013-06-30 18:58 - 2013-06-30 19:04 - 00005852 ____A C:\Users\lisa\Documents\cc_20130630_185817.reg
2013-06-30 17:41 - 2013-07-02 18:37 - 00000000 ___AD C:\Program Files (x86)\FromDocToPDF_65EI
2013-06-30 17:41 - 2013-07-02 18:36 - 00000000 ____D C:\JRT
2013-06-30 16:18 - 2013-06-30 16:18 - 00000000 ____D C:\ProgramData\bdch
2013-06-26 22:36 - 2013-07-02 15:46 - 00001426 ____A C:\Users\lisa\Desktop\Registry kostenlos entrümpeln!.lnk
2013-06-18 14:40 - 2013-06-18 14:40 - 00602112 ____A (OldTimer Tools) C:\Users\lisa\Downloads\OTL.exe
2013-06-17 21:23 - 2013-06-17 21:24 - 28211040 ____A (TuneUp Software) C:\Users\lisa\Downloads\TuneUpUtilities2013_de-DE.exe
2013-06-17 18:53 - 2013-07-03 09:28 - 00338659 ____A C:\Windows\WindowsUpdate.log
2013-06-17 18:42 - 2013-06-17 18:42 - 00000176 ____A C:\Users\lisa\Documents\cc_20130617_184239.reg
2013-06-17 16:40 - 2013-06-17 16:42 - 00000429 ____A C:\Windows\System32\avgrep.txt
2013-06-17 13:23 - 2013-06-17 13:24 - 00130010 ____A C:\Users\lisa\Documents\cc_20130617_132325.reg
2013-06-17 11:50 - 2013-06-17 11:50 - 00000822 ____A C:\Users\Public\Desktop\CCleaner.lnk
2013-06-17 11:44 - 2013-06-17 11:45 - 00000634 ____A C:\Users\lisa\Desktop\ccsetup402 - Verknüpfung.lnk
2013-06-17 11:38 - 2013-07-02 18:37 - 00000000 ____D C:\Program Files\CCleaner
2013-06-17 09:13 - 2013-07-01 21:23 - 00000000 ____D C:\users\TEMP.lisa-lisa
2013-06-17 05:22 - 2013-06-17 09:14 - 00000282 ____A C:\Windows\Tasks\RegClean Pro_UPDATES.job
2013-06-16 21:28 - 2013-06-16 21:28 - 00001069 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-06-16 21:05 - 2013-07-02 18:37 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-16 20:49 - 2013-06-16 20:54 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\lisa\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-06-16 20:43 - 2013-06-16 20:50 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\lisa\Downloads\mbam-setup-1.75.0.1300.exe
2013-06-16 20:09 - 2013-07-02 18:38 - 00000000 ____D C:\Users\lisa\AppData\Roaming\Systweak
2013-06-16 12:54 - 2013-06-16 12:56 - 03758488 ____A (Systweak Inc                                                ) C:\Users\lisa\Downloads\rcpsetup_3335_ggde.exe
2013-06-16 10:00 - 2013-06-17 14:53 - 00000000 ____D C:\Windows\pss
2013-06-15 22:39 - 2013-06-15 22:40 - 00393048 ____A (Softonic                                        ) C:\Users\lisa\Downloads\SoftonicDownloader_fuer_hijackthis.exe
2013-06-15 22:03 - 2013-06-15 22:18 - 22562672 ____A C:\Users\lisa\Downloads\TuneUpUtilities2013_de-DE (1).exe
2013-06-15 21:53 - 2013-06-17 21:22 - 00002243 ____A C:\Windows\epplauncher.mif
2013-06-15 21:16 - 2013-06-15 21:36 - 28181408 ____A (TuneUp Software) C:\Users\lisa\Downloads\TuneUpUtilities2013_de-DE(2).exe
2013-06-15 21:00 - 2013-06-15 21:38 - 13503464 ____A (Microsoft Corporation) C:\Users\lisa\Downloads\mseinstall.exe
2013-06-15 19:15 - 2013-06-15 19:19 - 00000000 ____D C:\Program Files (x86)\GUM8868.tmp
2013-06-15 19:15 - 2013-06-15 19:15 - 04167680 ____A C:\Program Files (x86)\GUT8869.tmp
2013-06-15 19:02 - 2013-06-15 19:06 - 00781800 ____A (Google Inc.) C:\Users\lisa\Downloads\ChromeSetup.exe
2013-06-14 08:13 - 2013-06-14 15:37 - 00000000 ____D C:\Users\lisa\AppData\Roaming\AVG2013
2013-06-14 08:08 - 2013-06-14 08:08 - 00000941 ____A C:\Users\Public\Desktop\AVG 2013.lnk
2013-06-14 08:07 - 2013-06-14 08:08 - 00000000 ____D C:\ProgramData\AVG2013
2013-06-14 08:07 - 2013-06-14 08:07 - 00000000 ___HD C:\$AVG
2013-06-14 08:06 - 2013-06-14 08:06 - 00000000 ____D C:\Program Files (x86)\AVG
2013-06-14 07:54 - 2013-07-03 10:52 - 00000000 ____D C:\ProgramData\MFAData
2013-06-14 07:54 - 2013-06-17 16:40 - 00000000 ____D C:\Users\lisa\AppData\Local\Avg2013
2013-06-14 07:54 - 2013-06-14 07:54 - 00000000 ____D C:\Users\lisa\AppData\Local\MFAData
2013-06-12 16:38 - 2013-07-01 20:24 - 00012666 ____A C:\Users\lisa\Documents\Staatliches Hochbauamt Traunstein 4. AZ 11.06.2013 Seite 2.xlsx
2013-06-12 15:38 - 2013-07-01 20:24 - 00013299 ____A C:\Users\lisa\Documents\Stattliches Hochbauamt  4.AZ  11.06.2013.xlsx
2013-06-12 10:22 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 10:22 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 10:22 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-12 10:22 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-12 10:22 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-12 10:22 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 10:22 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 10:22 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 10:22 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 10:22 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 10:22 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 10:22 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 10:22 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-12 10:21 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 10:21 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 10:21 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 10:21 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 10:21 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 10:21 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 10:21 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 10:20 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 10:20 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 10:20 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 10:20 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 10:20 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 10:20 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 10:20 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 10:20 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-12 10:19 - 2013-06-12 10:19 - 00127984 ____A C:\Users\lisa\Downloads\windowsupdate.diagcab
2013-06-12 09:39 - 2011-07-08 13:37 - 00014119 ____A C:\Windows\SysWOW64\RaCoInst.dat
2013-06-12 09:39 - 2011-07-08 13:37 - 00014119 ____A C:\Windows\System32\RaCoInst.dat
2013-06-12 08:37 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 08:37 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 08:37 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 08:37 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 08:37 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 08:36 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 08:36 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 08:36 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 08:36 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 08:36 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 08:36 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 08:36 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 08:36 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 08:36 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 08:36 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 08:36 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 08:36 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 08:36 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 08:36 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-10 18:37 - 2013-06-10 19:05 - 00012437 ____A C:\Users\lisa\Documents\Grieche Lilly Ellenberger Schlussrechnung 01.06..2013 pdf 3.xlsx
2013-06-10 17:16 - 2013-06-10 19:04 - 00012641 ____A C:\Users\lisa\Documents\Grieche Lilly Ellenberger Schlussrechnung 01.06..2013 pdf 2.xlsx
2013-06-10 17:10 - 2013-06-10 17:10 - 00014227 ____A C:\Users\lisa\Documents\Grieche Lilly Ellenberger Schlussrechnung 01.06..2013 pdf 1.xlsx
2013-06-10 16:18 - 2013-06-10 19:30 - 00013431 ____A C:\Users\lisa\Documents\Grieche Lilly Ellenberger Angebot18.02.2013 pdf 1.xlsx
2013-06-10 12:59 - 2013-07-02 18:37 - 00000000 ____D C:\Program Files\iTunes
2013-06-10 12:59 - 2013-07-02 18:37 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-06-10 12:59 - 2013-06-14 14:00 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-10 12:59 - 2013-06-10 12:59 - 00001743 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-10 12:59 - 2013-06-10 12:59 - 00000000 ____D C:\Program Files\iPod
2013-06-10 10:07 - 2013-07-02 18:37 - 00000000 ____D C:\Program Files (x86)\Video Download Converter
2013-06-05 16:08 - 2013-06-05 16:08 - 00006124 ____A C:\Users\lisa\Documents\bookmark.htm
2013-06-05 13:53 - 2013-06-05 13:53 - 00001979 ____A C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-06-04 15:29 - 2013-07-02 18:37 - 00000000 ____D C:\Program Files (x86)\YTD Toolbar
2013-06-03 18:49 - 2013-06-03 18:49 - 00000000 ____D C:\Windows\SysWOW64\xlive
2013-06-03 18:49 - 2013-06-03 18:49 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-06-03 18:47 - 2009-09-04 17:44 - 00517960 ____A (Microsoft Corporation) C:\Windows\System32\XAudio2_5.dll
2013-06-03 18:47 - 2009-09-04 17:44 - 00238936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-06-03 18:47 - 2009-09-04 17:44 - 00176968 ____A (Microsoft Corporation) C:\Windows\System32\xactengine3_5.dll
2013-06-03 18:47 - 2009-09-04 17:44 - 00073544 ____A (Microsoft Corporation) C:\Windows\System32\XAPOFX1_3.dll
2013-06-03 18:47 - 2009-09-04 17:29 - 05554512 ____A (Microsoft Corporation) C:\Windows\System32\d3dcsx_42.dll
2013-06-03 18:47 - 2009-09-04 17:29 - 05501792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-06-03 18:47 - 2009-09-04 17:29 - 02582888 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_42.dll
2013-06-03 18:47 - 2009-09-04 17:29 - 02475352 ____A (Microsoft Corporation) C:\Windows\System32\D3DX9_42.dll
2013-06-03 18:47 - 2009-09-04 17:29 - 00285024 ____A (Microsoft Corporation) C:\Windows\System32\d3dx11_42.dll
2013-06-03 18:47 - 2009-09-04 17:29 - 00235344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-06-03 18:47 - 2009-03-16 14:18 - 00521560 ____A (Microsoft Corporation) C:\Windows\System32\XAudio2_4.dll
2013-06-03 18:47 - 2009-03-16 14:18 - 00174936 ____A (Microsoft Corporation) C:\Windows\System32\xactengine3_4.dll
2013-06-03 18:47 - 2009-03-16 14:18 - 00024920 ____A (Microsoft Corporation) C:\Windows\System32\X3DAudio1_6.dll
2013-06-03 18:47 - 2009-03-09 15:27 - 05425496 ____A (Microsoft Corporation) C:\Windows\System32\D3DX9_41.dll
2013-06-03 18:47 - 2009-03-09 15:27 - 02430312 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_41.dll
2013-06-03 18:47 - 2009-03-09 15:27 - 00520544 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_41.dll
2013-06-03 18:47 - 2008-10-15 06:22 - 02605920 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_40.dll
2013-06-03 18:47 - 2008-10-15 06:22 - 00519000 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_40.dll
2013-06-03 18:46 - 2008-10-15 06:22 - 05631312 ____A (Microsoft Corporation) C:\Windows\System32\D3DX9_40.dll
2013-06-03 18:46 - 2008-07-31 10:41 - 00238088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-06-03 18:46 - 2008-07-31 10:41 - 00177672 ____A (Microsoft Corporation) C:\Windows\System32\xactengine3_2.dll
2013-06-03 18:46 - 2008-07-31 10:41 - 00072200 ____A (Microsoft Corporation) C:\Windows\System32\XAPOFX1_1.dll
2013-06-03 18:46 - 2008-07-31 10:41 - 00068616 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-06-03 18:46 - 2008-07-31 10:40 - 00513544 ____A (Microsoft Corporation) C:\Windows\System32\XAudio2_2.dll
2013-06-03 18:46 - 2008-07-31 10:40 - 00509448 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-06-03 17:05 - 2013-06-03 17:05 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-06-03 17:05 - 2013-06-03 17:05 - 00000000 ____D C:\Windows\SysWOW64\Extensions

==================== One Month Modified Files and Folders =======

2013-07-03 13:34 - 2012-04-08 12:26 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-03 13:32 - 2011-09-30 21:55 - 00001116 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002UA.job
2013-07-03 13:16 - 2013-07-03 13:16 - 00000328 ____A C:\Windows\Tasks\HPCeeScheduleForlisa.job
2013-07-03 13:09 - 2011-12-25 11:53 - 00001106 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-03 12:23 - 2011-12-25 11:53 - 00001102 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-03 11:50 - 2013-04-24 23:45 - 00000924 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002UA.job
2013-07-03 10:52 - 2013-06-14 07:54 - 00000000 ____D C:\ProgramData\MFAData
2013-07-03 10:00 - 2011-11-30 01:16 - 00000000 ____D C:\Program Files (x86)\StarMoney Business 5.0
2013-07-03 09:42 - 2009-07-14 06:45 - 00031856 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-03 09:42 - 2009-07-14 06:45 - 00031856 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-03 09:38 - 2013-01-07 20:02 - 00000000 ____D C:\Users\lisa\AppData\Local\Htc
2013-07-03 09:31 - 2013-07-02 08:50 - 00000448 ____A C:\Windows\setupact.log
2013-07-03 09:31 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-03 09:28 - 2013-06-17 18:53 - 00338659 ____A C:\Windows\WindowsUpdate.log
2013-07-03 09:18 - 2013-07-03 09:17 - 00005561 ____A C:\Users\lisa\Desktop\RKreport[0]_D_07032013_091746.txt
2013-07-03 09:17 - 2013-07-02 20:37 - 00000000 ____D C:\Users\lisa\Desktop\RK_Quarantine
2013-07-03 09:14 - 2013-07-03 09:14 - 00005006 ____A C:\Users\lisa\Desktop\RKreport[0]_S_07032013_091429.txt
2013-07-03 08:58 - 2011-08-11 13:17 - 00000376 ____A C:\Users\lisa\AppData\Roamingprivacy.xml
2013-07-02 22:10 - 2013-07-02 22:10 - 00004650 ____A C:\Users\lisa\Desktop\RKreport[0]_S_07022013_221037.txt
2013-07-02 21:29 - 2013-07-02 21:28 - 00002352 ____A C:\Users\lisa\Desktop\Google Chrome.lnk
2013-07-02 20:56 - 2013-07-02 20:56 - 00004939 ____A C:\Users\lisa\Desktop\RKreport[0]_S_07022013_205606.txt
2013-07-02 19:48 - 2013-07-02 19:48 - 00003224 ____N C:\bootsqm.dat
2013-07-02 18:38 - 2013-07-02 18:38 - 00793536 ____A C:\Users\lisa\Downloads\ZipOpenerSetup.exe
2013-07-02 18:38 - 2013-06-16 20:09 - 00000000 ____D C:\Users\lisa\AppData\Roaming\Systweak
2013-07-02 18:38 - 2012-04-08 00:18 - 00000000 ____D C:\Windows\Neon Skin Pack
2013-07-02 18:38 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-07-02 18:38 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Portable Devices
2013-07-02 18:38 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-02 18:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\servicing
2013-07-02 18:37 - 2013-06-30 17:41 - 00000000 ___AD C:\Program Files (x86)\FromDocToPDF_65EI
2013-07-02 18:37 - 2013-06-17 11:38 - 00000000 ____D C:\Program Files\CCleaner
2013-07-02 18:37 - 2013-06-16 21:05 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-07-02 18:37 - 2013-06-10 12:59 - 00000000 ____D C:\Program Files\iTunes
2013-07-02 18:37 - 2013-06-10 12:59 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-07-02 18:37 - 2013-06-10 10:07 - 00000000 ____D C:\Program Files (x86)\Video Download Converter
2013-07-02 18:37 - 2013-06-04 15:29 - 00000000 ____D C:\Program Files (x86)\YTD Toolbar
2013-07-02 18:37 - 2013-05-31 13:39 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-07-02 18:37 - 2013-01-05 16:52 - 00000000 ____D C:\Program Files (x86)\Steuersparer 2013
2013-07-02 18:37 - 2013-01-04 12:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-02 18:37 - 2012-12-27 16:01 - 00000000 ____D C:\Program Files (x86)\Recovery Toolbox for Excel
2013-07-02 18:37 - 2012-11-15 21:11 - 00000000 ____D C:\Program Files (x86)\Microsoft Games
2013-07-02 18:37 - 2012-08-05 13:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-02 18:37 - 2012-07-24 19:56 - 00000000 ____D C:\Program Files (x86)\Portrait Professional 10 Test
2013-07-02 18:37 - 2012-07-24 18:25 - 00000000 ____D C:\Program Files (x86)\PhotoScape
2013-07-02 18:37 - 2012-07-17 10:53 - 00000000 ____D C:\Program Files (x86)\iThmb Converter
2013-07-02 18:37 - 2012-05-30 09:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Windows 7 Upgrade Advisor
2013-07-02 18:37 - 2012-05-21 14:19 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-02 18:37 - 2012-05-13 13:04 - 00000000 ____D C:\Program Files (x86)\Origin
2013-07-02 18:37 - 2012-04-15 18:36 - 00000000 ____D C:\Program Files (x86)\VideoPerformer
2013-07-02 18:37 - 2012-04-08 00:15 - 00000000 ____D C:\Program Files (x86)\Tango Skin Pack
2013-07-02 18:37 - 2012-04-07 20:51 - 00000000 ____D C:\Program Files (x86)\YouTube Song Downloader
2013-07-02 18:37 - 2012-04-07 20:51 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2013-07-02 18:37 - 2012-04-02 22:50 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2013-07-02 18:37 - 2012-04-02 22:50 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2013-07-02 18:37 - 2011-12-25 12:20 - 00000000 ____D C:\Program Files (x86)\IrfanView
2013-07-02 18:37 - 2011-12-24 19:57 - 00000000 ____D C:\Program Files\Paint.NET
2013-07-02 18:37 - 2011-12-03 22:38 - 00000000 ____D C:\Program Files\Bonjour
2013-07-02 18:37 - 2011-10-05 19:49 - 00000000 ____D C:\Program Files (x86)\YouTube Downloader
2013-07-02 18:37 - 2011-09-08 21:52 - 00000000 ____D C:\Program Files (x86)\Safari
2013-07-02 18:37 - 2011-08-17 13:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-07-02 18:37 - 2011-08-13 10:28 - 00000000 ____D C:\ProgramData\DatacardService
2013-07-02 18:37 - 2011-07-10 18:20 - 00000000 ____D C:\Program Files (x86)\HP SimplePass 2011
2013-07-02 18:37 - 2011-07-10 18:19 - 00000000 ____D C:\Program Files\Common Files\AuthenTec
2013-07-02 18:37 - 2011-05-07 16:21 - 00000000 ____D C:\Program Files (x86)\HP Games
2013-07-02 18:36 - 2013-07-02 08:01 - 00000000 ____D C:\users\TEMP.lisa-lisa.000
2013-07-02 18:36 - 2013-07-01 08:52 - 00000000 ____D C:\users\TEMP.lisa-lisa.001
2013-07-02 18:36 - 2013-06-30 19:49 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2013
2013-07-02 18:36 - 2013-06-30 17:41 - 00000000 ____D C:\JRT
2013-07-02 18:36 - 2013-01-21 21:12 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-07-02 18:36 - 2013-01-14 16:04 - 00000000 ____D C:\Program Files (x86)\AAVUpdateManager
2013-07-02 18:36 - 2013-01-06 18:03 - 00000000 ____D C:\KronosFaktura
2013-07-02 18:36 - 2012-07-13 14:54 - 00000000 ____D C:\Program Files (x86)\Dream Aquarium
2013-07-02 18:36 - 2012-05-27 14:07 - 00000000 ____D C:\Program Files (x86)\3RVX
2013-07-02 18:36 - 2012-05-27 14:05 - 00000000 ____D C:\Program Files (x86)\Desktop Media
2013-07-02 18:36 - 2012-05-21 11:52 - 00000000 ____D C:\Program Files (x86)\CD-LabelPrint
2013-07-02 18:36 - 2012-04-15 18:36 - 00000000 ____D C:\Program Files (x86)\AC3File
2013-07-02 18:36 - 2011-12-03 22:38 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-07-02 18:36 - 2011-08-20 11:10 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-07-02 18:36 - 2011-05-07 16:37 - 00000000 ____D C:\Program Files (x86)\EasyBits For Kids
2013-07-02 18:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-07-02 18:24 - 2013-07-02 18:23 - 01933556 ____A (Farbar) C:\Users\lisa\Downloads\FRST64.exe
2013-07-02 18:13 - 2013-07-02 18:13 - 00000276 ____A C:\Users\lisa\Desktop\Fixlist.txt
2013-07-02 15:46 - 2013-06-26 22:36 - 00001426 ____A C:\Users\lisa\Desktop\Registry kostenlos entrümpeln!.lnk
2013-07-02 15:40 - 2013-07-02 08:50 - 00000000 ____D C:\users\TEMP.lisa-lisa.002
2013-07-02 15:37 - 2013-07-02 15:37 - 00001548 ____A C:\Windows\PFRO.log
2013-07-02 15:23 - 2013-07-02 15:23 - 00000320 ____A C:\Users\lisa\Desktop\SecurityCheck - Verknüpfung.lnk
2013-07-02 11:36 - 2013-07-02 10:25 - 00001081 ____A C:\Users\lisa\Desktop\Continue Download Helper Installation.lnk
2013-07-02 11:25 - 2009-07-14 07:08 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-02 08:50 - 2013-07-02 08:50 - 00000000 ____A C:\Windows\setuperr.log
2013-07-02 08:50 - 2011-08-09 19:28 - 00000000 ____D C:\users\lisa
2013-07-02 08:03 - 2013-07-02 08:03 - 00000000 ____D C:\Users\TEMP.lisa-lisa.000\AppData\Roaming\Bitdefender
2013-07-02 08:02 - 2013-07-02 08:02 - 00000000 ____D C:\Users\TEMP.lisa-lisa.000\AppData\Local\VirtualStore
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Vorlagen
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Startmenü
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Netzwerkumgebung
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Lokale Einstellungen
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Eigene Dateien
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Druckumgebung
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Documents\Eigene Musik
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Documents\Eigene Bilder
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\AppData\Local\Verlauf
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\AppData\Local\Anwendungsdaten
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Anwendungsdaten
2013-07-01 21:23 - 2013-06-17 09:13 - 00000000 ____D C:\users\TEMP.lisa-lisa
2013-07-01 21:13 - 2013-07-01 21:13 - 00000000 ____D C:\Windows\ERUNT
2013-07-01 20:24 - 2013-06-12 16:38 - 00012666 ____A C:\Users\lisa\Documents\Staatliches Hochbauamt Traunstein 4. AZ 11.06.2013 Seite 2.xlsx
2013-07-01 20:24 - 2013-06-12 15:38 - 00013299 ____A C:\Users\lisa\Documents\Stattliches Hochbauamt  4.AZ  11.06.2013.xlsx
2013-07-01 16:27 - 2013-07-01 16:27 - 00084447 ____A C:\Users\lisa\Documents\FRST.txt
2013-07-01 16:27 - 2013-07-01 16:27 - 00040844 ____A C:\Users\lisa\Documents\Addition.txt
2013-07-01 14:49 - 2011-08-13 11:38 - 00000000 ____D C:\Users\lisa\AppData\Local\CrashDumps
2013-07-01 14:38 - 2013-07-01 14:38 - 00000000 ____D C:\FRST
2013-07-01 10:46 - 2013-07-01 10:46 - 00297313 ____A C:\Users\lisa\Documents\Malwarebytes Anti-Malware 1.pptx
2013-07-01 08:54 - 2013-07-01 08:54 - 00000000 ____D C:\Users\TEMP.lisa-lisa.001\AppData\Roaming\Bitdefender
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Vorlagen
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Startmenü
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Netzwerkumgebung
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Lokale Einstellungen
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Eigene Dateien
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Druckumgebung
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Documents\Eigene Musik
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Documents\Eigene Bilder
2013-06-30 19:44 - 2013-06-30 19:38 - 00029898 ____A C:\Users\lisa\Documents\cc_20130630_190551.reg
2013-06-30 19:35 - 2013-06-30 19:32 - 28181408 ____A (TuneUp Software) C:\Users\lisa\Downloads\TuneUpUtilities2013_de-DE (2).exe
2013-06-30 19:04 - 2013-06-30 18:58 - 00005852 ____A C:\Users\lisa\Documents\cc_20130630_185817.reg
2013-06-30 16:18 - 2013-06-30 16:18 - 00000000 ____D C:\ProgramData\bdch
2013-06-19 14:38 - 2011-09-30 21:55 - 00001064 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002Core.job
2013-06-18 14:40 - 2013-06-18 14:40 - 00602112 ____A (OldTimer Tools) C:\Users\lisa\Downloads\OTL.exe
2013-06-17 21:24 - 2013-06-17 21:23 - 28211040 ____A (TuneUp Software) C:\Users\lisa\Downloads\TuneUpUtilities2013_de-DE.exe
2013-06-17 21:22 - 2013-06-15 21:53 - 00002243 ____A C:\Windows\epplauncher.mif
2013-06-17 18:42 - 2013-06-17 18:42 - 00000176 ____A C:\Users\lisa\Documents\cc_20130617_184239.reg
2013-06-17 16:42 - 2013-06-17 16:40 - 00000429 ____A C:\Windows\System32\avgrep.txt
2013-06-17 16:40 - 2013-06-14 07:54 - 00000000 ____D C:\Users\lisa\AppData\Local\Avg2013
2013-06-17 14:53 - 2013-06-16 10:00 - 00000000 ____D C:\Windows\pss
2013-06-17 13:24 - 2013-06-17 13:23 - 00130010 ____A C:\Users\lisa\Documents\cc_20130617_132325.reg
2013-06-17 13:18 - 2012-09-09 19:38 - 00000000 ____D C:\Users\lisa\Tracing
2013-06-17 12:40 - 2007-01-02 03:25 - 00000000 ____D C:\Windows\Panther
2013-06-17 11:50 - 2013-06-17 11:50 - 00000822 ____A C:\Users\Public\Desktop\CCleaner.lnk
2013-06-17 11:45 - 2013-06-17 11:44 - 00000634 ____A C:\Users\lisa\Desktop\ccsetup402 - Verknüpfung.lnk
2013-06-17 09:14 - 2013-06-17 05:22 - 00000282 ____A C:\Windows\Tasks\RegClean Pro_UPDATES.job
2013-06-16 23:50 - 2013-04-24 23:45 - 00000902 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002Core.job
2013-06-16 21:28 - 2013-06-16 21:28 - 00001069 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-06-16 20:54 - 2013-06-16 20:49 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\lisa\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-06-16 20:50 - 2013-06-16 20:43 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\lisa\Downloads\mbam-setup-1.75.0.1300.exe
2013-06-16 17:40 - 2011-08-13 11:08 - 00000052 ____A C:\Windows\SysWOW64\DOErrors.log
2013-06-16 17:28 - 2011-05-07 16:19 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2013-06-16 17:22 - 2011-02-10 21:23 - 00000000 ____D C:\SWSetup
2013-06-16 16:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\NDF
2013-06-16 15:52 - 2011-10-05 20:41 - 00000119 ____A C:\Users\lisa\AppData\Roaming\default.rss
2013-06-16 15:28 - 2011-05-08 01:56 - 05711570 ____A C:\Windows\System32\perfh007.dat
2013-06-16 15:28 - 2011-05-08 01:56 - 01753850 ____A C:\Windows\System32\perfc007.dat
2013-06-16 15:28 - 2009-07-14 07:13 - 00006256 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-16 13:15 - 2011-08-09 19:28 - 00000000 ____D C:\Users\lisa\AppData\Local\VirtualStore
2013-06-16 12:56 - 2013-06-16 12:54 - 03758488 ____A (Systweak Inc                                                ) C:\Users\lisa\Downloads\rcpsetup_3335_ggde.exe
2013-06-15 22:40 - 2013-06-15 22:39 - 00393048 ____A (Softonic                                        ) C:\Users\lisa\Downloads\SoftonicDownloader_fuer_hijackthis.exe
2013-06-15 22:18 - 2013-06-15 22:03 - 22562672 ____A C:\Users\lisa\Downloads\TuneUpUtilities2013_de-DE (1).exe
2013-06-15 22:07 - 2013-01-21 21:15 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2013-06-15 21:38 - 2013-06-15 21:00 - 13503464 ____A (Microsoft Corporation) C:\Users\lisa\Downloads\mseinstall.exe
2013-06-15 21:36 - 2013-06-15 21:16 - 28181408 ____A (TuneUp Software) C:\Users\lisa\Downloads\TuneUpUtilities2013_de-DE(2).exe
2013-06-15 19:19 - 2013-06-15 19:15 - 00000000 ____D C:\Program Files (x86)\GUM8868.tmp
2013-06-15 19:15 - 2013-06-15 19:15 - 04167680 ____A C:\Program Files (x86)\GUT8869.tmp
2013-06-15 19:06 - 2013-06-15 19:02 - 00781800 ____A (Google Inc.) C:\Users\lisa\Downloads\ChromeSetup.exe
2013-06-15 18:17 - 2013-06-02 20:12 - 00000000 ____D C:\Program Files (x86)\MiPony
2013-06-15 11:36 - 2012-02-08 09:27 - 00000000 ____D C:\ProgramData\BDLogging
2013-06-14 16:28 - 2011-03-01 17:45 - 00093160 ____A (BitDefender LLC) C:\Windows\System32\Drivers\bdfndisf6.sys
2013-06-14 16:27 - 2012-03-01 20:22 - 00587024 ____A (BitDefender) C:\Windows\System32\Drivers\avckf.sys
2013-06-14 16:27 - 2012-02-07 14:51 - 00705552 ____A (BitDefender) C:\Windows\System32\Drivers\avc3.sys
2013-06-14 16:26 - 2011-07-15 16:12 - 00261056 ____A (BitDefender) C:\Windows\System32\Drivers\avchv.sys
2013-06-14 15:37 - 2013-06-14 08:13 - 00000000 ____D C:\Users\lisa\AppData\Roaming\AVG2013
2013-06-14 15:37 - 2012-11-14 11:46 - 00000000 ____D C:\Program Files (x86)\DC Software
2013-06-14 15:37 - 2011-08-09 19:31 - 00000000 ____D C:\Users\lisa\AppData\Local\Hewlett-Packard_Company
2013-06-14 15:37 - 2011-08-09 19:31 - 00000000 ____D C:\Users\lisa\AppData\Local\Hewlett-Packard
2013-06-14 15:37 - 2011-05-07 16:30 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2013-06-14 15:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-14 15:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2013-06-14 15:37 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-06-14 15:36 - 2012-02-24 16:54 - 00000000 ____D C:\Windows\System32\Macromed
2013-06-14 15:36 - 2011-05-07 16:20 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-06-14 15:36 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\System32\WinBioPlugIns
2013-06-14 15:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Speech
2013-06-14 14:41 - 2011-09-18 20:01 - 00001327 ____A C:\Windows\SysWOW64\logFile.xml
2013-06-14 14:32 - 2011-08-09 19:42 - 00000000 ____D C:\Users\lisa\AppData\Roaming\hpqlog
2013-06-14 14:00 - 2013-06-10 12:59 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-14 14:00 - 2011-08-17 13:22 - 00000000 ____D C:\Users\lisa\AppData\Local\Microsoft Help
2013-06-14 14:00 - 2011-07-10 18:08 - 00000000 ____D C:\Program Files\Validity Sensors
2013-06-14 13:59 - 2012-05-27 14:17 - 00000000 ____D C:\Users\lisa\AppData\Roaming\ArcSoft
2013-06-14 13:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system
2013-06-14 08:08 - 2013-06-14 08:08 - 00000941 ____A C:\Users\Public\Desktop\AVG 2013.lnk
2013-06-14 08:08 - 2013-06-14 08:07 - 00000000 ____D C:\ProgramData\AVG2013
2013-06-14 08:08 - 2013-01-21 21:15 - 00000000 ____D C:\Users\lisa\AppData\Roaming\TuneUp Software
2013-06-14 08:07 - 2013-06-14 08:07 - 00000000 ___HD C:\$AVG
2013-06-14 08:06 - 2013-06-14 08:06 - 00000000 ____D C:\Program Files (x86)\AVG
2013-06-14 07:54 - 2013-06-14 07:54 - 00000000 ____D C:\Users\lisa\AppData\Local\MFAData
2013-06-13 10:35 - 2013-03-05 12:30 - 00013729 ____A C:\Users\lisa\Documents\Staatl. Hochbauamt Aufmaß 01 18.02.2013.xlsx
2013-06-12 18:37 - 2012-04-08 12:26 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 18:37 - 2011-08-18 08:20 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 12:01 - 2013-02-27 19:46 - 00011549 ____A C:\Users\lisa\Documents\Regiebericht Staatliches Hochbauamt 18.02.2013  R3.xlsx
2013-06-12 10:37 - 2011-11-04 15:06 - 00000000 ____A C:\Windows\System32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-06-12 10:22 - 2011-08-21 09:41 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 10:19 - 2013-06-12 10:19 - 00127984 ____A C:\Users\lisa\Downloads\windowsupdate.diagcab
2013-06-12 09:39 - 2011-07-10 18:09 - 00008045 ____A C:\Windows\System32\RaCoInst.log
2013-06-10 19:30 - 2013-06-10 16:18 - 00013431 ____A C:\Users\lisa\Documents\Grieche Lilly Ellenberger Angebot18.02.2013 pdf 1.xlsx
2013-06-10 19:05 - 2013-06-10 18:37 - 00012437 ____A C:\Users\lisa\Documents\Grieche Lilly Ellenberger Schlussrechnung 01.06..2013 pdf 3.xlsx
2013-06-10 19:04 - 2013-06-10 17:16 - 00012641 ____A C:\Users\lisa\Documents\Grieche Lilly Ellenberger Schlussrechnung 01.06..2013 pdf 2.xlsx
2013-06-10 17:10 - 2013-06-10 17:10 - 00014227 ____A C:\Users\lisa\Documents\Grieche Lilly Ellenberger Schlussrechnung 01.06..2013 pdf 1.xlsx
2013-06-10 12:59 - 2013-06-10 12:59 - 00001743 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-10 12:59 - 2013-06-10 12:59 - 00000000 ____D C:\Program Files\iPod
2013-06-08 16:08 - 2013-06-12 10:20 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 16:06 - 2013-06-12 10:20 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 16:06 - 2013-06-12 10:20 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 13:42 - 2013-06-12 10:20 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 13:40 - 2013-06-12 10:20 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 13:40 - 2013-06-12 10:20 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 13:40 - 2013-06-12 10:20 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 13:40 - 2013-06-12 10:20 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 13:13 - 2013-06-12 10:21 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-06 08:32 - 2012-12-05 09:29 - 00000344 ____A C:\Windows\Tasks\HPCeeScheduleForLISA-LISA$.job
2013-06-05 16:08 - 2013-06-05 16:08 - 00006124 ____A C:\Users\lisa\Documents\bookmark.htm
2013-06-05 13:54 - 2011-08-18 08:54 - 00000000 ____D C:\Users\lisa\AppData\Local\Adobe
2013-06-05 13:53 - 2013-06-05 13:53 - 00001979 ____A C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-06-05 13:53 - 2011-05-07 16:36 - 00000000 ____D C:\ProgramData\Adobe
2013-06-05 13:53 - 2011-05-07 16:36 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-06-03 18:49 - 2013-06-03 18:49 - 00000000 ____D C:\Windows\SysWOW64\xlive
2013-06-03 18:49 - 2013-06-03 18:49 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-06-03 17:05 - 2013-06-03 17:05 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-06-03 17:05 - 2013-06-03 17:05 - 00000000 ____D C:\Windows\SysWOW64\Extensions

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-01 16:53

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-07-2013
Ran by lisa at 2013-07-03 14:00:57
Running from C:\Users\lisa\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

 Update for Microsoft Office 2007 (KB2508958) (x32)
"Nero SoundTrax Help (x32 Version: 4.0.15.0)
3RVX (x32 Version: 2.5)
7-Zip 9.22beta (x32)
AAVUpdateManager (x32 Version: 18.00.0000)
AC3File 0.7b (x32 Version: 0.7b)
Adobe AIR (x32 Version: 3.5.0.600)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Adobe Shockwave Player 11.5 (x32 Version: 11.5.9.620)
Advertising Center (x32 Version: 0.0.0.1)
Agatha Christie - Peril at End House (x32 Version: 2.2.0.95)
Age of Mythology (x32)
AMD APP SDK Runtime (Version: 2.4.595.9)
AMD Fuel (Version: 2011.0401.2259.39449)
AMD System Monitor (x32 Version: 1.0.5)
AMD VISION Engine Control Center (x32 Version: 2011.0401.2259.39449)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.0.136)
Ashampoo Photo Commander 9 v.9.4.2 (x32 Version: 9.4.2)
ATI Catalyst Install Manager (Version: 3.0.820.0)
AuthenTec TrueAPI (Version: 1.2.1.33)
AVG 2013 (Version: 13.0.2904)
AVG 2013 (Version: 13.0.3204)
AVG 2013 (Version: 2013.0.2904)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95)
Big Rig Europe (x32 Version: 2.2.0.95)
Bing Bar (x32 Version: 7.0.610.0)
Bitdefender Total Security 2012 (Version: 15.0.27)
Blasterball 3 (x32 Version: 2.2.0.95)
Bonjour (Version: 3.0.0.10)
Bounce Symphony (x32 Version: 2.2.0.95)
Cake Mania (x32 Version: 2.2.0.95)
Canon Easy-PhotoPrint EX (x32)
Canon Easy-WebPrint EX (x32)
Canon iP2500 series
Canon iP2500 series Benutzerregistrierung (x32)
Canon MP830
Canon Utilities Easy-PhotoPrint (x32)
Canon Utilities Easy-PrintToolBox (x32)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0401.2259.39449)
Catalyst Control Center InstallProxy (x32 Version: 2011.0401.2259.39449)
Catalyst Control Center Localization All (x32 Version: 2011.0401.2259.39449)
CCC Help Chinese Standard (x32 Version: 2011.0401.2258.39449)
CCC Help Chinese Traditional (x32 Version: 2011.0401.2258.39449)
CCC Help Czech (x32 Version: 2011.0401.2258.39449)
CCC Help Danish (x32 Version: 2011.0401.2258.39449)
CCC Help Dutch (x32 Version: 2011.0401.2258.39449)
CCC Help English (x32 Version: 2011.0401.2258.39449)
CCC Help Finnish (x32 Version: 2011.0401.2258.39449)
CCC Help French (x32 Version: 2011.0401.2258.39449)
CCC Help German (x32 Version: 2011.0401.2258.39449)
CCC Help Greek (x32 Version: 2011.0401.2258.39449)
CCC Help Hungarian (x32 Version: 2011.0401.2258.39449)
CCC Help Italian (x32 Version: 2011.0401.2258.39449)
CCC Help Japanese (x32 Version: 2011.0401.2258.39449)
CCC Help Korean (x32 Version: 2011.0401.2258.39449)
CCC Help Norwegian (x32 Version: 2011.0401.2258.39449)
CCC Help Polish (x32 Version: 2011.0401.2258.39449)
CCC Help Portuguese (x32 Version: 2011.0401.2258.39449)
CCC Help Russian (x32 Version: 2011.0401.2258.39449)
CCC Help Spanish (x32 Version: 2011.0401.2258.39449)
CCC Help Swedish (x32 Version: 2011.0401.2258.39449)
CCC Help Thai (x32 Version: 2011.0401.2258.39449)
CCC Help Turkish (x32 Version: 2011.0401.2258.39449)
ccc-utility64 (Version: 2011.0401.2259.39449)
CCleaner (Version: 4.02)
CD-LabelPrint (x32)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.95)
CyberLink YouCam (x32 Version: 3.5.1.3922)
D3DX10 (x32 Version: 15.4.2368.0902)
DC Software (x32)
Desktop Media 1.7 (x32)
Die Sims™ 3 (x32 Version: 1.50.56)
Die Sims™ 3 Design-Garten-Accessoires (x32 Version: 7.0.55)
Die Sims™ 3 Einfach tierisch (x32 Version: 10.0.96)
Die*Sims*Mittelalter (x32 Version: 1.0.0)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95)
DolbyFiles (x32 Version: 2.0)
Dream Aquarium (x32)
Energy Star Digital Logo (x32 Version: 1.0.1)
ESU for Microsoft Windows 7 (x32 Version: 1.0.0)
Evernote v. 4.2.2 (x32 Version: 4.2.2.3979)
Facebook Messenger 2.1.4814.0 (x32 Version: 2.1.4814.0)
Farm Frenzy (x32 Version: 2.2.0.95)
FATE (x32 Version: 2.2.0.95)
Fishdom (x32 Version: 2.2.0.95)
Foxit Reader (x32 Version: 4.3.1.118)
Free 3GP Video Converter version 5.0.6.221 (x32 Version: 5.0.6.221)
Free YouTube to iPhone Converter version 2.11.17.221 (x32 Version: 2.11.17.221)
Google Chrome (HKCU Version: 27.0.1453.116)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4209.2358)
Google Update Helper (x32 Version: 1.3.21.145)
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000)
High-Definition Video Playback (x32 Version: 11.1.11500.4.273)
HP 3D DriveGuard (Version: 4.1.9.1)
HP Auto (Version: 1.0.12935.3667)
HP Client Services (Version: 1.1.12938.3539)
HP Connection Manager (x32 Version: 4.1.22.1)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7)
HP Documentation (x32 Version: 1.2.0.0)
HP DVB-T TV Tuner 8.0.64.43 (x32 Version: 8.0.64.43)
HP Games (x32 Version: 1.0.2.4)
HP On Screen Display (x32 Version: 1.3.5)
HP Power Manager (x32 Version: 1.4.4)
HP Quick Launch (x32 Version: 2.5.2)
HP Setup (x32 Version: 8.6.4530.3651)
HP Setup Manager (x32 Version: 1.1.13253.3682)
HP SimplePass 2011 (x32 Version: 5.1.0.495)
HP Software Framework (x32 Version: 4.1.13.1)
HP Support Assistant (x32 Version: 7.0.39.15)
HTC BMP USB Driver (x32 Version: 1.0.5375)
HTC Sync (x32 Version: 3.2.20)
iCloud (Version: 2.1.2.8)
iDevice Manager (x32 Version: 1.3.2.0)
IDT Audio (x32 Version: 1.0.6329.0)
ImagXpress (x32 Version: 7.0.74.0)
Internet Manager (x32 Version: 22.001.18.00.748)
Internet-TV für Windows Media Center (x32 Version: 4.2.2.0)
IPTInstaller (x32 Version: 4.0.8)
IrfanView (remove only) (x32 Version: 4.30)
iThmb Converter Version 1.73.0.539 (x32 Version: 1.73.0.539)
iTunes (Version: 11.0.4.4)
Java Auto Updater (x32 Version: 2.0.6.1)
Java(TM) 6 Update 24 (64-bit) (Version: 6.0.240)
Java(TM) 6 Update 31 (x32 Version: 6.0.310)
Jewel Quest Solitaire (x32 Version: 2.2.0.95)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
K-Lite Codec Pack 6.0.4 (Basic) (x32 Version: 6.0.4)
KronosFaktura 8.05 (x32)
Magic Desktop (x32 Version: 3.0)
Mah Jong Medley (x32 Version: 2.2.0.95)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
McAfee Security Scan Plus (x32 Version: 2.0.189.1)
Menu Templates - Starter Kit (x32 Version: 9.0.4.0)
Mesh Runtime (x32 Version: 15.4.5722.2)
Messenger Companion (x32 Version: 15.4.3502.0922)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft .NET Framework 4 Extended (Version: 4.0.30320)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Games for Windows - LIVE (x32 Version: 3.0.89.0)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.0.19.0)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Primary Interoperability Assemblies 2005 (x32 Version: 8.0.50727.42)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
MobileMe Control Panel (Version: 3.1.8.0)
MotoCast (x32 Version: 2.0.31)
MotoHelper MergeModules (x32 Version: 1.2.0)
Motorola Device Manager (x32 Version: 2.2.35)
Motorola Device Software Update (x32 Version: 1.0.41)
MOTOROLA MEDIA LINK (x32 Version: 1.9.0002.0)
Motorola Mobile Drivers Installation 5.9.0 (Version: 5.9.0)
Movie Templates - Starter Kit (x32 Version: 9.0.4.0)
Mozilla Firefox 21.0 (x86 de) (x32 Version: 21.0)
Mozilla Maintenance Service (x32 Version: 21.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
MSXML4 Parser (x32 Version: 1.0.0)
MyFreeCodec (HKCU)
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95)
Namco All-Stars PAC-MAN (x32 Version: 2.2.0.95)
NAVIGON Fresh 3.4.1 (x32 Version: 3.4.1)
Neon Skin Pack 2.0-X86 (x32 Version: 2.0-X86)
Nero 10 Movie ThemePack Basic (x32 Version: 10.6.10000.1.0)
Nero 9 (x32)
Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0)
Nero BackItUp (x32 Version: 5.2.22001)
Nero BackItUp and Burn (x32 Version: 1.2.0031)
Nero Burning ROM Help (x32 Version: 9.2.2.100)
Nero BurnRights (x32 Version: 2.99.6.100)
Nero BurnRights (x32 Version: 3.6.26001)
Nero ControlCenter (x32 Version: 9.0.0.1)
Nero Core Components 10 (x32 Version: 2.0.20100.9.13)
Nero Core Components 11 (x32 Version: 11.0.16300.1.23)
Nero CoverDesigner (x32 Version: 4.2.4.100)
Nero CoverDesigner Help (x32 Version: 4.2.2.100)
Nero Disc Copy Gadget (x32 Version: 2.2.7.0)
Nero Disc Copy Gadget Help (x32 Version: 2.2.7.0)
Nero DiscSpeed (x32 Version: 4.99.5.105)
Nero DriveSpeed (x32 Version: 3.99.5.105)
Nero Express (x32 Version: 9.6.16000)
Nero Express Help (x32 Version: 9.2.2.100)
Nero InfoTool (x32 Version: 5.99.5.105)
Nero Installer (x32 Version: 2.0.0.1)
Nero Kwik Media (x32 Version: 1.14.12000.23.100)
Nero Kwik Media (x32 Version: 10.6.12300)
Nero Kwik Media Help (CHM) (x32 Version: 11.0.10300)
Nero Live (x32 Version: 1.2.4.0)
Nero Live Help (x32 Version: 1.0.162.0)
Nero Move it (x32 Version: 1.2.0.0)
Nero Move it (x32)
Nero Move it Help (x32 Version: 1.0.0.0)
Nero PhotoSnap (x32 Version: 1.53.2.0)
Nero PhotoSnap Help (x32 Version: 1.53.2.0)
Nero Prerequisite Installer 1.0 (x32 Version: 11.0.11500)
Nero Recode (x32 Version: 3.53.0.0)
Nero Recode Help (x32 Version: 3.53.0.0)
Nero Rescue Agent (x32 Version: 1.99.0.1)
Nero RescueAgent (x32 Version: 2.6.26000)
Nero RescueAgent Help (x32 Version: 1.99.0.1)
Nero SharedVideoCodecs (x32 Version: 1.0.11500.1.5)
Nero ShowTime (x32 Version: 4.99.0.0)
Nero StartSmart (x32 Version: 9.2.7.100)
Nero StartSmart Help (x32 Version: 9.2.4.100)
Nero Update (x32 Version: 11.0.11500.28.0)
Nero Vision (x32 Version: 0.0.0.2)
Nero Vision (x32 Version: 6.2.6.100)
Nero WaveEditor (x32 Version: 5.2.5.0)
Nero WaveEditor Help (x32 Version: 5.0.15.0)
nero.prerequisites.msi (x32 Version: 11.0.20010)
NeroBurningROM (x32 Version: 9.2.6.100)
NeroExpress (x32 Version: 9.2.6.100)
NeroLiveGadget (x32 Version: 1.0.8.100)
NeroLiveGadget Help (x32 Version: 1.0.6.100)
neroxml (x32 Version: 1.0.0)
Origin (x32 Version: 8.5.2.23)
Paint.NET v3.5.10 (Version: 3.60.0)
Pando Media Booster (x32 Version: 2.6.0.8)
Penguins! (x32 Version: 2.2.0.95)
PhotoScape (x32)
PIXMA Extended Survey Program (x32)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95)
Polar Bowler (x32 Version: 2.2.0.95)
Portrait Professional 10.8 Test (x32 Version: 10.8)
QuickTime (x32 Version: 7.74.80.86)
Ralink RT5390 802.11b/g/n WiFi Adapter (x32 Version: 3.02.02.0)
Realtek Ethernet Controller Driver (x32 Version: 7.41.216.2011)
Realtek PCIE Card Reader (x32 Version: 6.1.7600.80)
Recovery Manager (x32 Version: 2.0.0)
Recovery Toolbox for Excel 2.0 (x32)
Revo Uninstaller 1.93 (x32 Version: 1.93)
Safari (x32 Version: 5.34.57.2)
Samsung Kies (x32 Version: 2.3.2.12064_9)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.6.0)
Slingo Deluxe (x32 Version: 2.2.0.95)
Sony Ericsson Update Engine (x32 Version: 2.13.6.201305161305)
Sony PC Companion 2.10.155 (x32 Version: 2.10.155)
SoundTrax (x32 Version: 4.2.5.0)
StarMoney (x32 Version: 3.0.2.50)
StarMoney Business 5.0  (x32 Version: 5.0)
Steuer-Sparer 2011 (x32 Version: 16.16)
Steuer-Sparer 2012 (x32 Version: 17.11)
Steuersparer 2013 (x32 Version: 20.00.8137)
Synaptics TouchPad Driver (Version: 15.3.29.0)
Tango Skin Pack 4.0-X64 (x32 Version: 4.0-X64)
Toggle toolbar   (x32 Version: 1.8.8.12)
Tube Karaoke (x32)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3000.132)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
Update Installer for WildTangent Games App (x32)
Validity WBF DDK (Version: 4.3.205.0)
Video Download Converter version 1.0.0.0 (x32 Version: 1.0.0.0)
VideoPerformer (x32)
Virtual Villagers - The Secret City (x32 Version: 2.2.0.95)
Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1)
VLC media player 2.0.1 (x32 Version: 2.0.1)
Wedding Dash (x32 Version: 2.2.0.95)
WildTangent Games App (x32 Version: 4.0.10.2)
Windows 7 Upgrade Advisor (x32 Version: 2.0.5000.0)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Family Safety (Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WMV9/VC-1 Video Playback (Version: 1.00.0000)
YouTube Song Downloader (x32 Version: 8.2)
YTD Toolbar v7.1 (x32 Version: 7.1)
YTD YouTube Downloader & Converter 3.6 (x32)
Zuma Deluxe (x32 Version: 2.2.0.95)

==================== Restore Points  =========================

16-06-2013 15:16:25 HPSF Applying updates
16-06-2013 15:22:06 Removed HP Quick Launch
16-06-2013 15:26:42 Installed HP Quick Launch
19-06-2013 12:13:13 Removed Adobe Reader XI (11.0.03) - Deutsch.
26-06-2013 20:48:53 Windows-Sicherung
30-06-2013 17:45:12 TuneUp Utilities 2013 wird installiert

==================== Scheduled Tasks (whitelisted) =============

Task: {010D9916-4941-49A5-9024-089B7FCFFDFA} - System32\Tasks\User_Feed_Synchronization-{CD07F68E-55A8-423B-91F6-DEB030304064} => C:\Windows\system32\msfeedssync.exe No File
Task: {0A645107-32E2-44F9-AEE3-5A9ED980F284} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Total Care Tune-Up => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPTuneUp.exe [2012-09-27] (Hewlett-Packard Company)
Task: {0F4CE7E5-23CF-4BC8-9A51-B661E5669215} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {1114018D-734D-49D2-900B-DAAA23A34ED8} - System32\Tasks\HPCeeScheduleForLISA-LISA$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {146CF4BD-1A94-4B5E-A961-B5CDBCF83915} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-03-22] (CyberLink)
Task: {1EF97B79-C558-42F8-B196-8D1EFC0983AA} - System32\Tasks\Motorola Device Manager Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2012-09-28] ()
Task: {1FE65070-0AAC-4ECD-956A-47BB04BFBFAD} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {2095EE74-43BB-4094-ABAC-6B3CE5164161} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2012-04-17] ()
Task: {296FBB7A-E4AB-4CFB-9F93-009A43248B2F} - System32\Tasks\MotoCast Update => C:\Program Files (x86)\Motorola Mobility\MotoCast\LiveUpdate\MotoCastUpdate.exe [2012-07-24] ()
Task: {3ACA1A4B-8A20-42E6-9D0E-70F213988B30} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {454959D6-1CC3-4C25-83DC-0C59C015F44D} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-05-11] (Adobe Systems Incorporated)
Task: {51C1519C-F72D-4EBD-8431-D20FEA691F11} - System32\Tasks\lisa NBAgent => C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe No File
Task: {53C86463-8FC9-41CA-B4A6-493A9E07104E} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe No File
Task: {5C6E47BF-6673-44E9-9643-EA9D5BDED0E4} - System32\Tasks\Google Updater and Installer => C:\Users\lisa\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-30] (Google Inc.)
Task: {652F9DBA-622F-4C77-A8BD-BF8FB5CD7621} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-09-05] (Hewlett-Packard Company)
Task: {68E35D0F-2E25-442B-8B7D-9007E018976A} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2416322015-1569237049-636745652-1002
Task: {6DED4C69-EE1B-4C9C-B193-7986E52963E5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {72DA8517-98DC-49E7-9652-BBF5FE68FD9C} - System32\Tasks\DealPlyUpdate => C:\Program Files (x86)\DealPly\DealPlyUpdate.exe No File
Task: {7435C28C-4390-44D2-81D9-78187CFD3FC4} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002Core => C:\Users\lisa\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-04-24] (Facebook Inc.)
Task: {7439D853-5AD9-4372-AB6C-79A318AE395D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {81A14BE0-B96B-471E-80C7-D0177B7E15E2} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)
Task: {84610A55-9124-4735-8ABC-F61A0CD18608} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {8D71C492-D709-46F5-AF76-29CF6D94E8C9} - System32\Tasks\Motorola Device Manager Engine => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2012-09-28] ()
Task: {93D2D9DD-F492-439C-9704-91523C972A98} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002UA => C:\Users\lisa\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-30] (Google Inc.)
Task: {94E636B5-54B2-4E9E-B840-A0C5DA703381} - System32\Tasks\HPCeeScheduleForlisa => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {9658F7BB-0CFF-4767-AE0D-97EBBCE13275} - System32\Tasks\Motorola Device Manager Initial Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2012-09-28] ()
Task: {96735A06-4936-4FB2-BA1A-6586FC2A3E3D} - System32\Tasks\{80C62F87-057C-44C1-918D-44ED777873A8} => C:\Users\lisa\AppData\Local\Google\Chrome\Application\chrome.exe [2013-06-15] (Google Inc.)
Task: {A0A898A3-DB4C-4ECE-952D-93F8A801423B} - System32\Tasks\{7E2CEA61-0064-468F-ADDD-624FD640EDB3} => C:\program files (x86)\internet explorer\iexplore.exe [2013-05-17] (Microsoft Corporation)
Task: {A61DDCF1-BE41-4620-B0A8-D1AC86C9230C} - System32\Tasks\ServicePlan => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2011-01-31] ()
Task: {B217468D-7F84-4DD6-B840-44B625931830} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-03-21] (Hewlett-Packard)
Task: {B24397B0-DE8E-4697-B52E-8AB28E9D6BED} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe No File
Task: {B256938D-768E-4E98-A51C-C386187A8DA5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-12-25] (Google Inc.)
Task: {B6EE1EB3-0706-4344-ACC1-FBF208B35666} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-12-25] (Google Inc.)
Task: {B94CBAD4-9224-4D52-9DC5-A69CCD002B44} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-21] (Microsoft Corporation)
Task: {C880D89C-81F3-45B8-96C4-F2FFBA2CCE5C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-21] (Microsoft Corporation)
Task: {C9F6ED7B-1A7F-4F64-A983-5CCE91B0910B} - System32\Tasks\QtraxPlayer => C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe [2013-01-24] (Microsoft Corporation)
Task: {CD374EAF-FEB1-48F8-9B6C-E5F566F26EF2} - System32\Tasks\ArcSoft Connect Daemon => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27] (ArcSoft Inc.)
Task: {D3A046B4-0111-412D-9CD9-47C0E2745D61} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {D8D3A660-8E0F-4AC1-B7E6-D29D0F0DB044} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {DB830A1D-0B00-4F78-8433-9C7762B84AE1} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002UA => C:\Users\lisa\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-04-24] (Facebook Inc.)
Task: {DCA153BC-3BEC-4DF8-8371-6F5A74D97665} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002Core => C:\Users\lisa\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-30] (Google Inc.)
Task: {E6DC5D33-2488-41F1-8DB2-B7ECFE58E4FF} - System32\Tasks\{B6BC40F4-E674-4E0D-A84D-DE0213E07159} => C:\program files (x86)\internet explorer\iexplore.exe [2013-05-17] (Microsoft Corporation)
Task: {EDAC8BA6-0FEA-48A7-A740-E5E2318AE281} - System32\Tasks\WPD\SqmUpload_S-1-5-21-2416322015-1569237049-636745652-1002 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {F6A6366C-0E9C-437B-9528-6C4F2BC00460} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe No File
Task: {FC4F7B39-3AF6-4ECA-B949-C157E5D138B0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002Core.job => C:\Users\lisa\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002UA.job => C:\Users\lisa\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002Core.job => C:\Users\lisa\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002UA.job => C:\Users\lisa\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForLISA-LISA$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForlisa.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe

==================== Faulty Device Manager Devices =============

Name: Anwenderinfrarotgeräte
Description: Anwenderinfrarotgeräte
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: circlass
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/03/2013 09:34:38 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/03/2013 08:55:45 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/02/2013 10:14:32 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (07/02/2013 10:14:32 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (07/02/2013 10:14:31 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (07/02/2013 10:14:28 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (07/02/2013 10:14:28 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (07/02/2013 10:14:28 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (07/02/2013 10:14:28 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (07/02/2013 10:14:28 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC


System errors:
=============
Error: (07/03/2013 09:37:01 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x80080005

Error: (07/03/2013 09:37:00 AM) (Source: DCOM) (User: )
Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED}

Error: (07/03/2013 09:34:30 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
trufos

Error: (07/03/2013 09:34:26 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BitDefender Desktop Update Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (07/03/2013 09:34:26 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst BitDefender Desktop Update Service erreicht.

Error: (07/03/2013 09:33:41 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Motorola Device Manager Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (07/03/2013 09:33:41 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Motorola Device Manager Service erreicht.

Error: (07/03/2013 09:33:41 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst HPWMISVC erreicht.

Error: (07/03/2013 09:33:11 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst HPWMISVC erreicht.

Error: (07/03/2013 09:32:54 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Internet Manager. OUC" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053


Microsoft Office Sessions:
=========================
Error: (08/26/2012 09:29:32 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 280 seconds with 240 seconds of active time.  This session ended with a crash.

Error: (08/18/2011 00:11:32 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 5782 seconds with 60 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2013-07-03 11:37:04.459
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00098_023\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-03 09:20:39.560
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00098_023\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-02 22:14:08.530
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00098_023\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-02 21:37:50.622
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00098_023\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-02 21:28:31.085
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00098_023\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-02 21:07:46.836
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00098_023\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-02 21:02:17.919
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00098_023\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-02 20:35:03.795
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00098_023\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-02 20:02:53.811
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00098_023\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-02 19:15:59.094
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00098_023\avcuf64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 48%
Total physical RAM: 5610.9 MB
Available physical RAM: 2881.5 MB
Total Pagefile: 11219.99 MB
Available Pagefile: 8216.22 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:682.92 GB) (Free:526.84 GB) NTFS (Disk=0 Partition=2) ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:15.42 GB) (Free:1.65 GB) NTFS (Disk=0 Partition=3) ==>[System with boot components (obtained from reading drive)]
Drive f: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.09 GB) FAT32 (Disk=0 Partition=4)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: D7B2E5D6)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=683 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

==================== End Of Log ============================
         

endlich fertig der Scann! 2,5 Std. Hätte ich locker zum Einkaufen fahren
können! Egal bin sehr froh und dankbar über Ihre Hilfe!! Wenn ich arbeiten
müsste A-Pflege wäre es nicht so schnell vorwärts gegangen! Ich bleib am
Ball und warte auf Anweisungen!
Gruß Lisa

Hi,

Das folgende alles deinstallieren:

3RVX (x32 Version: 2.5)
AVG 2013 (Version: 13.0.2904)
AVG 2013 (Version: 13.0.3204)
AVG 2013 (Version: 2013.0.2904)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4209.2358)
Google Update Helper (x32 Version: 1.3.21.145)
Java Auto Updater (x32 Version: 2.0.6.1)
Java(TM) 6 Update 24 (64-bit) (Version: 6.0.240)
Java(TM) 6 Update 31 (x32 Version: 6.0.310)
Magic Desktop (x32 Version: 3.0)
MyFreeCodec (HKCU)
Tango Skin Pack 4.0-X64 (x32 Version: 4.0-X64)
Toggle toolbar (x32 Version: 1.8.8.12)
Tube Karaoke (x32)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3000.132)
YouTube Song Downloader (x32 Version: 8.2)
YTD Toolbar v7.1 (x32 Version: 7.1)
YTD YouTube Downloader & Converter 3.6 (x32)
Zuma Deluxe (x32 Version: 2.2.0.95)

Rebooten.

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.


Fix mit FRST
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

SearchScopes: HKCU - {03595C39-4494-4F94-8CEA-4C2C81D017D8} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3196716
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ�± vË°!×—(ä¼48иpatm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†�x¢8€ÙjÀÿþ*´Ñ;áa´[¦†8*º~�RÙxœòÜ8'£-)x*ä* URL = 
Tcpip\..\Interfaces\{00B87E99-B03B-47CF-851D-007197A54B75}: [NameServer]10.111.81.129 10.129.32.1
Tcpip\..\Interfaces\{0C73F8FF-16C6-4979-AA4A-6E199DF63EAA}: [NameServer]10.129.32.1 10.111.81.129
Tcpip\..\Interfaces\{8C58ABC7-4C7C-49AA-B65A-00C12433B4A4}: [NameServer]10.111.81.129 10.129.32.1
Tcpip\..\Interfaces\{C67691B4-649B-4EAD-A4F7-E0DA720B01B0}: [NameServer]10.111.81.129 10.129.32.1
FF Extension: No Name - C:\Users\lisa\AppData\Roaming\Mozilla\Firefox\Profiles\hkgxigbt.default\Extensions\{26647ca4-a2a7-4eac-8a72-761aa9141de7}
FF Extension: ytd - C:\Users\lisa\AppData\Roaming\Mozilla\Firefox\Profiles\hkgxigbt.default\Extensions\ytd@mybrowserbar.com
FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon@truesuite.com
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [ocr@babylon.com] C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\ocr@babylon.com
FF HKLM-x32\...\Firefox\Extensions: [4zffxtbr@VideoDownloadConverter_4z.com] C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin
FF HKCU\...\Firefox\Extensions: [YTKaraoke@DacSoft.org] C:\Program Files (x86)\YTKaraoke\FF\
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
2013-06-17 05:22 - 2013-06-17 09:14 - 00000282 ____A C:\Windows\Tasks\RegClean Pro_UPDATES.job
2013-06-04 15:29 - 2013-07-02 18:37 - 00000000 ____D C:\Program Files (x86)\YTD Toolbar
2013-07-03 11:50 - 2013-04-24 23:45 - 00000924 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002UA.job
2013-07-03 10:52 - 2013-06-14 07:54 - 00000000 ____D C:\ProgramData\MFAData
2013-07-02 15:46 - 2013-06-26 22:36 - 00001426 ____A C:\Users\lisa\Desktop\Registry kostenlos entrümpeln!.lnk
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Fix Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Windows-taste+R, schreibe

netsh winsock reset
ipconfig /flushdns

nach jeder Zeile enter drücken.

Reboot.

Frisches FRST log bitte.

deinstallieren in Systemsteuerung Software oder Explorer??

Was ist Rebooten? Neustart? Sorry wie geht das?
Bin gerade in Systemstart, und deinstalliere!! 3RVX dauert sehr lange
bis es deinstalliert ist! Muss ich im Windows Explorer auch nochmal
nachschauen ob da noch was zum deinstallieren ist?
Gruß Lisa

Hallo Schrauber,
Rebooten is aber ned formatieren oder Rechner neu aufsetzten? Oh Gott!!!
Hab nicht`s gesichert von der Festplatte! Hab a D Laufwerk Recovery!!
A Externe Festplatte hab ich auch! Weiß ned mal wie des richtig gemacht wird!
Hab da soviel Daten drauf die bestimmt ned Professionell angelegt wurden! Des
schlimmste wär de Windows Exel und Windows Word 2007 da sind so viele
Sachen die sehr wichtig sind drauf, besonders meine selbst angefertigten Exel
Dokumente!!!
Das Laptop Is von HP!
Bitte schreib ma was positives!!
Gruß Lisa

Ok, habs gecheckt! Is a Neustart oder?

Du wirst jetzt denken Du hast es mit einen Volld... zu tun der
keine Ahnung hat! Meinen T1 und T2 Schein für Computer den habe ich 1995
gemacht, da war ich auch noch super drauf! Aber jetzt mit den
Kindern und der Arbeit schaut`s anders aus! Keine PC Zeitung
mehr wegen Zeitmangel zum lesen. Sorry

TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3000.132)
das finde ich nicht! In Program Files (x86)TuneUp Utilities 2013 da ist nicht drinn!
Java(TM) 6 Update 24 (64-bit) (Version: 6.0.240)
Java(TM) 6 Update 31 (x32 Version: 6.0.310)
Java Odender Ist jre6/lib/ext/dns-sd.jar drinnen! soll das geloschen werden?
Zuma Deluxe (x32 Version: 2.2.0.95) Hab ich überhaupt nicht gefunden! Sonst ist alles geloschen im System/Progr. deinstall.

Immer ruhig

Deinstalliere unter Software was Du aus der Liste finden kannst, dann neustarten und den Rest der Anleitung machen

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 03-07-2013 02
Ran by lisa at 2013-07-03 19:13:44 Run:1
Running from C:\Users\lisa\Downloads
Boot Mode: Normal
==============================================

HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{03595C39-4494-4F94-8CEA-4C2C81D017D8} => Key deleted successfully.
HKCR\CLSID\{03595C39-4494-4F94-8CEA-4C2C81D017D8} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully.
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4b71-B0A3-3D82E62A6909} => Key deleted successfully.
HKCR\CLSID\{483830EE-A4CD-4b71-B0A3-3D82E62A6909} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ�± vË°!×—(ä¼48иpatm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†�x¢8€ÙjÀÿþ*´Ñ;áa´[¦†8*º~�RÙxœòÜ8'£-)x*ä* => Key not found.
HKCR\CLSID\ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ�± vË°!×—(ä¼48иpatm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†�x¢8€ÙjÀÿþ*´Ñ;áa´[¦†8*º~�RÙxœòÜ8'£-)x*ä* => Key not found.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{00B87E99-B03B-47CF-851D-007197A54B75}\\NameServer => Value deleted successfully.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{0C73F8FF-16C6-4979-AA4A-6E199DF63EAA}\\NameServer => Value deleted successfully.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8C58ABC7-4C7C-49AA-B65A-00C12433B4A4}\\NameServer => Value deleted successfully.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C67691B4-649B-4EAD-A4F7-E0DA720B01B0}\\NameServer => Value deleted successfully.
C:\Users\lisa\AppData\Roaming\Mozilla\Firefox\Profiles\hkgxigbt.default\Extensions\{26647ca4-a2a7-4eac-8a72-761aa9141de7} => Moved successfully.
C:\Users\lisa\AppData\Roaming\Mozilla\Firefox\Profiles\hkgxigbt.default\Extensions\ytd@mybrowserbar.com => Moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon@truesuite.com => Moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} => Moved successfully.
C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} => Moved successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ocr@babylon.com => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\4zffxtbr@VideoDownloadConverter_4z.com => Value deleted successfully.
HKCU\Software\Mozilla\Firefox\Extensions\\YTKaraoke@DacSoft.org => Value deleted successfully.
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} ==> The Chrome "Settings" can be used to fix the entry.
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter} ==> The Chrome "Settings" can be used to fix the entry.
C:\Windows\Tasks\RegClean Pro_UPDATES.job => Moved successfully.
"C:\Program Files (x86)\YTD Toolbar" => File/Directory not found.
C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002UA.job => Moved successfully.
C:\ProgramData\MFAData => Moved successfully.
C:\Users\lisa\Desktop\Registry kostenlos entrümpeln!.lnk => Moved successfully.

==== End of Fixlog ====
         

Wo soll ich das abspeichern! Unter was für einen Text!

Windows-taste+R, schreibe

netsh winsock reset
ipconfig /flushdns

nach jeder Zeile enter drücken.

Reboot.

Soll ich das Fixen?

Nein, genau das machen was da steht. Drücke die beiden Tasten gleichzeitig, es öffnet sich ein kleines Eingabefenster. Dort Jede Zeile einzeln eintragen und Enter drücken.

dann nochmal neustarten.

Enter dann geht speichern unter......? auf??
Was dann?

What?

was erscheint wenn Du Windows-Taste und die R-Taste gleichzeitig drückst?

der Editor erscheint, wo ich denn text eingeben kann und muss dann speichern um zu rebooten

dann ist dein Rechner der einzige auf der Welt der das macht, Win-Taste+R ist ein von Microsoft hart codiertes Kürzel zum aufruf der Ausführen Funktion.

Startmenü, in den Suchpfad unten CMD eingeben, oben erscheint CMD, Rechtsklick als Admin ausführen, dann die 3 Zeilen nacheinander eintippen.

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-07-2013 02
Ran by lisa (administrator) on 03-07-2013 20:01:36
Running from C:\Users\lisa\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Hewlett-Packard Company) C:\Windows\system32\Hpservice.exe
(AMD) C:\Windows\system32\atieclxx.exe
() C:\Program Files (x86)\AAVUpdateManager\aavus.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Nero AG) C:\Program Files (x86)\Motorola Media Link\Lite\NServiceEntry.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
() C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Motorola) C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney Business 5.0\ouservice\StarMoneyOnlineUpdate.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\2.0.189\SSScheduler.exe
() C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
() C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
(Facebook) C:\Users\lisa\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-03-11] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [Easy-PrintToolBox] C:\Program Files (x86)\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon [398944 2006-10-17] (CANON INC.)
HKLM\...\Run: [BDAgent] "C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe" [1091200 2013-06-14] (Bitdefender)
HKCU\...\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1104824 2012-11-12] (Samsung)
HKCU\...\Run: [HijackThis startup scan] G:\HijackThis.exe /startupscan [x]
MountPoints2: F - F:\AutoRun.exe
MountPoints2: G - G:\AutoRun.exe
MountPoints2: {1c5eb3cd-c4af-11e0-9a98-101f740a9c70} - F:\AutoRun.exe
MountPoints2: {1c5eb3e1-c4af-11e0-9a98-101f740a9c70} - F:\AutoRun.exe
MountPoints2: {1c5eb3ea-c4af-11e0-9a98-101f740a9c70} - F:\AutoRun.exe
MountPoints2: {1c5eb3fb-c4af-11e0-9a98-101f740a9c70} - G:\AutoRun.exe
MountPoints2: {2c9f57af-c764-11e0-9691-806e6f6e6963} - G:\AutoRun.exe
MountPoints2: {6af6a92d-e8fb-11e0-9dae-101f740a9c70} - G:\AutoRun.exe
MountPoints2: {869dbc6a-c764-11e0-99af-101f740a9c70} - G:\AutoRun.exe
MountPoints2: {cca738f2-58af-11e2-a74f-101f740a9c70} - G:\HTC_Sync_Manager_PC.exe
MountPoints2: {cca7392f-58af-11e2-a74f-101f740a9c70} - G:\setup.exe -a
MountPoints2: {f40ffb3a-bae1-11e2-8b31-101f740a9c70} - G:\HTC_Sync_Manager_PC.exe
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [336384 2011-04-01] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [HTC Sync Loader] "C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup [651264 2012-04-17] ()
HKLM-x32\...\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [103992 2011-05-23] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [574008 2011-07-11] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-02] (Apple Inc.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\2.0.189\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\Refresh.lnk
ShortcutTarget: Refresh.lnk -> C:\Program Files (x86)\Tango Skin Pack\Tools\Refresh.cmd (No File)
Startup: C:\Users\lisa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk
ShortcutTarget: Facebook Messenger.lnk -> C:\Users\lisa\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe (Facebook)
Startup: C:\Users\lisa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
SearchScopes: HKLM - {840CBA39-00BA-4137-9607-C2B1076209F6} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {840CBA39-00BA-4137-9607-C2B1076209F6} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - {4F0EDE64-5B3B-4425-8598-3C26DF5FF8BF} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
SearchScopes: HKCU - {840CBA39-00BA-4137-9607-C2B1076209F6} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ�± vË°!×—(ä¼48иpatm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†�x¢8€ÙjÀÿþ*´Ñ;áa´[¦†8*º~�RÙxœòÜ8'£-)x*ä* URL = 
BHO: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: No Name - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -  No File
BHO-x32: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll No File
Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll No File
Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll No File
Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll No File
Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\lisa\AppData\Roaming\Mozilla\Firefox\Profiles\hkgxigbt.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @VideoDownloadConverter_4z.com/Plugin - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\lisa\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\lisa\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\lisa\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\lisa\AppData\Roaming\Mozilla\Firefox\Profiles\hkgxigbt.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Users\lisa\AppData\Roaming\Mozilla\Firefox\Profiles\hkgxigbt.default\searchplugins\BrowserDefender.xml
FF SearchPlugin: C:\Users\lisa\AppData\Roaming\Mozilla\Firefox\Profiles\hkgxigbt.default\searchplugins\toggle.xml
FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon@truesuite.com
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext\
FF Extension: No Name - C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext\
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext\
FF Extension: No Name - C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext\

Chrome: 
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Users\lisa\AppData\Local\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\lisa\AppData\Local\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\lisa\AppData\Local\Google\Chrome\Application\27.0.1453.116\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Nero Kwik Media Helper) - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (WildTangent Games App V2 Presence Detector) - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility for IJ) - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
CHR Plugin: (Facebook Desktop) - C:\Users\lisa\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Website Logon) - C:\Users\lisa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aepeildmfnnehghlknddebgjghlompfe\1.0_0
CHR Extension: (Ashampoo DE) - C:\Users\lisa\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkjoiggkbepedjmjjbhhecjiimlckcga\2.3.4.2_0

==================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Program Files (x86)\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-04-01] (Advanced Micro Devices, Inc.)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [344928 2011-01-28] ()
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [99936 2006-11-10] ()
S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [224096 2011-08-13] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\2.0.189\McCHSvc.exe [227232 2010-09-02] (McAfee, Inc.)
R2 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [120728 2012-10-02] ()
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
S3 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [75384 2013-06-14] (Bitdefender)
R2 StarMoney Business 5.0 OnlineUpdate; C:\Program Files (x86)\StarMoney Business 5.0\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 Update Server; C:\Program Files\Common Files\Bitdefender\Bitdefender Arrakis Server\bin\arrakis3.exe [466736 2011-11-04] (BitDefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe [67904 2013-06-14] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe [1957912 2013-06-14] (Bitdefender)

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [705552 2013-06-14] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2013-06-14] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [587024 2013-06-14] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93160 2013-06-14] (BitDefender LLC)
R0 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [442088 2012-02-07] (BitDefender)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-23] (BitDefender LLC)
S3 bdsandbox; C:\Windows\system32\drivers\bdsandbox.sys [79952 2012-02-07] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [103944 2010-01-19] (BitDefender)
R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2011-08-13] (Bytemobile, Inc.)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [212992 2011-08-13] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2011-08-13] (Bytemobile, Inc.)
R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2011-08-13] (Bytemobile, Inc.)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [329800 2011-11-04] (BitDefender S.R.L.)
S3 CpqDfw; system32\drivers\CpqDfw.sys [x]
S3 motusbdevice; system32\DRIVERS\motusbdevice.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-03 19:13 - 2013-07-03 19:13 - 00000000 ____D C:\FRST
2013-07-03 19:04 - 2013-07-03 19:04 - 01934082 ____A (Farbar) C:\Users\lisa\Downloads\FRST64.exe
2013-07-03 18:19 - 2013-07-03 18:19 - 00793536 ____A C:\Users\lisa\Downloads\ZipOpenerSetup (1).exe
2013-07-03 17:46 - 2013-07-03 17:46 - 00000579 ____A C:\Users\lisa\Desktop\TFC - Verknüpfung.lnk
2013-07-03 15:41 - 2013-07-03 15:44 - 00014593 ____A C:\Users\lisa\Documents\Stattliches Hochbauamt  Kostenangebot Hochstaufen Kaserne  03.07.2013.xlsx
2013-07-03 13:16 - 2013-07-03 17:13 - 00000328 ____A C:\Windows\Tasks\HPCeeScheduleForlisa.job
2013-07-02 21:28 - 2013-07-02 21:29 - 00002352 ____A C:\Users\lisa\Desktop\Google Chrome.lnk
2013-07-02 20:37 - 2013-07-03 09:17 - 00000000 ____D C:\Users\lisa\Desktop\RK_Quarantine
2013-07-02 18:38 - 2013-07-02 18:38 - 00793536 ____A C:\Users\lisa\Downloads\ZipOpenerSetup.exe
2013-07-02 15:37 - 2013-07-03 17:40 - 00008272 ____A C:\Windows\PFRO.log
2013-07-02 15:23 - 2013-07-02 15:23 - 00000320 ____A C:\Users\lisa\Desktop\SecurityCheck - Verknüpfung.lnk
2013-07-02 10:25 - 2013-07-02 11:36 - 00001081 ____A C:\Users\lisa\Desktop\Continue Download Helper Installation.lnk
2013-07-02 08:50 - 2013-07-03 19:58 - 00000672 ____A C:\Windows\setupact.log
2013-07-02 08:50 - 2013-07-02 15:40 - 00000000 ____D C:\users\TEMP.lisa-lisa.002
2013-07-02 08:50 - 2013-07-02 08:50 - 00000000 ____A C:\Windows\setuperr.log
2013-07-02 08:03 - 2013-07-02 08:03 - 00000000 ____D C:\Users\TEMP.lisa-lisa.000\AppData\Roaming\Bitdefender
2013-07-02 08:02 - 2013-07-02 08:02 - 00000000 ____D C:\Users\TEMP.lisa-lisa.000\AppData\Local\VirtualStore
2013-07-02 08:01 - 2013-07-02 18:36 - 00000000 ____D C:\users\TEMP.lisa-lisa.000
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Vorlagen
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Startmenü
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Netzwerkumgebung
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Lokale Einstellungen
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Eigene Dateien
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Druckumgebung
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Documents\Eigene Musik
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Documents\Eigene Bilder
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\AppData\Local\Verlauf
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\AppData\Local\Anwendungsdaten
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Anwendungsdaten
2013-07-02 08:01 - 2012-02-26 21:28 - 00000000 ____D C:\Users\TEMP.lisa-lisa.000\AppData\Roaming\Macromedia
2013-07-02 08:01 - 2011-08-18 13:48 - 00000000 ____D C:\Users\TEMP.lisa-lisa.000\AppData\Local\Microsoft Help
2013-07-01 21:13 - 2013-07-01 21:13 - 00000000 ____D C:\Windows\ERUNT
2013-07-01 16:27 - 2013-07-01 16:27 - 00040844 ____A C:\Users\lisa\Documents\Addition.txt
2013-07-01 10:46 - 2013-07-01 10:46 - 00297313 ____A C:\Users\lisa\Documents\Malwarebytes Anti-Malware 1.pptx
2013-07-01 08:54 - 2013-07-01 08:54 - 00000000 ____D C:\Users\TEMP.lisa-lisa.001\AppData\Roaming\Bitdefender
2013-07-01 08:52 - 2013-07-02 18:36 - 00000000 ____D C:\users\TEMP.lisa-lisa.001
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Vorlagen
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Startmenü
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Netzwerkumgebung
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Lokale Einstellungen
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Eigene Dateien
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Druckumgebung
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Documents\Eigene Musik
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Documents\Eigene Bilder
2013-07-01 08:52 - 2012-02-26 21:28 - 00000000 ____D C:\Users\TEMP.lisa-lisa.001\AppData\Roaming\Macromedia
2013-06-30 19:49 - 2013-07-02 18:36 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2013
2013-06-30 19:38 - 2013-06-30 19:44 - 00029898 ____A C:\Users\lisa\Documents\cc_20130630_190551.reg
2013-06-30 19:32 - 2013-06-30 19:35 - 28181408 ____A (TuneUp Software) C:\Users\lisa\Downloads\TuneUpUtilities2013_de-DE (2).exe
2013-06-30 18:58 - 2013-06-30 19:04 - 00005852 ____A C:\Users\lisa\Documents\cc_20130630_185817.reg
2013-06-30 17:41 - 2013-07-02 18:37 - 00000000 ___AD C:\Program Files (x86)\FromDocToPDF_65EI
2013-06-30 17:41 - 2013-07-02 18:36 - 00000000 ____D C:\JRT
2013-06-30 16:18 - 2013-06-30 16:18 - 00000000 ____D C:\ProgramData\bdch
2013-06-18 14:40 - 2013-06-18 14:40 - 00602112 ____A (OldTimer Tools) C:\Users\lisa\Downloads\OTL.exe
2013-06-17 21:23 - 2013-06-17 21:24 - 28211040 ____A (TuneUp Software) C:\Users\lisa\Downloads\TuneUpUtilities2013_de-DE.exe
2013-06-17 18:53 - 2013-07-03 19:57 - 00468025 ____A C:\Windows\WindowsUpdate.log
2013-06-17 18:42 - 2013-06-17 18:42 - 00000176 ____A C:\Users\lisa\Documents\cc_20130617_184239.reg
2013-06-17 16:40 - 2013-06-17 16:42 - 00000429 ____A C:\Windows\System32\avgrep.txt
2013-06-17 13:23 - 2013-06-17 13:24 - 00130010 ____A C:\Users\lisa\Documents\cc_20130617_132325.reg
2013-06-17 11:50 - 2013-06-17 11:50 - 00000822 ____A C:\Users\Public\Desktop\CCleaner.lnk
2013-06-17 11:44 - 2013-06-17 11:45 - 00000634 ____A C:\Users\lisa\Desktop\ccsetup402 - Verknüpfung.lnk
2013-06-17 11:38 - 2013-07-02 18:37 - 00000000 ____D C:\Program Files\CCleaner
2013-06-17 09:13 - 2013-07-01 21:23 - 00000000 ____D C:\users\TEMP.lisa-lisa
2013-06-16 21:28 - 2013-06-16 21:28 - 00001069 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-06-16 21:05 - 2013-07-02 18:37 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-16 20:49 - 2013-06-16 20:54 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\lisa\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-06-16 20:43 - 2013-06-16 20:50 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\lisa\Downloads\mbam-setup-1.75.0.1300.exe
2013-06-16 20:09 - 2013-07-02 18:38 - 00000000 ____D C:\Users\lisa\AppData\Roaming\Systweak
2013-06-16 12:54 - 2013-06-16 12:56 - 03758488 ____A (Systweak Inc                                                ) C:\Users\lisa\Downloads\rcpsetup_3335_ggde.exe
2013-06-16 10:00 - 2013-06-17 14:53 - 00000000 ____D C:\Windows\pss
2013-06-15 22:39 - 2013-06-15 22:40 - 00393048 ____A (Softonic                                        ) C:\Users\lisa\Downloads\SoftonicDownloader_fuer_hijackthis.exe
2013-06-15 22:03 - 2013-06-15 22:18 - 22562672 ____A C:\Users\lisa\Downloads\TuneUpUtilities2013_de-DE (1).exe
2013-06-15 21:53 - 2013-06-17 21:22 - 00002243 ____A C:\Windows\epplauncher.mif
2013-06-15 21:16 - 2013-06-15 21:36 - 28181408 ____A (TuneUp Software) C:\Users\lisa\Downloads\TuneUpUtilities2013_de-DE(2).exe
2013-06-15 21:00 - 2013-06-15 21:38 - 13503464 ____A (Microsoft Corporation) C:\Users\lisa\Downloads\mseinstall.exe
2013-06-15 19:15 - 2013-06-15 19:19 - 00000000 ____D C:\Program Files (x86)\GUM8868.tmp
2013-06-15 19:15 - 2013-06-15 19:15 - 04167680 ____A C:\Program Files (x86)\GUT8869.tmp
2013-06-15 19:02 - 2013-06-15 19:06 - 00781800 ____A (Google Inc.) C:\Users\lisa\Downloads\ChromeSetup.exe
2013-06-14 08:07 - 2013-07-03 16:44 - 00000000 ____D C:\ProgramData\AVG2013
2013-06-14 07:54 - 2013-06-14 07:54 - 00000000 ____D C:\Users\lisa\AppData\Local\MFAData
2013-06-12 16:38 - 2013-07-03 15:55 - 00012808 ____A C:\Users\lisa\Documents\Staatliches Hochbauamt Traunstein 4. AZ 11.06.2013 Seite 2.xlsx
2013-06-12 15:38 - 2013-07-01 20:24 - 00013299 ____A C:\Users\lisa\Documents\Stattliches Hochbauamt  4.AZ  11.06.2013.xlsx
2013-06-12 10:22 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 10:22 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 10:22 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-12 10:22 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-12 10:22 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-12 10:22 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 10:22 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 10:22 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 10:22 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 10:22 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 10:22 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 10:22 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 10:22 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-12 10:21 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 10:21 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 10:21 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 10:21 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 10:21 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 10:21 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 10:21 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 10:20 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 10:20 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 10:20 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 10:20 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 10:20 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 10:20 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 10:20 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 10:20 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-12 10:19 - 2013-06-12 10:19 - 00127984 ____A C:\Users\lisa\Downloads\windowsupdate.diagcab
2013-06-12 09:39 - 2011-07-08 13:37 - 00014119 ____A C:\Windows\SysWOW64\RaCoInst.dat
2013-06-12 09:39 - 2011-07-08 13:37 - 00014119 ____A C:\Windows\System32\RaCoInst.dat
2013-06-12 08:37 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 08:37 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 08:37 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 08:37 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 08:37 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 08:36 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 08:36 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 08:36 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 08:36 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 08:36 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 08:36 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 08:36 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 08:36 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 08:36 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 08:36 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 08:36 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 08:36 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 08:36 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 08:36 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-10 18:37 - 2013-06-10 19:05 - 00012437 ____A C:\Users\lisa\Documents\Grieche Lilly Ellenberger Schlussrechnung 01.06..2013 pdf 3.xlsx
2013-06-10 17:16 - 2013-06-10 19:04 - 00012641 ____A C:\Users\lisa\Documents\Grieche Lilly Ellenberger Schlussrechnung 01.06..2013 pdf 2.xlsx
2013-06-10 17:10 - 2013-06-10 17:10 - 00014227 ____A C:\Users\lisa\Documents\Grieche Lilly Ellenberger Schlussrechnung 01.06..2013 pdf 1.xlsx
2013-06-10 16:18 - 2013-06-10 19:30 - 00013431 ____A C:\Users\lisa\Documents\Grieche Lilly Ellenberger Angebot18.02.2013 pdf 1.xlsx
2013-06-10 12:59 - 2013-07-02 18:37 - 00000000 ____D C:\Program Files\iTunes
2013-06-10 12:59 - 2013-07-02 18:37 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-06-10 12:59 - 2013-06-14 14:00 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-10 12:59 - 2013-06-10 12:59 - 00001743 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-10 12:59 - 2013-06-10 12:59 - 00000000 ____D C:\Program Files\iPod
2013-06-10 10:07 - 2013-07-02 18:37 - 00000000 ____D C:\Program Files (x86)\Video Download Converter
2013-06-05 16:08 - 2013-06-05 16:08 - 00006124 ____A C:\Users\lisa\Documents\bookmark.htm
2013-06-05 13:53 - 2013-06-05 13:53 - 00001979 ____A C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-06-03 18:49 - 2013-06-03 18:49 - 00000000 ____D C:\Windows\SysWOW64\xlive
2013-06-03 18:49 - 2013-06-03 18:49 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-06-03 18:47 - 2009-09-04 17:44 - 00517960 ____A (Microsoft Corporation) C:\Windows\System32\XAudio2_5.dll
2013-06-03 18:47 - 2009-09-04 17:44 - 00238936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-06-03 18:47 - 2009-09-04 17:44 - 00176968 ____A (Microsoft Corporation) C:\Windows\System32\xactengine3_5.dll
2013-06-03 18:47 - 2009-09-04 17:44 - 00073544 ____A (Microsoft Corporation) C:\Windows\System32\XAPOFX1_3.dll
2013-06-03 18:47 - 2009-09-04 17:29 - 05554512 ____A (Microsoft Corporation) C:\Windows\System32\d3dcsx_42.dll
2013-06-03 18:47 - 2009-09-04 17:29 - 05501792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-06-03 18:47 - 2009-09-04 17:29 - 02582888 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_42.dll
2013-06-03 18:47 - 2009-09-04 17:29 - 02475352 ____A (Microsoft Corporation) C:\Windows\System32\D3DX9_42.dll
2013-06-03 18:47 - 2009-09-04 17:29 - 00285024 ____A (Microsoft Corporation) C:\Windows\System32\d3dx11_42.dll
2013-06-03 18:47 - 2009-09-04 17:29 - 00235344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-06-03 18:47 - 2009-03-16 14:18 - 00521560 ____A (Microsoft Corporation) C:\Windows\System32\XAudio2_4.dll
2013-06-03 18:47 - 2009-03-16 14:18 - 00174936 ____A (Microsoft Corporation) C:\Windows\System32\xactengine3_4.dll
2013-06-03 18:47 - 2009-03-16 14:18 - 00024920 ____A (Microsoft Corporation) C:\Windows\System32\X3DAudio1_6.dll
2013-06-03 18:47 - 2009-03-09 15:27 - 05425496 ____A (Microsoft Corporation) C:\Windows\System32\D3DX9_41.dll
2013-06-03 18:47 - 2009-03-09 15:27 - 02430312 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_41.dll
2013-06-03 18:47 - 2009-03-09 15:27 - 00520544 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_41.dll
2013-06-03 18:47 - 2008-10-15 06:22 - 02605920 ____A (Microsoft Corporation) C:\Windows\System32\D3DCompiler_40.dll
2013-06-03 18:47 - 2008-10-15 06:22 - 00519000 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_40.dll
2013-06-03 18:46 - 2008-10-15 06:22 - 05631312 ____A (Microsoft Corporation) C:\Windows\System32\D3DX9_40.dll
2013-06-03 18:46 - 2008-07-31 10:41 - 00238088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-06-03 18:46 - 2008-07-31 10:41 - 00177672 ____A (Microsoft Corporation) C:\Windows\System32\xactengine3_2.dll
2013-06-03 18:46 - 2008-07-31 10:41 - 00072200 ____A (Microsoft Corporation) C:\Windows\System32\XAPOFX1_1.dll
2013-06-03 18:46 - 2008-07-31 10:41 - 00068616 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-06-03 18:46 - 2008-07-31 10:40 - 00513544 ____A (Microsoft Corporation) C:\Windows\System32\XAudio2_2.dll
2013-06-03 18:46 - 2008-07-31 10:40 - 00509448 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-06-03 17:05 - 2013-06-03 17:05 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-06-03 17:05 - 2013-06-03 17:05 - 00000000 ____D C:\Windows\SysWOW64\Extensions

==================== One Month Modified Files and Folders =======

2013-07-03 20:00 - 2013-01-07 20:02 - 00000000 ____D C:\Users\lisa\AppData\Local\Htc
2013-07-03 20:00 - 2011-12-25 11:53 - 00001102 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-03 19:58 - 2013-07-02 08:50 - 00000672 ____A C:\Windows\setupact.log
2013-07-03 19:58 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-03 19:57 - 2013-06-17 18:53 - 00468025 ____A C:\Windows\WindowsUpdate.log
2013-07-03 19:34 - 2012-04-08 12:26 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-03 19:32 - 2011-09-30 21:55 - 00001116 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002UA.job
2013-07-03 19:13 - 2013-07-03 19:13 - 00000000 ____D C:\FRST
2013-07-03 19:09 - 2011-12-25 11:53 - 00001106 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-03 19:04 - 2013-07-03 19:04 - 01934082 ____A (Farbar) C:\Users\lisa\Downloads\FRST64.exe
2013-07-03 18:48 - 2009-07-14 06:45 - 00031856 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-03 18:48 - 2009-07-14 06:45 - 00031856 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-03 18:19 - 2013-07-03 18:19 - 00793536 ____A C:\Users\lisa\Downloads\ZipOpenerSetup (1).exe
2013-07-03 17:58 - 2011-05-08 01:56 - 05741154 ____A C:\Windows\System32\perfh007.dat
2013-07-03 17:58 - 2011-05-08 01:56 - 01763322 ____A C:\Windows\System32\perfc007.dat
2013-07-03 17:58 - 2009-07-14 07:13 - 00006256 ____A C:\Windows\System32\PerfStringBackup.INI
2013-07-03 17:46 - 2013-07-03 17:46 - 00000579 ____A C:\Users\lisa\Desktop\TFC - Verknüpfung.lnk
2013-07-03 17:40 - 2013-07-02 15:37 - 00008272 ____A C:\Windows\PFRO.log
2013-07-03 17:38 - 2011-05-07 16:21 - 00000000 ____D C:\Program Files (x86)\HP Games
2013-07-03 17:13 - 2013-07-03 13:16 - 00000328 ____A C:\Windows\Tasks\HPCeeScheduleForlisa.job
2013-07-03 17:10 - 2011-12-25 11:54 - 00000000 ____D C:\Program Files\Google
2013-07-03 17:10 - 2011-12-25 11:50 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-03 17:05 - 2012-04-08 00:16 - 00000000 ____D C:\Program Files (x86)\Skin Pack
2013-07-03 17:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Cursors
2013-07-03 16:54 - 2011-09-30 21:55 - 00000000 ____D C:\Users\lisa\AppData\Local\Google
2013-07-03 16:44 - 2013-06-14 08:07 - 00000000 ____D C:\ProgramData\AVG2013
2013-07-03 15:55 - 2013-06-12 16:38 - 00012808 ____A C:\Users\lisa\Documents\Staatliches Hochbauamt Traunstein 4. AZ 11.06.2013 Seite 2.xlsx
2013-07-03 15:44 - 2013-07-03 15:41 - 00014593 ____A C:\Users\lisa\Documents\Stattliches Hochbauamt  Kostenangebot Hochstaufen Kaserne  03.07.2013.xlsx
2013-07-03 14:32 - 2011-09-30 21:55 - 00001064 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002Core.job
2013-07-03 10:00 - 2011-11-30 01:16 - 00000000 ____D C:\Program Files (x86)\StarMoney Business 5.0
2013-07-03 09:17 - 2013-07-02 20:37 - 00000000 ____D C:\Users\lisa\Desktop\RK_Quarantine
2013-07-03 08:58 - 2011-08-11 13:17 - 00000376 ____A C:\Users\lisa\AppData\Roamingprivacy.xml
2013-07-02 21:29 - 2013-07-02 21:28 - 00002352 ____A C:\Users\lisa\Desktop\Google Chrome.lnk
2013-07-02 18:38 - 2013-07-02 18:38 - 00793536 ____A C:\Users\lisa\Downloads\ZipOpenerSetup.exe
2013-07-02 18:38 - 2013-06-16 20:09 - 00000000 ____D C:\Users\lisa\AppData\Roaming\Systweak
2013-07-02 18:38 - 2012-04-08 00:18 - 00000000 ____D C:\Windows\Neon Skin Pack
2013-07-02 18:38 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-07-02 18:38 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Portable Devices
2013-07-02 18:38 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-02 18:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\servicing
2013-07-02 18:37 - 2013-06-30 17:41 - 00000000 ___AD C:\Program Files (x86)\FromDocToPDF_65EI
2013-07-02 18:37 - 2013-06-17 11:38 - 00000000 ____D C:\Program Files\CCleaner
2013-07-02 18:37 - 2013-06-16 21:05 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-07-02 18:37 - 2013-06-10 12:59 - 00000000 ____D C:\Program Files\iTunes
2013-07-02 18:37 - 2013-06-10 12:59 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-07-02 18:37 - 2013-06-10 10:07 - 00000000 ____D C:\Program Files (x86)\Video Download Converter
2013-07-02 18:37 - 2013-05-31 13:39 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-07-02 18:37 - 2013-01-05 16:52 - 00000000 ____D C:\Program Files (x86)\Steuersparer 2013
2013-07-02 18:37 - 2013-01-04 12:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-02 18:37 - 2012-12-27 16:01 - 00000000 ____D C:\Program Files (x86)\Recovery Toolbox for Excel
2013-07-02 18:37 - 2012-11-15 21:11 - 00000000 ____D C:\Program Files (x86)\Microsoft Games
2013-07-02 18:37 - 2012-08-05 13:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-02 18:37 - 2012-07-24 19:56 - 00000000 ____D C:\Program Files (x86)\Portrait Professional 10 Test
2013-07-02 18:37 - 2012-07-24 18:25 - 00000000 ____D C:\Program Files (x86)\PhotoScape
2013-07-02 18:37 - 2012-07-17 10:53 - 00000000 ____D C:\Program Files (x86)\iThmb Converter
2013-07-02 18:37 - 2012-05-30 09:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Windows 7 Upgrade Advisor
2013-07-02 18:37 - 2012-05-21 14:19 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-02 18:37 - 2012-05-13 13:04 - 00000000 ____D C:\Program Files (x86)\Origin
2013-07-02 18:37 - 2012-04-15 18:36 - 00000000 ____D C:\Program Files (x86)\VideoPerformer
2013-07-02 18:37 - 2012-04-07 20:51 - 00000000 ____D C:\Program Files (x86)\YouTube Song Downloader
2013-07-02 18:37 - 2012-04-07 20:51 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2013-07-02 18:37 - 2012-04-02 22:50 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2013-07-02 18:37 - 2012-04-02 22:50 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2013-07-02 18:37 - 2011-12-25 12:20 - 00000000 ____D C:\Program Files (x86)\IrfanView
2013-07-02 18:37 - 2011-12-24 19:57 - 00000000 ____D C:\Program Files\Paint.NET
2013-07-02 18:37 - 2011-12-03 22:38 - 00000000 ____D C:\Program Files\Bonjour
2013-07-02 18:37 - 2011-09-08 21:52 - 00000000 ____D C:\Program Files (x86)\Safari
2013-07-02 18:37 - 2011-08-17 13:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-07-02 18:37 - 2011-08-13 10:28 - 00000000 ____D C:\ProgramData\DatacardService
2013-07-02 18:37 - 2011-07-10 18:20 - 00000000 ____D C:\Program Files (x86)\HP SimplePass 2011
2013-07-02 18:37 - 2011-07-10 18:19 - 00000000 ____D C:\Program Files\Common Files\AuthenTec
2013-07-02 18:36 - 2013-07-02 08:01 - 00000000 ____D C:\users\TEMP.lisa-lisa.000
2013-07-02 18:36 - 2013-07-01 08:52 - 00000000 ____D C:\users\TEMP.lisa-lisa.001
2013-07-02 18:36 - 2013-06-30 19:49 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2013
2013-07-02 18:36 - 2013-06-30 17:41 - 00000000 ____D C:\JRT
2013-07-02 18:36 - 2013-01-21 21:12 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-07-02 18:36 - 2013-01-14 16:04 - 00000000 ____D C:\Program Files (x86)\AAVUpdateManager
2013-07-02 18:36 - 2013-01-06 18:03 - 00000000 ____D C:\KronosFaktura
2013-07-02 18:36 - 2012-07-13 14:54 - 00000000 ____D C:\Program Files (x86)\Dream Aquarium
2013-07-02 18:36 - 2012-05-27 14:05 - 00000000 ____D C:\Program Files (x86)\Desktop Media
2013-07-02 18:36 - 2012-05-21 11:52 - 00000000 ____D C:\Program Files (x86)\CD-LabelPrint
2013-07-02 18:36 - 2012-04-15 18:36 - 00000000 ____D C:\Program Files (x86)\AC3File
2013-07-02 18:36 - 2011-12-03 22:38 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-07-02 18:36 - 2011-08-20 11:10 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-07-02 18:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-07-02 15:40 - 2013-07-02 08:50 - 00000000 ____D C:\users\TEMP.lisa-lisa.002
2013-07-02 15:23 - 2013-07-02 15:23 - 00000320 ____A C:\Users\lisa\Desktop\SecurityCheck - Verknüpfung.lnk
2013-07-02 11:36 - 2013-07-02 10:25 - 00001081 ____A C:\Users\lisa\Desktop\Continue Download Helper Installation.lnk
2013-07-02 11:25 - 2009-07-14 07:08 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-02 08:50 - 2013-07-02 08:50 - 00000000 ____A C:\Windows\setuperr.log
2013-07-02 08:50 - 2011-08-09 19:28 - 00000000 ____D C:\users\lisa
2013-07-02 08:03 - 2013-07-02 08:03 - 00000000 ____D C:\Users\TEMP.lisa-lisa.000\AppData\Roaming\Bitdefender
2013-07-02 08:02 - 2013-07-02 08:02 - 00000000 ____D C:\Users\TEMP.lisa-lisa.000\AppData\Local\VirtualStore
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Vorlagen
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Startmenü
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Netzwerkumgebung
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Lokale Einstellungen
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Eigene Dateien
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Druckumgebung
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Documents\Eigene Musik
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Documents\Eigene Bilder
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\AppData\Local\Verlauf
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\AppData\Local\Anwendungsdaten
2013-07-02 08:01 - 2013-07-02 08:01 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.000\Anwendungsdaten
2013-07-01 21:23 - 2013-06-17 09:13 - 00000000 ____D C:\users\TEMP.lisa-lisa
2013-07-01 21:13 - 2013-07-01 21:13 - 00000000 ____D C:\Windows\ERUNT
2013-07-01 20:24 - 2013-06-12 15:38 - 00013299 ____A C:\Users\lisa\Documents\Stattliches Hochbauamt  4.AZ  11.06.2013.xlsx
2013-07-01 16:27 - 2013-07-01 16:27 - 00040844 ____A C:\Users\lisa\Documents\Addition.txt
2013-07-01 14:49 - 2011-08-13 11:38 - 00000000 ____D C:\Users\lisa\AppData\Local\CrashDumps
2013-07-01 10:46 - 2013-07-01 10:46 - 00297313 ____A C:\Users\lisa\Documents\Malwarebytes Anti-Malware 1.pptx
2013-07-01 08:54 - 2013-07-01 08:54 - 00000000 ____D C:\Users\TEMP.lisa-lisa.001\AppData\Roaming\Bitdefender
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Vorlagen
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Startmenü
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Netzwerkumgebung
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Lokale Einstellungen
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Eigene Dateien
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Druckumgebung
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Documents\Eigene Musik
2013-07-01 08:52 - 2013-07-01 08:52 - 00000000 __SHD C:\Users\TEMP.lisa-lisa.001\Documents\Eigene Bilder
2013-06-30 19:44 - 2013-06-30 19:38 - 00029898 ____A C:\Users\lisa\Documents\cc_20130630_190551.reg
2013-06-30 19:35 - 2013-06-30 19:32 - 28181408 ____A (TuneUp Software) C:\Users\lisa\Downloads\TuneUpUtilities2013_de-DE (2).exe
2013-06-30 19:04 - 2013-06-30 18:58 - 00005852 ____A C:\Users\lisa\Documents\cc_20130630_185817.reg
2013-06-30 16:18 - 2013-06-30 16:18 - 00000000 ____D C:\ProgramData\bdch
2013-06-18 14:40 - 2013-06-18 14:40 - 00602112 ____A (OldTimer Tools) C:\Users\lisa\Downloads\OTL.exe
2013-06-17 21:24 - 2013-06-17 21:23 - 28211040 ____A (TuneUp Software) C:\Users\lisa\Downloads\TuneUpUtilities2013_de-DE.exe
2013-06-17 21:22 - 2013-06-15 21:53 - 00002243 ____A C:\Windows\epplauncher.mif
2013-06-17 18:42 - 2013-06-17 18:42 - 00000176 ____A C:\Users\lisa\Documents\cc_20130617_184239.reg
2013-06-17 16:42 - 2013-06-17 16:40 - 00000429 ____A C:\Windows\System32\avgrep.txt
2013-06-17 14:53 - 2013-06-16 10:00 - 00000000 ____D C:\Windows\pss
2013-06-17 13:24 - 2013-06-17 13:23 - 00130010 ____A C:\Users\lisa\Documents\cc_20130617_132325.reg
2013-06-17 13:18 - 2012-09-09 19:38 - 00000000 ____D C:\Users\lisa\Tracing
2013-06-17 12:40 - 2007-01-02 03:25 - 00000000 ____D C:\Windows\Panther
2013-06-17 11:50 - 2013-06-17 11:50 - 00000822 ____A C:\Users\Public\Desktop\CCleaner.lnk
2013-06-17 11:45 - 2013-06-17 11:44 - 00000634 ____A C:\Users\lisa\Desktop\ccsetup402 - Verknüpfung.lnk
2013-06-16 23:50 - 2013-04-24 23:45 - 00000902 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2416322015-1569237049-636745652-1002Core.job
2013-06-16 21:28 - 2013-06-16 21:28 - 00001069 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-06-16 20:54 - 2013-06-16 20:49 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\lisa\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-06-16 20:50 - 2013-06-16 20:43 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\lisa\Downloads\mbam-setup-1.75.0.1300.exe
2013-06-16 17:40 - 2011-08-13 11:08 - 00000052 ____A C:\Windows\SysWOW64\DOErrors.log
2013-06-16 17:28 - 2011-05-07 16:19 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2013-06-16 17:22 - 2011-02-10 21:23 - 00000000 ____D C:\SWSetup
2013-06-16 16:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\NDF
2013-06-16 15:52 - 2011-10-05 20:41 - 00000119 ____A C:\Users\lisa\AppData\Roaming\default.rss
2013-06-16 13:15 - 2011-08-09 19:28 - 00000000 ____D C:\Users\lisa\AppData\Local\VirtualStore
2013-06-16 12:56 - 2013-06-16 12:54 - 03758488 ____A (Systweak Inc                                                ) C:\Users\lisa\Downloads\rcpsetup_3335_ggde.exe
2013-06-15 22:40 - 2013-06-15 22:39 - 00393048 ____A (Softonic                                        ) C:\Users\lisa\Downloads\SoftonicDownloader_fuer_hijackthis.exe
2013-06-15 22:18 - 2013-06-15 22:03 - 22562672 ____A C:\Users\lisa\Downloads\TuneUpUtilities2013_de-DE (1).exe
2013-06-15 22:07 - 2013-01-21 21:15 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2013-06-15 21:38 - 2013-06-15 21:00 - 13503464 ____A (Microsoft Corporation) C:\Users\lisa\Downloads\mseinstall.exe
2013-06-15 21:36 - 2013-06-15 21:16 - 28181408 ____A (TuneUp Software) C:\Users\lisa\Downloads\TuneUpUtilities2013_de-DE(2).exe
2013-06-15 19:19 - 2013-06-15 19:15 - 00000000 ____D C:\Program Files (x86)\GUM8868.tmp
2013-06-15 19:15 - 2013-06-15 19:15 - 04167680 ____A C:\Program Files (x86)\GUT8869.tmp
2013-06-15 19:06 - 2013-06-15 19:02 - 00781800 ____A (Google Inc.) C:\Users\lisa\Downloads\ChromeSetup.exe
2013-06-15 18:17 - 2013-06-02 20:12 - 00000000 ____D C:\Program Files (x86)\MiPony
2013-06-15 11:36 - 2012-02-08 09:27 - 00000000 ____D C:\ProgramData\BDLogging
2013-06-14 16:28 - 2011-03-01 17:45 - 00093160 ____A (BitDefender LLC) C:\Windows\System32\Drivers\bdfndisf6.sys
2013-06-14 16:27 - 2012-03-01 20:22 - 00587024 ____A (BitDefender) C:\Windows\System32\Drivers\avckf.sys
2013-06-14 16:27 - 2012-02-07 14:51 - 00705552 ____A (BitDefender) C:\Windows\System32\Drivers\avc3.sys
2013-06-14 16:26 - 2011-07-15 16:12 - 00261056 ____A (BitDefender) C:\Windows\System32\Drivers\avchv.sys
2013-06-14 15:37 - 2012-11-14 11:46 - 00000000 ____D C:\Program Files (x86)\DC Software
2013-06-14 15:37 - 2011-08-09 19:31 - 00000000 ____D C:\Users\lisa\AppData\Local\Hewlett-Packard_Company
2013-06-14 15:37 - 2011-08-09 19:31 - 00000000 ____D C:\Users\lisa\AppData\Local\Hewlett-Packard
2013-06-14 15:37 - 2011-05-07 16:30 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2013-06-14 15:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-14 15:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2013-06-14 15:37 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-06-14 15:36 - 2012-02-24 16:54 - 00000000 ____D C:\Windows\System32\Macromed
2013-06-14 15:36 - 2011-05-07 16:20 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-06-14 15:36 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\System32\WinBioPlugIns
2013-06-14 15:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Speech
2013-06-14 14:41 - 2011-09-18 20:01 - 00001327 ____A C:\Windows\SysWOW64\logFile.xml
2013-06-14 14:32 - 2011-08-09 19:42 - 00000000 ____D C:\Users\lisa\AppData\Roaming\hpqlog
2013-06-14 14:00 - 2013-06-10 12:59 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-14 14:00 - 2011-08-17 13:22 - 00000000 ____D C:\Users\lisa\AppData\Local\Microsoft Help
2013-06-14 14:00 - 2011-07-10 18:08 - 00000000 ____D C:\Program Files\Validity Sensors
2013-06-14 13:59 - 2012-05-27 14:17 - 00000000 ____D C:\Users\lisa\AppData\Roaming\ArcSoft
2013-06-14 13:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system
2013-06-14 08:08 - 2013-01-21 21:15 - 00000000 ____D C:\Users\lisa\AppData\Roaming\TuneUp Software
2013-06-14 07:54 - 2013-06-14 07:54 - 00000000 ____D C:\Users\lisa\AppData\Local\MFAData
2013-06-13 10:35 - 2013-03-05 12:30 - 00013729 ____A C:\Users\lisa\Documents\Staatl. Hochbauamt Aufmaß 01 18.02.2013.xlsx
2013-06-12 18:37 - 2012-04-08 12:26 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 18:37 - 2011-08-18 08:20 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 12:01 - 2013-02-27 19:46 - 00011549 ____A C:\Users\lisa\Documents\Regiebericht Staatliches Hochbauamt 18.02.2013  R3.xlsx
2013-06-12 10:37 - 2011-11-04 15:06 - 00000000 ____A C:\Windows\System32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-06-12 10:22 - 2011-08-21 09:41 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 10:19 - 2013-06-12 10:19 - 00127984 ____A C:\Users\lisa\Downloads\windowsupdate.diagcab
2013-06-12 09:39 - 2011-07-10 18:09 - 00008045 ____A C:\Windows\System32\RaCoInst.log
2013-06-10 19:30 - 2013-06-10 16:18 - 00013431 ____A C:\Users\lisa\Documents\Grieche Lilly Ellenberger Angebot18.02.2013 pdf 1.xlsx
2013-06-10 19:05 - 2013-06-10 18:37 - 00012437 ____A C:\Users\lisa\Documents\Grieche Lilly Ellenberger Schlussrechnung 01.06..2013 pdf 3.xlsx
2013-06-10 19:04 - 2013-06-10 17:16 - 00012641 ____A C:\Users\lisa\Documents\Grieche Lilly Ellenberger Schlussrechnung 01.06..2013 pdf 2.xlsx
2013-06-10 17:10 - 2013-06-10 17:10 - 00014227 ____A C:\Users\lisa\Documents\Grieche Lilly Ellenberger Schlussrechnung 01.06..2013 pdf 1.xlsx
2013-06-10 12:59 - 2013-06-10 12:59 - 00001743 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-10 12:59 - 2013-06-10 12:59 - 00000000 ____D C:\Program Files\iPod
2013-06-08 16:08 - 2013-06-12 10:20 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 16:06 - 2013-06-12 10:20 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 16:06 - 2013-06-12 10:20 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 13:42 - 2013-06-12 10:20 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 13:40 - 2013-06-12 10:20 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 13:40 - 2013-06-12 10:20 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 13:40 - 2013-06-12 10:20 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 13:40 - 2013-06-12 10:20 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 13:13 - 2013-06-12 10:21 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-06 08:32 - 2012-12-05 09:29 - 00000344 ____A C:\Windows\Tasks\HPCeeScheduleForLISA-LISA$.job
2013-06-05 16:08 - 2013-06-05 16:08 - 00006124 ____A C:\Users\lisa\Documents\bookmark.htm
2013-06-05 13:54 - 2011-08-18 08:54 - 00000000 ____D C:\Users\lisa\AppData\Local\Adobe
2013-06-05 13:53 - 2013-06-05 13:53 - 00001979 ____A C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-06-05 13:53 - 2011-05-07 16:36 - 00000000 ____D C:\ProgramData\Adobe
2013-06-05 13:53 - 2011-05-07 16:36 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-06-03 18:49 - 2013-06-03 18:49 - 00000000 ____D C:\Windows\SysWOW64\xlive
2013-06-03 18:49 - 2013-06-03 18:49 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-06-03 17:05 - 2013-06-03 17:05 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-06-03 17:05 - 2013-06-03 17:05 - 00000000 ____D C:\Windows\SysWOW64\Extensions

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-01 16:53

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Ok! Passt allles wie ich es gemacht habe?
Gruß Lisa