Hallo Trojanerboardler!
Ich hab das Gefühl, bei mir stimmt was nicht.
spybot meldet: Barowwsoe2Save MalewareC (Optimizer Pro\)
aswMBR bleibt hängen, wenn ich vor dem Scan update; tue ich das nicht, läuft aswmbr durch :
aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-07-04 15:30:50
-----------------------------
15:30:50.243 OS Version: Windows x64 6.1.7601 Service Pack 1
15:30:50.243 Number of processors: 4 586 0x1E05
15:30:50.243 ComputerName: PC UserName:
15:30:52.521 Initialize success
15:31:01.441 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP4T0L0-4
15:31:01.441 Disk 0 Vendor: WDC_WD10EADS-65M2B0 01.00A01 Size: 953869MB BusType: 3
15:31:01.909 Disk 0 MBR read successfully
15:31:01.909 Disk 0 MBR scan
15:31:01.909 Disk 0 Windows 7 default MBR code
15:31:01.925 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
15:31:01.987 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 953767 MB offset 206848
15:31:02.237 Disk 0 scanning C:\Windows\system32\drivers
15:31:33.312 Service scanning
15:31:50.909 Modules scanning
15:31:50.909 Disk 0 trace - called modules:
15:31:50.987 ntoskrnl.exe CLASSPNP.SYS disk.sys vsflt53.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
15:31:50.987 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007835060]
15:31:50.987 3 CLASSPNP.SYS[fffff88001baa43f] -> nt!IofCallDriver -> [0xfffffa8007680a50]
15:31:51.502 5 vsflt53.sys[fffff88000ebbcfd] -> nt!IofCallDriver -> [0xfffffa8007569520]
15:31:51.502 7 ACPI.sys[fffff88000e0b7a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP4T0L0-4[0xfffffa800754a680]
15:31:51.502 Scan finished successfully
15:34:14.429 Disk 0 MBR has been saved successfully to "C:\Users\Normal\Desktop\MBR.dat"
15:34:14.710 The log file has been saved successfully to "C:\Users\Normal\Desktop\aswMBR.txt"

Systemscan mit FRST
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Scan.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-07-2013
Ran by  XXX (administrator) on 04-07-2013 15:59:32
Running from C:\Users\ XXX\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode:  XXX

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
() C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nalserv.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
(Microsoft Corporation) C:\Windows\system32\msiexec.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices [112512 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [ISW] C:\Program Files\CheckPoint\ZAForceField\ForceField.exe /icon="hidden" [1127592 2012-11-22] (Check Point Software Technologies)
HKLM\...\Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [472984 2013-06-03] (Adobe Systems Incorporated)
MountPoints2: {2294f3ab-39f2-11df-80a5-e0cb4eeaf7fa} - J:\Autorun.exe
MountPoints2: {406bdc3d-ae39-11e1-8398-e0cb4eeaf7fa} - J:\SETUP.EXE
MountPoints2: {ce586255-5657-11e0-b44e-e0cb4eeaf7fa} - J:\SETUP.EXE
HKLM-x32\...\Run: [TrueImageMonitor.exe] "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" [2673688 2011-07-08] ()
HKLM-x32\...\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: []  [x]
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe" [73832 2013-03-27] (Check Point Software Technologies LTD)
HKLM-x32\...\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [1263952 2013-02-13] ()
HKLM-x32\...\Run: [AdobeCEPServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe" -launchedbylogin [1039248 2013-03-13] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [3830224 2013-05-16] (Safer-Networking Ltd.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
URLSearchHook: (No Name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} -  No File
HKLM-x32 SearchScopes: DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2613550
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2613550
HKCU SearchScopes: DefaultScope {3D4DEE04-F276-4383-B345-6F5346AC2537} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = hxxp://tbsearch.ask.com/redirect?client=ie&tb=PTV&o=15184&src=crm&q={searchTerms}&locale=en_US
SearchScopes: HKCU - {3D4DEE04-F276-4383-B345-6F5346AC2537} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2613550
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -  No File
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files (x86)\Mindjet\MindManager 8\Mm8InternetExplorer.dll (Mindjet)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {ba14329e-9550-4989-b3f2-9732e92d17cc} -  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -  No File
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
Toolbar: HKLM-x32 - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKLM-x32 - No Name - {ba14329e-9550-4989-b3f2-9732e92d17cc} -  No File
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - No Name - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} -  No File
Toolbar: HKLM-x32 - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
Toolbar: HKCU - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU - No Name - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} -  No File
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: 127.0.0.1 activate.adobe.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\ XXX\AppData\Roaming\Mozilla\Firefox\Profiles\m5z2nn6l.default
FF NewTab: user_pref("browser.newtab.url", "");
FF SelectedSearchEngine: Google
FF Homepage: https://startpage.com/deu/
FF NetworkProxy: "backup.ftp", ""
FF NetworkProxy: "backup.ftp_port", 0
FF NetworkProxy: "backup.socks", ""
FF NetworkProxy: "backup.socks_port", 0
FF NetworkProxy: "backup.ssl", ""
FF NetworkProxy: "backup.ssl_port", 0
FF NetworkProxy: "ftp", "216.244.71.143"
FF NetworkProxy: "ftp_port", 8080
FF NetworkProxy: "http", "216.244.71.143"
FF NetworkProxy: "http_port", 8080
FF NetworkProxy: "no_proxies_on", ""
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "216.244.71.143"
FF NetworkProxy: "socks_port", 8080
FF NetworkProxy: "ssl", "216.244.71.143"
FF NetworkProxy: "ssl_port", 8080
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/wpi,version=1.4 - C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll (Microsoft Corp)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @checkpoint.com/FFApi - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll ()
FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/wpi,version=1.4 - C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll (Microsoft Corp)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - C:\Program Files (x86)\TVUPlayer\npTVUAx.dll No File
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF SearchPlugin: C:\Users\ XXX\AppData\Roaming\Mozilla\Firefox\Profiles\m5z2nn6l.default\searchplugins\startpage-https---deutsch.xml
FF Extension: No Name - C:\Users\ XXX\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: ChmFox - C:\Users\ XXX\AppData\Roaming\Mozilla\Firefox\Profiles\m5z2nn6l.default\Extensions\chmfox@zhuoqiang.me
FF Extension: searchimdb - C:\Users\ XXX\AppData\Roaming\Mozilla\Firefox\Profiles\m5z2nn6l.default\Extensions\searchimdb@sogame.cat.xpi
FF Extension: No Name - C:\Users\ XXX\AppData\Roaming\Mozilla\Firefox\Profiles\m5z2nn6l.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] C:\Program Files\CheckPoint\ZAForceField\TrustChecker
FF Extension: No Name - C:\Program Files\CheckPoint\ZAForceField\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF Extension: ZoneAlarm Security Engine - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

==================== Services (Whitelisted) =================

R2 IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [828072 2012-11-22] (Check Point Software Technologies)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsDepSvc; C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe [67400 2011-04-01] (Microsoft Corporation)
R2 NalServ; C:\Windows\SysWOW64\nalserv.exe [144608 2013-04-10] (Nalpeiron Ltd.)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4015568 2010-11-02] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-06-14] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2447888 2013-03-27] (Check Point Software Technologies LTD)
S3 getPlusHelper; C:\Program Files (x86)\NOS\bin\getPlus_Helper.dll [x]

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2010-03-28] ()
S3 AVerAF15DMBTH64; C:\Windows\System32\Drivers\AVerAF15DMBTH64.sys [611840 2010-05-06] (AVerMedia TECHNOLOGIES, Inc.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-06-04] (DT Soft Ltd)
R2 ISWKL; C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [33712 2012-11-22] (Check Point Software Technologies)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-11-15] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [613720 2013-02-21] (Kaspersky Lab)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2010-03-28] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2005-01-05] (INCA Internet Co., Ltd.)
S3 s115bus; C:\Windows\System32\DRIVERS\s115bus.sys [108296 2007-04-23] (MCCI Corporation)
S3 s115mdfl; C:\Windows\System32\DRIVERS\s115mdfl.sys [19720 2007-04-23] (MCCI Corporation)
S3 s115mdm; C:\Windows\System32\DRIVERS\s115mdm.sys [144648 2007-04-23] (MCCI Corporation)
S3 s115mgmt; C:\Windows\System32\DRIVERS\s115mgmt.sys [126216 2007-04-23] (MCCI Corporation)
S3 s115obex; C:\Windows\System32\DRIVERS\s115obex.sys [123656 2007-04-23] (MCCI Corporation)
S3 se64a; C:\Windows\System32\drivers\se64a.sys [14032 2007-05-03] (EnTech Taiwan)
S3 se64a; C:\Windows\SysWow64\drivers\se64a.sys [14032 2007-05-03] (EnTech Taiwan)
R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2010-07-26] (Sony Ericsson Mobile Communications)
S3 Spyder2; C:\Windows\System32\DRIVERS\Spyder2.sys [15360 2007-01-17] ()
R0 vidsflt53; C:\Windows\System32\DRIVERS\vsflt53.sys [141920 2012-04-27] (Acronis)
R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [450136 2012-12-13] (Check Point Software Technologies LTD)
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x]
S3 dump_wmimmc; \??\C:\Ntreev USA\Pangya\GameGuard\dump_wmimmc.sys [x]
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [x]
S3 NPPTNT2; \??\C:\Windows\system32\npptNT2.sys [x]
S3 PID_0928; system32\DRIVERS\LV561V64.SYS [x]
S3 RimUsb; System32\Drivers\RimUsb_AMD64.sys [x]
U3 aswMBR; \??\C:\Users\ XXX\AppData\Local\Temp\aswMBR.sys [x]
U3 pxldapow; \??\C:\Users\ XXX\AppData\Local\Temp\pxldapow.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-04 15:59 - 2013-07-04 15:59 - 00000000 ____D C:\FRST
2013-07-04 15:58 - 2013-07-04 15:59 - 01934636 ____A (Farbar) C:\Users\ XXX\Desktop\FRST64.exe
2013-07-04 15:34 - 2013-07-04 15:34 - 00001739 ____A C:\Users\ XXX\Desktop\aswMBR.txt
2013-07-04 15:34 - 2013-07-04 15:34 - 00000512 ____A C:\Users\ XXX\Desktop\MBR.dat
2013-07-04 14:36 - 2013-07-04 14:53 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-04 14:36 - 2013-07-04 14:39 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-07-04 14:36 - 2013-07-04 14:36 - 00001383 ____A C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-07-04 14:36 - 2009-01-25 13:14 - 00017272 ____A (Safer Networking Limited) C:\Windows\System32\sdnclean64.exe
2013-07-04 14:34 - 2013-07-04 14:34 - 36364784 ____A (Safer-Networking Ltd.                                       ) C:\Users\ XXX\Desktop\spybotsd-2.1.20-SR1.exe
2013-07-04 12:29 - 2013-07-04 12:31 - 04745728 ____A (AVAST Software) C:\Users\ XXX\Desktop\aswMBR.exe
2013-07-04 12:22 - 2013-07-04 12:22 - 00003236 ____A C:\Users\ XXX\Desktop\gmer.txt
2013-07-04 11:56 - 2013-07-04 11:56 - 00377856 ____A C:\Users\ XXX\Desktop\gmer_2.1.19163.exe
2013-07-04 11:42 - 2013-07-04 11:42 - 00111710 ____A C:\Users\ XXX\Desktop\OTL.Txt
2013-07-04 11:23 - 2013-07-04 14:18 - 00000474 ____A C:\Users\ XXX\Desktop\defogger_disable.log
2013-07-04 11:23 - 2013-07-04 11:23 - 00000000 ____A C:\Users\ XXX\defogger_reenable
2013-07-04 11:21 - 2013-07-04 11:21 - 00602112 ____A (OldTimer Tools) C:\Users\ XXX\Desktop\OTL.exe
2013-07-04 11:21 - 2013-07-04 11:21 - 00050477 ____A C:\Users\ XXX\Desktop\Defogger.exe
2013-07-03 22:09 - 2013-07-03 22:09 - 00013246 ____A C:\Users\ XXX\Documents\cc_20130703_220917.reg
2013-07-03 22:07 - 2013-07-03 22:08 - 04396440 ____A (Piriform Ltd) C:\Users\ XXX\Downloads\ccsetup403.exe
2013-07-03 11:35 - 2013-07-03 11:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-02 16:27 - 2013-07-02 16:27 - 00000000 ____D C:\Users\ XXX\Documents\testseite
2013-07-02 16:11 - 2013-07-02 16:11 - 00000000 ____D C:\Users\ XXX\AppData\Roaming\PDAppFlex
2013-07-02 16:10 - 2013-07-02 16:10 - 00001522 ____A C:\Users\Public\Desktop\Adobe Application Manager.lnk
2013-07-02 16:10 - 2013-07-02 16:10 - 00000000 ____D C:\Users\ XXX\Desktop\Adobe Application Manager 7.0
2013-07-02 16:09 - 2013-07-02 16:10 - 63731352 ____A (Adobe Systems Incorporated) C:\Users\ XXX\Downloads\ApplicationManager7.0_all.exe
2013-07-02 15:31 - 2013-07-02 15:31 - 00000000 ____D C:\Users\ XXX\Downloads\Adobe Dreamweaver CC 13.0 Build 6390 Final [ChingLiu]
2013-06-24 12:47 - 2013-06-24 12:47 - 00000000 ____D C:\Users\ XXX\AppData\Local\DDMSettings
2013-06-24 12:24 - 2013-06-24 12:24 - 00000000 ____A C:\END
2013-06-24 12:23 - 2013-06-24 12:23 - 00957248 ____A (DivX, LLC) C:\Users\ XXX\Downloads\DivXInstaller.exe
2013-06-23 16:59 - 2013-06-23 16:59 - 00001324 ____A C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\Users\ XXX\Documents\Freemake
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\ProgramData\Freemake
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-06-23 16:58 - 2013-06-23 16:58 - 01271944 ____A (Ellora Assets Corporation                                   ) C:\Users\ XXX\Downloads\FreemakeVideoConverterSetup.exe
2013-06-23 16:53 - 2013-06-23 16:53 - 01916953 ____A C:\Users\ XXX\Downloads\VirtualDub-1.9.11-AMD64.zip
2013-06-23 16:51 - 2013-06-23 16:51 - 00955801 ____A C:\Users\ XXX\Downloads\VirtualDubMod_1_5_10_2_b2542.zip
2013-06-23 16:27 - 2013-06-23 16:27 - 00935888 ____A C:\Users\ XXX\Downloads\AVIAddXSub.zip
2013-06-23 15:02 - 2013-06-23 15:02 - 01092977 ____A C:\Users\ XXX\Downloads\subtitle-workshop_3190.zip
2013-06-23 14:52 - 2013-06-23 17:09 - 00000000 ____D C:\Users\ XXX\AppData\Roaming\avidemux
2013-06-23 14:52 - 2013-06-23 14:52 - 00001041 ____A C:\Users\Public\Desktop\Avidemux 2.6 (32-bit).lnk
2013-06-23 14:52 - 2013-06-23 14:52 - 00000000 ____D C:\Program Files (x86)\Avidemux 2.6
2013-06-23 14:50 - 2013-06-23 14:51 - 22805174 ____A C:\Users\ XXX\Downloads\avidemux_2.6.4_win32.exe
2013-06-23 14:46 - 2013-06-23 14:46 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-06-23 14:44 - 2013-06-23 14:45 - 24378872 ____A (DVDVideoSoft Ltd.                                           ) C:\Users\ XXX\Downloads\FreeYouTubeDownload_3.2.3.610.exe
2013-06-22 17:46 - 2013-06-22 17:46 - 00000000 ____D C:\Users\ XXX\Documents\Adobe
2013-06-22 17:37 - 2013-06-22 18:19 - 00000132 ____A C:\Users\ XXX\AppData\Roaming\Adobe PNG Format CS6 Prefs
2013-06-19 10:53 - 2013-06-19 10:53 - 00968328 ____A C:\Users\ XXX\Downloads\Eyewitness Lebanon Evidence of 91 international correspondents Full PDF Version.exe
2013-06-19 10:43 - 2013-06-12 21:47 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-19 10:43 - 2013-06-12 21:43 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-19 10:43 - 2013-06-12 21:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-19 10:43 - 2013-06-12 21:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-19 10:42 - 2013-06-19 10:43 - 00004944 ____A C:\Windows\SysWOW64\jupdate-1.7.0_25-b16.log
2013-06-18 11:49 - 2013-06-18 12:10 - 00000000 ____D C:\Windows\AutoKMS

2013-06-13 15:03 - 2013-06-13 15:22 - 230495572 ____A C:\Users\ XXX\Downloads\top30hts_pro_rmx0413-bysks.rar
2013-06-12 16:48 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-12 16:48 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 16:48 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 16:48 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 16:48 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 16:48 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-12 16:43 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 16:43 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 16:43 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 16:43 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 16:43 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-12 16:43 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 16:43 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 16:43 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 16:43 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 16:43 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 16:43 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-12 16:43 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 16:41 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 16:41 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 16:41 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 16:41 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 16:41 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 16:41 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 16:41 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 16:41 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 16:41 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 16:41 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 16:41 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 16:41 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 16:41 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 16:41 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 16:41 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 16:41 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 16:41 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 16:41 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 16:41 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-11 14:48 - 2013-06-11 14:48 - 00001402 ____A C:\Users\ XXX\Desktop\Free YouTube to MP3 Converter.lnk
2013-06-11 14:48 - 2013-06-11 14:48 - 00000000 ____D C:\Users\ XXX\AppData\Roaming\DVDVideoSoftIEHelpers
2013-06-11 14:47 - 2013-06-11 14:47 - 24963016 ____A (DVDVideoSoft Ltd.                                           ) C:\Users\ XXX\Downloads\FreeYouTubeToMP3Converter.exe
2013-06-11 10:48 - 2013-06-11 10:48 - 00001783 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-11 10:46 - 2013-06-11 10:48 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-11 10:46 - 2013-06-11 10:48 - 00000000 ____D C:\Program Files\iTunes
2013-06-11 10:46 - 2013-06-11 10:48 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-06-11 10:46 - 2013-06-11 10:46 - 00000000 ____D C:\Program Files\iPod
2013-06-10 23:13 - 2013-06-10 23:13 - 00000983 ____A C:\Users\Public\Desktop\Mp3tag.lnk
2013-06-10 23:12 - 2013-06-10 23:12 - 02627392 ____A C:\Users\ XXX\Downloads\mp3tagv255asetup.exe
2013-06-10 23:05 - 2013-06-10 23:05 - 00000000 ____D C:\Program Files (x86)\Lame For Audacity
2013-06-10 23:04 - 2013-06-10 23:04 - 00527423 ____A (                                                            ) C:\Users\ XXX\Downloads\Lame_v3.99.3_for_Windows.exe
2013-06-10 22:57 - 2013-06-13 17:23 - 00000000 ____D C:\Users\ XXX\AppData\Roaming\Audacity
2013-06-10 22:57 - 2013-06-10 22:57 - 21281052 ____A (Audacity Team                                               ) C:\Users\ XXX\Downloads\audacity-win-2.0.3.exe
2013-06-10 22:57 - 2013-06-10 22:57 - 00001011 ____A C:\Users\ XXX\Desktop\Audacity.lnk
2013-06-10 22:57 - 2013-06-10 22:57 - 00000000 ____D C:\Program Files (x86)\Audacity


==================== One Month Modified Files and Folders =======

2013-07-04 15:59 - 2013-07-04 15:59 - 00000000 ____D C:\FRST
2013-07-04 15:59 - 2013-07-04 15:58 - 01934636 ____A (Farbar) C:\Users\ XXX\Desktop\FRST64.exe
2013-07-04 15:59 - 2010-05-10 17:31 - 00001110 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-04 15:59 - 2010-05-10 17:31 - 00001106 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-04 15:39 - 2012-10-08 00:53 - 00000000 ____D C:\Users\ XXX\Documents\Outlook-Dateien
2013-07-04 15:34 - 2013-07-04 15:34 - 00001739 ____A C:\Users\ XXX\Desktop\aswMBR.txt
2013-07-04 15:34 - 2013-07-04 15:34 - 00000512 ____A C:\Users\ XXX\Desktop\MBR.dat
2013-07-04 15:26 - 2012-04-07 10:58 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-04 14:53 - 2013-07-04 14:36 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-04 14:39 - 2013-07-04 14:36 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-07-04 14:36 - 2013-07-04 14:36 - 00001383 ____A C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-07-04 14:34 - 2013-07-04 14:34 - 36364784 ____A (Safer-Networking Ltd.                                       ) C:\Users\ XXX\Desktop\spybotsd-2.1.20-SR1.exe
2013-07-04 14:18 - 2013-07-04 11:23 - 00000474 ____A C:\Users\ XXX\Desktop\defogger_disable.log
2013-07-04 12:56 - 2012-04-24 23:41 - 00467968 __ASH C:\Users\ XXX\Desktop\Thumbs.db
2013-07-04 12:31 - 2013-07-04 12:29 - 04745728 ____A (AVAST Software) C:\Users\ XXX\Desktop\aswMBR.exe
2013-07-04 12:22 - 2013-07-04 12:22 - 00003236 ____A C:\Users\ XXX\Desktop\gmer.txt
2013-07-04 12:02 - 2012-12-26 00:08 - 01377005 ____A C:\Windows\WindowsUpdate.log
2013-07-04 11:56 - 2013-07-04 11:56 - 00377856 ____A C:\Users\ XXX\Desktop\gmer_2.1.19163.exe
2013-07-04 11:42 - 2013-07-04 11:42 - 00111710 ____A C:\Users\ XXX\Desktop\OTL.Txt
2013-07-04 11:23 - 2013-07-04 11:23 - 00000000 ____A C:\Users\ XXX\defogger_reenable
2013-07-04 11:23 - 2010-03-27 20:42 - 00000000 ____D C:\users\ XXX
2013-07-04 11:21 - 2013-07-04 11:21 - 00602112 ____A (OldTimer Tools) C:\Users\ XXX\Desktop\OTL.exe
2013-07-04 11:21 - 2013-07-04 11:21 - 00050477 ____A C:\Users\ XXX\Desktop\Defogger.exe
2013-07-04 11:07 - 2010-04-23 23:52 - 00000000 ____D C:\Program Files (x86)\Steam
2013-07-04 10:18 - 2010-03-31 14:02 - 00000000 ____D C:\Users\ XXX\AppData\Local\Adobe
2013-07-04 10:13 - 2009-07-14 06:45 - 00023360 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-04 10:13 - 2009-07-14 06:45 - 00023360 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-04 10:07 - 2012-04-24 21:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-04 10:07 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-03 22:14 - 2010-04-24 01:43 - 00298280 ____A C:\Windows\SysWOW64\PnkBstrB.xtr
2013-07-03 22:14 - 2010-04-24 01:39 - 00298280 ____A C:\Windows\SysWOW64\PnkBstrB.exe
2013-07-03 22:10 - 2010-04-24 01:39 - 00298280 ____A C:\Windows\SysWOW64\PnkBstrB.ex0
2013-07-03 22:09 - 2013-07-03 22:09 - 00013246 ____A C:\Users\ XXX\Documents\cc_20130703_220917.reg
2013-07-03 22:08 - 2013-07-03 22:07 - 04396440 ____A (Piriform Ltd) C:\Users\ XXX\Downloads\ccsetup403.exe
2013-07-03 22:08 - 2011-10-01 11:18 - 00000000 ____D C:\Users\ XXX\AppData\Roaming\uTorrent
2013-07-03 22:08 - 2011-06-27 16:51 - 00001021 ____A C:\Users\Public\Desktop\CCleaner.lnk
2013-07-03 22:08 - 2010-03-27 22:22 - 00000000 ____D C:\Program Files (x86)\CCleaner
2013-07-03 11:36 - 2013-07-03 11:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-03 10:22 - 2009-07-14 06:45 - 06329488 ____A C:\Windows\System32\FNTCACHE.DAT

2013-07-02 16:27 - 2013-07-02 16:27 - 00000000 ____D C:\Users\ XXX\Documents\testseite
2013-07-02 16:11 - 2013-07-02 16:11 - 00000000 ____D C:\Users\ XXX\AppData\Roaming\PDAppFlex
2013-07-02 16:11 - 2010-04-06 14:33 - 00537592 ____A C:\Users\ XXX\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-02 16:10 - 2013-07-02 16:10 - 00001522 ____A C:\Users\Public\Desktop\Adobe Application Manager.lnk
2013-07-02 16:10 - 2013-07-02 16:10 - 00000000 ____D C:\Users\ XXX\Desktop\Adobe Application Manager 7.0
2013-07-02 16:10 - 2013-07-02 16:09 - 63731352 ____A (Adobe Systems Incorporated) C:\Users\ XXX\Downloads\ApplicationManager7.0_all.exe
2013-07-02 16:05 - 2010-08-02 12:09 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-07-02 16:03 - 2010-03-31 14:00 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-07-02 16:03 - 2010-03-27 22:04 - 00000000 ____D C:\Users\ XXX\AppData\Roaming\Adobe

2013-06-28 22:29 - 2013-05-17 20:39 - 00012777 ___AH C:\Windows\SysWOW64\BTImages.dat
2013-06-24 12:47 - 2013-06-24 12:47 - 00000000 ____D C:\Users\ XXX\AppData\Local\DDMSettings
2013-06-24 12:29 - 2010-09-05 22:34 - 00000000 ____D C:\ProgramData\DivX
2013-06-24 12:25 - 2010-09-05 22:37 - 00000000 ____D C:\Program Files\DivX
2013-06-24 12:25 - 2010-09-05 22:35 - 00000000 ____D C:\Program Files (x86)\DivX
2013-06-24 12:24 - 2013-06-24 12:24 - 00000000 ____A C:\END
2013-06-24 12:23 - 2013-06-24 12:23 - 00957248 ____A (DivX, LLC) C:\Users\ XXX\Downloads\DivXInstaller.exe
2013-06-23 17:09 - 2013-06-23 14:52 - 00000000 ____D C:\Users\ XXX\AppData\Roaming\avidemux
2013-06-23 16:59 - 2013-06-23 16:59 - 00001324 ____A C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\Users\ XXX\Documents\Freemake
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\ProgramData\Freemake
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-06-23 16:58 - 2013-06-23 16:58 - 01271944 ____A (Ellora Assets Corporation                                   ) C:\Users\ XXX\Downloads\FreemakeVideoConverterSetup.exe
2013-06-23 16:53 - 2013-06-23 16:53 - 01916953 ____A C:\Users\ XXX\Downloads\VirtualDub-1.9.11-AMD64.zip
2013-06-23 16:51 - 2013-06-23 16:51 - 00955801 ____A C:\Users\ XXX\Downloads\VirtualDubMod_1_5_10_2_b2542.zip
2013-06-23 16:46 - 2010-07-27 02:17 - 00000143 ____A C:\Users\ XXX\AppData\Roaming\default.rss
2013-06-23 16:27 - 2013-06-23 16:27 - 00935888 ____A C:\Users\ XXX\Downloads\AVIAddXSub.zip
2013-06-23 15:02 - 2013-06-23 15:02 - 01092977 ____A C:\Users\ XXX\Downloads\subtitle-workshop_3190.zip
2013-06-23 14:52 - 2013-06-23 14:52 - 00001041 ____A C:\Users\Public\Desktop\Avidemux 2.6 (32-bit).lnk
2013-06-23 14:52 - 2013-06-23 14:52 - 00000000 ____D C:\Program Files (x86)\Avidemux 2.6
2013-06-23 14:51 - 2013-06-23 14:50 - 22805174 ____A C:\Users\ XXX\Downloads\avidemux_2.6.4_win32.exe
2013-06-23 14:46 - 2013-06-23 14:46 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-06-23 14:46 - 2012-08-22 10:00 - 00000000 ____D C:\Users\ XXX\AppData\Roaming\DVDVideoSoft
2013-06-23 14:45 - 2013-06-23 14:44 - 24378872 ____A (DVDVideoSoft Ltd.                                           ) C:\Users\ XXX\Downloads\FreeYouTubeDownload_3.2.3.610.exe
2013-06-22 18:19 - 2013-06-22 17:37 - 00000132 ____A C:\Users\ XXX\AppData\Roaming\Adobe PNG Format CS6 Prefs
2013-06-22 17:46 - 2013-06-22 17:46 - 00000000 ____D C:\Users\ XXX\Documents\Adobe
2013-06-21 00:58 - 2013-03-21 00:17 - 00001456 ____A C:\Users\ XXX\AppData\Local\Adobe Save for Web 13.0 Prefs
2013-06-19 10:53 - 2013-06-19 10:53 - 00968328 ____A C:\Users\ XXX\Downloads\Eyewitness Lebanon Evidence of 91 international correspondents Full PDF Version.exe
2013-06-19 10:43 - 2013-06-19 10:42 - 00004944 ____A C:\Windows\SysWOW64\jupdate-1.7.0_25-b16.log
2013-06-19 10:43 - 2013-03-07 17:30 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-18 17:11 - 2010-03-28 00:38 - 00000000 ____D C:\Users\ XXX\AppData\Roaming\DAEMON Tools Lite
2013-06-18 12:10 - 2013-06-18 11:49 - 00000000 ____D C:\Windows\AutoKMS
2013-06-18 11:19 - 2010-04-11 17:35 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-15 16:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-14 00:15 - 2010-04-24 01:39 - 00076888 ____A C:\Windows\SysWOW64\PnkBstrA.exe

2013-06-13 17:39 - 2010-04-01 20:08 - 00000000 ____D C:\Users\ XXX\AppData\Roaming\Winamp
2013-06-13 17:36 - 2012-01-07 17:21 - 00000000 ____D C:\Users\ XXX\AppData\Roaming\Mp3tag
2013-06-13 17:23 - 2013-06-10 22:57 - 00000000 ____D C:\Users\ XXX\AppData\Roaming\Audacity
2013-06-13 15:22 - 2013-06-13 15:03 - 230495572 ____A C:\Users\ XXX\Downloads\top30hts_pro_rmx0413-bysks.rar
2013-06-12 21:48 - 2012-05-11 18:12 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-06-12 21:48 - 2010-06-30 19:32 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-12 21:47 - 2013-06-19 10:43 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-12 21:43 - 2013-06-19 10:43 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-12 21:43 - 2013-06-19 10:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-12 21:43 - 2013-06-19 10:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-12 17:08 - 2010-03-27 19:43 - 00000000 ____D C:\Windows\Panther
2013-06-12 17:06 - 2012-03-23 16:20 - 00001113 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-06-12 17:06 - 2011-12-02 22:37 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-12 16:48 - 2010-03-27 20:59 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 16:47 - 2011-04-27 10:50 - 01590298 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2013-06-12 16:47 - 2009-07-14 19:58 - 00696832 ____A C:\Windows\System32\perfh007.dat
2013-06-12 16:47 - 2009-07-14 19:58 - 00148128 ____A C:\Windows\System32\perfc007.dat
2013-06-12 16:47 - 2009-07-14 07:13 - 01590298 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-12 01:39 - 2012-04-07 10:58 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 01:39 - 2011-05-28 09:38 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-11 14:48 - 2013-06-11 14:48 - 00001402 ____A C:\Users\ XXX\Desktop\Free YouTube to MP3 Converter.lnk
2013-06-11 14:48 - 2013-06-11 14:48 - 00000000 ____D C:\Users\ XXX\AppData\Roaming\DVDVideoSoftIEHelpers
2013-06-11 14:47 - 2013-06-11 14:47 - 24963016 ____A (DVDVideoSoft Ltd.                                           ) C:\Users\ XXX\Downloads\FreeYouTubeToMP3Converter.exe
2013-06-11 10:48 - 2013-06-11 10:48 - 00001783 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-11 10:48 - 2013-06-11 10:46 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-11 10:48 - 2013-06-11 10:46 - 00000000 ____D C:\Program Files\iTunes
2013-06-11 10:48 - 2013-06-11 10:46 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-06-11 10:46 - 2013-06-11 10:46 - 00000000 ____D C:\Program Files\iPod
2013-06-10 23:13 - 2013-06-10 23:13 - 00000983 ____A C:\Users\Public\Desktop\Mp3tag.lnk
2013-06-10 23:13 - 2012-01-07 17:21 - 00000000 ____D C:\Program Files (x86)\Mp3tag
2013-06-10 23:12 - 2013-06-10 23:12 - 02627392 ____A C:\Users\ XXX\Downloads\mp3tagv255asetup.exe
2013-06-10 23:05 - 2013-06-10 23:05 - 00000000 ____D C:\Program Files (x86)\Lame For Audacity
2013-06-10 23:04 - 2013-06-10 23:04 - 00527423 ____A (                                                            ) C:\Users\ XXX\Downloads\Lame_v3.99.3_for_Windows.exe
2013-06-10 22:57 - 2013-06-10 22:57 - 21281052 ____A (Audacity Team                                               ) C:\Users\ XXX\Downloads\audacity-win-2.0.3.exe
2013-06-10 22:57 - 2013-06-10 22:57 - 00001011 ____A C:\Users\ XXX\Desktop\Audacity.lnk
2013-06-10 22:57 - 2013-06-10 22:57 - 00000000 ____D C:\Program Files (x86)\Audacity
2013-06-10 22:39 - 2013-02-17 15:42 - 00000000 ____D C:\Users\ XXX\Downloads\Taste of Thai
2013-06-08 16:08 - 2013-06-12 16:43 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 16:07 - 2013-06-12 16:43 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 16:06 - 2013-06-12 16:43 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 16:06 - 2013-06-12 16:43 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 16:06 - 2013-06-12 16:43 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 14:28 - 2013-06-12 16:43 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 13:42 - 2013-06-12 16:43 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 13:40 - 2013-06-12 16:43 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 13:40 - 2013-06-12 16:43 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 13:40 - 2013-06-12 16:43 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 13:40 - 2013-06-12 16:43 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 13:13 - 2013-06-12 16:43 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-06 12:03 - 2013-06-06 12:03 - 00007906 ____A C:\Users\ XXX\Documents\Greek Mix summer 2013.xlsx

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-03 11:28

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-07-2013
Ran by  XXX at 2013-07-04 16:00:06
Running from C:\Users\ XXX\Desktop
Boot Mode:  XXX
==========================================================


==================== Installed Programs =======================

"Nero SoundTrax Help (x32 Version: 4.4.32.0)

64 Bit HP CIO Components Installer (Version: 7.2.8)
6500_E709_eDocs (x32 Version: 1.00.0000)
6500_E709_Help (x32 Version: 1.00.0000)
6500_E709n (x32 Version: 140.0.000.000)
Acronis True Image WD*Edition (x32 Version: 13.0.14164)
Adobe Acrobat X Pro - English, Français, Deutsch (x32 Version: 10.1.7)
Adobe Digital Editions 2.0 (x32 Version: 2.0)
Adobe Download Manager (x32 Version: 1.6.2.63)
Adobe Dreamweaver CC (x32 Version: 13)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Photoshop CS6 (x32 Version: 13.0)
Adobe Reader XI (11.0.02) - Deutsch (x32 Version: 11.0.02)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.0.112)
Advertising Center (x32 Version: 0.0.0.2)
AGEIA PhysX v7.09.13 (x32 Version: 7.09.13)
AMD Accelerated Video Transcoding (Version: 12.5.100.21219)
AMD APP SDK Runtime (Version: 10.0.1084.4)
AMD Catalyst Install Manager (Version: 8.0.903.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Media Foundation Decoders (Version: 1.0.71219.1540)

Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Audacity 2.0.3 (x32 Version: 2.0.3)
Avidemux 2.6 (32-bit) (x32 Version: 2.6.4.8696)
Bonjour (Version: 3.0.0.10)
bpd_scan (x32 Version: 3.00.0000)
BPDSoftware (x32 Version: 140.0.000.000)
BPDSoftware_Ini (x32 Version: 1.00.0000)
BufferChm (x32 Version: 140.0.213.000)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2012.1219.1521.27485)
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485)
Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485)
Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485)
CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485)
CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485)
CCC Help Czech (x32 Version: 2012.1219.1520.27485)
CCC Help Danish (x32 Version: 2012.1219.1520.27485)
CCC Help Dutch (x32 Version: 2012.1219.1520.27485)
CCC Help English (x32 Version: 2012.1219.1520.27485)
CCC Help Finnish (x32 Version: 2012.1219.1520.27485)
CCC Help French (x32 Version: 2012.1219.1520.27485)
CCC Help German (x32 Version: 2012.1219.1520.27485)
CCC Help Greek (x32 Version: 2012.1219.1520.27485)
CCC Help Hungarian (x32 Version: 2012.1219.1520.27485)
CCC Help Italian (x32 Version: 2012.1219.1520.27485)
CCC Help Japanese (x32 Version: 2012.1219.1520.27485)
CCC Help Korean (x32 Version: 2012.1219.1520.27485)
CCC Help Norwegian (x32 Version: 2012.1219.1520.27485)
CCC Help Polish (x32 Version: 2012.1219.1520.27485)
CCC Help Portuguese (x32 Version: 2012.1219.1520.27485)
CCC Help Russian (x32 Version: 2012.1219.1520.27485)
CCC Help Spanish (x32 Version: 2012.1219.1520.27485)
CCC Help Swedish (x32 Version: 2012.1219.1520.27485)
CCC Help Thai (x32 Version: 2012.1219.1520.27485)
CCC Help Turkish (x32 Version: 2012.1219.1520.27485)
ccc-utility64 (Version: 2012.1219.1521.27485)
CCleaner (Version: 4.03)
DAEMON Tools Lite (x32 Version: 4.45.4.0315)
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition
Destinations (x32 Version: 130.0.0.0)
DeviceDiscovery (x32 Version: 140.0.213.000)
DivX-Setup (x32 Version: 2.6.1.44)
DocMgr (x32 Version: 140.0.65.000)
DocProc (x32 Version: 140.0.100.000)
DolbyFiles (x32 Version: 2.0)

Dropbox (HKCU Version: 1.6.18)
Duden-Rechtschreibprüfung PLUS (x32 Version: 8.01)
FastStone Image Viewer 4.0 (x32 Version: 4.0)
Fax (x32 Version: 140.0.213.000)

Free YouTube Download version 3.2.3.610 (x32 Version: 3.2.3.610)
Free YouTube to MP3 Converter version 3.12.2.430 (x32 Version: 3.12.2.430)
Freemake Video Converter Version 4.0.2 (x32 Version: 4.0.2)
Futuremark SystemInfo (x32 Version: 4.0.0.0)
Google Update Helper (x32 Version: 1.3.21.149)
GPBaseService2 (x32 Version: 140.0.212.000)
Greed Corp (x32)
HP Document Manager 2.0 (Version: 2.0)
HP Imaging Device Functions 14.0 (Version: 14.0)
HP Officejet 6500 E709 Series (Version: 14.0)
HP Smart Web Printing 4.60 (Version: 4.60)
HP Solution Center 14.0 (Version: 14.0)
HP Update (x32 Version: 5.003.001.001)
HPDiagnosticAlert (x32 Version: 1.00.0000)
HPProductAssistant (x32 Version: 140.0.213.000)
ImagXpress (x32 Version: 7.0.74.0)
iTunes (Version: 11.0.4.4)
Java 7 Update 21 (64-bit) (Version: 7.0.210)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
L.A. Noire (x32 Version: 1.00.0000)
LAME v3.99.3 (for Windows) (x32)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Menu Templates - Starter Kit (x32 Version: 9.4.6.0)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft ASP.NET Web Pages - DEU (x32 Version: 1.0.20105.0)
Microsoft ASP.NET Web Pages (x32 Version: 1.0.20105.0)
Microsoft Office 2007 Primary Interop Assemblies (x32 Version: 12.0.4518.1014)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 32-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Primary Interoperability Assemblies 2005 (x32 Version: 8.0.50727.42)
Microsoft Reader (x32)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2008 R2 Management Objects (x32 Version: 10.50.1600.1)
Microsoft SQL Server 2008 R2 Native Client (Version: 10.50.1600.1)
Microsoft SQL Server Compact 3.5 SP2 ENU (x32 Version: 3.5.8080.0)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (Version: 3.5.8080.0)
Microsoft SQL Server Compact 4.0 x64 DEU (Version: 4.0.8482.1)
Microsoft SQL Server System CLR Types (x32 Version: 10.50.1600.1)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (Version: 8.0.51011)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Web Deploy 2.0 (Version: 2.0.1070)
Microsoft Web Platform Installer 3.0 (Version: 3.0.5)
Microsoft WebMatrix (x32 Version: 1.0.1070)
Microsoft WSE 2.0 SP3 Runtime (x32 Version: 2.0.5050.0)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053)
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)
Mindjet MindManager 8 (x32 Version: 8.0.217)
Monitor Asset Manager (x32)

Movie Templates - Starter Kit (x32 Version: 9.4.6.0)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
Mp3tag v2.55a (x32 Version: v2.55a)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser and SDK (x32 Version: 4.20.9818.0)
MyPhoneExplorer (x32 Version: 1.7.6)
Nero 9 (x32)
Nero Burning ROM Help (x32 Version: 9.4.17.100)
Nero BurnRights (x32 Version: 3.4.11.100)
Nero BurnRights Help (x32 Version: 3.4.4.100)
Nero ControlCenter (x32 Version: 9.0.0.1)
Nero CoverDesigner (x32 Version: 4.4.9.100)
Nero CoverDesigner Help (x32 Version: 4.4.9.100)
Nero Disc Copy Gadget (x32 Version: 2.4.22.0)
Nero Disc Copy Gadget Help (x32 Version: 2.4.22.0)
Nero DiscSpeed (x32 Version: 5.4.12.100)
Nero DiscSpeed Help (x32 Version: 5.4.4.100)
Nero DriveSpeed (x32 Version: 4.4.11.100)
Nero DriveSpeed Help (x32 Version: 4.4.4.100)
Nero Express Help (x32 Version: 9.4.17.100)
Nero InfoTool (x32 Version: 6.4.11.100)
Nero InfoTool Help (x32 Version: 6.4.4.100)
Nero Installer (x32 Version: 4.4.9.0)
Nero Live (x32 Version: 1.4.48.0)
Nero Live Help (x32 Version: 1.4.48.0)
Nero PhotoSnap (x32 Version: 1.53.2.0)
Nero PhotoSnap Help (x32 Version: 1.53.2.0)
Nero Recode (x32 Version: 4.4.31.0)
Nero Recode Help (x32 Version: 4.4.31.0)
Nero Rescue Agent (x32 Version: 2.4.12.100)
Nero RescueAgent Help (x32 Version: 2.4.4.100)
Nero ShowTime (x32 Version: 5.4.0.100)
Nero ShowTime (x32 Version: 5.4.14.100)
Nero StartSmart (x32 Version: 9.4.12.100)
Nero StartSmart Help (x32 Version: 9.4.12.100)
Nero Vision (x32 Version: 6.4.10.205)
Nero Vision Help (x32 Version: 6.4.8.100)
Nero WaveEditor (x32 Version: 5.4.32.0)
NeroBurningROM (x32 Version: 9.4.17.100)
NeroExpress (x32 Version: 9.4.17.100)
NeroLiveGadget (x32 Version: 1.2.16.100)
NeroLiveGadget Help (x32 Version: 1.2.16.100)
neroxml (x32 Version: 1.0.0)
Network64 (Version: 140.0.215.000)
Network64 (Version: 140.0.221.000)
OCR Software by I.R.I.S. 14.0 (Version: 14.0)

Open XML SDK 2.0 for Microsoft Office (x32 Version: 2.0.5022)
PDF Settings CS6 (x32 Version: 11.0)
PDFCreator (x32 Version: 1.2.3)
PL-2303 USB-to-Serial (x32 Version: 1.3.0)
ProductContext (x32 Version: 140.0.000.000)
ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.14)
PunkBuster Services (x32 Version: 0.989)
RedMon - Redirection Port Monitor

Scan (x32 Version: 140.0.167.000)
SDL MultiTerm 2011 SP2 - Remove suite of products (x32 Version: 9.2.361)
SDL MultiTerm 2011 SP2 Convert (x32 Version: 9.2.361)
SDL MultiTerm 2011 SP2 Core (x32 Version: 9.2.375)
SDL MultiTerm 2011 SP2 Desktop (x32 Version: 9.2.361)
SDL MultiTerm 2011 SP2 Word Integration (x32 Version: 9.2.372)
SDL Passolo Essential 2011 SP6 (x32 Version: 11.6.0.0)
SDL Trados 2011 SP2R - Remove suite of products (x32 Version: 2.2.3046)
SDL Trados Compatibility module (x32 Version: 1.0.72)
SDL Trados Studio 2011 SP2R (x32 Version: 2.2.3079)
Sid Meier's Civilization IV Colonization (x32 Version: 1.00)
Sid Meier's Civilization V (x32)
Sid Meier's Pirates! (x32 Version: 1.00.0000)

Skype™ 6.3 (x32 Version: 6.3.105)
SmartWebPrinting (x32 Version: 140.0.213.000)
Softi FreeOCR (x32 Version: 2.6.0)
SolutionCenter (x32 Version: 140.0.214.000)
SoundTrax (x32 Version: 4.4.32.0)
Spybot - Search & Destroy (x32 Version: 2.1.20)
Status (x32 Version: 140.0.256.000)
Steam (x32 Version: 1.0.0.0)
swMSM (x32 Version: 12.0.0.1)
System Requirements Lab for Intel (x32 Version: 4.5.3.0)


Toolbox (x32 Version: 140.0.428.000)
TrayApp (x32 Version: 140.0.213.000)


Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553092)
Update for Microsoft Office 2010 (KB2553181) 64-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 64-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 64-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 64-Bit Edition
Update for Microsoft Office 2010 (KB2553378) 64-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2598242) 64-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 64-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition
Update for Microsoft Office 2010 (KB2767886) 64-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 64-Bit Edition
Update for Microsoft Outlook 2010 (KB2597090) 64-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 64-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 64-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2598240) 64-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 64-Bit Edition
VC 9.0 Runtime (x32 Version: 1.0.0)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
Visual C++ 2008 x86 Runtime - (v9.0.30729) (x32 Version: 9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01 (x32 Version: 9.0.30729.01)
WebEx Recorder and Player (x32 Version: 28.7.0.15458)
WebReg (x32 Version: 140.0.213.017)
Webtools von Microsoft SQL Server Compact 4.0 DEU (x32 Version: 4.0.8482.1)
Winamp (x32 Version: 5.621 )
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)
WinRAR
ZoneAlarm Antivirus (x32 Version: 11.0.000.504)
ZoneAlarm Firewall (x32 Version: 11.0.000.504)
ZoneAlarm Free Antivirus + Firewall (x32 Version: 11.0.000.504)
ZoneAlarm LTD Toolbar
ZoneAlarm Security (x32 Version: 11.0.000.504)

==================== Restore Points  =========================

18-06-2013 08:41:02 Windows Update
19-06-2013 08:41:14 Installed Java 7 Update 25
25-06-2013 13:41:27 Windows Update
02-07-2013 08:27:23 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2012-05-02 19:11 - 00000852 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com

==================== Scheduled Tasks (whitelisted) =============

Task: {016DD2C7-9E7C-4D27-8D53-EB6F1E994A90} - System32\Tasks\{E6471707-38CD-4E29-BC25-8613216B898B} => C:\Windows\System32\msiexec.exe [2010-11-20] (Microsoft Corporation)
Task: {04ACCECD-D297-4B9F-9691-2BDA0DC213E8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {183269E2-A2E6-425C-B6E2-25F593686049} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe No File
Task: {22333517-AAB9-45DF-B70A-1C24B04C22F8} - System32\Tasks\{790F941F-83ED-4053-A5C2-23C70D3514F3} => C:\program files (x86)\mozilla firefox\firefox.exe [2013-07-03] (Mozilla Corporation)
Task: {38A2FB7C-2536-4941-9E58-C6E716CF76F6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-05-10] (Google Inc.)
Task: {51E7A0D7-C6F0-403D-841E-54A1E3AFE0BA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-05-10] (Google Inc.)
Task: {667CD177-6D78-4A24-B6CB-3FD284843683} - System32\Tasks\CCleanerSkipUAC => C:\Program Files (x86)\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd)
Task: {AACAD7A8-D87F-477D-B87E-739C55D0B63D} - System32\Tasks\AdobeAAMUpdater-1.0-PC- XXX => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-03] (Adobe Systems Incorporated)
Task: {E012B8B7-CA4A-484B-BD05-E26FE2A8FD1B} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {E2E8B802-B97B-4470-AC35-DBF5AFB9EA4B} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe No File
Task: {FD3A12E2-0CAC-4FED-AC23-73E1A7818F76} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2013-06-18] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============

Name: G:\
Description: 2.0 Reader    -2
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 

Name: Officejet 6500 E709n
Description: Officejet 6500 E709n
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: H:\
Description: 2.0 Reader    -3
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 

Name: Officejet 6500 E709n
Description: Officejet 6500 E709n
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: USB-Massenspeichergerät
Description: USB-Massenspeichergerät
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: Kompatibles USB-Speichergerät
Service: USBSTOR
Problem: : Windows cannot use this hardware device because it has been prepared for safe removal, but it has not been removed from the computer. (Code 47)
Resolution: Unplug the device, and then plug it in again. Alternately, restart the computer to make the device available.

Name: I:\
Description: 2.0 Reader    -4
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 

Name: F:\
Description: 2.0 Reader    -1
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 


==================== Event log errors: =========================

Application errors:
==================
Error: (07/04/2013 02:34:27 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: aswMBR.exe, Version: 0.9.9.1771, Zeitstempel: 0x5147644e
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e3be
ID des fehlerhaften Prozesses: 0x1648
Startzeit der fehlerhaften Anwendung: 0xaswMBR.exe0
Pfad der fehlerhaften Anwendung: aswMBR.exe1
Pfad des fehlerhaften Moduls: aswMBR.exe2
Berichtskennung: aswMBR.exe3

Error: (07/04/2013 02:22:41 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: aswMBR.exe, Version: 0.9.9.1771, Zeitstempel: 0x5147644e
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e3be
ID des fehlerhaften Prozesses: 0x81c
Startzeit der fehlerhaften Anwendung: 0xaswMBR.exe0
Pfad der fehlerhaften Anwendung: aswMBR.exe1
Pfad des fehlerhaften Moduls: aswMBR.exe2
Berichtskennung: aswMBR.exe3

Error: (07/04/2013 00:46:33 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: aswMBR.exe, Version: 0.9.9.1771, Zeitstempel: 0x5147644e
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e3be
ID des fehlerhaften Prozesses: 0x1810
Startzeit der fehlerhaften Anwendung: 0xaswMBR.exe0
Pfad der fehlerhaften Anwendung: aswMBR.exe1
Pfad des fehlerhaften Moduls: aswMBR.exe2
Berichtskennung: aswMBR.exe3

Error: (07/04/2013 00:36:22 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: aswMBR.exe, Version: 0.9.9.1771, Zeitstempel: 0x5147644e
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e3be
ID des fehlerhaften Prozesses: 0x183c
Startzeit der fehlerhaften Anwendung: 0xaswMBR.exe0
Pfad der fehlerhaften Anwendung: aswMBR.exe1
Pfad des fehlerhaften Moduls: aswMBR.exe2
Berichtskennung: aswMBR.exe3

Error: (07/04/2013 10:08:17 AM) (Source: Windows Search Service) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (07/04/2013 10:08:17 AM) (Source: Windows Search Service) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (07/04/2013 10:08:17 AM) (Source: Windows Search Service) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (07/04/2013 10:08:17 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (07/04/2013 10:08:16 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (07/04/2013 10:08:16 AM) (Source: Windows Search Service) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)


System errors:
=============
Error: (07/04/2013 10:08:19 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/04/2013 10:08:17 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.

Error: (07/03/2013 08:27:17 PM) (Source: BROWSER) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{CCF4C789-5DE4-499A-AB28-A67FB3811B4A}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.

Error: (06/26/2013 06:49:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PnkBstrB" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (06/26/2013 06:49:50 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst PnkBstrB erreicht.

Error: (06/26/2013 06:49:01 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (06/26/2013 06:48:31 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (06/26/2013 06:48:01 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (06/26/2013 06:47:31 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (06/26/2013 06:44:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Adobe Flash Player Update Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053


Microsoft Office Sessions:
=========================
Error: (07/04/2013 02:34:27 PM) (Source: Application Error)(User: )
Description: aswMBR.exe0.9.9.17715147644entdll.dll6.1.7601.177254ec49b8fc00000050002e3be164801ce78b25370861cC:\Users\ XXX\Desktop\aswMBR.exeC:\Windows\SysWOW64\ntdll.dll108797ca-e4a6-11e2-957e-e0cb4eeaf7fa

Error: (07/04/2013 02:22:41 PM) (Source: Application Error)(User: )
Description: aswMBR.exe0.9.9.17715147644entdll.dll6.1.7601.177254ec49b8fc00000050002e3be81c01ce78b0a5378c46C:\Users\ XXX\Downloads\aswMBR.exeC:\Windows\SysWOW64\ntdll.dll6bbe7427-e4a4-11e2-957e-e0cb4eeaf7fa

Error: (07/04/2013 00:46:33 PM) (Source: Application Error)(User: )
Description: aswMBR.exe0.9.9.17715147644entdll.dll6.1.7601.177254ec49b8fc00000050002e3be181001ce78a3506a139cC:\Users\ XXX\Downloads\aswMBR.exeC:\Windows\SysWOW64\ntdll.dllfdca1138-e496-11e2-957e-e0cb4eeaf7fa

Error: (07/04/2013 00:36:22 PM) (Source: Application Error)(User: )
Description: aswMBR.exe0.9.9.17715147644entdll.dll6.1.7601.177254ec49b8fc00000050002e3be183c01ce78a1a339d758C:\Users\ XXX\Downloads\aswMBR.exeC:\Windows\SysWOW64\ntdll.dll912ea305-e495-11e2-957e-e0cb4eeaf7fa

Error: (07/04/2013 10:08:17 AM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (07/04/2013 10:08:17 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (07/04/2013 10:08:17 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (07/04/2013 10:08:17 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

Error: (07/04/2013 10:08:16 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore

Error: (07/04/2013 10:08:16 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)


CodeIntegrity Errors:
===================================
  Date: 2013-07-04 15:59:05.849
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-04 15:30:49.044
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-04 15:21:53.607
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-04 14:30:34.621
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-04 14:18:21.254
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-04 12:54:33.102
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-04 12:43:22.361
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-04 12:31:24.611
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-04 12:15:42.816
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-04 12:08:32.248
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 47%
Total physical RAM: 8190.05 MB
Available physical RAM: 4279.81 MB
Total Pagefile: 16378.29 MB
Available Pagefile: 12380.67 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:557.08 GB) NTFS (Disk=0 Partition=2)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 8DF34D95)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

So, erstmal "Dank Dir, Schrauber!".
Hier die geforderten Daten:

# AdwCleaner v2.304 - Datei am 04/07/2013 um 23:58:07 erstellt
# Aktualisiert am 03/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : *** - PC
# Bootmodus : ***
# Ausgeführt unter : C:\Users\***\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\END
Datei Gelöscht : C:\Program Files (x86)\Mozilla FireFox\Components\AskHPRFF.js
Gelöscht mit Neustart : C:\Users\***\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar
Ordner Gelöscht : C:\Program Files (x86)\Optimizer Pro
Ordner Gelöscht : C:\ProgramData\InstallMate
Ordner Gelöscht : C:\ProgramData\Premium
Ordner Gelöscht : C:\Users\***\AppData\LocalLow\boost_interprocess
Ordner Gelöscht : C:\Users\***\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\***\AppData\LocalLow\ConduitEngine
Ordner Gelöscht : C:\Users\***\AppData\LocalLow\Vuze_Remote
Ordner Gelöscht : C:\Users\***\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\***\AppData\Roaming\pdfforge

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\conduitEngine
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Vuze_Remote
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4515627-7C62-45E7-BBD2-E1A4DFB8A4C8}
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi
Schlüssel Gelöscht : HKLM\Software\Vuze_Remote
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9446C401-B061-403B-BAC4-85974FA10F1D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA14329E-9550-4989-B3F2-9732E92D17CC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm LTD Toolbar
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{DFEFCDEE-CF1A-4FC8-88AD-129872198372}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{BA14329E-9550-4989-B3F2-9732E92D17CC}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{BA14329E-9550-4989-B3F2-9732E92D17CC}]
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{acaa314b-eeba-48e4-ad47-84e31c44796c}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{BA14329E-9550-4989-B3F2-9732E92D17CC}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{DFEFCDEE-CF1A-4FC8-88AD-129872198372}]

***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16611

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\m5z2nn6l.default\prefs.js

Gelöscht : user_pref("browser.search.defaultengine", "Ask.com");
Gelöscht : user_pref("browser.search.order.1", "Ask.com");

*************************

AdwCleaner[R1].txt - [7641 octets] - [04/07/2013 23:55:51]
AdwCleaner[S1].txt - [6710 octets] - [04/07/2013 23:58:07]

########## EOF - C:\AdwCleaner[S1].txt - [6770 octets] ##########
         

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows 7 Home Premium x64
Ran by *** on 05.07.2013 at  0:06:42,27
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim



~~~ Files

Successfully deleted: [File] C:\eula.1028.txt
Successfully deleted: [File] C:\eula.1031.txt
Successfully deleted: [File] C:\eula.1033.txt
Successfully deleted: [File] C:\eula.1036.txt
Successfully deleted: [File] C:\eula.1040.txt
Successfully deleted: [File] C:\eula.1041.txt
Successfully deleted: [File] C:\eula.1042.txt
Successfully deleted: [File] C:\eula.2052.txt
Successfully deleted: [File] C:\install.res.1028.dll
Successfully deleted: [File] C:\install.res.1031.dll
Successfully deleted: [File] C:\install.res.1033.dll
Successfully deleted: [File] C:\install.res.1036.dll
Successfully deleted: [File] C:\install.res.1040.dll
Successfully deleted: [File] C:\install.res.1041.dll
Successfully deleted: [File] C:\install.res.1042.dll
Successfully deleted: [File] C:\install.res.2052.dll
Successfully deleted: [File] C:\install.res.3082.dll



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\m5z2nn6l.default\minidumps [56 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 05.07.2013 at  0:11:35,66
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-07-2013
Ran by *** (administrator) on 05-07-2013 00:13:37
Running from C:\Users\***\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: ***

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe
() C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nalserv.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ForceField.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices [112512 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [ISW] C:\Program Files\CheckPoint\ZAForceField\ForceField.exe /icon="hidden" [1127592 2012-11-22] (Check Point Software Technologies)
HKLM\...\Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [472984 2013-06-03] (Adobe Systems Incorporated)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
MountPoints2: {2294f3ab-39f2-11df-80a5-e0cb4eeaf7fa} - J:\Autorun.exe
MountPoints2: {406bdc3d-ae39-11e1-8398-e0cb4eeaf7fa} - J:\SETUP.EXE
MountPoints2: {ce586255-5657-11e0-b44e-e0cb4eeaf7fa} - J:\SETUP.EXE
HKLM-x32\...\Run: [TrueImageMonitor.exe] "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" [2673688 2011-07-08] ()
HKLM-x32\...\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: []  [x]
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe" [73832 2013-03-27] (Check Point Software Technologies LTD)
HKLM-x32\...\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [1263952 2013-02-13] ()
HKLM-x32\...\Run: [AdobeCEPServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe" -launchedbylogin [1039248 2013-03-13] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [3830224 2013-05-16] (Safer-Networking Ltd.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKCU - {3D4DEE04-F276-4383-B345-6F5346AC2537} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files (x86)\Mindjet\MindManager 8\Mm8InternetExplorer.dll (Mindjet)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
Toolbar: HKCU - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: 127.0.0.1 activate.adobe.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\m5z2nn6l.default
FF NewTab: user_pref("browser.newtab.url", "");
FF SelectedSearchEngine: Google
FF Homepage: https://startpage.com/deu/
FF NetworkProxy: "backup.ftp", ""
FF NetworkProxy: "backup.ftp_port", 0
FF NetworkProxy: "backup.socks", ""
FF NetworkProxy: "backup.socks_port", 0
FF NetworkProxy: "backup.ssl", ""
FF NetworkProxy: "backup.ssl_port", 0
FF NetworkProxy: "ftp", "216.244.71.143"
FF NetworkProxy: "ftp_port", 8080
FF NetworkProxy: "http", "216.244.71.143"
FF NetworkProxy: "http_port", 8080
FF NetworkProxy: "no_proxies_on", ""
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "216.244.71.143"
FF NetworkProxy: "socks_port", 8080
FF NetworkProxy: "ssl", "216.244.71.143"
FF NetworkProxy: "ssl_port", 8080
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/wpi,version=1.4 - C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll (Microsoft Corp)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/wpi,version=1.4 - C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll (Microsoft Corp)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - C:\Program Files (x86)\TVUPlayer\npTVUAx.dll No File
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF SearchPlugin: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\m5z2nn6l.default\searchplugins\startpage-https---deutsch.xml
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: ChmFox - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\m5z2nn6l.default\Extensions\chmfox@zhuoqiang.me
FF Extension: searchimdb - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\m5z2nn6l.default\Extensions\searchimdb@sogame.cat.xpi
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\m5z2nn6l.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] C:\Program Files\CheckPoint\ZAForceField\TrustChecker
FF Extension: No Name - C:\Program Files\CheckPoint\ZAForceField\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF Extension: ZoneAlarm Security Engine - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

==================== Services (Whitelisted) =================

R2 IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [828072 2012-11-22] (Check Point Software Technologies)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsDepSvc; C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe [67400 2011-04-01] (Microsoft Corporation)
R2 NalServ; C:\Windows\SysWOW64\nalserv.exe [144608 2013-04-10] (Nalpeiron Ltd.)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4015568 2010-11-02] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-06-14] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2447888 2013-03-27] (Check Point Software Technologies LTD)
S3 getPlusHelper; C:\Program Files (x86)\NOS\bin\getPlus_Helper.dll [x]

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2010-03-28] ()
S3 AVerAF15DMBTH64; C:\Windows\System32\Drivers\AVerAF15DMBTH64.sys [611840 2010-05-06] (AVerMedia TECHNOLOGIES, Inc.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-06-04] (DT Soft Ltd)
R2 ISWKL; C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [33712 2012-11-22] (Check Point Software Technologies)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-11-15] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [613720 2013-02-21] (Kaspersky Lab)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2010-03-28] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2005-01-05] (INCA Internet Co., Ltd.)
S3 s115bus; C:\Windows\System32\DRIVERS\s115bus.sys [108296 2007-04-23] (MCCI Corporation)
S3 s115mdfl; C:\Windows\System32\DRIVERS\s115mdfl.sys [19720 2007-04-23] (MCCI Corporation)
S3 s115mdm; C:\Windows\System32\DRIVERS\s115mdm.sys [144648 2007-04-23] (MCCI Corporation)
S3 s115mgmt; C:\Windows\System32\DRIVERS\s115mgmt.sys [126216 2007-04-23] (MCCI Corporation)
S3 s115obex; C:\Windows\System32\DRIVERS\s115obex.sys [123656 2007-04-23] (MCCI Corporation)
S3 se64a; C:\Windows\System32\drivers\se64a.sys [14032 2007-05-03] (EnTech Taiwan)
S3 se64a; C:\Windows\SysWow64\drivers\se64a.sys [14032 2007-05-03] (EnTech Taiwan)
R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2010-07-26] (Sony Ericsson Mobile Communications)
S3 Spyder2; C:\Windows\System32\DRIVERS\Spyder2.sys [15360 2007-01-17] ()
R0 vidsflt53; C:\Windows\System32\DRIVERS\vsflt53.sys [141920 2012-04-27] (Acronis)
R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [450136 2012-12-13] (Check Point Software Technologies LTD)
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x]
S3 dump_wmimmc; \??\C:\Ntreev USA\Pangya\GameGuard\dump_wmimmc.sys [x]
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [x]
S3 NPPTNT2; \??\C:\Windows\system32\npptNT2.sys [x]
S3 PID_0928; system32\DRIVERS\LV561V64.SYS [x]
S3 RimUsb; System32\Drivers\RimUsb_AMD64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-05 00:11 - 2013-07-05 00:11 - 00001772 ____A C:\Users\***\Desktop\JRT.txt
2013-07-05 00:05 - 2013-07-05 00:06 - 00000000 ____D C:\JRT
2013-07-05 00:05 - 2013-07-05 00:05 - 00000000 ____D C:\Windows\ERUNT
2013-07-05 00:04 - 2013-07-05 00:04 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\***\Desktop\JRT.exe
2013-07-05 00:04 - 2013-07-05 00:04 - 00000019 ____A C:\Users\***\Desktop\TB.txt
2013-07-05 00:00 - 2013-07-05 00:00 - 00006819 ____A C:\Users\***\Desktop\AdwCleaner[S1].txt
2013-07-04 23:58 - 2013-07-04 23:58 - 00006819 ____A C:\AdwCleaner[S1].txt
2013-07-04 23:58 - 2013-07-04 23:58 - 00000132 ____A C:\Windows\DeleteOnReboot.bat
2013-07-04 23:56 - 2013-07-04 23:56 - 00007641 ____A C:\Users\***\Desktop\AdwCleaner[R1].txt
2013-07-04 23:55 - 2013-07-04 23:56 - 00007641 ____A C:\AdwCleaner[R1].txt
2013-07-04 23:55 - 2013-07-04 23:55 - 00650027 ____A C:\Users\***\Desktop\adwcleaner.exe
2013-07-04 23:48 - 2013-07-04 23:59 - 00000112 ____A C:\Windows\setupact.log
2013-07-04 23:48 - 2013-07-04 23:48 - 894952907 ____A C:\Windows\MEMORY.DMP
2013-07-04 23:48 - 2013-07-04 23:48 - 00476752 ____A C:\Windows\Minidump\070413-24928-01.dmp
2013-07-04 23:48 - 2013-07-04 23:48 - 00000000 ____A C:\Windows\setuperr.log
2013-07-04 22:23 - 2013-07-04 22:23 - 00000000 ____D C:\Users\***\AppData\Roaming\Sublime Text 2
2013-07-04 22:23 - 2013-07-04 22:23 - 00000000 ____D C:\Program Files\Sublime Text 2
2013-07-04 22:22 - 2013-07-04 22:22 - 06519568 ____A (                                                            ) C:\Users\***\Downloads\Sublime Text 2.0.1 x64 Setup.exe
2013-07-04 20:39 - 2013-07-04 20:44 - 00000132 ____A C:\Users\***\AppData\Roaming\Adobe GIF Format CS6 Prefs
2013-07-04 16:00 - 2013-07-04 16:00 - 00034891 ____A C:\Users\***\Desktop\Addition.txt
2013-07-04 15:59 - 2013-07-04 15:59 - 00000000 ____D C:\FRST
2013-07-04 15:58 - 2013-07-04 15:59 - 01934636 ____A (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-07-04 15:34 - 2013-07-04 15:34 - 00001739 ____A C:\Users\***\Desktop\aswMBR.txt
2013-07-04 15:34 - 2013-07-04 15:34 - 00000512 ____A C:\Users\***\Desktop\MBR.dat
2013-07-04 14:36 - 2013-07-04 14:53 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-04 14:36 - 2013-07-04 14:39 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-07-04 14:36 - 2013-07-04 14:36 - 00001383 ____A C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-07-04 14:36 - 2009-01-25 13:14 - 00017272 ____A (Safer Networking Limited) C:\Windows\System32\sdnclean64.exe
2013-07-04 14:34 - 2013-07-04 14:34 - 36364784 ____A (Safer-Networking Ltd.                                       ) C:\Users\***\Desktop\spybotsd-2.1.20-SR1.exe
2013-07-04 12:29 - 2013-07-04 12:31 - 04745728 ____A (AVAST Software) C:\Users\***\Desktop\aswMBR.exe
2013-07-04 12:22 - 2013-07-04 12:22 - 00003236 ____A C:\Users\***\Desktop\gmer.txt
2013-07-04 11:56 - 2013-07-04 11:56 - 00377856 ____A C:\Users\***\Desktop\gmer_2.1.19163.exe
2013-07-04 11:42 - 2013-07-04 11:42 - 00111710 ____A C:\Users\***\Desktop\OTL.Txt
2013-07-04 11:23 - 2013-07-04 14:18 - 00000474 ____A C:\Users\***\Desktop\defogger_disable.log
2013-07-04 11:23 - 2013-07-04 11:23 - 00000000 ____A C:\Users\***\defogger_reenable
2013-07-04 11:21 - 2013-07-04 11:21 - 00602112 ____A (OldTimer Tools) C:\Users\***\Desktop\OTL.exe
2013-07-04 11:21 - 2013-07-04 11:21 - 00050477 ____A C:\Users\***\Desktop\Defogger.exe
2013-07-03 22:09 - 2013-07-03 22:09 - 00013246 ____A C:\Users\***\Documents\cc_20130703_220917.reg
2013-07-03 22:07 - 2013-07-03 22:08 - 04396440 ____A (Piriform Ltd) C:\Users\***\Downloads\ccsetup403.exe
2013-07-03 11:35 - 2013-07-03 11:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-02 16:27 - 2013-07-02 16:27 - 00000000 ____D C:\Users\***\Documents\testseite
2013-07-02 16:11 - 2013-07-02 16:11 - 00000000 ____D C:\Users\***\AppData\Roaming\PDAppFlex
2013-07-02 16:10 - 2013-07-02 16:10 - 00001522 ____A C:\Users\Public\Desktop\Adobe Application Manager.lnk
2013-07-02 16:10 - 2013-07-02 16:10 - 00000000 ____D C:\Users\***\Desktop\Adobe Application Manager 7.0
2013-07-02 16:09 - 2013-07-02 16:10 - 63731352 ____A (Adobe Systems Incorporated) C:\Users\***\Downloads\ApplicationManager7.0_all.exe
2013-07-02 15:31 - 2013-07-02 15:31 - 00000000 ____D C:\Users\***\Downloads\Adobe Dreamweaver CC 13.0 Build 6390 Final [ChingLiu]
2013-06-24 12:47 - 2013-06-24 12:47 - 00000000 ____D C:\Users\***\AppData\Local\DDMSettings
2013-06-24 12:23 - 2013-06-24 12:23 - 00957248 ____A (DivX, LLC) C:\Users\***\Downloads\DivXInstaller.exe
2013-06-23 16:59 - 2013-06-23 16:59 - 00001324 ____A C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\Users\***\Documents\Freemake
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\ProgramData\Freemake
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-06-23 16:58 - 2013-06-23 16:58 - 01271944 ____A (Ellora Assets Corporation                                   ) C:\Users\***\Downloads\FreemakeVideoConverterSetup.exe
2013-06-23 16:53 - 2013-06-23 16:53 - 01916953 ____A C:\Users\***\Downloads\VirtualDub-1.9.11-AMD64.zip
2013-06-23 16:51 - 2013-06-23 16:51 - 00955801 ____A C:\Users\***\Downloads\VirtualDubMod_1_5_10_2_b2542.zip
2013-06-23 16:27 - 2013-06-23 16:27 - 00935888 ____A C:\Users\***\Downloads\AVIAddXSub.zip
2013-06-23 15:02 - 2013-06-23 15:02 - 01092977 ____A C:\Users\***\Downloads\subtitle-workshop_3190.zip
2013-06-23 14:52 - 2013-06-23 17:09 - 00000000 ____D C:\Users\***\AppData\Roaming\avidemux
2013-06-23 14:52 - 2013-06-23 14:52 - 00001041 ____A C:\Users\Public\Desktop\Avidemux 2.6 (32-bit).lnk
2013-06-23 14:52 - 2013-06-23 14:52 - 00000000 ____D C:\Program Files (x86)\Avidemux 2.6
2013-06-23 14:50 - 2013-06-23 14:51 - 22805174 ____A C:\Users\***\Downloads\avidemux_2.6.4_win32.exe
2013-06-23 14:46 - 2013-06-23 14:46 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-06-23 14:44 - 2013-06-23 14:45 - 24378872 ____A (DVDVideoSoft Ltd.                                           ) C:\Users\***\Downloads\FreeYouTubeDownload_3.2.3.610.exe
2013-06-22 17:46 - 2013-06-22 17:46 - 00000000 ____D C:\Users\***\Documents\Adobe
2013-06-22 17:37 - 2013-06-22 18:19 - 00000132 ____A C:\Users\***\AppData\Roaming\Adobe PNG Format CS6 Prefs
2013-06-19 10:53 - 2013-06-19 10:53 - 00968328 ____A C:\Users\***\Downloads\Eyewitness Lebanon Evidence of 91 international correspondents Full PDF Version.exe
2013-06-19 10:43 - 2013-06-12 21:47 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-19 10:43 - 2013-06-12 21:43 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-19 10:43 - 2013-06-12 21:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-19 10:43 - 2013-06-12 21:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-19 10:42 - 2013-06-19 10:43 - 00004944 ____A C:\Windows\SysWOW64\jupdate-1.7.0_25-b16.log
2013-06-18 11:49 - 2013-06-18 12:10 - 00000000 ____D C:\Windows\AutoKMS
2013-06-13 20:33 - 2013-06-13 20:33 - 00000000 ____D C:\Users\***\Downloads\151 GREEK POWER TEAM
2013-06-13 19:21 - 2013-06-13 20:27 - 174296088 ____A C:\Users\***\Downloads\151 GREEK POWER TEAM.rar
2013-06-13 15:03 - 2013-06-13 15:22 - 230495572 ____A C:\Users\***\Downloads\top30hts_pro_rmx0413-bysks.rar
2013-06-12 16:48 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-12 16:48 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 16:48 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 16:48 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 16:48 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 16:48 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-12 16:43 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 16:43 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 16:43 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 16:43 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 16:43 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-12 16:43 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 16:43 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 16:43 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 16:43 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 16:43 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 16:43 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-12 16:43 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 16:41 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 16:41 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 16:41 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 16:41 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 16:41 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 16:41 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 16:41 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 16:41 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 16:41 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 16:41 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 16:41 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 16:41 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 16:41 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 16:41 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 16:41 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 16:41 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 16:41 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 16:41 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 16:41 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-11 14:48 - 2013-06-11 14:48 - 00001402 ____A C:\Users\***\Desktop\Free YouTube to MP3 Converter.lnk
2013-06-11 14:47 - 2013-06-11 14:47 - 24963016 ____A (DVDVideoSoft Ltd.                                           ) C:\Users\***\Downloads\FreeYouTubeToMP3Converter.exe
2013-06-11 10:48 - 2013-06-11 10:48 - 00001783 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-11 10:46 - 2013-06-11 10:48 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-11 10:46 - 2013-06-11 10:48 - 00000000 ____D C:\Program Files\iTunes
2013-06-11 10:46 - 2013-06-11 10:48 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-06-11 10:46 - 2013-06-11 10:46 - 00000000 ____D C:\Program Files\iPod
2013-06-10 23:13 - 2013-06-10 23:13 - 00000983 ____A C:\Users\Public\Desktop\Mp3tag.lnk
2013-06-10 23:12 - 2013-06-10 23:12 - 02627392 ____A C:\Users\***\Downloads\mp3tagv255asetup.exe
2013-06-10 23:05 - 2013-06-10 23:05 - 00000000 ____D C:\Program Files (x86)\Lame For Audacity
2013-06-10 23:04 - 2013-06-10 23:04 - 00527423 ____A (                                                            ) C:\Users\***\Downloads\Lame_v3.99.3_for_Windows.exe
2013-06-10 22:57 - 2013-06-13 17:23 - 00000000 ____D C:\Users\***\AppData\Roaming\Audacity
2013-06-10 22:57 - 2013-06-10 22:57 - 21281052 ____A (Audacity Team                                               ) C:\Users\***\Downloads\audacity-win-2.0.3.exe
2013-06-10 22:57 - 2013-06-10 22:57 - 00001011 ____A C:\Users\***\Desktop\Audacity.lnk
2013-06-10 22:57 - 2013-06-10 22:57 - 00000000 ____D C:\Program Files (x86)\Audacity
2013-06-06 12:03 - 2013-06-06 12:03 - 00007906 ____A C:\Users\***\Documents\Greek Mix summer 2013.xlsx

==================== One Month Modified Files and Folders =======

2013-07-05 00:11 - 2013-07-05 00:11 - 00001772 ____A C:\Users\***\Desktop\JRT.txt
2013-07-05 00:08 - 2009-07-14 06:45 - 00023360 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-05 00:08 - 2009-07-14 06:45 - 00023360 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-05 00:06 - 2013-07-05 00:05 - 00000000 ____D C:\JRT
2013-07-05 00:05 - 2013-07-05 00:05 - 00000000 ____D C:\Windows\ERUNT
2013-07-05 00:04 - 2013-07-05 00:04 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\***\Desktop\JRT.exe
2013-07-05 00:04 - 2013-07-05 00:04 - 00000019 ____A C:\Users\***\Desktop\TB.txt
2013-07-05 00:04 - 2012-10-08 00:53 - 00000000 ____D C:\Users\***\Documents\Outlook-Dateien
2013-07-05 00:00 - 2013-07-05 00:00 - 00006819 ____A C:\Users\***\Desktop\AdwCleaner[S1].txt
2013-07-04 23:59 - 2013-07-04 23:48 - 00000112 ____A C:\Windows\setupact.log
2013-07-04 23:59 - 2010-05-10 17:31 - 00001106 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-04 23:59 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-04 23:58 - 2013-07-04 23:58 - 00006819 ____A C:\AdwCleaner[S1].txt
2013-07-04 23:58 - 2013-07-04 23:58 - 00000132 ____A C:\Windows\DeleteOnReboot.bat
2013-07-04 23:58 - 2012-12-26 00:08 - 01388401 ____A C:\Windows\WindowsUpdate.log
2013-07-04 23:56 - 2013-07-04 23:56 - 00007641 ____A C:\Users\***\Desktop\AdwCleaner[R1].txt
2013-07-04 23:56 - 2013-07-04 23:55 - 00007641 ____A C:\AdwCleaner[R1].txt
2013-07-04 23:55 - 2013-07-04 23:55 - 00650027 ____A C:\Users\***\Desktop\adwcleaner.exe
2013-07-04 23:49 - 2012-04-24 23:41 - 00467968 __ASH C:\Users\***\Desktop\Thumbs.db
2013-07-04 23:48 - 2013-07-04 23:48 - 894952907 ____A C:\Windows\MEMORY.DMP
2013-07-04 23:48 - 2013-07-04 23:48 - 00476752 ____A C:\Windows\Minidump\070413-24928-01.dmp
2013-07-04 23:48 - 2013-07-04 23:48 - 00000000 ____A C:\Windows\setuperr.log
2013-07-04 23:48 - 2010-04-01 12:55 - 00000000 ____D C:\Windows\Minidump
2013-07-04 22:59 - 2010-05-10 17:31 - 00001110 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-04 22:26 - 2012-04-07 10:58 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-04 22:23 - 2013-07-04 22:23 - 00000000 ____D C:\Users\***\AppData\Roaming\Sublime Text 2
2013-07-04 22:23 - 2013-07-04 22:23 - 00000000 ____D C:\Program Files\Sublime Text 2
2013-07-04 22:22 - 2013-07-04 22:22 - 06519568 ____A (                                                            ) C:\Users\***\Downloads\Sublime Text 2.0.1 x64 Setup.exe
2013-07-04 20:53 - 2010-03-31 14:02 - 00000000 ____D C:\Users\***\AppData\Local\Adobe
2013-07-04 20:44 - 2013-07-04 20:39 - 00000132 ____A C:\Users\***\AppData\Roaming\Adobe GIF Format CS6 Prefs
2013-07-04 16:00 - 2013-07-04 16:00 - 00034891 ____A C:\Users\***\Desktop\Addition.txt
2013-07-04 15:59 - 2013-07-04 15:59 - 00000000 ____D C:\FRST
2013-07-04 15:59 - 2013-07-04 15:58 - 01934636 ____A (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-07-04 15:34 - 2013-07-04 15:34 - 00001739 ____A C:\Users\***\Desktop\aswMBR.txt
2013-07-04 15:34 - 2013-07-04 15:34 - 00000512 ____A C:\Users\***\Desktop\MBR.dat
2013-07-04 14:53 - 2013-07-04 14:36 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-04 14:39 - 2013-07-04 14:36 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-07-04 14:36 - 2013-07-04 14:36 - 00001383 ____A C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-07-04 14:34 - 2013-07-04 14:34 - 36364784 ____A (Safer-Networking Ltd.                                       ) C:\Users\***\Desktop\spybotsd-2.1.20-SR1.exe
2013-07-04 14:18 - 2013-07-04 11:23 - 00000474 ____A C:\Users\***\Desktop\defogger_disable.log
2013-07-04 12:31 - 2013-07-04 12:29 - 04745728 ____A (AVAST Software) C:\Users\***\Desktop\aswMBR.exe
2013-07-04 12:22 - 2013-07-04 12:22 - 00003236 ____A C:\Users\***\Desktop\gmer.txt
2013-07-04 11:56 - 2013-07-04 11:56 - 00377856 ____A C:\Users\***\Desktop\gmer_2.1.19163.exe
2013-07-04 11:42 - 2013-07-04 11:42 - 00111710 ____A C:\Users\***\Desktop\OTL.Txt
2013-07-04 11:23 - 2013-07-04 11:23 - 00000000 ____A C:\Users\***\defogger_reenable
2013-07-04 11:23 - 2010-03-27 20:42 - 00000000 ____D C:\users\***
2013-07-04 11:21 - 2013-07-04 11:21 - 00602112 ____A (OldTimer Tools) C:\Users\***\Desktop\OTL.exe
2013-07-04 11:21 - 2013-07-04 11:21 - 00050477 ____A C:\Users\***\Desktop\Defogger.exe
2013-07-04 11:07 - 2010-04-23 23:52 - 00000000 ____D C:\Program Files (x86)\Steam
2013-07-04 10:07 - 2012-04-24 21:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-03 22:14 - 2010-04-24 01:43 - 00298280 ____A C:\Windows\SysWOW64\PnkBstrB.xtr
2013-07-03 22:14 - 2010-04-24 01:39 - 00298280 ____A C:\Windows\SysWOW64\PnkBstrB.exe
2013-07-03 22:10 - 2010-04-24 01:39 - 00298280 ____A C:\Windows\SysWOW64\PnkBstrB.ex0
2013-07-03 22:09 - 2013-07-03 22:09 - 00013246 ____A C:\Users\***\Documents\cc_20130703_220917.reg
2013-07-03 22:08 - 2013-07-03 22:07 - 04396440 ____A (Piriform Ltd) C:\Users\***\Downloads\ccsetup403.exe
2013-07-03 22:08 - 2011-10-01 11:18 - 00000000 ____D C:\Users\***\AppData\Roaming\uTorrent
2013-07-03 22:08 - 2011-06-27 16:51 - 00001021 ____A C:\Users\Public\Desktop\CCleaner.lnk
2013-07-03 22:08 - 2010-03-27 22:22 - 00000000 ____D C:\Program Files (x86)\CCleaner
2013-07-03 11:36 - 2013-07-03 11:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-03 10:22 - 2009-07-14 06:45 - 06329488 ____A C:\Windows\System32\FNTCACHE.DAT
2013-07-02 18:21 - 2012-05-02 15:23 - 00000000 ____D C:\Users\***\Documents\001_cala
2013-07-02 16:27 - 2013-07-02 16:27 - 00000000 ____D C:\Users\***\Documents\testseite
2013-07-02 16:11 - 2013-07-02 16:11 - 00000000 ____D C:\Users\***\AppData\Roaming\PDAppFlex
2013-07-02 16:11 - 2010-04-06 14:33 - 00537592 ____A C:\Users\***\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-02 16:10 - 2013-07-02 16:10 - 00001522 ____A C:\Users\Public\Desktop\Adobe Application Manager.lnk
2013-07-02 16:10 - 2013-07-02 16:10 - 00000000 ____D C:\Users\***\Desktop\Adobe Application Manager 7.0
2013-07-02 16:10 - 2013-07-02 16:09 - 63731352 ____A (Adobe Systems Incorporated) C:\Users\***\Downloads\ApplicationManager7.0_all.exe
2013-07-02 16:05 - 2010-08-02 12:09 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-07-02 16:03 - 2010-03-31 14:00 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-07-02 16:03 - 2010-03-27 22:04 - 00000000 ____D C:\Users\***\AppData\Roaming\Adobe
2013-07-02 15:31 - 2013-07-02 15:31 - 00000000 ____D C:\Users\***\Downloads\Adobe Dreamweaver
2013-06-28 22:29 - 2013-05-17 20:39 - 00012777 ___AH C:\Windows\SysWOW64\BTImages.dat
2013-06-24 12:47 - 2013-06-24 12:47 - 00000000 ____D C:\Users\***\AppData\Local\DDMSettings
2013-06-24 12:29 - 2010-09-05 22:34 - 00000000 ____D C:\ProgramData\DivX
2013-06-24 12:25 - 2010-09-05 22:37 - 00000000 ____D C:\Program Files\DivX
2013-06-24 12:25 - 2010-09-05 22:35 - 00000000 ____D C:\Program Files (x86)\DivX
2013-06-24 12:23 - 2013-06-24 12:23 - 00957248 ____A (DivX, LLC) C:\Users\***\Downloads\DivXInstaller.exe
2013-06-23 17:09 - 2013-06-23 14:52 - 00000000 ____D C:\Users\***\AppData\Roaming\avidemux
2013-06-23 16:59 - 2013-06-23 16:59 - 00001324 ____A C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\Users\***\Documents\Freemake
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\ProgramData\Freemake
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-06-23 16:58 - 2013-06-23 16:58 - 01271944 ____A (Ellora Assets Corporation                                   ) C:\Users\***\Downloads\FreemakeVideoConverterSetup.exe
2013-06-23 16:53 - 2013-06-23 16:53 - 01916953 ____A C:\Users\***\Downloads\VirtualDub-1.9.11-AMD64.zip
2013-06-23 16:51 - 2013-06-23 16:51 - 00955801 ____A C:\Users\***\Downloads\VirtualDubMod_1_5_10_2_b2542.zip
2013-06-23 16:46 - 2010-07-27 02:17 - 00000143 ____A C:\Users\***\AppData\Roaming\default.rss
2013-06-23 16:27 - 2013-06-23 16:27 - 00935888 ____A C:\Users\***\Downloads\AVIAddXSub.zip
2013-06-23 15:02 - 2013-06-23 15:02 - 01092977 ____A C:\Users\***\Downloads\subtitle-workshop_3190.zip
2013-06-23 14:52 - 2013-06-23 14:52 - 00001041 ____A C:\Users\Public\Desktop\Avidemux 2.6 (32-bit).lnk
2013-06-23 14:52 - 2013-06-23 14:52 - 00000000 ____D C:\Program Files (x86)\Avidemux 2.6
2013-06-23 14:51 - 2013-06-23 14:50 - 22805174 ____A C:\Users\***\Downloads\avidemux_2.6.4_win32.exe
2013-06-23 14:46 - 2013-06-23 14:46 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-06-23 14:46 - 2012-08-22 10:00 - 00000000 ____D C:\Users\***\AppData\Roaming\DVDVideoSoft
2013-06-23 14:45 - 2013-06-23 14:44 - 24378872 ____A (DVDVideoSoft Ltd.                                           ) C:\Users\***\Downloads\FreeYouTubeDownload_3.2.3.610.exe
2013-06-22 18:19 - 2013-06-22 17:37 - 00000132 ____A C:\Users\***\AppData\Roaming\Adobe PNG Format CS6 Prefs
2013-06-22 17:46 - 2013-06-22 17:46 - 00000000 ____D C:\Users\***\Documents\Adobe
2013-06-21 00:58 - 2013-03-21 00:17 - 00001456 ____A C:\Users\***\AppData\Local\Adobe Save for Web 13.0 Prefs
2013-06-19 10:53 - 2013-06-19 10:53 - 00968328 ____A C:\Users\***\Downloads\Eyewitness Lebanon Evidence of 91 international correspondents Full PDF Version.exe
2013-06-19 10:43 - 2013-06-19 10:42 - 00004944 ____A C:\Windows\SysWOW64\jupdate-1.7.0_25-b16.log
2013-06-19 10:43 - 2013-03-07 17:30 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-18 17:11 - 2010-03-28 00:38 - 00000000 ____D C:\Users\***\AppData\Roaming\DAEMON Tools Lite
2013-06-18 12:10 - 2013-06-18 11:49 - 00000000 ____D C:\Windows\AutoKMS
2013-06-18 11:19 - 2010-04-11 17:35 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-15 16:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-14 00:15 - 2010-04-24 01:39 - 00076888 ____A C:\Windows\SysWOW64\PnkBstrA.exe
2013-06-13 20:33 - 2013-06-13 20:33 - 00000000 ____D C:\Users\***\Downloads\***
2013-06-13 20:27 - 2013-06-13 19:21 - 174296088 ____A C:\Users\***\Downloads\***
2013-06-13 17:39 - 2010-04-01 20:08 - 00000000 ____D C:\Users\***\AppData\Roaming\Winamp
2013-06-13 17:36 - 2012-01-07 17:21 - 00000000 ____D C:\Users\***\AppData\Roaming\Mp3tag
2013-06-13 17:23 - 2013-06-10 22:57 - 00000000 ____D C:\Users\***\AppData\Roaming\Audacity
2013-06-13 15:22 - 2013-06-13 15:03 - 230495572 ____A C:\Users\***\Downloads\top30hts_pro_rmx0413-bysks.rar
2013-06-12 21:48 - 2012-05-11 18:12 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-06-12 21:48 - 2010-06-30 19:32 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-12 21:47 - 2013-06-19 10:43 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-12 21:43 - 2013-06-19 10:43 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-12 21:43 - 2013-06-19 10:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-12 21:43 - 2013-06-19 10:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-12 17:08 - 2010-03-27 19:43 - 00000000 ____D C:\Windows\Panther
2013-06-12 17:06 - 2012-03-23 16:20 - 00001113 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-06-12 17:06 - 2011-12-02 22:37 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-12 16:48 - 2010-03-27 20:59 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 16:47 - 2011-04-27 10:50 - 01590298 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2013-06-12 16:47 - 2009-07-14 19:58 - 00696832 ____A C:\Windows\System32\perfh007.dat
2013-06-12 16:47 - 2009-07-14 19:58 - 00148128 ____A C:\Windows\System32\perfc007.dat
2013-06-12 16:47 - 2009-07-14 07:13 - 01590298 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-12 01:39 - 2012-04-07 10:58 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 01:39 - 2011-05-28 09:38 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-11 14:48 - 2013-06-11 14:48 - 00001402 ____A C:\Users\***\Desktop\Free YouTube to MP3 Converter.lnk
2013-06-11 14:47 - 2013-06-11 14:47 - 24963016 ____A (DVDVideoSoft Ltd.                                           ) C:\Users\***\Downloads\FreeYouTubeToMP3Converter.exe
2013-06-11 10:48 - 2013-06-11 10:48 - 00001783 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-11 10:48 - 2013-06-11 10:46 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-11 10:48 - 2013-06-11 10:46 - 00000000 ____D C:\Program Files\iTunes
2013-06-11 10:48 - 2013-06-11 10:46 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-06-11 10:46 - 2013-06-11 10:46 - 00000000 ____D C:\Program Files\iPod
2013-06-10 23:13 - 2013-06-10 23:13 - 00000983 ____A C:\Users\Public\Desktop\Mp3tag.lnk
2013-06-10 23:13 - 2012-01-07 17:21 - 00000000 ____D C:\Program Files (x86)\Mp3tag
2013-06-10 23:12 - 2013-06-10 23:12 - 02627392 ____A C:\Users\***\Downloads\mp3tagv255asetup.exe
2013-06-10 23:05 - 2013-06-10 23:05 - 00000000 ____D C:\Program Files (x86)\Lame For Audacity
2013-06-10 23:04 - 2013-06-10 23:04 - 00527423 ____A (                                                            ) C:\Users\***\Downloads\Lame_v3.99.3_for_Windows.exe
2013-06-10 22:57 - 2013-06-10 22:57 - 21281052 ____A (Audacity Team                                               ) C:\Users\***\Downloads\audacity-win-2.0.3.exe
2013-06-10 22:57 - 2013-06-10 22:57 - 00001011 ____A C:\Users\***\Desktop\Audacity.lnk
2013-06-10 22:57 - 2013-06-10 22:57 - 00000000 ____D C:\Program Files (x86)\Audacity
2013-06-10 22:39 - 2013-02-17 15:42 - 00000000 ____D C:\Users\***\Downloads\Taste of Thai
2013-06-08 16:08 - 2013-06-12 16:43 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 16:07 - 2013-06-12 16:43 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 16:06 - 2013-06-12 16:43 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 16:06 - 2013-06-12 16:43 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 16:06 - 2013-06-12 16:43 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 14:28 - 2013-06-12 16:43 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 13:42 - 2013-06-12 16:43 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 13:40 - 2013-06-12 16:43 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 13:40 - 2013-06-12 16:43 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 13:40 - 2013-06-12 16:43 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 13:40 - 2013-06-12 16:43 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 13:13 - 2013-06-12 16:43 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-06 12:03 - 2013-06-06 12:03 - 00007906 ____A C:\Users\***\Documents\Greek Mix summer 2013.xlsx

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-03 11:28

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Schönen Feierabend und gute Nacht!

paule

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frischs FRST log bitte. Noch Probleme?

so, system gescannt, wie angefortert, und in der zwiscchenzeit die badewanne neu silikonisiert, wenn das kein erfolgreicher tag ist ...

C:\Users\Normal\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19\33022ad3-219830e9	a variant of Java/Exploit.Agent.OQI trojan
C:\Users\Normal\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\2651e16d-4b228717	multiple threats
L:\Festplatte ***\Lokaal station\Users\Toshiba\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\55dd661a-60c93723	multiple threats
L:\Festplatte *** Dec 2011\Lokaal station\Users\Toshiba\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\55dd661a-60c93723	multiple threats
         

 Results of screen317's Security Check version 0.99.68  
 Windows 7 Service Pack 1 x64   
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
ZoneAlarm Antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Spybot - Search & Destroy 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java 7 Update 25  
 Adobe Flash Player 11.7.700.224  
 Adobe Reader XI  
 Mozilla Firefox (22.0) 
````````Process Check: objlist.exe by Laurent````````  
 Spybot Teatimer.exe is disabled! 
 Normal Desktop SecurityCheck.exe  
 Normal AppData Local Temp\RarSFX0\SecurityCheck\Objlist.exe 
 CheckPoint ZoneAlarm zatray.exe  
 CheckPoint ZoneAlarm vsmon.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-07-2013
Ran by *** (administrator) on 05-07-2013 17:27:39
Running from C:\Users\***\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: ***

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
() C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Microsoft Corporation) C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nalserv.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices [112512 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [ISW] C:\Program Files\CheckPoint\ZAForceField\ForceField.exe /icon="hidden" [1127592 2012-11-22] (Check Point Software Technologies)
HKLM\...\Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [472984 2013-06-03] (Adobe Systems Incorporated)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
MountPoints2: {2294f3ab-39f2-11df-80a5-e0cb4eeaf7fa} - J:\Autorun.exe
MountPoints2: {406bdc3d-ae39-11e1-8398-e0cb4eeaf7fa} - J:\SETUP.EXE
MountPoints2: {ce586255-5657-11e0-b44e-e0cb4eeaf7fa} - J:\SETUP.EXE
HKLM-x32\...\Run: [TrueImageMonitor.exe] "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" [2673688 2011-07-08] ()
HKLM-x32\...\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: []  [x]
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe" [73832 2013-03-27] (Check Point Software Technologies LTD)
HKLM-x32\...\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [1263952 2013-02-13] ()
HKLM-x32\...\Run: [AdobeCEPServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe" -launchedbylogin [1039248 2013-03-13] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [3830224 2013-05-16] (Safer-Networking Ltd.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKCU - {3D4DEE04-F276-4383-B345-6F5346AC2537} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files (x86)\Mindjet\MindManager 8\Mm8InternetExplorer.dll (Mindjet)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
Toolbar: HKCU - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: 127.0.0.1 activate.adobe.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\m5z2nn6l.default
FF NewTab: user_pref("browser.newtab.url", "");
FF SelectedSearchEngine: Google
FF Homepage: https://startpage.com/deu/
FF NetworkProxy: "backup.ftp", ""
FF NetworkProxy: "backup.ftp_port", 0
FF NetworkProxy: "backup.socks", ""
FF NetworkProxy: "backup.socks_port", 0
FF NetworkProxy: "backup.ssl", ""
FF NetworkProxy: "backup.ssl_port", 0
FF NetworkProxy: "ftp", "216.244.71.143"
FF NetworkProxy: "ftp_port", 8080
FF NetworkProxy: "http", "216.244.71.143"
FF NetworkProxy: "http_port", 8080
FF NetworkProxy: "no_proxies_on", ""
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "216.244.71.143"
FF NetworkProxy: "socks_port", 8080
FF NetworkProxy: "ssl", "216.244.71.143"
FF NetworkProxy: "ssl_port", 8080
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/wpi,version=1.4 - C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll (Microsoft Corp)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/wpi,version=1.4 - C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll (Microsoft Corp)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - C:\Program Files (x86)\TVUPlayer\npTVUAx.dll No File
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF SearchPlugin: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\m5z2nn6l.default\searchplugins\startpage-https---deutsch.xml
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: ChmFox - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\m5z2nn6l.default\Extensions\chmfox@zhuoqiang.me
FF Extension: searchimdb - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\m5z2nn6l.default\Extensions\searchimdb@sogame.cat.xpi
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\m5z2nn6l.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] C:\Program Files\CheckPoint\ZAForceField\TrustChecker
FF Extension: No Name - C:\Program Files\CheckPoint\ZAForceField\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF Extension: ZoneAlarm Security Engine - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

==================== Services (Whitelisted) =================

R2 IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [828072 2012-11-22] (Check Point Software Technologies)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsDepSvc; C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe [67400 2011-04-01] (Microsoft Corporation)
R2 NalServ; C:\Windows\SysWOW64\nalserv.exe [144608 2013-04-10] (Nalpeiron Ltd.)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4015568 2010-11-02] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-06-14] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2447888 2013-03-27] (Check Point Software Technologies LTD)
S3 getPlusHelper; C:\Program Files (x86)\NOS\bin\getPlus_Helper.dll [x]

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2010-03-28] ()
S3 AVerAF15DMBTH64; C:\Windows\System32\Drivers\AVerAF15DMBTH64.sys [611840 2010-05-06] (AVerMedia TECHNOLOGIES, Inc.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-06-04] (DT Soft Ltd)
R2 ISWKL; C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [33712 2012-11-22] (Check Point Software Technologies)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-11-15] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [613720 2013-02-21] (Kaspersky Lab)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2010-03-28] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2005-01-05] (INCA Internet Co., Ltd.)
S3 s115bus; C:\Windows\System32\DRIVERS\s115bus.sys [108296 2007-04-23] (MCCI Corporation)
S3 s115mdfl; C:\Windows\System32\DRIVERS\s115mdfl.sys [19720 2007-04-23] (MCCI Corporation)
S3 s115mdm; C:\Windows\System32\DRIVERS\s115mdm.sys [144648 2007-04-23] (MCCI Corporation)
S3 s115mgmt; C:\Windows\System32\DRIVERS\s115mgmt.sys [126216 2007-04-23] (MCCI Corporation)
S3 s115obex; C:\Windows\System32\DRIVERS\s115obex.sys [123656 2007-04-23] (MCCI Corporation)
S3 se64a; C:\Windows\System32\drivers\se64a.sys [14032 2007-05-03] (EnTech Taiwan)
S3 se64a; C:\Windows\SysWow64\drivers\se64a.sys [14032 2007-05-03] (EnTech Taiwan)
R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2010-07-26] (Sony Ericsson Mobile Communications)
S3 Spyder2; C:\Windows\System32\DRIVERS\Spyder2.sys [15360 2007-01-17] ()
R0 vidsflt53; C:\Windows\System32\DRIVERS\vsflt53.sys [141920 2012-04-27] (Acronis)
R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [450136 2012-12-13] (Check Point Software Technologies LTD)
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x]
S3 dump_wmimmc; \??\C:\Ntreev USA\Pangya\GameGuard\dump_wmimmc.sys [x]
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [x]
S3 NPPTNT2; \??\C:\Windows\system32\npptNT2.sys [x]
S3 PID_0928; system32\DRIVERS\LV561V64.SYS [x]
S3 RimUsb; System32\Drivers\RimUsb_AMD64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-05 17:27 - 2013-07-05 17:27 - 00000969 ____A C:\Users\***\Desktop\checkup.txt
2013-07-05 17:13 - 2013-07-05 17:13 - 00000515 ____A C:\Users\***\Desktop\eset.txt
2013-07-05 11:01 - 2013-07-05 11:01 - 00890988 ____A C:\Users\***\Desktop\SecurityCheck.exe
2013-07-05 10:59 - 2013-07-05 10:59 - 02347384 ____A (ESET) C:\Users\***\Desktop\esetsmartinstaller_enu.exe
2013-07-05 00:11 - 2013-07-05 00:21 - 00001766 ____A C:\Users\***\Desktop\JRT.txt
2013-07-05 00:05 - 2013-07-05 00:06 - 00000000 ____D C:\JRT
2013-07-05 00:05 - 2013-07-05 00:05 - 00000000 ____D C:\Windows\ERUNT
2013-07-05 00:04 - 2013-07-05 00:04 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\***\Desktop\JRT.exe
2013-07-05 00:04 - 2013-07-05 00:04 - 00000019 ____A C:\Users\***\Desktop\TB.txt
2013-07-05 00:00 - 2013-07-05 00:24 - 00006786 ____A C:\Users\***\Desktop\AdwCleaner[S1].txt
2013-07-04 23:58 - 2013-07-04 23:58 - 00006819 ____A C:\AdwCleaner[S1].txt
2013-07-04 23:58 - 2013-07-04 23:58 - 00000132 ____A C:\Windows\DeleteOnReboot.bat
2013-07-04 23:56 - 2013-07-04 23:56 - 00007641 ____A C:\Users\***\Desktop\AdwCleaner[R1].txt
2013-07-04 23:55 - 2013-07-04 23:56 - 00007641 ____A C:\AdwCleaner[R1].txt
2013-07-04 23:55 - 2013-07-04 23:55 - 00650027 ____A C:\Users\***\Desktop\adwcleaner.exe
2013-07-04 23:48 - 2013-07-05 09:16 - 00000168 ____A C:\Windows\setupact.log
2013-07-04 23:48 - 2013-07-04 23:48 - 894952907 ____A C:\Windows\MEMORY.DMP
2013-07-04 23:48 - 2013-07-04 23:48 - 00476752 ____A C:\Windows\Minidump\070413-24928-01.dmp
2013-07-04 23:48 - 2013-07-04 23:48 - 00000000 ____A C:\Windows\setuperr.log
2013-07-04 22:23 - 2013-07-04 22:23 - 00000000 ____D C:\Users\***\AppData\Roaming\Sublime Text 2
2013-07-04 22:23 - 2013-07-04 22:23 - 00000000 ____D C:\Program Files\Sublime Text 2
2013-07-04 22:22 - 2013-07-04 22:22 - 06519568 ____A (                                                            ) C:\Users\***\Downloads\Sublime Text 2.0.1 x64 Setup.exe
2013-07-04 20:39 - 2013-07-04 20:44 - 00000132 ____A C:\Users\***\AppData\Roaming\Adobe GIF Format CS6 Prefs
2013-07-04 16:00 - 2013-07-04 16:00 - 00034891 ____A C:\Users\***\Desktop\Addition.txt
2013-07-04 15:59 - 2013-07-04 15:59 - 00000000 ____D C:\FRST
2013-07-04 15:58 - 2013-07-04 15:59 - 01934636 ____A (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-07-04 15:34 - 2013-07-04 15:34 - 00001739 ____A C:\Users\***\Desktop\aswMBR.txt
2013-07-04 15:34 - 2013-07-04 15:34 - 00000512 ____A C:\Users\***\Desktop\MBR.dat
2013-07-04 14:36 - 2013-07-04 14:53 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-04 14:36 - 2013-07-04 14:39 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-07-04 14:36 - 2013-07-04 14:36 - 00001383 ____A C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-07-04 14:36 - 2009-01-25 13:14 - 00017272 ____A (Safer Networking Limited) C:\Windows\System32\sdnclean64.exe
2013-07-04 14:34 - 2013-07-04 14:34 - 36364784 ____A (Safer-Networking Ltd.                                       ) C:\Users\***\Desktop\spybotsd-2.1.20-SR1.exe
2013-07-04 12:29 - 2013-07-04 12:31 - 04745728 ____A (AVAST Software) C:\Users\***\Desktop\aswMBR.exe
2013-07-04 12:22 - 2013-07-04 12:22 - 00003236 ____A C:\Users\***\Desktop\gmer.txt
2013-07-04 11:56 - 2013-07-04 11:56 - 00377856 ____A C:\Users\***\Desktop\gmer_2.1.19163.exe
2013-07-04 11:42 - 2013-07-04 11:42 - 00111710 ____A C:\Users\***\Desktop\OTL.Txt
2013-07-04 11:23 - 2013-07-04 14:18 - 00000474 ____A C:\Users\***\Desktop\defogger_disable.log
2013-07-04 11:23 - 2013-07-04 11:23 - 00000000 ____A C:\Users\***\defogger_reenable
2013-07-04 11:21 - 2013-07-04 11:21 - 00602112 ____A (OldTimer Tools) C:\Users\***\Desktop\OTL.exe
2013-07-04 11:21 - 2013-07-04 11:21 - 00050477 ____A C:\Users\***\Desktop\Defogger.exe
2013-07-03 22:09 - 2013-07-03 22:09 - 00013246 ____A C:\Users\***\Documents\cc_20130703_220917.reg
2013-07-03 22:07 - 2013-07-03 22:08 - 04396440 ____A (Piriform Ltd) C:\Users\***\Downloads\ccsetup403.exe
2013-07-03 11:35 - 2013-07-03 11:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-02 16:27 - 2013-07-02 16:27 - 00000000 ____D C:\Users\***\Documents\testseite
2013-07-02 16:11 - 2013-07-02 16:11 - 00000000 ____D C:\Users\***\AppData\Roaming\PDAppFlex
2013-07-02 16:10 - 2013-07-02 16:10 - 00001522 ____A C:\Users\Public\Desktop\Adobe Application Manager.lnk
2013-07-02 16:10 - 2013-07-02 16:10 - 00000000 ____D C:\Users\***\Desktop\Adobe Application Manager 7.0
2013-07-02 16:09 - 2013-07-02 16:10 - 63731352 ____A (Adobe Systems Incorporated) C:\Users\***\Downloads\ApplicationManager7.0_all.exe
2013-07-02 15:31 - 2013-07-02 15:31 - 00000000 ____D C:\Users\***\Downloads\Adobe Dreamweaver CC 13.0 Build 6390 Final [ChingLiu]
2013-06-24 12:47 - 2013-06-24 12:47 - 00000000 ____D C:\Users\***\AppData\Local\DDMSettings
2013-06-24 12:23 - 2013-06-24 12:23 - 00957248 ____A (DivX, LLC) C:\Users\***\Downloads\DivXInstaller.exe
2013-06-23 16:59 - 2013-06-23 16:59 - 00001324 ____A C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\Users\***\Documents\Freemake
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\ProgramData\Freemake
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-06-23 16:58 - 2013-06-23 16:58 - 01271944 ____A (Ellora Assets Corporation                                   ) C:\Users\***\Downloads\FreemakeVideoConverterSetup.exe
2013-06-23 16:53 - 2013-06-23 16:53 - 01916953 ____A C:\Users\***\Downloads\VirtualDub-1.9.11-AMD64.zip
2013-06-23 16:51 - 2013-06-23 16:51 - 00955801 ____A C:\Users\***\Downloads\VirtualDubMod_1_5_10_2_b2542.zip
2013-06-23 16:27 - 2013-06-23 16:27 - 00935888 ____A C:\Users\***\Downloads\AVIAddXSub.zip
2013-06-23 15:02 - 2013-06-23 15:02 - 01092977 ____A C:\Users\***\Downloads\subtitle-workshop_3190.zip
2013-06-23 14:52 - 2013-06-23 17:09 - 00000000 ____D C:\Users\***\AppData\Roaming\avidemux
2013-06-23 14:52 - 2013-06-23 14:52 - 00001041 ____A C:\Users\Public\Desktop\Avidemux 2.6 (32-bit).lnk
2013-06-23 14:52 - 2013-06-23 14:52 - 00000000 ____D C:\Program Files (x86)\Avidemux 2.6
2013-06-23 14:50 - 2013-06-23 14:51 - 22805174 ____A C:\Users\***\Downloads\avidemux_2.6.4_win32.exe
2013-06-23 14:46 - 2013-06-23 14:46 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-06-23 14:44 - 2013-06-23 14:45 - 24378872 ____A (DVDVideoSoft Ltd.                                           ) C:\Users\***\Downloads\FreeYouTubeDownload_3.2.3.610.exe
2013-06-22 17:46 - 2013-06-22 17:46 - 00000000 ____D C:\Users\***\Documents\Adobe
2013-06-22 17:37 - 2013-06-22 18:19 - 00000132 ____A C:\Users\***\AppData\Roaming\Adobe PNG Format CS6 Prefs
2013-06-19 10:53 - 2013-06-19 10:53 - 00968328 ____A C:\Users\***\Downloads\Eyewitness Lebanon Evidence of 91 international correspondents Full PDF Version.exe
2013-06-19 10:43 - 2013-06-12 21:47 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-19 10:43 - 2013-06-12 21:43 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-19 10:43 - 2013-06-12 21:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-19 10:43 - 2013-06-12 21:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-19 10:42 - 2013-06-19 10:43 - 00004944 ____A C:\Windows\SysWOW64\jupdate-1.7.0_25-b16.log
2013-06-18 11:49 - 2013-06-18 12:10 - 00000000 ____D C:\Windows\AutoKMS
2013-06-13 20:33 - 2013-06-13 20:33 - 00000000 ____D C:\Users\***\Downloads\***
2013-06-13 19:21 - 2013-06-13 20:27 - 174296088 ____A C:\Users\***\Downloads\***
2013-06-13 15:03 - 2013-06-13 15:22 - 230495572 ____A C:\Users\***\Downloads\top30hts_pro_rmx0413-bysks.rar
2013-06-12 16:48 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 16:48 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-12 16:48 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 16:48 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 16:48 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 16:48 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 16:48 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 16:48 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-12 16:43 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 16:43 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 16:43 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 16:43 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 16:43 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-12 16:43 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 16:43 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 16:43 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 16:43 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 16:43 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 16:43 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-12 16:43 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 16:41 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 16:41 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 16:41 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 16:41 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 16:41 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 16:41 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 16:41 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 16:41 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 16:41 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 16:41 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 16:41 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 16:41 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 16:41 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 16:41 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 16:41 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 16:41 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 16:41 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 16:41 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 16:41 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-11 14:48 - 2013-06-11 14:48 - 00001402 ____A C:\Users\***\Desktop\Free YouTube to MP3 Converter.lnk
2013-06-11 14:47 - 2013-06-11 14:47 - 24963016 ____A (DVDVideoSoft Ltd.                                           ) C:\Users\***\Downloads\FreeYouTubeToMP3Converter.exe
2013-06-11 10:48 - 2013-06-11 10:48 - 00001783 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-11 10:46 - 2013-06-11 10:48 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-11 10:46 - 2013-06-11 10:48 - 00000000 ____D C:\Program Files\iTunes
2013-06-11 10:46 - 2013-06-11 10:48 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-06-11 10:46 - 2013-06-11 10:46 - 00000000 ____D C:\Program Files\iPod
2013-06-10 23:13 - 2013-06-10 23:13 - 00000983 ____A C:\Users\Public\Desktop\Mp3tag.lnk
2013-06-10 23:12 - 2013-06-10 23:12 - 02627392 ____A C:\Users\***\Downloads\mp3tagv255asetup.exe
2013-06-10 23:05 - 2013-06-10 23:05 - 00000000 ____D C:\Program Files (x86)\Lame For Audacity
2013-06-10 23:04 - 2013-06-10 23:04 - 00527423 ____A (                                                            ) C:\Users\***\Downloads\Lame_v3.99.3_for_Windows.exe
2013-06-10 22:57 - 2013-06-13 17:23 - 00000000 ____D C:\Users\***\AppData\Roaming\Audacity
2013-06-10 22:57 - 2013-06-10 22:57 - 21281052 ____A (Audacity Team                                               ) C:\Users\***\Downloads\audacity-win-2.0.3.exe
2013-06-10 22:57 - 2013-06-10 22:57 - 00001011 ____A C:\Users\***\Desktop\Audacity.lnk
2013-06-10 22:57 - 2013-06-10 22:57 - 00000000 ____D C:\Program Files (x86)\Audacity
2013-06-06 12:03 - 2013-06-06 12:03 - 00007906 ____A C:\Users\***\Documents\***.xlsx

==================== One Month Modified Files and Folders =======

2013-07-05 17:27 - 2013-07-05 17:27 - 00000969 ____A C:\Users\***\Desktop\checkup.txt
2013-07-05 17:26 - 2012-04-07 10:58 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-05 17:13 - 2013-07-05 17:13 - 00000515 ____A C:\Users\***\Desktop\eset.txt
2013-07-05 16:59 - 2010-05-10 17:31 - 00001110 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-05 15:59 - 2010-05-10 17:31 - 00001106 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-05 11:03 - 2009-07-14 19:58 - 00696832 ____A C:\Windows\System32\perfh007.dat
2013-07-05 11:03 - 2009-07-14 19:58 - 00148128 ____A C:\Windows\System32\perfc007.dat
2013-07-05 11:03 - 2009-07-14 07:13 - 01613340 ____A C:\Windows\System32\PerfStringBackup.INI
2013-07-05 11:02 - 2012-12-26 00:08 - 01414423 ____A C:\Windows\WindowsUpdate.log
2013-07-05 11:02 - 2012-10-08 00:53 - 00000000 ____D C:\Users\***\Documents\Outlook-Dateien
2013-07-05 11:01 - 2013-07-05 11:01 - 00890988 ____A C:\Users\***\Desktop\SecurityCheck.exe
2013-07-05 10:59 - 2013-07-05 10:59 - 02347384 ____A (ESET) C:\Users\***\Desktop\esetsmartinstaller_enu.exe
2013-07-05 09:26 - 2010-03-31 14:02 - 00000000 ____D C:\Users\***\AppData\Local\Adobe
2013-07-05 09:23 - 2009-07-14 06:45 - 00023360 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-05 09:23 - 2009-07-14 06:45 - 00023360 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-05 09:16 - 2013-07-04 23:48 - 00000168 ____A C:\Windows\setupact.log
2013-07-05 09:16 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-05 00:29 - 2010-04-24 01:43 - 00298280 ____A C:\Windows\SysWOW64\PnkBstrB.xtr
2013-07-05 00:29 - 2010-04-24 01:39 - 00298280 ____A C:\Windows\SysWOW64\PnkBstrB.exe
2013-07-05 00:28 - 2010-04-23 23:52 - 00000000 ____D C:\Program Files (x86)\Steam
2013-07-05 00:24 - 2013-07-05 00:00 - 00006786 ____A C:\Users\***\Desktop\AdwCleaner[S1].txt
2013-07-05 00:21 - 2013-07-05 00:11 - 00001766 ____A C:\Users\***\Desktop\JRT.txt
2013-07-05 00:06 - 2013-07-05 00:05 - 00000000 ____D C:\JRT
2013-07-05 00:05 - 2013-07-05 00:05 - 00000000 ____D C:\Windows\ERUNT
2013-07-05 00:04 - 2013-07-05 00:04 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\***\Desktop\JRT.exe
2013-07-05 00:04 - 2013-07-05 00:04 - 00000019 ____A C:\Users\***\Desktop\TB.txt
2013-07-04 23:58 - 2013-07-04 23:58 - 00006819 ____A C:\AdwCleaner[S1].txt
2013-07-04 23:58 - 2013-07-04 23:58 - 00000132 ____A C:\Windows\DeleteOnReboot.bat
2013-07-04 23:56 - 2013-07-04 23:56 - 00007641 ____A C:\Users\***\Desktop\AdwCleaner[R1].txt
2013-07-04 23:56 - 2013-07-04 23:55 - 00007641 ____A C:\AdwCleaner[R1].txt
2013-07-04 23:55 - 2013-07-04 23:55 - 00650027 ____A C:\Users\***\Desktop\adwcleaner.exe
2013-07-04 23:49 - 2012-04-24 23:41 - 00467968 __ASH C:\Users\***\Desktop\Thumbs.db
2013-07-04 23:48 - 2013-07-04 23:48 - 894952907 ____A C:\Windows\MEMORY.DMP
2013-07-04 23:48 - 2013-07-04 23:48 - 00476752 ____A C:\Windows\Minidump\070413-24928-01.dmp
2013-07-04 23:48 - 2013-07-04 23:48 - 00000000 ____A C:\Windows\setuperr.log
2013-07-04 23:48 - 2010-04-01 12:55 - 00000000 ____D C:\Windows\Minidump
2013-07-04 22:23 - 2013-07-04 22:23 - 00000000 ____D C:\Users\***\AppData\Roaming\Sublime Text 2
2013-07-04 22:23 - 2013-07-04 22:23 - 00000000 ____D C:\Program Files\Sublime Text 2
2013-07-04 22:22 - 2013-07-04 22:22 - 06519568 ____A (                                                            ) C:\Users\***\Downloads\Sublime Text 2.0.1 x64 Setup.exe
2013-07-04 20:44 - 2013-07-04 20:39 - 00000132 ____A C:\Users\***\AppData\Roaming\Adobe GIF Format CS6 Prefs
2013-07-04 16:00 - 2013-07-04 16:00 - 00034891 ____A C:\Users\***\Desktop\Addition.txt
2013-07-04 15:59 - 2013-07-04 15:59 - 00000000 ____D C:\FRST
2013-07-04 15:59 - 2013-07-04 15:58 - 01934636 ____A (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-07-04 15:34 - 2013-07-04 15:34 - 00001739 ____A C:\Users\***\Desktop\aswMBR.txt
2013-07-04 15:34 - 2013-07-04 15:34 - 00000512 ____A C:\Users\***\Desktop\MBR.dat
2013-07-04 14:53 - 2013-07-04 14:36 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-04 14:39 - 2013-07-04 14:36 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-07-04 14:36 - 2013-07-04 14:36 - 00001383 ____A C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-07-04 14:34 - 2013-07-04 14:34 - 36364784 ____A (Safer-Networking Ltd.                                       ) C:\Users\***\Desktop\spybotsd-2.1.20-SR1.exe
2013-07-04 14:18 - 2013-07-04 11:23 - 00000474 ____A C:\Users\***\Desktop\defogger_disable.log
2013-07-04 12:31 - 2013-07-04 12:29 - 04745728 ____A (AVAST Software) C:\Users\***\Desktop\aswMBR.exe
2013-07-04 12:22 - 2013-07-04 12:22 - 00003236 ____A C:\Users\***\Desktop\gmer.txt
2013-07-04 11:56 - 2013-07-04 11:56 - 00377856 ____A C:\Users\***\Desktop\gmer_2.1.19163.exe
2013-07-04 11:42 - 2013-07-04 11:42 - 00111710 ____A C:\Users\***\Desktop\OTL.Txt
2013-07-04 11:23 - 2013-07-04 11:23 - 00000000 ____A C:\Users\***\defogger_reenable
2013-07-04 11:23 - 2010-03-27 20:42 - 00000000 ____D C:\users\***
2013-07-04 11:21 - 2013-07-04 11:21 - 00602112 ____A (OldTimer Tools) C:\Users\***\Desktop\OTL.exe
2013-07-04 11:21 - 2013-07-04 11:21 - 00050477 ____A C:\Users\***\Desktop\Defogger.exe
2013-07-04 10:07 - 2012-04-24 21:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-03 22:14 - 2010-04-24 01:39 - 00298280 ____A C:\Windows\SysWOW64\PnkBstrB.ex0
2013-07-03 22:09 - 2013-07-03 22:09 - 00013246 ____A C:\Users\***\Documents\cc_20130703_220917.reg
2013-07-03 22:08 - 2013-07-03 22:07 - 04396440 ____A (Piriform Ltd) C:\Users\***\Downloads\ccsetup403.exe
2013-07-03 22:08 - 2011-10-01 11:18 - 00000000 ____D C:\Users\***\AppData\Roaming\uTorrent
2013-07-03 22:08 - 2011-06-27 16:51 - 00001021 ____A C:\Users\Public\Desktop\CCleaner.lnk
2013-07-03 22:08 - 2010-03-27 22:22 - 00000000 ____D C:\Program Files (x86)\CCleaner
2013-07-03 11:36 - 2013-07-03 11:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-03 10:22 - 2009-07-14 06:45 - 06329488 ____A C:\Windows\System32\FNTCACHE.DAT
2013-07-02 18:21 - 2012-05-02 15:23 - 00000000 ____D C:\Users\***\Documents\001_cala
2013-07-02 16:27 - 2013-07-02 16:27 - 00000000 ____D C:\Users\***\Documents\testseite
2013-07-02 16:11 - 2013-07-02 16:11 - 00000000 ____D C:\Users\***\AppData\Roaming\PDAppFlex
2013-07-02 16:11 - 2010-04-06 14:33 - 00537592 ____A C:\Users\***\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-02 16:10 - 2013-07-02 16:10 - 00001522 ____A C:\Users\Public\Desktop\Adobe Application Manager.lnk
2013-07-02 16:10 - 2013-07-02 16:10 - 00000000 ____D C:\Users\***\Desktop\Adobe Application Manager 7.0
2013-07-02 16:10 - 2013-07-02 16:09 - 63731352 ____A (Adobe Systems Incorporated) C:\Users\***\Downloads\ApplicationManager7.0_all.exe
2013-07-02 16:05 - 2010-08-02 12:09 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-07-02 16:03 - 2010-03-31 14:00 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-07-02 16:03 - 2010-03-27 22:04 - 00000000 ____D C:\Users\***\AppData\Roaming\Adobe
2013-07-02 15:31 - 2013-07-02 15:31 - 00000000 ____D C:\Users\***\Downloads\***
2013-06-28 22:29 - 2013-05-17 20:39 - 00012777 ___AH C:\Windows\SysWOW64\BTImages.dat
2013-06-24 12:47 - 2013-06-24 12:47 - 00000000 ____D C:\Users\***\AppData\Local\DDMSettings
2013-06-24 12:29 - 2010-09-05 22:34 - 00000000 ____D C:\ProgramData\DivX
2013-06-24 12:25 - 2010-09-05 22:37 - 00000000 ____D C:\Program Files\DivX
2013-06-24 12:25 - 2010-09-05 22:35 - 00000000 ____D C:\Program Files (x86)\DivX
2013-06-24 12:23 - 2013-06-24 12:23 - 00957248 ____A (DivX, LLC) C:\Users\***\Downloads\DivXInstaller.exe
2013-06-23 17:09 - 2013-06-23 14:52 - 00000000 ____D C:\Users\***\AppData\Roaming\avidemux
2013-06-23 16:59 - 2013-06-23 16:59 - 00001324 ____A C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\Users\***\Documents\Freemake
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\ProgramData\Freemake
2013-06-23 16:59 - 2013-06-23 16:59 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-06-23 16:58 - 2013-06-23 16:58 - 01271944 ____A (Ellora Assets Corporation                                   ) C:\Users\***\Downloads\FreemakeVideoConverterSetup.exe
2013-06-23 16:53 - 2013-06-23 16:53 - 01916953 ____A C:\Users\***\Downloads\VirtualDub-1.9.11-AMD64.zip
2013-06-23 16:51 - 2013-06-23 16:51 - 00955801 ____A C:\Users\***\Downloads\VirtualDubMod_1_5_10_2_b2542.zip
2013-06-23 16:46 - 2010-07-27 02:17 - 00000143 ____A C:\Users\***\AppData\Roaming\default.rss
2013-06-23 16:27 - 2013-06-23 16:27 - 00935888 ____A C:\Users\***\Downloads\AVIAddXSub.zip
2013-06-23 15:02 - 2013-06-23 15:02 - 01092977 ____A C:\Users\***\Downloads\subtitle-workshop_3190.zip
2013-06-23 14:52 - 2013-06-23 14:52 - 00001041 ____A C:\Users\Public\Desktop\Avidemux 2.6 (32-bit).lnk
2013-06-23 14:52 - 2013-06-23 14:52 - 00000000 ____D C:\Program Files (x86)\Avidemux 2.6
2013-06-23 14:51 - 2013-06-23 14:50 - 22805174 ____A C:\Users\***\Downloads\avidemux_2.6.4_win32.exe
2013-06-23 14:46 - 2013-06-23 14:46 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-06-23 14:46 - 2012-08-22 10:00 - 00000000 ____D C:\Users\***\AppData\Roaming\DVDVideoSoft
2013-06-23 14:45 - 2013-06-23 14:44 - 24378872 ____A (DVDVideoSoft Ltd.                                           ) C:\Users\***\Downloads\FreeYouTubeDownload_3.2.3.610.exe
2013-06-22 18:19 - 2013-06-22 17:37 - 00000132 ____A C:\Users\***\AppData\Roaming\Adobe PNG Format CS6 Prefs
2013-06-22 17:46 - 2013-06-22 17:46 - 00000000 ____D C:\Users\***\Documents\Adobe
2013-06-21 00:58 - 2013-03-21 00:17 - 00001456 ____A C:\Users\***\AppData\Local\Adobe Save for Web 13.0 Prefs
2013-06-19 10:53 - 2013-06-19 10:53 - 00968328 ____A C:\Users\***\Downloads\Eyewitness Lebanon Evidence of 91 international correspondents Full PDF Version.exe
2013-06-19 10:43 - 2013-06-19 10:42 - 00004944 ____A C:\Windows\SysWOW64\jupdate-1.7.0_25-b16.log
2013-06-19 10:43 - 2013-03-07 17:30 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-18 17:11 - 2010-03-28 00:38 - 00000000 ____D C:\Users\***\AppData\Roaming\DAEMON Tools Lite
2013-06-18 12:10 - 2013-06-18 11:49 - 00000000 ____D C:\Windows\AutoKMS
2013-06-18 11:19 - 2010-04-11 17:35 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-15 16:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-14 00:15 - 2010-04-24 01:39 - 00076888 ____A C:\Windows\SysWOW64\PnkBstrA.exe
2013-06-13 20:33 - 2013-06-13 20:33 - 00000000 ____D C:\Users\***\Downloads\***
2013-06-13 20:27 - 2013-06-13 19:21 - 174296088 ____A C:\Users\***\Downloads\***
2013-06-13 17:39 - 2010-04-01 20:08 - 00000000 ____D C:\Users\***\AppData\Roaming\Winamp
2013-06-13 17:36 - 2012-01-07 17:21 - 00000000 ____D C:\Users\***\AppData\Roaming\Mp3tag
2013-06-13 17:23 - 2013-06-10 22:57 - 00000000 ____D C:\Users\***\AppData\Roaming\Audacity
2013-06-13 15:22 - 2013-06-13 15:03 - 230495572 ____A C:\Users\***\Downloads\top30hts_pro_rmx0413-bysks.rar
2013-06-12 21:48 - 2012-05-11 18:12 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-06-12 21:48 - 2010-06-30 19:32 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-12 21:47 - 2013-06-19 10:43 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-12 21:43 - 2013-06-19 10:43 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-12 21:43 - 2013-06-19 10:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-12 21:43 - 2013-06-19 10:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-12 17:08 - 2010-03-27 19:43 - 00000000 ____D C:\Windows\Panther
2013-06-12 17:06 - 2012-03-23 16:20 - 00001113 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-06-12 17:06 - 2011-12-02 22:37 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-12 16:48 - 2010-03-27 20:59 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 16:47 - 2011-04-27 10:50 - 01590298 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2013-06-12 01:39 - 2012-04-07 10:58 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 01:39 - 2011-05-28 09:38 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-11 14:48 - 2013-06-11 14:48 - 00001402 ____A C:\Users\***\Desktop\Free YouTube to MP3 Converter.lnk
2013-06-11 14:47 - 2013-06-11 14:47 - 24963016 ____A (DVDVideoSoft Ltd.                                           ) C:\Users\***\Downloads\FreeYouTubeToMP3Converter.exe
2013-06-11 10:48 - 2013-06-11 10:48 - 00001783 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-11 10:48 - 2013-06-11 10:46 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-11 10:48 - 2013-06-11 10:46 - 00000000 ____D C:\Program Files\iTunes
2013-06-11 10:48 - 2013-06-11 10:46 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-06-11 10:46 - 2013-06-11 10:46 - 00000000 ____D C:\Program Files\iPod
2013-06-10 23:13 - 2013-06-10 23:13 - 00000983 ____A C:\Users\Public\Desktop\Mp3tag.lnk
2013-06-10 23:13 - 2012-01-07 17:21 - 00000000 ____D C:\Program Files (x86)\Mp3tag
2013-06-10 23:12 - 2013-06-10 23:12 - 02627392 ____A C:\Users\***\Downloads\mp3tagv255asetup.exe
2013-06-10 23:05 - 2013-06-10 23:05 - 00000000 ____D C:\Program Files (x86)\Lame For Audacity
2013-06-10 23:04 - 2013-06-10 23:04 - 00527423 ____A (                                                            ) C:\Users\***\Downloads\Lame_v3.99.3_for_Windows.exe
2013-06-10 22:57 - 2013-06-10 22:57 - 21281052 ____A (Audacity Team                                               ) C:\Users\***\Downloads\audacity-win-2.0.3.exe
2013-06-10 22:57 - 2013-06-10 22:57 - 00001011 ____A C:\Users\***\Desktop\Audacity.lnk
2013-06-10 22:57 - 2013-06-10 22:57 - 00000000 ____D C:\Program Files (x86)\Audacity
2013-06-10 22:39 - 2013-02-17 15:42 - 00000000 ____D C:\Users\***\Downloads\Taste of Thai
2013-06-08 16:08 - 2013-06-12 16:43 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 16:07 - 2013-06-12 16:43 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 16:06 - 2013-06-12 16:43 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 16:06 - 2013-06-12 16:43 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 16:06 - 2013-06-12 16:43 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 14:28 - 2013-06-12 16:43 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 13:42 - 2013-06-12 16:43 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 13:40 - 2013-06-12 16:43 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 13:40 - 2013-06-12 16:43 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 13:40 - 2013-06-12 16:43 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 13:40 - 2013-06-12 16:43 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 13:13 - 2013-06-12 16:43 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-06 12:03 - 2013-06-06 12:03 - 00007906 ____A C:\Users\***\Documents\Greek Mix summer 2013.xlsx

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-03 11:28

==================== End Of Log ============================
         

--- --- ---



Dank Dir!
paule

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.


Noch Probleme?

Hallo Schrauber!
Was hälst Du von den ESET-Fünden?

paule

Java Cache und temporäre Dateien, wurde alles mit TFC entfernt

Hallo Schrauber!
Spybot erkennt nichts mehr, aber der aswmbr stürzt wie gehabt an immer gleicher Stelle ab.
Da das System jetzt eigentlich sauber sein sollte, unterstell ich mal, das dies nicht weiter sicherheitsrelevant ist.
Ich bedank mich nochmal für Hilfe und Info und wünsch Dir ein schönes WE.

paule

Fertig.

Eins noch, erst jetzt gsehen:

127.0.0.1 activate.adobe.com

Tu Dir selbst nen Gefallen und benutz keine geklaute Software, illegal, nicht schick und Malware Schleuder


Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.