Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
GVU Trojaner entfernen

GVU Trojaner entfernen


Plagegeister aller Art und deren Bekämpfung: GVU Trojaner entfernen

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 11.07.2013, 00:29   #1
wwu96
 
GVU Trojaner entfernen - Standard

GVU Trojaner entfernen


Mich hat nun auch der GVU Trojaner erwischt. Bisher habe ich eine Systemwiederherstellung durchgeführt. Nun habe ich auch schon FRST runtergeladen und den scan durchlaufen lassen.

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-07-2013 03
Ran by Alex (administrator) on 11-07-2013 01:20:36
Running from C:\Users\Alex\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(AkkuLine.de) C:\Program Files (x86)\AkkuLine.de\AkkuLine Batterie-Tool\AL-Batterie-Tool.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Tobit.Software) C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Wistron) C:\Program Files (x86)\Launch Manager\HotkeyApp.exe
(Wistron Corp.) C:\Program Files (x86)\Launch Manager\OSD.exe
(Wistron Corp.) C:\Program Files (x86)\Launch Manager\WButton.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Wistron Corp.) C:\Program Files (x86)\Launch Manager\WisLMSvc.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\SoftwareDistribution\Download\Install\Windows-KB890830-x64-V4.22-delta.exe
(Microsoft Corporation) c:\6a7eb5229b1d107940c810\mrtstub.exe
(Microsoft Corporation) C:\Windows\system32\MRT.exe
() C:\Program Files (x86)\Google\Update\Install\{CBCDA0CF-F116-451A-84A0-B46056B6177E}\28.0.1500.71_27.0.1453.116_chrome_updater.exe
(Google Inc.) C:\Windows\TEMP\CR_A4F81.tmp\setup.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [167704 2012-01-23] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [392984 2012-01-23] (Intel Corporation)
HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [417560 2012-01-23] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12681320 2011-08-26] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4  [2277480 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [IntelPAN] - "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray [1935120 2011-11-01] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp [10358784 2011-11-15] (Intel Corporation)
HKLM\...\Run: [SynTPEnh] - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2294568 2010-09-03] (Synaptics Incorporated)
HKLM\...\Run: [MedionReminder] - C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink)
HKLM\...\Run: [XboxStat] - "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\RunOnce: [MedionReminder] - C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe /DeleteRunKey [443688 2011-05-26] (CyberLink)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
HKCU\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1475584 2010-11-21] (Microsoft Corporation)
HKCU\...\Run: [ALBATTTOOL] - C:\Program Files (x86)\AkkuLine.de\AkkuLine Batterie-Tool\AL-Batterie-Tool.exe [408576 2010-10-05] (AkkuLine.de)
HKCU\...\Run: [GoogleDriveSync] - "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart [19676256 2013-06-06] (Google)
HKCU\...\Run: [rfxsrvtray] - "C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe" [1838872 2013-02-07] (Tobit.Software)
MountPoints2: F - F:\AutoRun.exe
MountPoints2: {4130f1db-6799-11e2-9962-00262dc8ba66} - F:\AutoRun.exe
MountPoints2: {4130f1e0-6799-11e2-9962-00262dc8ba66} - F:\AutoRun.exe
MountPoints2: {574cedd7-9226-11e2-8a69-8fb0582a2b0a} - F:\AutoRun.exe
MountPoints2: {73baa2a3-95f7-11e2-be04-fd369ad93e31} - F:\AutoRun.exe
MountPoints2: {7cbfe660-c54e-11e2-8d67-b84a0dd0481d} - F:\AutoRun.exe
MountPoints2: {7cbfe662-c54e-11e2-8d67-b84a0dd0481d} - F:\AutoRun.exe
MountPoints2: {ff783e2b-6616-11e2-a0a3-00262dc8ba66} - F:\AutoRun.exe
MountPoints2: {ff783e2e-6616-11e2-a0a3-00262dc8ba66} - F:\AutoRun.exe
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-30] (Intel Corporation)
HKLM-x32\...\Run: [HotkeyApp] - "C:\Program Files (x86)\Launch Manager\HotkeyApp.exe" [207400 2011-08-06] (Wistron)
HKLM-x32\...\Run: [LMgrVolOSD] - "C:\Program Files (x86)\Launch Manager\OSD.exe" [348960 2011-08-06] (Wistron Corp.)
HKLM-x32\...\Run: [LMgrOSD] - "C:\Program Files (x86)\Launch Manager\OSDCtrl.exe" [x]
HKLM-x32\...\Run: [Wbutton] - "C:\Program Files (x86)\Launch Manager\Wbutton.exe" [447016 2011-08-13] (Wistron Corp.)
HKLM-x32\...\Run: [CLMLServer] - "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - "C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart [507744 2011-12-21] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [ControlCenter4] - C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun [139264 2011-04-20] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [QuickTime Task] - "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [417792 2009-11-10] (Apple Inc.)
HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [241984 2011-10-17] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [203072 2011-10-17] (NVIDIA Corporation)
Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\ProgramData\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\watchmi tray.lnk
ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{F0559C5E-7912-4391-B1A0-6B975F0E5064}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=2bf0fd42-0dd0-4d91-9998-31c371e6294f&searchtype=ds&q={searchTerms}&installDate=28/06/2013
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
HKLM-x32 SearchScopes: DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=2bf0fd42-0dd0-4d91-9998-31c371e6294f&searchtype=ds&q={searchTerms}&installDate=28/06/2013
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=2bf0fd42-0dd0-4d91-9998-31c371e6294f&searchtype=ds&q={searchTerms}&installDate=28/06/2013
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
HKCU SearchScopes: DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=2bf0fd42-0dd0-4d91-9998-31c371e6294f&searchtype=ds&q={searchTerms}&installDate=28/06/2013
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=2bf0fd42-0dd0-4d91-9998-31c371e6294f&searchtype=ds&q={searchTerms}&installDate=28/06/2013
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GmbH)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Chrome: 
=======
CHR HomePage: https://www.facebook.com/
CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-08] (Adobe Systems)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-25] (Avira Operations GmbH & Co. KG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MSSQL$JTLWAWI; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-11-01] ()
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2012-01-31] ()
R3 WisLMSvc; C:\Program Files (x86)\Launch Manager\WisLMSvc.exe [118560 2011-08-06] (Wistron Corp.)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-30] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 SLEE_18_DRIVER; C:\Windows\Sleen1864.sys [108648 2013-01-08] (Softwareentwicklung Remus - ArchiCrypt - )
R1 SLEE_18_DRIVER; C:\Windows\Sleen1864.sys [108648 2013-01-08] (Softwareentwicklung Remus - ArchiCrypt - )
S3 L1C; system32\DRIVERS\L1C62x64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-11 01:22 - 2013-07-11 01:22 - 00000000 ____D C:\601465059afd4d4526
2013-07-11 01:19 - 2013-07-11 01:19 - 01776951 ____A (Farbar) C:\Users\Alex\Downloads\FRST64.exe
2013-07-11 01:19 - 2013-07-11 01:19 - 00000000 ____D C:\FRST
2013-07-11 01:18 - 2013-07-11 01:18 - 00793536 ____A C:\Users\Alex\Downloads\ZipOpenerSetup.exe
2013-07-11 01:10 - 2013-07-11 01:10 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Malwarebytes
2013-07-11 01:09 - 2013-07-11 01:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-11 01:09 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-07-11 01:03 - 2013-07-11 01:04 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Alex\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-11 01:03 - 2013-07-11 01:04 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Alex\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-07-11 00:25 - 2013-07-11 00:25 - 00393515 ____A C:\Users\Alex\AppData\Roaming\2433f433
2013-07-11 00:25 - 2013-07-11 00:25 - 00393480 ____A C:\Users\Alex\AppData\Local\2433f433
2013-07-11 00:25 - 2013-07-11 00:25 - 00393476 ____A C:\ProgramData\2433f433
2013-07-10 23:43 - 2013-07-10 23:43 - 03425262 ____A C:\Users\Alex\Downloads\monti.wmv
2013-07-10 23:10 - 2013-07-10 23:10 - 00000000 ____D C:\Users\Alex\AppData\Local\{CDAED6EA-EF05-4273-92A8-B988E72A808E}
2013-07-09 21:58 - 2013-07-09 21:58 - 00046080 ____A C:\Users\Alex\Downloads\zeitstrahl_mc.xls
2013-07-05 15:34 - 2013-07-05 15:34 - 00274373 ____A C:\Users\Alex\Documents\Unbenannt.wma
2013-07-03 22:01 - 2013-07-03 22:01 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Media Player Classic
2013-07-02 23:21 - 2013-07-02 23:21 - 00000000 ____D C:\Users\Alex\Documents\Deutsche Post AG
2013-07-02 23:21 - 2013-07-02 23:21 - 00000000 ____D C:\ProgramData\Deutsche Post AG
2013-07-02 23:21 - 2013-07-02 23:21 - 00000000 ____D C:\Program Files\Deutsche Post AG
2013-07-02 23:17 - 2013-07-02 23:17 - 03245409 ____A C:\Users\Alex\Downloads\ep_ms_word_2010_addin_v2_3_64bit.exe
2013-07-02 23:17 - 2012-08-07 18:01 - 03363840 ____A C:\Users\Alex\Downloads\EPortoInstaller2010_x64_v2.3.msi
2013-07-02 23:17 - 2012-08-07 18:01 - 00436736 ____A () C:\Users\Alex\Downloads\setup.exe
2013-07-01 09:34 - 2013-07-01 09:34 - 00000000 ____D C:\Users\Alex\AppData\Local\Microsoft Help
2013-07-01 09:34 - 2013-07-01 09:34 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-30 21:20 - 2013-06-30 21:20 - 00000423 ____A C:\Users\Alex\Documents\SteganosBanking2012Error.txt
2013-06-28 18:15 - 2013-04-29 20:00 - 00112640 ____A C:\Windows\SysWOW64\ff_vfw.dll
2013-06-28 18:15 - 2013-03-17 18:21 - 03649536 ____A (x264vfw project) C:\Windows\SysWOW64\x264vfw.dll
2013-06-28 18:15 - 2012-06-09 19:21 - 00178688 ____A C:\Windows\SysWOW64\unrar.dll
2013-06-28 18:15 - 2011-12-21 19:14 - 00151552 ____A (fccHandler) C:\Windows\SysWOW64\ac3acm.acm
2013-06-28 18:15 - 2011-12-07 19:32 - 00216064 ____A ( ) C:\Windows\SysWOW64\lagarith.dll
2013-06-28 18:15 - 2011-06-24 16:44 - 00243200 ____A C:\Windows\SysWOW64\xvidvfw.dll
2013-06-28 18:15 - 2011-06-24 16:28 - 00650752 ____A C:\Windows\SysWOW64\xvidcore.dll
2013-06-28 18:12 - 2013-06-28 18:12 - 23768255 ____A (                                                            ) C:\Users\Alex\Downloads\K-Lite_Codec_Pack_990_Mega.exe
2013-06-28 15:05 - 2013-06-28 15:07 - 00000000 ____D C:\Users\Alex\Documents\Freemake
2013-06-28 15:05 - 2013-06-28 15:07 - 00000000 ____D C:\ProgramData\Freemake
2013-06-28 15:05 - 2013-06-28 15:05 - 00001328 ____A C:\Users\Public\Desktop\Freemake Audio Converter.lnk
2013-06-28 15:05 - 2013-06-28 15:05 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-06-28 15:03 - 2013-06-28 15:03 - 01264824 ____A (Ellora Assets Corporation                                   ) C:\Users\Alex\Downloads\FreemakeAudioConverterSetup.exe
2013-06-28 14:45 - 2013-06-28 14:56 - 00000000 ____D C:\Users\Alex\AppData\Roaming\avidemux
2013-06-28 14:42 - 2013-06-28 14:42 - 12977165 ____A C:\Users\Alex\Downloads\avidemux_2.6.3_32bits.exe
2013-06-28 14:33 - 2013-06-28 14:33 - 00000000 ____D C:\Users\Alex\AppData\Local\{D90D2822-2C49-4EDC-939A-E6A2FCE99A5B}
2013-06-26 21:48 - 2013-06-26 21:48 - 00000000 ____D C:\Users\Alex\AppData\Local\{A5F2B2AE-C423-4C9A-945C-03CF1F2B8211}
2013-06-22 21:38 - 2013-06-22 21:38 - 00000000 ____D C:\Users\Alex\Documents\Avatar
2013-06-22 21:32 - 2013-06-22 21:32 - 00000000 ____D C:\Users\Alex\AppData\Roaming\CyberLink
2013-06-22 21:31 - 2013-06-22 21:31 - 00000000 ____D C:\Users\Alex\AppData\Local\{93976971-496C-4469-91E7-7D8208CBF866}
2013-06-19 21:03 - 2013-06-19 21:03 - 00002091 ____A C:\Users\Public\Desktop\Radio.fx.LNK
2013-06-19 21:03 - 2013-06-19 21:03 - 00002077 ____A C:\Users\Public\Desktop\djukebox.LNK
2013-06-19 21:02 - 2013-04-15 16:36 - 03326232 ____A (Tobit.Software) C:\Windows\RXSUnins.exe
2013-06-19 21:02 - 2013-04-15 16:36 - 03326232 ____A (Tobit.Software) C:\Windows\RXCUnins.exe
2013-06-19 21:01 - 2013-06-19 21:02 - 17615456 ____A (Tobit.Software) C:\Users\Alex\Downloads\radio-fx (1).exe
2013-06-18 06:48 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-18 06:48 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-18 06:48 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-18 06:48 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-18 06:48 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-18 06:48 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-18 06:48 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-18 06:48 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-18 06:48 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-06-18 06:48 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-06-18 06:48 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-06-18 06:48 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-06-18 06:48 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-06-18 06:48 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-06-18 06:48 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-06-18 06:48 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-06-18 06:48 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-06-18 06:48 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-06-18 06:48 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-18 06:47 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-06-18 06:47 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-06-18 06:47 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-06-18 06:47 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-06-18 06:47 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-06-18 06:47 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-06-18 06:47 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-18 06:47 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-18 06:47 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-18 06:47 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-18 06:47 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-18 06:47 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-15 12:44 - 2013-06-15 12:44 - 00000000 ____D C:\Users\Alex\AppData\Local\{D147665A-6E74-4B2E-BE80-FA8F513EC956}
2013-06-15 12:44 - 2013-06-15 12:44 - 00000000 ____D C:\Users\Alex\AppData\Local\{256DFA64-9487-4BDE-AD4D-F956536D26F9}
2013-06-14 20:46 - 2013-06-14 20:46 - 00000000 ____D C:\Users\Alex\AppData\Local\FUJIFILM
2013-06-14 20:46 - 2010-02-10 14:26 - 00233472 ____A (FUJIFILM Corporation) C:\Windows\SysWOW64\RFCLauncher.exe
2013-06-14 20:46 - 2006-07-12 14:39 - 00208896 ____A (FUJI PHOTO FILM CO., LTD.) C:\Windows\SysWOW64\FFRafShellEx.dll
2013-06-14 20:34 - 2013-06-14 20:34 - 00037836 ____A C:\Windows\DirectX.log
2013-06-14 20:34 - 2013-06-14 20:34 - 00001190 ____A C:\Users\Public\Desktop\MyFinePix Studio.lnk
2013-06-14 20:34 - 2013-06-14 20:34 - 00000000 ____D C:\ProgramData\FUJIFILM
2013-06-14 20:25 - 2013-06-14 20:25 - 00000000 ____D C:\ProgramData\Apple Computer
2013-06-14 20:24 - 2013-06-14 20:24 - 00000000 ____D C:\Users\Alex\AppData\Local\Apple
2013-06-14 20:24 - 2013-06-14 20:24 - 00000000 ____D C:\ProgramData\Apple
2013-06-13 09:21 - 2013-06-13 09:21 - 01690803 ____A C:\Users\Alex\Downloads\gbb_presse_2.zip
2013-06-13 09:20 - 2013-06-13 09:20 - 01153053 ____A C:\Users\Alex\Downloads\gbb_presse_5.zip
2013-06-12 19:51 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-06-12 19:50 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-06-12 19:50 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-06-12 19:50 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-06-12 19:50 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\system32\certenc.dll
2013-06-12 19:50 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 19:50 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 19:50 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 19:50 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-06-12 19:50 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 19:50 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 19:50 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-06-12 19:50 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 19:50 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-06-12 19:50 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 19:50 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 19:50 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 19:50 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-06-12 19:50 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-06-11 21:35 - 2013-06-11 21:36 - 26919963 ____A C:\Users\Alex\Downloads\Facebook Insights Data Export - VfL Sportfreunde Lotte - 2013-06-11.xls

==================== One Month Modified Files and Folders =======

2013-07-11 01:22 - 2013-07-11 01:22 - 00000000 ____D C:\601465059afd4d4526
2013-07-11 01:19 - 2013-07-11 01:19 - 01776951 ____A (Farbar) C:\Users\Alex\Downloads\FRST64.exe
2013-07-11 01:19 - 2013-07-11 01:19 - 00000000 ____D C:\FRST
2013-07-11 01:19 - 2013-04-05 12:30 - 00001106 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-11 01:18 - 2013-07-11 01:18 - 00793536 ____A C:\Users\Alex\Downloads\ZipOpenerSetup.exe
2013-07-11 01:13 - 2011-07-18 22:31 - 78185248 ____A (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-11 01:10 - 2013-07-11 01:10 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Malwarebytes
2013-07-11 01:09 - 2013-07-11 01:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-11 01:09 - 2012-12-22 19:59 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-11 01:05 - 2011-05-16 16:04 - 00755150 ____A C:\Windows\system32\perfh007.dat
2013-07-11 01:05 - 2011-05-16 16:04 - 00172652 ____A C:\Windows\system32\perfc007.dat
2013-07-11 01:05 - 2009-07-14 07:13 - 01786802 ____A C:\Windows\system32\PerfStringBackup.INI
2013-07-11 01:04 - 2013-07-11 01:03 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Alex\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-11 01:04 - 2013-07-11 01:03 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Alex\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-07-11 00:58 - 2012-12-24 00:45 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 00:57 - 2009-07-14 06:45 - 00016944 ___AH C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-11 00:57 - 2009-07-14 06:45 - 00016944 ___AH C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-11 00:54 - 2012-12-22 18:00 - 01919777 ____A C:\Windows\WindowsUpdate.log
2013-07-11 00:53 - 2012-12-22 18:12 - 00000000 ____D C:\Users\Alex\Documents\Youcam
2013-07-11 00:51 - 2013-04-20 22:19 - 00000000 ___SD C:\Users\Alex\Google Drive
2013-07-11 00:49 - 2013-04-05 12:30 - 00001102 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-11 00:49 - 2012-12-22 18:09 - 00000000 ____D C:\Users\Alex
2013-07-11 00:48 - 2013-04-06 19:21 - 00004743 ____A C:\Windows\setupact.log
2013-07-11 00:48 - 2012-03-20 00:34 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-11 00:48 - 2011-04-12 10:28 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 00:48 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-11 00:47 - 2011-04-12 10:28 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-07-11 00:47 - 2011-04-12 10:28 - 00000000 ____D C:\Windows\ShellNew
2013-07-11 00:47 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 00:47 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2013-07-11 00:46 - 2013-02-06 16:12 - 00000000 ____D C:\Users\Alex\Desktop\SF Lotte
2013-07-11 00:46 - 2013-01-03 21:58 - 00000000 ____D C:\Users\Alex\AppData\Roaming\SoftGrid Client
2013-07-11 00:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-07-11 00:45 - 2013-01-03 22:03 - 00000000 __RHD C:\MSOCache
2013-07-11 00:37 - 2013-01-14 15:40 - 00511488 __ASH C:\Users\Alex\Desktop\Thumbs.db
2013-07-11 00:25 - 2013-07-11 00:25 - 00393515 ____A C:\Users\Alex\AppData\Roaming\2433f433
2013-07-11 00:25 - 2013-07-11 00:25 - 00393480 ____A C:\Users\Alex\AppData\Local\2433f433
2013-07-11 00:25 - 2013-07-11 00:25 - 00393476 ____A C:\ProgramData\2433f433
2013-07-10 23:43 - 2013-07-10 23:43 - 03425262 ____A C:\Users\Alex\Downloads\monti.wmv
2013-07-10 23:10 - 2013-07-10 23:10 - 00000000 ____D C:\Users\Alex\AppData\Local\{CDAED6EA-EF05-4273-92A8-B988E72A808E}
2013-07-10 00:13 - 2013-01-03 15:15 - 02310650 ____A C:\Users\Alex\Desktop\Gewerbe.mmb
2013-07-10 00:05 - 2013-01-15 16:21 - 00000000 ____D C:\Users\Alex\Desktop\backup_Gewerbe
2013-07-09 21:58 - 2013-07-09 21:58 - 00046080 ____A C:\Users\Alex\Downloads\zeitstrahl_mc.xls
2013-07-05 15:34 - 2013-07-05 15:34 - 00274373 ____A C:\Users\Alex\Documents\Unbenannt.wma
2013-07-03 22:01 - 2013-07-03 22:01 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Media Player Classic
2013-07-03 07:47 - 2013-01-03 21:57 - 01742704 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2013-07-02 23:50 - 2013-01-03 11:22 - 01412608 ____A C:\Users\Alex\Documents\Meine Konten.stb
2013-07-02 23:48 - 2013-01-15 18:20 - 00001566 ____A C:\Users\Alex\AppData\Roaming\MyMicroBalanceConfig.ini
2013-07-02 23:21 - 2013-07-02 23:21 - 00000000 ____D C:\Users\Alex\Documents\Deutsche Post AG
2013-07-02 23:21 - 2013-07-02 23:21 - 00000000 ____D C:\ProgramData\Deutsche Post AG
2013-07-02 23:21 - 2013-07-02 23:21 - 00000000 ____D C:\Program Files\Deutsche Post AG
2013-07-02 23:17 - 2013-07-02 23:17 - 03245409 ____A C:\Users\Alex\Downloads\ep_ms_word_2010_addin_v2_3_64bit.exe
2013-07-02 22:52 - 2013-05-14 09:04 - 00000432 ____A C:\Windows\BRWMARK.INI
2013-07-02 15:49 - 2013-01-30 17:59 - 00003922 ____A C:\Windows\System32\Tasks\User_Feed_Synchronization-{E54F740F-F5C3-4B29-8CA5-7D6D529AF5AD}
2013-07-01 09:34 - 2013-07-01 09:34 - 00000000 ____D C:\Users\Alex\AppData\Local\Microsoft Help
2013-07-01 09:34 - 2013-07-01 09:34 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-30 22:55 - 2013-03-21 22:34 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Audacity
2013-06-30 21:20 - 2013-06-30 21:20 - 00000423 ____A C:\Users\Alex\Documents\SteganosBanking2012Error.txt
2013-06-29 10:31 - 2013-04-07 13:43 - 00007748 ____A C:\Windows\PFRO.log
2013-06-28 18:12 - 2013-06-28 18:12 - 23768255 ____A (                                                            ) C:\Users\Alex\Downloads\K-Lite_Codec_Pack_990_Mega.exe
2013-06-28 17:53 - 2013-03-24 18:19 - 00000000 ____D C:\Users\Alex\Documents\Any Video Converter
2013-06-28 15:07 - 2013-06-28 15:05 - 00000000 ____D C:\Users\Alex\Documents\Freemake
2013-06-28 15:07 - 2013-06-28 15:05 - 00000000 ____D C:\ProgramData\Freemake
2013-06-28 15:05 - 2013-06-28 15:05 - 00001328 ____A C:\Users\Public\Desktop\Freemake Audio Converter.lnk
2013-06-28 15:05 - 2013-06-28 15:05 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-06-28 15:05 - 2013-04-06 22:19 - 00000000 ____D C:\Users\Alex\AppData\Roaming\OpenCandy
2013-06-28 15:03 - 2013-06-28 15:03 - 01264824 ____A (Ellora Assets Corporation                                   ) C:\Users\Alex\Downloads\FreemakeAudioConverterSetup.exe
2013-06-28 14:56 - 2013-06-28 14:45 - 00000000 ____D C:\Users\Alex\AppData\Roaming\avidemux
2013-06-28 14:42 - 2013-06-28 14:42 - 12977165 ____A C:\Users\Alex\Downloads\avidemux_2.6.3_32bits.exe
2013-06-28 14:33 - 2013-06-28 14:33 - 00000000 ____D C:\Users\Alex\AppData\Local\{D90D2822-2C49-4EDC-939A-E6A2FCE99A5B}
2013-06-26 21:48 - 2013-06-26 21:48 - 00000000 ____D C:\Users\Alex\AppData\Local\{A5F2B2AE-C423-4C9A-945C-03CF1F2B8211}
2013-06-26 17:05 - 2013-01-03 15:13 - 00000000 ____D C:\Users\Alex\Desktop\Ebay Bilder
2013-06-25 10:27 - 2013-05-07 20:27 - 00083672 ____A (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-06-22 21:38 - 2013-06-22 21:38 - 00000000 ____D C:\Users\Alex\Documents\Avatar
2013-06-22 21:33 - 2012-03-20 17:24 - 00000000 ____D C:\ProgramData\CyberLink
2013-06-22 21:32 - 2013-06-22 21:32 - 00000000 ____D C:\Users\Alex\AppData\Roaming\CyberLink
2013-06-22 21:31 - 2013-06-22 21:31 - 00000000 ____D C:\Users\Alex\AppData\Local\{93976971-496C-4469-91E7-7D8208CBF866}
2013-06-21 17:12 - 2013-04-05 12:30 - 00002187 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-06-19 23:32 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-19 21:03 - 2013-06-19 21:03 - 00002091 ____A C:\Users\Public\Desktop\Radio.fx.LNK
2013-06-19 21:03 - 2013-06-19 21:03 - 00002077 ____A C:\Users\Public\Desktop\djukebox.LNK
2013-06-19 21:03 - 2012-12-23 13:29 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Tobit
2013-06-19 21:02 - 2013-06-19 21:01 - 17615456 ____A (Tobit.Software) C:\Users\Alex\Downloads\radio-fx (1).exe
2013-06-15 12:44 - 2013-06-15 12:44 - 00000000 ____D C:\Users\Alex\AppData\Local\{D147665A-6E74-4B2E-BE80-FA8F513EC956}
2013-06-15 12:44 - 2013-06-15 12:44 - 00000000 ____D C:\Users\Alex\AppData\Local\{256DFA64-9487-4BDE-AD4D-F956536D26F9}
2013-06-14 20:53 - 2012-12-22 18:10 - 00096944 ____A C:\Users\Alex\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-14 20:46 - 2013-06-14 20:46 - 00000000 ____D C:\Users\Alex\AppData\Local\FUJIFILM
2013-06-14 20:34 - 2013-06-14 20:34 - 00037836 ____A C:\Windows\DirectX.log
2013-06-14 20:34 - 2013-06-14 20:34 - 00001190 ____A C:\Users\Public\Desktop\MyFinePix Studio.lnk
2013-06-14 20:34 - 2013-06-14 20:34 - 00000000 ____D C:\ProgramData\FUJIFILM
2013-06-14 20:25 - 2013-06-14 20:25 - 00000000 ____D C:\ProgramData\Apple Computer
2013-06-14 20:24 - 2013-06-14 20:24 - 00000000 ____D C:\Users\Alex\AppData\Local\Apple
2013-06-14 20:24 - 2013-06-14 20:24 - 00000000 ____D C:\ProgramData\Apple
2013-06-13 09:21 - 2013-06-13 09:21 - 01690803 ____A C:\Users\Alex\Downloads\gbb_presse_2.zip
2013-06-13 09:20 - 2013-06-13 09:20 - 01153053 ____A C:\Users\Alex\Downloads\gbb_presse_5.zip
2013-06-11 22:09 - 2012-12-22 19:59 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-11 22:09 - 2012-12-22 19:59 - 00003822 ____A C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-06-11 22:09 - 2011-12-01 23:26 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-11 21:36 - 2013-06-11 21:35 - 26919963 ____A C:\Users\Alex\Downloads\Facebook Insights Data Export - VfL Sportfreunde Lotte - 2013-06-11.xls
2013-06-11 20:43 - 2013-01-23 23:04 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Origin
2013-06-11 20:43 - 2013-01-23 23:02 - 00000000 ____D C:\ProgramData\Origin
2013-06-11 20:40 - 2013-01-23 23:04 - 00000000 ____D C:\Users\Alex\AppData\Local\Origin

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-25 11:31

==================== End Of Log ============================

Addition:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-07-2013 03
Ran by Alex (administrator) on 11-07-2013 01:20:36
Running from C:\Users\Alex\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(AkkuLine.de) C:\Program Files (x86)\AkkuLine.de\AkkuLine Batterie-Tool\AL-Batterie-Tool.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Tobit.Software) C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Wistron) C:\Program Files (x86)\Launch Manager\HotkeyApp.exe
(Wistron Corp.) C:\Program Files (x86)\Launch Manager\OSD.exe
(Wistron Corp.) C:\Program Files (x86)\Launch Manager\WButton.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Wistron Corp.) C:\Program Files (x86)\Launch Manager\WisLMSvc.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\SoftwareDistribution\Download\Install\Windows-KB890830-x64-V4.22-delta.exe
(Microsoft Corporation) c:\6a7eb5229b1d107940c810\mrtstub.exe
(Microsoft Corporation) C:\Windows\system32\MRT.exe
() C:\Program Files (x86)\Google\Update\Install\{CBCDA0CF-F116-451A-84A0-B46056B6177E}\28.0.1500.71_27.0.1453.116_chrome_updater.exe
(Google Inc.) C:\Windows\TEMP\CR_A4F81.tmp\setup.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [167704 2012-01-23] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [392984 2012-01-23] (Intel Corporation)
HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [417560 2012-01-23] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12681320 2011-08-26] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4  [2277480 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [IntelPAN] - "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray [1935120 2011-11-01] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp [10358784 2011-11-15] (Intel Corporation)
HKLM\...\Run: [SynTPEnh] - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2294568 2010-09-03] (Synaptics Incorporated)
HKLM\...\Run: [MedionReminder] - C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink)
HKLM\...\Run: [XboxStat] - "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\RunOnce: [MedionReminder] - C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe /DeleteRunKey [443688 2011-05-26] (CyberLink)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
HKCU\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1475584 2010-11-21] (Microsoft Corporation)
HKCU\...\Run: [ALBATTTOOL] - C:\Program Files (x86)\AkkuLine.de\AkkuLine Batterie-Tool\AL-Batterie-Tool.exe [408576 2010-10-05] (AkkuLine.de)
HKCU\...\Run: [GoogleDriveSync] - "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart [19676256 2013-06-06] (Google)
HKCU\...\Run: [rfxsrvtray] - "C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe" [1838872 2013-02-07] (Tobit.Software)
MountPoints2: F - F:\AutoRun.exe
MountPoints2: {4130f1db-6799-11e2-9962-00262dc8ba66} - F:\AutoRun.exe
MountPoints2: {4130f1e0-6799-11e2-9962-00262dc8ba66} - F:\AutoRun.exe
MountPoints2: {574cedd7-9226-11e2-8a69-8fb0582a2b0a} - F:\AutoRun.exe
MountPoints2: {73baa2a3-95f7-11e2-be04-fd369ad93e31} - F:\AutoRun.exe
MountPoints2: {7cbfe660-c54e-11e2-8d67-b84a0dd0481d} - F:\AutoRun.exe
MountPoints2: {7cbfe662-c54e-11e2-8d67-b84a0dd0481d} - F:\AutoRun.exe
MountPoints2: {ff783e2b-6616-11e2-a0a3-00262dc8ba66} - F:\AutoRun.exe
MountPoints2: {ff783e2e-6616-11e2-a0a3-00262dc8ba66} - F:\AutoRun.exe
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-30] (Intel Corporation)
HKLM-x32\...\Run: [HotkeyApp] - "C:\Program Files (x86)\Launch Manager\HotkeyApp.exe" [207400 2011-08-06] (Wistron)
HKLM-x32\...\Run: [LMgrVolOSD] - "C:\Program Files (x86)\Launch Manager\OSD.exe" [348960 2011-08-06] (Wistron Corp.)
HKLM-x32\...\Run: [LMgrOSD] - "C:\Program Files (x86)\Launch Manager\OSDCtrl.exe" [x]
HKLM-x32\...\Run: [Wbutton] - "C:\Program Files (x86)\Launch Manager\Wbutton.exe" [447016 2011-08-13] (Wistron Corp.)
HKLM-x32\...\Run: [CLMLServer] - "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - "C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart [507744 2011-12-21] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [ControlCenter4] - C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun [139264 2011-04-20] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [QuickTime Task] - "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [417792 2009-11-10] (Apple Inc.)
HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [241984 2011-10-17] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [203072 2011-10-17] (NVIDIA Corporation)
Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\ProgramData\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\watchmi tray.lnk
ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{F0559C5E-7912-4391-B1A0-6B975F0E5064}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=2bf0fd42-0dd0-4d91-9998-31c371e6294f&searchtype=ds&q={searchTerms}&installDate=28/06/2013
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
HKLM-x32 SearchScopes: DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=2bf0fd42-0dd0-4d91-9998-31c371e6294f&searchtype=ds&q={searchTerms}&installDate=28/06/2013
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=2bf0fd42-0dd0-4d91-9998-31c371e6294f&searchtype=ds&q={searchTerms}&installDate=28/06/2013
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
HKCU SearchScopes: DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=2bf0fd42-0dd0-4d91-9998-31c371e6294f&searchtype=ds&q={searchTerms}&installDate=28/06/2013
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=2bf0fd42-0dd0-4d91-9998-31c371e6294f&searchtype=ds&q={searchTerms}&installDate=28/06/2013
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GmbH)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Chrome: 
=======
CHR HomePage: https://www.facebook.com/
CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-08] (Adobe Systems)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-25] (Avira Operations GmbH & Co. KG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MSSQL$JTLWAWI; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-11-01] ()
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2012-01-31] ()
R3 WisLMSvc; C:\Program Files (x86)\Launch Manager\WisLMSvc.exe [118560 2011-08-06] (Wistron Corp.)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-30] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 SLEE_18_DRIVER; C:\Windows\Sleen1864.sys [108648 2013-01-08] (Softwareentwicklung Remus - ArchiCrypt - )
R1 SLEE_18_DRIVER; C:\Windows\Sleen1864.sys [108648 2013-01-08] (Softwareentwicklung Remus - ArchiCrypt - )
S3 L1C; system32\DRIVERS\L1C62x64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-11 01:22 - 2013-07-11 01:22 - 00000000 ____D C:\601465059afd4d4526
2013-07-11 01:19 - 2013-07-11 01:19 - 01776951 ____A (Farbar) C:\Users\Alex\Downloads\FRST64.exe
2013-07-11 01:19 - 2013-07-11 01:19 - 00000000 ____D C:\FRST
2013-07-11 01:18 - 2013-07-11 01:18 - 00793536 ____A C:\Users\Alex\Downloads\ZipOpenerSetup.exe
2013-07-11 01:10 - 2013-07-11 01:10 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Malwarebytes
2013-07-11 01:09 - 2013-07-11 01:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-11 01:09 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-07-11 01:03 - 2013-07-11 01:04 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Alex\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-11 01:03 - 2013-07-11 01:04 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Alex\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-07-11 00:25 - 2013-07-11 00:25 - 00393515 ____A C:\Users\Alex\AppData\Roaming\2433f433
2013-07-11 00:25 - 2013-07-11 00:25 - 00393480 ____A C:\Users\Alex\AppData\Local\2433f433
2013-07-11 00:25 - 2013-07-11 00:25 - 00393476 ____A C:\ProgramData\2433f433
2013-07-10 23:43 - 2013-07-10 23:43 - 03425262 ____A C:\Users\Alex\Downloads\monti.wmv
2013-07-10 23:10 - 2013-07-10 23:10 - 00000000 ____D C:\Users\Alex\AppData\Local\{CDAED6EA-EF05-4273-92A8-B988E72A808E}
2013-07-09 21:58 - 2013-07-09 21:58 - 00046080 ____A C:\Users\Alex\Downloads\zeitstrahl_mc.xls
2013-07-05 15:34 - 2013-07-05 15:34 - 00274373 ____A C:\Users\Alex\Documents\Unbenannt.wma
2013-07-03 22:01 - 2013-07-03 22:01 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Media Player Classic
2013-07-02 23:21 - 2013-07-02 23:21 - 00000000 ____D C:\Users\Alex\Documents\Deutsche Post AG
2013-07-02 23:21 - 2013-07-02 23:21 - 00000000 ____D C:\ProgramData\Deutsche Post AG
2013-07-02 23:21 - 2013-07-02 23:21 - 00000000 ____D C:\Program Files\Deutsche Post AG
2013-07-02 23:17 - 2013-07-02 23:17 - 03245409 ____A C:\Users\Alex\Downloads\ep_ms_word_2010_addin_v2_3_64bit.exe
2013-07-02 23:17 - 2012-08-07 18:01 - 03363840 ____A C:\Users\Alex\Downloads\EPortoInstaller2010_x64_v2.3.msi
2013-07-02 23:17 - 2012-08-07 18:01 - 00436736 ____A () C:\Users\Alex\Downloads\setup.exe
2013-07-01 09:34 - 2013-07-01 09:34 - 00000000 ____D C:\Users\Alex\AppData\Local\Microsoft Help
2013-07-01 09:34 - 2013-07-01 09:34 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-30 21:20 - 2013-06-30 21:20 - 00000423 ____A C:\Users\Alex\Documents\SteganosBanking2012Error.txt
2013-06-28 18:15 - 2013-04-29 20:00 - 00112640 ____A C:\Windows\SysWOW64\ff_vfw.dll
2013-06-28 18:15 - 2013-03-17 18:21 - 03649536 ____A (x264vfw project) C:\Windows\SysWOW64\x264vfw.dll
2013-06-28 18:15 - 2012-06-09 19:21 - 00178688 ____A C:\Windows\SysWOW64\unrar.dll
2013-06-28 18:15 - 2011-12-21 19:14 - 00151552 ____A (fccHandler) C:\Windows\SysWOW64\ac3acm.acm
2013-06-28 18:15 - 2011-12-07 19:32 - 00216064 ____A ( ) C:\Windows\SysWOW64\lagarith.dll
2013-06-28 18:15 - 2011-06-24 16:44 - 00243200 ____A C:\Windows\SysWOW64\xvidvfw.dll
2013-06-28 18:15 - 2011-06-24 16:28 - 00650752 ____A C:\Windows\SysWOW64\xvidcore.dll
2013-06-28 18:12 - 2013-06-28 18:12 - 23768255 ____A (                                                            ) C:\Users\Alex\Downloads\K-Lite_Codec_Pack_990_Mega.exe
2013-06-28 15:05 - 2013-06-28 15:07 - 00000000 ____D C:\Users\Alex\Documents\Freemake
2013-06-28 15:05 - 2013-06-28 15:07 - 00000000 ____D C:\ProgramData\Freemake
2013-06-28 15:05 - 2013-06-28 15:05 - 00001328 ____A C:\Users\Public\Desktop\Freemake Audio Converter.lnk
2013-06-28 15:05 - 2013-06-28 15:05 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-06-28 15:03 - 2013-06-28 15:03 - 01264824 ____A (Ellora Assets Corporation                                   ) C:\Users\Alex\Downloads\FreemakeAudioConverterSetup.exe
2013-06-28 14:45 - 2013-06-28 14:56 - 00000000 ____D C:\Users\Alex\AppData\Roaming\avidemux
2013-06-28 14:42 - 2013-06-28 14:42 - 12977165 ____A C:\Users\Alex\Downloads\avidemux_2.6.3_32bits.exe
2013-06-28 14:33 - 2013-06-28 14:33 - 00000000 ____D C:\Users\Alex\AppData\Local\{D90D2822-2C49-4EDC-939A-E6A2FCE99A5B}
2013-06-26 21:48 - 2013-06-26 21:48 - 00000000 ____D C:\Users\Alex\AppData\Local\{A5F2B2AE-C423-4C9A-945C-03CF1F2B8211}
2013-06-22 21:38 - 2013-06-22 21:38 - 00000000 ____D C:\Users\Alex\Documents\Avatar
2013-06-22 21:32 - 2013-06-22 21:32 - 00000000 ____D C:\Users\Alex\AppData\Roaming\CyberLink
2013-06-22 21:31 - 2013-06-22 21:31 - 00000000 ____D C:\Users\Alex\AppData\Local\{93976971-496C-4469-91E7-7D8208CBF866}
2013-06-19 21:03 - 2013-06-19 21:03 - 00002091 ____A C:\Users\Public\Desktop\Radio.fx.LNK
2013-06-19 21:03 - 2013-06-19 21:03 - 00002077 ____A C:\Users\Public\Desktop\djukebox.LNK
2013-06-19 21:02 - 2013-04-15 16:36 - 03326232 ____A (Tobit.Software) C:\Windows\RXSUnins.exe
2013-06-19 21:02 - 2013-04-15 16:36 - 03326232 ____A (Tobit.Software) C:\Windows\RXCUnins.exe
2013-06-19 21:01 - 2013-06-19 21:02 - 17615456 ____A (Tobit.Software) C:\Users\Alex\Downloads\radio-fx (1).exe
2013-06-18 06:48 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-18 06:48 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-18 06:48 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-18 06:48 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-18 06:48 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-18 06:48 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-18 06:48 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-18 06:48 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-18 06:48 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-06-18 06:48 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-06-18 06:48 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-06-18 06:48 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-06-18 06:48 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-06-18 06:48 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-06-18 06:48 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-06-18 06:48 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-06-18 06:48 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-06-18 06:48 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-06-18 06:48 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-18 06:47 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-06-18 06:47 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-06-18 06:47 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-06-18 06:47 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-06-18 06:47 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-06-18 06:47 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-06-18 06:47 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-18 06:47 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-18 06:47 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-18 06:47 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-18 06:47 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-18 06:47 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-15 12:44 - 2013-06-15 12:44 - 00000000 ____D C:\Users\Alex\AppData\Local\{D147665A-6E74-4B2E-BE80-FA8F513EC956}
2013-06-15 12:44 - 2013-06-15 12:44 - 00000000 ____D C:\Users\Alex\AppData\Local\{256DFA64-9487-4BDE-AD4D-F956536D26F9}
2013-06-14 20:46 - 2013-06-14 20:46 - 00000000 ____D C:\Users\Alex\AppData\Local\FUJIFILM
2013-06-14 20:46 - 2010-02-10 14:26 - 00233472 ____A (FUJIFILM Corporation) C:\Windows\SysWOW64\RFCLauncher.exe
2013-06-14 20:46 - 2006-07-12 14:39 - 00208896 ____A (FUJI PHOTO FILM CO., LTD.) C:\Windows\SysWOW64\FFRafShellEx.dll
2013-06-14 20:34 - 2013-06-14 20:34 - 00037836 ____A C:\Windows\DirectX.log
2013-06-14 20:34 - 2013-06-14 20:34 - 00001190 ____A C:\Users\Public\Desktop\MyFinePix Studio.lnk
2013-06-14 20:34 - 2013-06-14 20:34 - 00000000 ____D C:\ProgramData\FUJIFILM
2013-06-14 20:25 - 2013-06-14 20:25 - 00000000 ____D C:\ProgramData\Apple Computer
2013-06-14 20:24 - 2013-06-14 20:24 - 00000000 ____D C:\Users\Alex\AppData\Local\Apple
2013-06-14 20:24 - 2013-06-14 20:24 - 00000000 ____D C:\ProgramData\Apple
2013-06-13 09:21 - 2013-06-13 09:21 - 01690803 ____A C:\Users\Alex\Downloads\gbb_presse_2.zip
2013-06-13 09:20 - 2013-06-13 09:20 - 01153053 ____A C:\Users\Alex\Downloads\gbb_presse_5.zip
2013-06-12 19:51 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-06-12 19:50 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-06-12 19:50 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-06-12 19:50 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-06-12 19:50 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\system32\certenc.dll
2013-06-12 19:50 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 19:50 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 19:50 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 19:50 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-06-12 19:50 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 19:50 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 19:50 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-06-12 19:50 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 19:50 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-06-12 19:50 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 19:50 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 19:50 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 19:50 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-06-12 19:50 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-06-11 21:35 - 2013-06-11 21:36 - 26919963 ____A C:\Users\Alex\Downloads\Facebook Insights Data Export - VfL Sportfreunde Lotte - 2013-06-11.xls

==================== One Month Modified Files and Folders =======

2013-07-11 01:22 - 2013-07-11 01:22 - 00000000 ____D C:\601465059afd4d4526
2013-07-11 01:19 - 2013-07-11 01:19 - 01776951 ____A (Farbar) C:\Users\Alex\Downloads\FRST64.exe
2013-07-11 01:19 - 2013-07-11 01:19 - 00000000 ____D C:\FRST
2013-07-11 01:19 - 2013-04-05 12:30 - 00001106 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-11 01:18 - 2013-07-11 01:18 - 00793536 ____A C:\Users\Alex\Downloads\ZipOpenerSetup.exe
2013-07-11 01:13 - 2011-07-18 22:31 - 78185248 ____A (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-11 01:10 - 2013-07-11 01:10 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Malwarebytes
2013-07-11 01:09 - 2013-07-11 01:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-11 01:09 - 2012-12-22 19:59 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-11 01:05 - 2011-05-16 16:04 - 00755150 ____A C:\Windows\system32\perfh007.dat
2013-07-11 01:05 - 2011-05-16 16:04 - 00172652 ____A C:\Windows\system32\perfc007.dat
2013-07-11 01:05 - 2009-07-14 07:13 - 01786802 ____A C:\Windows\system32\PerfStringBackup.INI
2013-07-11 01:04 - 2013-07-11 01:03 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Alex\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-11 01:04 - 2013-07-11 01:03 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Alex\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-07-11 00:58 - 2012-12-24 00:45 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 00:57 - 2009-07-14 06:45 - 00016944 ___AH C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-11 00:57 - 2009-07-14 06:45 - 00016944 ___AH C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-11 00:54 - 2012-12-22 18:00 - 01919777 ____A C:\Windows\WindowsUpdate.log
2013-07-11 00:53 - 2012-12-22 18:12 - 00000000 ____D C:\Users\Alex\Documents\Youcam
2013-07-11 00:51 - 2013-04-20 22:19 - 00000000 ___SD C:\Users\Alex\Google Drive
2013-07-11 00:49 - 2013-04-05 12:30 - 00001102 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-11 00:49 - 2012-12-22 18:09 - 00000000 ____D C:\Users\Alex
2013-07-11 00:48 - 2013-04-06 19:21 - 00004743 ____A C:\Windows\setupact.log
2013-07-11 00:48 - 2012-03-20 00:34 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-11 00:48 - 2011-04-12 10:28 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 00:48 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-11 00:47 - 2011-04-12 10:28 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-07-11 00:47 - 2011-04-12 10:28 - 00000000 ____D C:\Windows\ShellNew
2013-07-11 00:47 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 00:47 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2013-07-11 00:46 - 2013-02-06 16:12 - 00000000 ____D C:\Users\Alex\Desktop\SF Lotte
2013-07-11 00:46 - 2013-01-03 21:58 - 00000000 ____D C:\Users\Alex\AppData\Roaming\SoftGrid Client
2013-07-11 00:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-07-11 00:45 - 2013-01-03 22:03 - 00000000 __RHD C:\MSOCache
2013-07-11 00:37 - 2013-01-14 15:40 - 00511488 __ASH C:\Users\Alex\Desktop\Thumbs.db
2013-07-11 00:25 - 2013-07-11 00:25 - 00393515 ____A C:\Users\Alex\AppData\Roaming\2433f433
2013-07-11 00:25 - 2013-07-11 00:25 - 00393480 ____A C:\Users\Alex\AppData\Local\2433f433
2013-07-11 00:25 - 2013-07-11 00:25 - 00393476 ____A C:\ProgramData\2433f433
2013-07-10 23:43 - 2013-07-10 23:43 - 03425262 ____A C:\Users\Alex\Downloads\monti.wmv
2013-07-10 23:10 - 2013-07-10 23:10 - 00000000 ____D C:\Users\Alex\AppData\Local\{CDAED6EA-EF05-4273-92A8-B988E72A808E}
2013-07-10 00:13 - 2013-01-03 15:15 - 02310650 ____A C:\Users\Alex\Desktop\Gewerbe.mmb
2013-07-10 00:05 - 2013-01-15 16:21 - 00000000 ____D C:\Users\Alex\Desktop\backup_Gewerbe
2013-07-09 21:58 - 2013-07-09 21:58 - 00046080 ____A C:\Users\Alex\Downloads\zeitstrahl_mc.xls
2013-07-05 15:34 - 2013-07-05 15:34 - 00274373 ____A C:\Users\Alex\Documents\Unbenannt.wma
2013-07-03 22:01 - 2013-07-03 22:01 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Media Player Classic
2013-07-03 07:47 - 2013-01-03 21:57 - 01742704 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2013-07-02 23:50 - 2013-01-03 11:22 - 01412608 ____A C:\Users\Alex\Documents\Meine Konten.stb
2013-07-02 23:48 - 2013-01-15 18:20 - 00001566 ____A C:\Users\Alex\AppData\Roaming\MyMicroBalanceConfig.ini
2013-07-02 23:21 - 2013-07-02 23:21 - 00000000 ____D C:\Users\Alex\Documents\Deutsche Post AG
2013-07-02 23:21 - 2013-07-02 23:21 - 00000000 ____D C:\ProgramData\Deutsche Post AG
2013-07-02 23:21 - 2013-07-02 23:21 - 00000000 ____D C:\Program Files\Deutsche Post AG
2013-07-02 23:17 - 2013-07-02 23:17 - 03245409 ____A C:\Users\Alex\Downloads\ep_ms_word_2010_addin_v2_3_64bit.exe
2013-07-02 22:52 - 2013-05-14 09:04 - 00000432 ____A C:\Windows\BRWMARK.INI
2013-07-02 15:49 - 2013-01-30 17:59 - 00003922 ____A C:\Windows\System32\Tasks\User_Feed_Synchronization-{E54F740F-F5C3-4B29-8CA5-7D6D529AF5AD}
2013-07-01 09:34 - 2013-07-01 09:34 - 00000000 ____D C:\Users\Alex\AppData\Local\Microsoft Help
2013-07-01 09:34 - 2013-07-01 09:34 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-30 22:55 - 2013-03-21 22:34 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Audacity
2013-06-30 21:20 - 2013-06-30 21:20 - 00000423 ____A C:\Users\Alex\Documents\SteganosBanking2012Error.txt
2013-06-29 10:31 - 2013-04-07 13:43 - 00007748 ____A C:\Windows\PFRO.log
2013-06-28 18:12 - 2013-06-28 18:12 - 23768255 ____A (                                                            ) C:\Users\Alex\Downloads\K-Lite_Codec_Pack_990_Mega.exe
2013-06-28 17:53 - 2013-03-24 18:19 - 00000000 ____D C:\Users\Alex\Documents\Any Video Converter
2013-06-28 15:07 - 2013-06-28 15:05 - 00000000 ____D C:\Users\Alex\Documents\Freemake
2013-06-28 15:07 - 2013-06-28 15:05 - 00000000 ____D C:\ProgramData\Freemake
2013-06-28 15:05 - 2013-06-28 15:05 - 00001328 ____A C:\Users\Public\Desktop\Freemake Audio Converter.lnk
2013-06-28 15:05 - 2013-06-28 15:05 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-06-28 15:05 - 2013-04-06 22:19 - 00000000 ____D C:\Users\Alex\AppData\Roaming\OpenCandy
2013-06-28 15:03 - 2013-06-28 15:03 - 01264824 ____A (Ellora Assets Corporation                                   ) C:\Users\Alex\Downloads\FreemakeAudioConverterSetup.exe
2013-06-28 14:56 - 2013-06-28 14:45 - 00000000 ____D C:\Users\Alex\AppData\Roaming\avidemux
2013-06-28 14:42 - 2013-06-28 14:42 - 12977165 ____A C:\Users\Alex\Downloads\avidemux_2.6.3_32bits.exe
2013-06-28 14:33 - 2013-06-28 14:33 - 00000000 ____D C:\Users\Alex\AppData\Local\{D90D2822-2C49-4EDC-939A-E6A2FCE99A5B}
2013-06-26 21:48 - 2013-06-26 21:48 - 00000000 ____D C:\Users\Alex\AppData\Local\{A5F2B2AE-C423-4C9A-945C-03CF1F2B8211}
2013-06-26 17:05 - 2013-01-03 15:13 - 00000000 ____D C:\Users\Alex\Desktop\Ebay Bilder
2013-06-25 10:27 - 2013-05-07 20:27 - 00083672 ____A (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-06-22 21:38 - 2013-06-22 21:38 - 00000000 ____D C:\Users\Alex\Documents\Avatar
2013-06-22 21:33 - 2012-03-20 17:24 - 00000000 ____D C:\ProgramData\CyberLink
2013-06-22 21:32 - 2013-06-22 21:32 - 00000000 ____D C:\Users\Alex\AppData\Roaming\CyberLink
2013-06-22 21:31 - 2013-06-22 21:31 - 00000000 ____D C:\Users\Alex\AppData\Local\{93976971-496C-4469-91E7-7D8208CBF866}
2013-06-21 17:12 - 2013-04-05 12:30 - 00002187 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-06-19 23:32 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-19 21:03 - 2013-06-19 21:03 - 00002091 ____A C:\Users\Public\Desktop\Radio.fx.LNK
2013-06-19 21:03 - 2013-06-19 21:03 - 00002077 ____A C:\Users\Public\Desktop\djukebox.LNK
2013-06-19 21:03 - 2012-12-23 13:29 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Tobit
2013-06-19 21:02 - 2013-06-19 21:01 - 17615456 ____A (Tobit.Software) C:\Users\Alex\Downloads\radio-fx (1).exe
2013-06-15 12:44 - 2013-06-15 12:44 - 00000000 ____D C:\Users\Alex\AppData\Local\{D147665A-6E74-4B2E-BE80-FA8F513EC956}
2013-06-15 12:44 - 2013-06-15 12:44 - 00000000 ____D C:\Users\Alex\AppData\Local\{256DFA64-9487-4BDE-AD4D-F956536D26F9}
2013-06-14 20:53 - 2012-12-22 18:10 - 00096944 ____A C:\Users\Alex\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-14 20:46 - 2013-06-14 20:46 - 00000000 ____D C:\Users\Alex\AppData\Local\FUJIFILM
2013-06-14 20:34 - 2013-06-14 20:34 - 00037836 ____A C:\Windows\DirectX.log
2013-06-14 20:34 - 2013-06-14 20:34 - 00001190 ____A C:\Users\Public\Desktop\MyFinePix Studio.lnk
2013-06-14 20:34 - 2013-06-14 20:34 - 00000000 ____D C:\ProgramData\FUJIFILM
2013-06-14 20:25 - 2013-06-14 20:25 - 00000000 ____D C:\ProgramData\Apple Computer
2013-06-14 20:24 - 2013-06-14 20:24 - 00000000 ____D C:\Users\Alex\AppData\Local\Apple
2013-06-14 20:24 - 2013-06-14 20:24 - 00000000 ____D C:\ProgramData\Apple
2013-06-13 09:21 - 2013-06-13 09:21 - 01690803 ____A C:\Users\Alex\Downloads\gbb_presse_2.zip
2013-06-13 09:20 - 2013-06-13 09:20 - 01153053 ____A C:\Users\Alex\Downloads\gbb_presse_5.zip
2013-06-11 22:09 - 2012-12-22 19:59 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-11 22:09 - 2012-12-22 19:59 - 00003822 ____A C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-06-11 22:09 - 2011-12-01 23:26 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-11 21:36 - 2013-06-11 21:35 - 26919963 ____A C:\Users\Alex\Downloads\Facebook Insights Data Export - VfL Sportfreunde Lotte - 2013-06-11.xls
2013-06-11 20:43 - 2013-01-23 23:04 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Origin
2013-06-11 20:43 - 2013-01-23 23:02 - 00000000 ____D C:\ProgramData\Origin
2013-06-11 20:40 - 2013-01-23 23:04 - 00000000 ____D C:\Users\Alex\AppData\Local\Origin

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-25 11:31

==================== End Of Log ============================

Danke schonmal im vorraus.

 

Themen zu GVU Trojaner entfernen
administrator, adobe, antivir, avg, avira, desktop, ebay, entfernen, explorer, farbar, farbar recovery scan tool, flash player, frst.txt, google, home, homepage, launch, nvidia, opera, plug-in, realtek, registry, rundll, server, services.exe, svchost.exe, trojaner, win32/moure.a, winlogon.exe


« GVU Trojaner / Bundesamt für Sicherheit in der Informationstechnik // XP | Sehr viele Werbeschaltungen und Pop ups (z.B. von https://www.onlineaway.net) »


Ähnliche Themen: GVU Trojaner entfernen


  1. Babylon toolbar entfernen, BrowserCompanion entfernen, DealPly entfernen, GinyasBrowserCompanions entfernen
    Log-Analyse und Auswertung - 17.12.2014 (9)
  2. GVU Trojaner entfernen
    Log-Analyse und Auswertung - 08.07.2013 (9)
  3. GVU Trojaner entfernen
    Plagegeister aller Art und deren Bekämpfung - 02.01.2013 (4)
  4. GVU-Trojaner. Wie entfernen?
    Plagegeister aller Art und deren Bekämpfung - 25.11.2012 (2)
  5. GUV Trojaner 2.07 entfernen
    Plagegeister aller Art und deren Bekämpfung - 20.10.2012 (6)
  6. Windows Uptdate Trojaner "Neuer Verschlüsselung Trojaner" Verschlüsseung entfernen, WIE?
    Plagegeister aller Art und deren Bekämpfung - 19.10.2012 (3)
  7. Trojaner Generic-FRAX!EF3DA767ACD3 Trojan entdeckt bei Versuch unbekannten Trojaner zu entfernen
    Plagegeister aller Art und deren Bekämpfung - 04.08.2012 (3)
  8. Trojaner Generic-FRAX!EF3DA767ACD3 Trojan entdeckt bei Versuch unbekannten Trojaner zu entfernen
    Mülltonne - 04.08.2012 (1)
  9. Live Security Platinum-Trojaner, Verschlüsselungs-Trojaner entfernen
    Plagegeister aller Art und deren Bekämpfung - 16.07.2012 (1)
  10. BKA Trojaner entfernen
    Plagegeister aller Art und deren Bekämpfung - 08.06.2012 (5)
  11. GVU-Trojaner v2.04 entfernen (Windows XP) Trojaner mit Urheberrechtsverletzung
    Plagegeister aller Art und deren Bekämpfung - 31.05.2012 (1)
  12. wie BKA trojaner entfernen?!
    Plagegeister aller Art und deren Bekämpfung - 15.08.2011 (2)
  13. BKA-Trojaner entfernen
    Log-Analyse und Auswertung - 23.07.2011 (6)
  14. Trojaner Kozy - desktop schwarz daten weg - wie kann ich den trojaner entfernen?
    Log-Analyse und Auswertung - 30.04.2011 (1)
  15. Trojaner TR/crypt.xpack.gen u. win32.dnschanger entfernen entfernen
    Plagegeister aller Art und deren Bekämpfung - 03.02.2009 (14)
  16. Trojaner entfernen
    Plagegeister aller Art und deren Bekämpfung - 14.10.2008 (1)
  17. Trojaner entfernen...
    Plagegeister aller Art und deren Bekämpfung - 10.01.2007 (3)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema GVU Trojaner entfernen - Mich hat nun auch der GVU Trojaner erwischt. Bisher habe ich eine Systemwiederherstellung durchgeführt. Nun habe ich auch schon FRST runtergeladen und den scan durchlaufen lassen. Code: Alles auswählen Aufklappen - GVU Trojaner entfernen...
Archiv
Du betrachtest: GVU Trojaner entfernen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131