Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: w32 zero access entfernen ?

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 16.07.2013, 10:44   #1
Tommytom77
 
w32 zero access entfernen ? - Standard

w32 zero access entfernen ?



hallo, mein computer ist mit zero access infiziert. Mehrere Scanner werden mal fündig , mal nicht. Sophos zu Bsp. habe ich 2 mal hintereinander durchlaufen lassen, beim ersten mal hat er zero.access gefunden ( konte aber nicht entfernen) beim zweiten mal : no threats found.
tdss Killer von Kaspersky war fündig, cure ausgeführt, keine Problemmeldung, dachte das wars,
aber immer noch zero.access Meldung von Norten 360, manuelles entfernen erforderlich.
Dann habe ich Norton Power eraser laufen lassen, der wurde auch fündig und behob angeblich das Problem aber der comuter spielt weiter verrückt , Firefox stürzt öfter ab , besonders beim streaming, Programme öffnen sich ohne Befehl , öfter Bluescreen, windows explorer stürzt öfters ab und startet neu , stürzt direkt wieder ab, startet neu,........... .

Ich habe den Ratschlag befolgt , der hier schon einem anderen Mitglied gemacht wurde
und den zero.access remover scannen lassen , der hat nichts gefunden, das logfile hänge ich hier an.

helft mir bitte
Vielen Dank

Alt 16.07.2013, 10:46   #2
schrauber
/// the machine
/// TB-Ausbilder
 

w32 zero access entfernen ? - Standard

w32 zero access entfernen ?



hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________

Alt 16.07.2013, 12:41   #3
Tommytom77
 
w32 zero access entfernen ? - Standard

w32 zero access entfernen ?



Hallo,
das ging ja flott, super. Hier die beiden logs
zum hier herein posten zu lang, zum hochladen zu groß , also gezipt als Anhang

Danke
MFG
Tom
__________________

Alt 16.07.2013, 13:30   #4
schrauber
/// the machine
/// TB-Ausbilder
 

w32 zero access entfernen ? - Standard

w32 zero access entfernen ?



hi,

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
DeleteJunctionsIndirectory: C:\Program Files\Windows Defender
ZeroAccess:
C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}
C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}\L
C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}\U
C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}\L\00000004.@
C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}\L\76603ac3
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.




Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 16.07.2013, 15:14   #5
Tommytom77
 
w32 zero access entfernen ? - Standard

w32 zero access entfernen ?



Hallo,

hier die Fixlog.txt :


Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-07-2013 02
Ran by Thomas at 2013-07-16 15:32:17 Run:1
Running from C:\Users\Thomas\Desktop\Neuer Ordner (2)
Boot Mode: Normal
==============================================

"C:\Program Files\Windows Defender" => Deleting reparse point and unlocking started.
"C:\Program Files\Windows Defender\de-DE" => Deleting reparse point and unlocking done.
"C:\Program Files\Windows Defender\MpAsDesc.dll" => Deleting reparse point and unlocking done.
"C:\Program Files\Windows Defender\MpClient.dll" => Deleting reparse point and unlocking done.
"C:\Program Files\Windows Defender\MpCmdRun.exe" => Deleting reparse point and unlocking done.
"C:\Program Files\Windows Defender\MpCommu.dll" => Deleting reparse point and unlocking done.
"C:\Program Files\Windows Defender\MpEvMsg.dll" => Deleting reparse point and unlocking done.
"C:\Program Files\Windows Defender\MpOAV.dll" => Deleting reparse point and unlocking done.
"C:\Program Files\Windows Defender\MpRTP.dll" => Deleting reparse point and unlocking done.
"C:\Program Files\Windows Defender\MpSvc.dll" => Deleting reparse point and unlocking done.
"C:\Program Files\Windows Defender\MSASCui.exe" => Deleting reparse point and unlocking done.
"C:\Program Files\Windows Defender\MsMpCom.dll" => Deleting reparse point and unlocking done.
"C:\Program Files\Windows Defender\MsMpLics.dll" => Deleting reparse point and unlocking done.
"C:\Program Files\Windows Defender\MsMpRes.dll" => Deleting reparse point and unlocking done.
"C:\Program Files\Windows Defender" => Deleting reparse point and unlocking completed.
C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4} => Moved successfully.
"C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}\L" => File/Directory not found.
"C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}\U" => File/Directory not found.
"C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}\L\00000004.@" => File/Directory not found.
"C:\Windows\Installer\{227bd07f-44ab-2422-ac6d-5833d0b07ff4}\L\76603a" => File/Directory not found.

==== End of Fixlog ====
         
und hier die C:\Combofix.txt :


Code:
ATTFilter
ComboFix 13-07-15.01 - Thomas 16.07.2013  15:50:12.1.4 - x64
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.3838.2537 [GMT 2:00]
ausgeführt von:: c:\users\Thomas\Desktop\ComboFix.exe
AV: Lavasoft Ad-Aware *Disabled/Updated* {E0D97DD4-42BA-B3F2-A5A7-22E9ACE81FC7}
AV: Norton 360 Online *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Lavasoft Ad-Aware *Disabled* {D8E2FCF1-08D5-B2AA-8EF8-8BDC523B58BC}
FW: Norton 360 Online *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Lavasoft Ad-Aware *Disabled/Updated* {5BB89C30-6480-BC7C-9F17-199BD76F557A}
SP: Norton 360 Online *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Spybot - Search and Destroy *Enabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\sayfEE osyAve
c:\programdata\Microsoft\Windows\Start Menu\Programs\sayfEE osyAve\sayfEE osyAve.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\sayfEE osyAve\Uninstall.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\SeaariCh-NNewTAib
c:\programdata\Microsoft\Windows\Start Menu\Programs\SeaariCh-NNewTAib\SeaariCh-NNewTAib.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\SeaariCh-NNewTAib\Uninstall.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\SEaaroch-NaewTaib
c:\programdata\Microsoft\Windows\Start Menu\Programs\SEaaroch-NaewTaib\SEaaroch-NaewTaib.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\SEaaroch-NaewTaib\Uninstall.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\SEEarchh-iNewTab
c:\programdata\Microsoft\Windows\Start Menu\Programs\SEEarchh-iNewTab\SEEarchh-iNewTab.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\SEEarchh-iNewTab\Uninstall.lnk
c:\programdata\sayfEE osyAve
c:\programdata\sayfEE osyAve\51d9a5eeccb66.tlb
c:\programdata\sayfEE osyAve\settings.ini
c:\programdata\sayfEE osyAve\uninstall.exe
c:\programdata\SeaariCh-NNewTAib
c:\programdata\SeaariCh-NNewTAib\51da8df6242e5.tlb
c:\programdata\SeaariCh-NNewTAib\settings.ini
c:\programdata\SeaariCh-NNewTAib\uninstall.exe
c:\programdata\SEaaroch-NaewTaib
c:\programdata\SEaaroch-NaewTaib\51d42a8a0242c.tlb
c:\programdata\SEaaroch-NaewTaib\data\SEaaroch-NaewTaib.dat
c:\programdata\SEaaroch-NaewTaib\settings.ini
c:\programdata\SEaaroch-NaewTaib\uninstall.exe
c:\programdata\SEEarchh-iNewTab
c:\programdata\SEEarchh-iNewTab\51d9a609f0f26.tlb
c:\programdata\SEEarchh-iNewTab\settings.ini
c:\programdata\SEEarchh-iNewTab\uninstall.exe
c:\programdata\ssaafe  saave
c:\programdata\ssaafe  saave\51da8dcbe8d32.tlb
c:\programdata\ssaafe  saave\settings.ini
c:\programdata\suaafEE ssave
c:\programdata\suaafEE ssave\51d42a18c78d8.tlb
c:\programdata\suaafEE ssave\settings.ini
c:\users\Thomas\AppData\Roaming\337
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\ebase.dll
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\image\default\app_close.png
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\image\default\app_max.png
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\image\default\app_min.png
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\image\default\app_restore.png
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\image\default\wallpaper_resource.xml
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\image\default\window.png
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\language\en_us\wallpaper_lang.ini
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\language\es_es\wallpaper_lang.ini
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\language\pt_br\wallpaper_lang.ini
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\language\tr_tr\wallpaper_lang.ini
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\language\zh_tw\wallpaper_lang.ini
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\layout\default\dp_appwnd.xml
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\layout\default\msgbox.xml
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\libpng.dll
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\main
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\msvcp100.dll
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\msvcr100.dll
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\ouilibnl.dll
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\plusapp.exe
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\style\wallpaper_style.xml
c:\users\Thomas\AppData\Roaming\337\337 Wallpaper\TrayDownloader.exe
c:\windows\wininit.ini
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-06-16 bis 2013-07-16  ))))))))))))))))))))))))))))))
.
.
2013-07-16 13:56 . 2013-07-16 13:56	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-07-16 11:02 . 2013-07-16 13:32	--------	d-----w-	C:\FRST
2013-07-16 08:51 . 2013-07-16 08:51	--------	d-----w-	c:\users\Thomas\AppData\Roaming\QuickScan
2013-07-15 19:09 . 2013-07-15 19:09	--------	d-----w-	c:\users\Thomas\AppData\Roaming\ParetoLogic
2013-07-15 19:09 . 2013-07-15 19:09	--------	d-----w-	c:\users\Thomas\AppData\Roaming\DriverCure
2013-07-15 19:08 . 2013-07-16 08:28	--------	d-----w-	c:\programdata\ParetoLogic
2013-07-15 16:19 . 2013-07-15 16:19	--------	d-----w-	c:\users\Thomas\AppData\Local\Freemium
2013-07-15 16:04 . 2013-05-13 03:52	23624	----a-w-	c:\windows\Launcher.exe
2013-07-15 16:03 . 2013-07-15 16:04	--------	d-----w-	c:\program files (x86)\SoftwareUpdater
2013-07-15 16:03 . 2013-07-15 16:03	--------	d-----w-	c:\programdata\FreeSystemUtilities
2013-07-15 16:03 . 2013-07-15 16:03	--------	d-----w-	c:\program files (x86)\Covus Freemium
2013-07-15 16:03 . 2013-07-15 16:03	--------	d-----w-	c:\programdata\Package Cache
2013-07-15 16:01 . 2013-07-15 16:01	--------	d-----w-	c:\users\Thomas\AppData\Roaming\GlarySoft
2013-07-15 15:59 . 2013-07-15 15:59	--------	d-----w-	c:\program files (x86)\Glarysoft
2013-07-13 17:47 . 2013-07-13 17:47	--------	d-----w-	c:\program files (x86)\MSECache
2013-07-12 01:04 . 2013-06-12 02:28	775256	----a-w-	c:\program files\Internet Explorer\iexplore.exe
2013-07-10 22:19 . 2013-07-10 22:19	--------	d-----w-	C:\4a4b3f6258420da740c754
2013-07-10 18:40 . 2013-06-04 06:00	624128	----a-w-	c:\windows\system32\qedit.dll
2013-07-10 18:40 . 2013-06-04 04:53	509440	----a-w-	c:\windows\SysWow64\qedit.dll
2013-07-10 18:40 . 2013-05-06 06:03	1887744	----a-w-	c:\windows\system32\WMVDECOD.DLL
2013-07-10 18:40 . 2013-05-06 04:56	1620480	----a-w-	c:\windows\SysWow64\WMVDECOD.DLL
2013-07-10 18:39 . 2013-06-05 03:34	3153920	----a-w-	c:\windows\system32\win32k.sys
2013-07-10 18:39 . 2013-04-10 05:48	1732608	----a-w-	c:\program files\Windows Journal\NBDoc.DLL
2013-07-10 18:39 . 2013-04-10 05:46	1402880	----a-w-	c:\program files\Windows Journal\JNWDRV.dll
2013-07-10 18:39 . 2013-04-10 05:46	1393152	----a-w-	c:\program files\Windows Journal\JNTFiltr.dll
2013-07-10 18:39 . 2013-04-10 05:46	1367040	----a-w-	c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-10 18:39 . 2013-04-10 05:03	936448	----a-w-	c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2013-07-10 18:39 . 2013-04-09 23:34	1247744	----a-w-	c:\windows\SysWow64\DWrite.dll
2013-07-10 18:39 . 2013-04-02 22:51	1643520	----a-w-	c:\windows\system32\DWrite.dll
2013-07-08 17:58 . 2013-07-08 17:58	--------	d-----w-	c:\users\Thomas\AppData\Roaming\Dealply
2013-07-08 09:15 . 2013-07-08 09:15	--------	d-----w-	c:\program files (x86)\Common Files\Symantec Shared
2013-07-08 08:50 . 2013-07-09 11:11	177312	----a-w-	c:\windows\system32\drivers\SYMEVENT64x86.SYS
2013-07-08 08:50 . 2013-07-08 08:50	--------	d-----w-	c:\program files\Symantec
2013-07-08 08:50 . 2013-07-08 08:50	--------	d-----w-	c:\program files\Common Files\Symantec Shared
2013-07-08 08:49 . 2013-07-09 15:08	--------	d-----w-	c:\windows\system32\drivers\N360x64
2013-07-08 08:49 . 2013-07-08 08:49	--------	d-----w-	c:\program files (x86)\Norton 360
2013-07-08 08:49 . 2013-07-08 08:49	--------	d-----w-	c:\program files (x86)\NortonInstaller
2013-07-08 06:32 . 2013-07-15 16:22	--------	d-----w-	c:\users\Thomas\AppData\Local\ElevatedDiagnostics
2013-07-08 05:45 . 2013-07-16 06:06	--------	d-----w-	c:\users\Thomas\AppData\Local\NPE
2013-07-08 05:34 . 2013-07-08 05:34	--------	d-----w-	C:\TDSSKiller_Quarantine
2013-07-07 19:34 . 2013-07-07 19:34	--------	d-----w-	c:\programdata\Sophos
2013-07-07 19:33 . 2013-07-07 19:33	73728	----a-r-	c:\users\Thomas\AppData\Roaming\Microsoft\Installer\{B829E117-D072-41EA-9606-9826A38D34C1}\SVRTgui.exe1_810EDD9E2F0A4E2BACF86673C38D9F48.exe
2013-07-07 19:33 . 2013-07-07 19:33	73728	----a-r-	c:\users\Thomas\AppData\Roaming\Microsoft\Installer\{B829E117-D072-41EA-9606-9826A38D34C1}\SVRTgui.exe_810EDD9E2F0A4E2BACF86673C38D9F48.exe
2013-07-07 19:33 . 2013-07-07 19:33	73728	----a-r-	c:\users\Thomas\AppData\Roaming\Microsoft\Installer\{B829E117-D072-41EA-9606-9826A38D34C1}\ARPPRODUCTICON.exe
2013-07-07 19:33 . 2013-07-07 19:33	--------	d-----w-	c:\program files (x86)\Sophos
2013-07-05 16:25 . 2013-07-05 16:25	--------	d-----w-	c:\users\Thomas\AppData\Local\FLT
2013-07-05 15:03 . 2013-07-05 15:03	--------	d-----w-	c:\program files (x86)\7-Zip
2013-07-04 08:27 . 2013-07-04 08:27	--------	d-----w-	c:\program files (x86)\Mario Forever
2013-07-04 07:34 . 2013-07-04 07:34	--------	d-----w-	c:\users\Thomas\AppData\Roaming\YourFileDownloader
2013-07-04 06:06 . 2013-07-04 06:06	--------	d-----w-	c:\programdata\RELOADED
2013-07-04 05:36 . 2013-07-04 08:57	--------	d-----w-	C:\SMBX
2013-07-03 17:46 . 2013-07-03 17:42	62976	----a-w-	c:\windows\system32\steam_api.dll
2013-07-03 17:01 . 2013-07-03 17:01	--------	d-----w-	c:\users\Thomas\AppData\Roaming\Namco
2013-07-03 15:25 . 2013-07-03 15:25	--------	d-----w-	c:\program files (x86)\Capcom
2013-07-03 14:56 . 2013-07-04 11:27	--------	d-----w-	c:\users\Thomas\AppData\Roaming\dp3d
2013-07-03 12:59 . 2013-07-03 12:59	--------	d-----w-	c:\users\Thomas\AppData\Roaming\EZDownloader
2013-07-03 12:50 . 2013-07-15 19:54	--------	d-----w-	c:\programdata\InstallMate
2013-07-03 12:11 . 2013-07-03 12:11	--------	d-----w-	c:\windows\SysWow64\xlive
2013-07-03 12:10 . 2013-07-05 13:55	--------	d-----w-	c:\program files (x86)\Microsoft Games for Windows - LIVE
2013-07-03 11:35 . 2013-07-03 11:35	--------	d-----w-	c:\programdata\Logs
2013-07-03 10:28 . 2013-07-16 13:35	--------	d-----w-	c:\programdata\ManiaPlanet
2013-07-03 10:28 . 2013-07-03 14:31	--------	d-----w-	c:\program files (x86)\ManiaPlanet
2013-07-03 09:30 . 2013-07-03 09:30	--------	d-----w-	c:\users\Thomas\AppData\Local\.inapptracking
2013-07-03 09:06 . 2013-07-03 09:09	--------	d-----w-	c:\program files (x86)\Common Files\Steam
2013-07-02 06:02 . 2007-10-22 01:37	17928	----a-w-	c:\windows\SysWow64\X3DAudio1_2.dll
2013-07-02 05:20 . 2013-07-08 09:46	--------	d-----w-	C:\Spiele
2013-07-01 17:30 . 2013-07-02 19:42	--------	d-----w-	c:\program files (x86)\Emsisoft Anti-Malware
2013-07-01 16:45 . 2013-07-01 16:45	--------	d-----w-	c:\users\Thomas\AppData\Roaming\Malwarebytes
2013-07-01 16:45 . 2013-07-01 16:45	--------	d-----w-	c:\programdata\Malwarebytes
2013-07-01 15:31 . 2013-04-11 14:12	19392	----a-w-	c:\windows\system32\roboot64.exe
2013-07-01 15:31 . 2013-07-02 19:46	--------	d-----w-	c:\users\Thomas\AppData\Roaming\systweak
2013-07-01 15:31 . 2012-12-10 09:04	81920	----a-w-	c:\windows\eSellerateControl350.dll
2013-07-01 15:31 . 2012-12-10 09:04	356352	----a-w-	c:\windows\eSellerateEngine.dll
2013-07-01 15:31 . 2009-07-23 16:32	274432	----a-w-	c:\windows\SysWow64\ssleay32.dll
2013-07-01 15:31 . 2009-07-23 16:32	1122304	----a-w-	c:\windows\SysWow64\libeay32.dll
2013-07-01 15:31 . 2013-07-02 19:41	--------	d-----w-	c:\program files (x86)\Qvo 6 Virus Removal Tool
2013-07-01 13:36 . 2013-07-01 13:36	--------	d-----w-	c:\users\Thomas\AppData\Local\AlawarWrapper
2013-07-01 13:35 . 2013-07-01 13:39	--------	d-----w-	c:\program files (x86)\Alawar
2013-07-01 11:53 . 2013-07-01 13:40	--------	d-----w-	c:\program files (x86)\data
2013-07-01 11:53 . 2013-07-01 11:53	75915	----a-w-	c:\program files (x86)\Uninstal.exe
2013-07-01 11:17 . 2013-07-01 11:17	--------	d-----w-	c:\users\Thomas\AppData\Roaming\LavasoftStatistics
2013-07-01 11:17 . 2013-07-01 11:17	--------	d-----w-	c:\programdata\Ad-Aware Antivirus
2013-07-01 11:15 . 2013-07-08 06:18	--------	d-----w-	c:\program files (x86)\Ad-Aware Antivirus
2013-07-01 11:15 . 2013-07-01 11:15	--------	d-----w-	c:\programdata\Lavasoft
2013-07-01 11:15 . 2013-07-01 11:15	--------	d-----w-	c:\programdata\Downloaded Installations
2013-07-01 11:15 . 2013-07-01 11:15	--------	d-----w-	c:\users\Thomas\AppData\Local\adawarebp
2013-07-01 11:15 . 2013-07-01 11:15	--------	d-----w-	c:\programdata\blekko toolbars
2013-07-01 11:15 . 2013-07-01 11:15	--------	d-----w-	c:\programdata\Ad-Aware Browsing Protection
2013-07-01 11:14 . 2013-07-01 11:14	--------	d-----w-	c:\program files (x86)\Toolbar Cleaner
2013-07-01 11:14 . 2013-07-01 11:15	--------	d-----w-	c:\program files (x86)\adawaretb
2013-07-01 11:12 . 2013-07-01 11:12	47496	----a-w-	c:\windows\system32\sbbd.exe
2013-07-01 11:12 . 2013-07-01 11:12	14456	----a-w-	c:\windows\system32\drivers\gfibto.sys
2013-07-01 11:12 . 2013-07-01 15:09	--------	d-----w-	c:\users\Thomas\AppData\Roaming\Ad-Aware Antivirus
2013-07-01 10:13 . 2013-07-01 10:29	--------	d-----w-	c:\programdata\Spybot - Search & Destroy
2013-07-01 10:12 . 2009-01-25 11:14	17272	----a-w-	c:\windows\system32\sdnclean64.exe
2013-07-01 10:12 . 2013-07-01 10:30	--------	d-----w-	c:\program files (x86)\Spybot - Search & Destroy 2
2013-07-01 09:58 . 2013-07-01 09:58	--------	d-----w-	c:\program files\Enigma Software Group
2013-07-01 09:57 . 2013-07-01 10:28	--------	d-----w-	c:\windows\BCD5545077AC4347B24F654B1189F8D4.TMP
2013-07-01 09:57 . 2013-07-01 09:57	--------	d-----w-	c:\program files (x86)\Common Files\Wise Installation Wizard
2013-07-01 05:36 . 2013-07-01 05:38	--------	d-----w-	c:\users\Thomas\AppData\Roaming\DreamDale
2013-07-01 05:36 . 2013-07-01 05:37	--------	d-----w-	c:\users\Thomas\AppData\Roaming\SmashFrenzy4
2013-07-01 05:35 . 2013-07-01 07:16	--------	d-----w-	c:\program files (x86)\CasualGameBox
2013-07-01 04:55 . 2013-07-01 09:43	--------	d-----w-	c:\users\Thomas\AppData\Local\PlayFree Browser
2013-07-01 04:55 . 2013-07-01 10:30	--------	d-----w-	c:\users\Thomas\AppData\Local\MPCBrowser
2013-06-30 20:30 . 2013-07-01 11:44	--------	d-----w-	c:\program files (x86)\Strike Ball 2
2013-06-30 19:57 . 2013-07-01 13:15	--------	d-----w-	c:\program files (x86)\Strike Ball
2013-06-30 19:11 . 2013-07-01 13:36	--------	d-----w-	c:\programdata\AlawarWrapper
2013-06-30 18:27 . 2013-06-30 18:27	--------	d-----w-	c:\programdata\Big Fish Games
2013-06-30 18:27 . 2013-06-30 18:27	--------	d-----w-	c:\program files (x86)\bfgclient
2013-06-30 18:25 . 2013-06-30 21:06	--------	d-----w-	C:\BigFishGamesCache
2013-06-30 17:56 . 2013-07-01 07:17	--------	d-----w-	c:\program files (x86)\MyPlayCity.com
2013-06-30 16:03 . 2013-06-30 16:03	--------	d-----w-	c:\users\Thomas\AppData\Roaming\eIntaller
2013-06-30 16:03 . 2013-06-30 16:03	--------	d-----w-	c:\program files (x86)\Gophoto.it
2013-06-29 18:33 . 2013-06-29 18:33	--------	d-----w-	c:\programdata\Browser Manager
2013-06-29 17:53 . 2007-04-16 08:56	43520	----a-w-	c:\windows\system32\tmffbdrv.dll
2013-06-29 17:53 . 2007-04-16 08:55	156160	----a-w-	c:\windows\system32\tmffbcpl.dll
2013-06-29 17:53 . 2007-01-20 02:44	208304	----a-w-	c:\windows\system32\isrt.dll
2013-06-29 17:53 . 2006-05-16 13:07	99840	----a-w-	c:\windows\system32\_IsRes.dll
2013-06-29 17:53 . 2005-09-09 09:16	135168	----a-w-	c:\windows\system32\GUStrLib.dll
2013-06-29 17:53 . 2005-01-28 10:49	106496	----a-w-	c:\windows\SysWow64\GUStrLib.dll
2013-06-29 17:53 . 2013-06-29 17:53	--------	d-----w-	c:\program files (x86)\Thrustmaster
2013-06-29 17:53 . 2007-04-16 08:55	34304	----a-w-	c:\windows\SysWow64\tmffbdrv.dll
2013-06-29 17:53 . 2007-04-16 08:55	135168	----a-w-	c:\windows\SysWow64\tmffbcpl.dll
2013-06-29 17:53 . 2003-02-21 03:42	348160	----a-w-	c:\windows\SysWow64\msvcr71.dll
2013-06-29 17:52 . 2013-06-29 17:52	--------	d-----w-	c:\users\Thomas\AppData\Roaming\InstallShield
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-16 05:58 . 2013-05-14 14:06	1600512	----a-w-	c:\windows\system32\VSSVC.exe
2013-07-08 05:57 . 2009-07-13 23:19	328704	----a-w-	c:\windows\system32\services.exe
2013-07-05 14:49 . 2009-08-18 10:49	564632	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\wlidui.dll
2013-07-05 14:49 . 2009-08-18 09:24	22240	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-07-04 06:27 . 2013-01-07 10:00	535008	----a-w-	c:\windows\SysWow64\msvcp110.dll
2013-07-04 06:26 . 2013-05-24 08:11	875472	----a-w-	c:\windows\SysWow64\msvcr110.dll
2013-07-03 17:50 . 2013-04-02 09:27	105808	----a-w-	c:\windows\SysWow64\steam_api.dll
2013-06-29 12:25 . 2011-02-19 21:03	421032	----a-w-	c:\windows\SysWow64\msvcp100.dll
2013-06-24 16:53 . 2011-02-18 22:40	773712	----a-w-	c:\windows\SysWow64\msvcr100.dll
2013-06-12 17:56 . 2013-04-17 20:16	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-12 17:56 . 2013-04-17 20:16	692104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-12 17:56 . 2013-06-12 17:56	9089416	----a-w-	c:\windows\SysWow64\FlashPlayerInstaller.exe
2013-05-15 07:55 . 2013-05-15 07:55	1054720	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2013-05-15 07:55 . 2013-05-15 07:55	73728	----a-w-	c:\windows\SysWow64\SetIEInstalledDate.exe
2013-05-15 07:55 . 2013-05-15 07:55	719360	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2013-05-15 07:55 . 2013-05-15 07:55	61952	----a-w-	c:\windows\SysWow64\tdc.ocx
2013-05-15 07:55 . 2013-05-15 07:55	523264	----a-w-	c:\windows\SysWow64\vbscript.dll
2013-05-15 07:55 . 2013-05-15 07:55	48640	----a-w-	c:\windows\SysWow64\mshtmler.dll
2013-05-15 07:55 . 2013-05-15 07:55	38400	----a-w-	c:\windows\SysWow64\imgutil.dll
2013-05-15 07:55 . 2013-05-15 07:55	361984	----a-w-	c:\windows\SysWow64\html.iec
2013-05-15 07:55 . 2013-05-15 07:55	23040	----a-w-	c:\windows\SysWow64\licmgr10.dll
2013-05-15 07:55 . 2013-05-15 07:55	226304	----a-w-	c:\windows\system32\elshyph.dll
2013-05-15 07:55 . 2013-05-15 07:55	216064	----a-w-	c:\windows\system32\msls31.dll
2013-05-15 07:55 . 2013-05-15 07:55	197120	----a-w-	c:\windows\system32\msrating.dll
2013-05-15 07:55 . 2013-05-15 07:55	185344	----a-w-	c:\windows\SysWow64\elshyph.dll
2013-05-15 07:55 . 2013-05-15 07:55	158720	----a-w-	c:\windows\SysWow64\msls31.dll
2013-05-15 07:55 . 2013-05-15 07:55	150528	----a-w-	c:\windows\SysWow64\iexpress.exe
2013-05-15 07:55 . 2013-05-15 07:55	1441280	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2013-05-15 07:55 . 2013-05-15 07:55	138752	----a-w-	c:\windows\SysWow64\wextract.exe
2013-05-15 07:55 . 2013-05-15 07:55	137216	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2013-05-15 07:55 . 2013-05-15 07:55	12800	----a-w-	c:\windows\SysWow64\mshta.exe
2013-05-15 07:55 . 2013-05-15 07:55	110592	----a-w-	c:\windows\SysWow64\IEAdvpack.dll
2013-05-15 07:55 . 2013-05-15 07:55	97280	----a-w-	c:\windows\system32\mshtmled.dll
2013-05-15 07:55 . 2013-05-15 07:55	92160	----a-w-	c:\windows\system32\SetIEInstalledDate.exe
2013-05-15 07:55 . 2013-05-15 07:55	905728	----a-w-	c:\windows\system32\mshtmlmedia.dll
2013-05-15 07:55 . 2013-05-15 07:55	81408	----a-w-	c:\windows\system32\icardie.dll
2013-05-15 07:55 . 2013-05-15 07:55	77312	----a-w-	c:\windows\system32\tdc.ocx
2013-05-15 07:55 . 2013-05-15 07:55	762368	----a-w-	c:\windows\system32\ieapfltr.dll
2013-05-15 07:55 . 2013-05-15 07:55	62976	----a-w-	c:\windows\system32\pngfilt.dll
2013-05-15 07:55 . 2013-05-15 07:55	599552	----a-w-	c:\windows\system32\vbscript.dll
2013-05-15 07:55 . 2013-05-15 07:55	52224	----a-w-	c:\windows\system32\msfeedsbs.dll
2013-05-15 07:55 . 2013-05-15 07:55	51200	----a-w-	c:\windows\system32\imgutil.dll
2013-05-15 07:55 . 2013-05-15 07:55	48640	----a-w-	c:\windows\system32\mshtmler.dll
2013-05-15 07:55 . 2013-05-15 07:55	452096	----a-w-	c:\windows\system32\dxtmsft.dll
2013-05-15 07:55 . 2013-05-15 07:55	441856	----a-w-	c:\windows\system32\html.iec
2013-05-15 07:55 . 2013-05-15 07:55	281600	----a-w-	c:\windows\system32\dxtrans.dll
2013-05-15 07:55 . 2013-05-15 07:55	27648	----a-w-	c:\windows\system32\licmgr10.dll
2013-05-15 07:55 . 2013-05-15 07:55	270848	----a-w-	c:\windows\system32\iedkcs32.dll
2013-05-15 07:55 . 2013-05-15 07:55	247296	----a-w-	c:\windows\system32\webcheck.dll
2013-05-15 07:55 . 2013-05-15 07:55	235008	----a-w-	c:\windows\system32\url.dll
2013-05-15 07:55 . 2013-05-15 07:55	173568	----a-w-	c:\windows\system32\ieUnatt.exe
2013-05-15 07:55 . 2013-05-15 07:55	167424	----a-w-	c:\windows\system32\iexpress.exe
2013-05-15 07:55 . 2013-05-15 07:55	1509376	----a-w-	c:\windows\system32\inetcpl.cpl
2013-05-15 07:55 . 2013-05-15 07:55	149504	----a-w-	c:\windows\system32\occache.dll
2013-05-15 07:55 . 2013-05-15 07:55	144896	----a-w-	c:\windows\system32\wextract.exe
2013-05-15 07:55 . 2013-05-15 07:55	1400416	----a-w-	c:\windows\system32\ieapfltr.dat
2013-05-15 07:55 . 2013-05-15 07:55	13824	----a-w-	c:\windows\system32\mshta.exe
2013-05-15 07:55 . 2013-05-15 07:55	136192	----a-w-	c:\windows\system32\iepeers.dll
2013-05-15 07:55 . 2013-05-15 07:55	135680	----a-w-	c:\windows\system32\IEAdvpack.dll
2013-05-15 07:55 . 2013-05-15 07:55	12800	----a-w-	c:\windows\system32\msfeedssync.exe
2013-05-15 07:55 . 2013-05-15 07:55	102912	----a-w-	c:\windows\system32\inseng.dll
2013-05-15 07:54 . 2013-05-15 07:54	68608	----a-w-	c:\windows\system32\taskhost.exe
2013-05-15 07:53 . 2013-05-15 07:53	9728	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-15 07:53 . 2013-05-15 07:53	9728	---ha-w-	c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-15 07:53 . 2013-05-15 07:53	604160	----a-w-	c:\windows\SysWow64\d3d10level9.dll
2013-05-15 07:53 . 2013-05-15 07:53	5632	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-15 07:53 . 2013-05-15 07:53	5632	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-15 07:53 . 2013-05-15 07:53	5632	---ha-w-	c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-15 07:53 . 2013-05-15 07:53	5632	---ha-w-	c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-15 07:53 . 2013-05-15 07:53	522752	----a-w-	c:\windows\system32\XpsGdiConverter.dll
2013-05-15 07:53 . 2013-05-15 07:53	465920	----a-w-	c:\windows\system32\WMPhoto.dll
2013-05-15 07:53 . 2013-05-15 07:53	417792	----a-w-	c:\windows\SysWow64\WMPhoto.dll
2013-05-15 07:53 . 2013-05-15 07:53	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-15 07:53 . 2013-05-15 07:53	4096	---ha-w-	c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-15 07:53 . 2013-05-15 07:53	3928064	----a-w-	c:\windows\system32\d2d1.dll
2013-05-15 07:53 . 2013-05-15 07:53	364544	----a-w-	c:\windows\SysWow64\XpsGdiConverter.dll
2013-05-15 07:53 . 2013-05-15 07:53	363008	----a-w-	c:\windows\system32\dxgi.dll
2013-05-15 07:53 . 2013-05-15 07:53	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-15 07:53 . 2013-05-15 07:53	3584	---ha-w-	c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-15 07:53 . 2013-05-15 07:53	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-15 07:53 . 2013-05-15 07:53	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-15 07:53 . 2013-05-15 07:53	3072	---ha-w-	c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-15 07:53 . 2013-05-15 07:53	3072	---ha-w-	c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-15 07:53 . 2013-05-15 07:53	296960	----a-w-	c:\windows\system32\d3d10core.dll
2013-05-15 07:53 . 2013-05-15 07:53	2776576	----a-w-	c:\windows\system32\msmpeg2vdec.dll
2013-05-15 07:53 . 2013-05-15 07:53	2565120	----a-w-	c:\windows\system32\d3d10warp.dll
2013-05-15 07:53 . 2013-05-15 07:53	2560	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-15 07:53 . 2013-05-15 07:53	2560	---ha-w-	c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-15 07:53 . 2013-05-15 07:53	249856	----a-w-	c:\windows\SysWow64\d3d10_1core.dll
2013-05-15 07:53 . 2013-05-15 07:53	245248	----a-w-	c:\windows\system32\WindowsCodecsExt.dll
2013-05-15 07:53 . 2013-05-15 07:53	2284544	----a-w-	c:\windows\SysWow64\msmpeg2vdec.dll
2013-05-15 07:53 . 2013-05-15 07:53	220160	----a-w-	c:\windows\SysWow64\d3d10core.dll
2013-05-15 07:53 . 2013-05-15 07:53	207872	----a-w-	c:\windows\SysWow64\WindowsCodecsExt.dll
2013-05-15 07:53 . 2013-05-15 07:53	1682432	----a-w-	c:\windows\system32\XpsPrint.dll
2013-05-15 07:53 . 2013-05-15 07:53	161792	----a-w-	c:\windows\SysWow64\d3d10_1.dll
2013-05-15 07:53 . 2013-05-15 07:53	1238528	----a-w-	c:\windows\system32\d3d10.dll
2013-05-15 07:53 . 2013-05-15 07:53	1175552	----a-w-	c:\windows\system32\FntCache.dll
2013-05-15 07:53 . 2013-05-15 07:53	1158144	----a-w-	c:\windows\SysWow64\XpsPrint.dll
2013-05-15 07:53 . 2013-05-15 07:53	1080832	----a-w-	c:\windows\SysWow64\d3d10.dll
2013-05-15 07:53 . 2013-05-15 07:53	10752	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{6c97a91e-4524-4019-86af-2aa2d567bf5c}]
2013-02-11 10:47	87464	----a-w-	c:\program files (x86)\adawaretb\adawareDx.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{6c97a91e-4524-4019-86af-2aa2d567bf5c}"= "c:\program files (x86)\adawaretb\adawareDx.dll" [2013-02-11 87464]
.
[HKEY_CLASSES_ROOT\clsid\{6c97a91e-4524-4019-86af-2aa2d567bf5c}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Personal ID"="c:\coolsp~1\PERSON~1\PID.EXE" [2009-03-04 1134008]
"SCheck"="c:\users\Thomas\AppData\Roaming\SCheck\SCheck.exe" [2013-04-09 36864]
"SSync"="c:\users\Thomas\AppData\Roaming\SSync\SSync.exe" [2013-04-09 36864]
"DataMgr"="c:\users\Thomas\AppData\Roaming\DataMgr\DataMgr.exe" [2013-06-18 168848]
"Intermediate"="c:\users\Thomas\AppData\Roaming\Intermediate\Intermediate.exe" [2013-04-09 36864]
"Spybot-S&D Cleaning"="c:\program files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" [2013-05-16 3642312]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Ad-Aware Antivirus"="c:\program files (x86)\Ad-Aware Antivirus\AdAwareLauncher --windows-run" [X]
"HDAudDeck"="c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" [2012-02-09 5015040]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-10 98304]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2013-05-16 3830224]
"Ad-Aware Browsing Protection"="c:\programdata\Ad-Aware Browsing Protection\adawarebp.exe" [2013-05-15 554408]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ad-Aware Service]
@="Ad-Aware Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SystemStoreService;System Store;c:\program files (x86)\SoftwareUpdater\SystemStore.exe  -displayname System Store -servicename SystemStoreService;c:\program files (x86)\SoftwareUpdater\SystemStore.exe  -displayname System Store -servicename SystemStoreService [x]
R3 cleanhlp;cleanhlp;c:\program files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys;c:\program files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [x]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 rm;rm;c:\windows\system32\drivers\rm.sys;c:\windows\SYSNATIVE\drivers\rm.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
S0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys;c:\windows\SYSNATIVE\drivers\gfibto.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360x64\1404000.028\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1404000.028\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360x64\1404000.028\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1404000.028\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130702.001\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130702.001\BHDrvx64.sys [x]
S1 ccSet_N360;Norton 360 Settings Manager;c:\windows\system32\drivers\N360x64\1404000.028\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\N360x64\1404000.028\ccSetx64.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130713.001\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130713.001\IDSvia64.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360x64\1404000.028\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1404000.028\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\N360x64\1404000.028\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\N360x64\1404000.028\SYMNETS.SYS [x]
S2 Ad-Aware Service;Ad-Aware Service;c:\program files (x86)\Ad-Aware Antivirus\AdAwareService.exe;c:\program files (x86)\Ad-Aware Antivirus\AdAwareService.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 N360;Norton 360;c:\program files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe;c:\program files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [x]
S2 SBAMSvc;Ad-Aware;c:\program files (x86)\Ad-Aware Antivirus\SBAMSvc.exe;c:\program files (x86)\Ad-Aware Antivirus\SBAMSvc.exe [x]
S2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x]
S2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]
S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]
S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe;c:\windows\SYSNATIVE\viakaraokesrv.exe [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2013-07-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-17 17:56]
.
.
--------- X64 Entries -----------
.
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:tabs
uDefault_Search_URL = about:blank
mDefault_Search_URL = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q=
mDefault_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=HitachiXHDS721050CLA362_JP1570HJ0545YK0545YKX&ts=1372608220
mStart Page = about:tabs
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q=
mSearch Bar = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q=
uInternet Settings,ProxyServer = localhost:21320
uSearchAssistant = hxxp://feed.snapdo.com/?publisher=VertiTechnologyYB&dpid=VertiTechnologyYB&co=DE&userid=e0067c59-ff67-4e5a-8201-d23f4bc42bab&searchtype=ds&q={searchTerms}&installDate=08/07/2013
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.fbdownloader.com/search.php?channel=sfde206&q=
FF - prefs.js: browser.search.selectedEngine - Web Search
FF - prefs.js: browser.startup.homepage - www.google.de
FF - prefs.js: keyword.URL - hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q=
FF - ExtSQL: 2013-06-26 19:40; ftd@ftd.com; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\ftd@ftd.com.xpi
FF - ExtSQL: 2013-06-30 10:44; trtv3@trtv.com; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\trtv3@trtv.com.xpi
FF - ExtSQL: 2013-07-03 15:41; iuq6dmgwr@uuyyoopqeeue.org; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\iuq6dmgwr@uuyyoopqeeue.org
FF - ExtSQL: 2013-07-03 15:43; vqfwad@csxlye.net; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\vqfwad@csxlye.net
FF - ExtSQL: 2013-07-04 12:33; donottrackplus@abine.com; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\donottrackplus@abine.com
FF - ExtSQL: 2013-07-07 19:32; uoioji5o@ioeeu.co.uk; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\uoioji5o@ioeeu.co.uk
FF - ExtSQL: 2013-07-07 19:32; sbz2uue@lyyeo.net; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\sbz2uue@lyyeo.net
FF - ExtSQL: 2013-07-07 19:38; umauoaqox9uuye@lyjpayoayu.com; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\umauoaqox9uuye@lyjpayoayu.com.xpi
FF - ExtSQL: 2013-07-08 10:50; {BBDA0591-3099-440a-AA10-41764D9DB4DB}; c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn
FF - ExtSQL: 2013-07-08 12:01; zo1bf@yatkewu-.co.uk; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\zo1bf@yatkewu-.co.uk
FF - ExtSQL: 2013-07-08 12:01; eeey.i@jgpjjdk.net; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\eeey.i@jgpjjdk.net
FF - ExtSQL: 2013-07-15 17:49; {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}; c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn
FF - ExtSQL: 2013-07-25 10:31; EFGLQA@78ETGYN-0W7FN789T87.COM; c:\users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{32E3F0F9-F877-9DFF-AD4E-BFB58068F278} - (no file)
Toolbar-10 - (no file)
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
Notify-SDWinLogon - SDWinLogon.dll
SafeBoot-13701543.sys
SafeBoot-50047533.sys
SafeBoot-72262163.sys
SafeBoot-73705921.sys
SafeBoot-CleanHlp
SafeBoot-CleanHlp.sys
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-10 - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\N360]
"ImagePath"="\"c:\program files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360\Engine\20.4.0.40\diMaster.dll\" /prefetch:1"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{722b3793-5367-4446-b6bb-db89b05c1f24}\LocalServer32]
@DACL=(02 0000)
@=expand:"%SystemRoot%\\System32\\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {722b3793-5367-4446-b6bb-db89b05c1f24}"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-07-16  16:02:15 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-07-16 14:02
.
Vor Suchlauf: 14 Verzeichnis(se), 348.104.404.992 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 348.004.421.632 Bytes frei
.
- - End Of File - - 49A5B67C2C54D46278D99BC76A5C98E8
A36C5E4F47E84449FF07ED3517B43A31
         



Greetings
Tom


Alt 17.07.2013, 07:24   #6
schrauber
/// the machine
/// TB-Ausbilder
 

w32 zero access entfernen ? - Standard

w32 zero access entfernen ?



Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
--> w32 zero access entfernen ?

Alt 17.07.2013, 08:09   #7
Tommytom77
 
w32 zero access entfernen ? - Standard

w32 zero access entfernen ?



Guten Morgen,

hier ist schonmal die AdwCleaner[Sx].txt


Code:
ATTFilter
# AdwCleaner v2.305 - Datei am 17/07/2013 um 08:34:20 erstellt
# Aktualisiert am 11/07/2013 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzer : Thomas - THOMAS-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Thomas\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****

Gestoppt & Gelöscht : SystemStoreService

***** [Dateien / Ordner] *****

Datei Desinfiziert : C:\Users\Thomas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Datei Desinfiziert : C:\Users\Thomas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
Datei Desinfiziert : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Datei Desinfiziert : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Datei Gelöscht : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\foxydeal.sqlite
Datei Gelöscht : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\searchplugins\search.xml
Ordner Gelöscht : C:\Program Files (x86)\adawaretb
Ordner Gelöscht : C:\Program Files (x86)\Covus Freemium
Ordner Gelöscht : C:\Program Files (x86)\Gophoto.it
Ordner Gelöscht : C:\Program Files (x86)\Omiga Plus
Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater
Ordner Gelöscht : C:\ProgramData\blekko toolbars
Ordner Gelöscht : C:\ProgramData\Browser Manager
Ordner Gelöscht : C:\ProgramData\InstallMate
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Covus Freemium
Ordner Gelöscht : C:\ProgramData\ParetoLogic
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\Freemium
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpepfkjapeclaafmhoelccknpfedainn
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\PutLockerDownloader
Ordner Gelöscht : C:\Users\Thomas\AppData\LocalLow\adawaretb
Ordner Gelöscht : C:\Users\Thomas\AppData\LocalLow\delta
Ordner Gelöscht : C:\Users\Thomas\AppData\LocalLow\searchresultstb
Ordner Gelöscht : C:\Users\Thomas\AppData\LocalLow\SimplyTech
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\DataMgr
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\DealPly
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\DriverCure
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\eIntaller
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\fbDownloader
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\file scout
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTDownloader.com
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\jetpack
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\Omiga Plus
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\ParetoLogic
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\SpeedAnalysis2
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\yourfiledownloader

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\LyricsContainer
Schlüssel Gelöscht : HKCU\Software\filescout
Schlüssel Gelöscht : HKCU\Software\FoxyDeal
Schlüssel Gelöscht : HKCU\Software\ilivid
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6492E171-2427-4932-B414-33574A089F5E}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C510DFFB-0AFE-484C-BA40-CED5B74C4EEF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DFF9B2DA-EF99-4B26-83CB-7058299999D8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\5f2d6d8b16eef17
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKLM\Software\adawaretb
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\iLividSRTB
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Schlüssel Gelöscht : HKLM\Software\qvo6Software
Schlüssel Gelöscht : HKLM\Software\SoftwareUpdater
Schlüssel Gelöscht : HKLM\Software\SProtector
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\5f2d6d8b16eef17
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EC2BAE47-25AF-4CE9-9E78-10627A49C9EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\adawaretb
Schlüssel Gelöscht : HKLM\Software\YourFileDownloader
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DataMgr]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{6C97A91E-4524-4019-86AF-2AA2D567BF5C}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [10]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16635

Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q= --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q= --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q= --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.certified-toolbar.com?si=&st=bs&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q=%s --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=HitachiXHDS721050CLA362_JP1570HJ0545YK0545YKX&ts=1372608220 --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q= --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Default_Page_URL] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=HitachiXHDS721050CLA362_JP1570HJ0545YK0545YKX&ts=1372608220 --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q= --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373904223901&tguid=46364-3869-1373904223901-854A110356CEEBB08DF26E285D916D4C&q= --> hxxp://www.google.com

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\prefs.js

Gelöscht : user_pref("aol_toolbar.default.search.check", false);
Gelöscht : user_pref("browser.search.defaultengine", "Web Search");
Gelöscht : user_pref("browser.search.defaultenginename", "Web Search");
Gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.fbdownloader.com/search.php?channel=sfde206&q=[...]
Gelöscht : user_pref("browser.search.order.1", "Web Search");
Gelöscht : user_pref("browser.search.selectedEngine", "Web Search");
Gelöscht : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Gelöscht : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Gelöscht : user_pref("extensions.delta.admin", false);
Gelöscht : user_pref("extensions.delta.aflt", "babsst");
Gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Gelöscht : user_pref("extensions.delta.dfltLng", "de");
Gelöscht : user_pref("extensions.delta.excTlbr", false);
Gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Gelöscht : user_pref("extensions.delta.id", "44815b3f000000000000647002e987f3");
Gelöscht : user_pref("extensions.delta.instlDay", "15901");
Gelöscht : user_pref("extensions.delta.instlRef", "sst");
Gelöscht : user_pref("extensions.delta.newTab", false);
Gelöscht : user_pref("extensions.delta.prdct", "delta");
Gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Gelöscht : user_pref("extensions.delta.rvrt", "false");
Gelöscht : user_pref("extensions.delta.smplGrp", "none");
Gelöscht : user_pref("extensions.delta.tlbrId", "base");
Gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Gelöscht : user_pref("extensions.delta.vrsn", "1.8.21.5");
Gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.21.517:59:17");
Gelöscht : user_pref("extensions.delta.vrsni", "1.8.21.5");
Gelöscht : user_pref("extensions.delta_i.babExt", "");
Gelöscht : user_pref("extensions.delta_i.babTrack", "affID=121245&tt=150713_91114&tsp=4944");
Gelöscht : user_pref("extensions.delta_i.srcExt", "ss");
Gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false);
Gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", false);
Gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
Gelöscht : user_pref("extensions.helperbar.Visibility", true);
Gelöscht : user_pref("extensions.helperbar.countryiso", "de");
Gelöscht : user_pref("extensions.helperbar.downloadprovider", "vertitechnologyyb");
Gelöscht : user_pref("extensions.helperbar.installationid", "e0067c59-ff67-4e5a-8201-d23f4bc42bab");
Gelöscht : user_pref("extensions.helperbar.installdate", "08/07/2013");
Gelöscht : user_pref("extensions.helperbar.publisher", "vertitechnologyyb");
Gelöscht : user_pref("iminent.webbooster.scripts.minibar.SOFTONICREFRESHRATE", "140000");
Gelöscht : user_pref("keyword.URL", "hxxp://search.certified-toolbar.com?si=&st=chrome&tid=3869&ver=3.2&ts=1373[...]
Gelöscht : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Gelöscht : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
Gelöscht : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
Gelöscht : user_pref("sweetim.toolbar.searchguard.enable", "");

*************************

AdwCleaner[S1].txt - [23955 octets] - [17/07/2013 08:34:20]

########## EOF - C:\AdwCleaner[S1].txt - [24016 octets] ##########
         
und hier die JRT.text

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.1.2 (07.16.2013:1)
OS: Windows 7 Ultimate x64
Ran by Thomas on 17.07.2013 at  8:48:51,49
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL\\Default
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\searchURL\\Default



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\big fish games"
Successfully deleted: [Folder] "C:\Users\Thomas\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\Thomas\appdata\local\adawarebp"



~~~ FireFox

Successfully deleted: [File] C:\Users\Thomas\AppData\Roaming\mozilla\firefox\profiles\ylc9upqr.default\invalidprefs.js
Successfully deleted: [Folder] C:\Users\Thomas\AppData\Roaming\mozilla\firefox\profiles\ylc9upqr.default\jetpack
Successfully deleted the following from C:\Users\Thomas\AppData\Roaming\mozilla\firefox\profiles\ylc9upqr.default\prefs.js

user_pref("iminent.webbooster.scripts.minibar.FavLinkSplitTestingClass", "v2");
user_pref("iminent.webbooster.scripts.minibar.LayoutId", "1");
user_pref("iminent.webbooster.scripts.minibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
user_pref("iminent.webbooster.scripts.minibar.Services.BHPCode", "01");
user_pref("iminent.webbooster.scripts.minibar.Services.DefaultEvent", "000");
user_pref("iminent.webbooster.scripts.minibar.Services.DefaultWebSite", "000");
user_pref("iminent.webbooster.scripts.minibar.Services.IminentClientCode", "11");
user_pref("iminent.webbooster.scripts.minibar.Services.SmartFavCode", "02");
user_pref("iminent.webbooster.scripts.minibar.displayFavLinks", "1");
Emptied folder: C:\Users\Thomas\AppData\Roaming\mozilla\firefox\profiles\ylc9upqr.default\minidumps [12 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 17.07.2013 at  8:52:14,72
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
und die frische FRST log 1/2 :


Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-07-2013 02
Ran by Thomas (administrator) on 17-07-2013 08:53:36
Running from C:\Users\Thomas\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
(Lavasoft Limited) C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

==================== Registry (Whitelisted) ==================

HKCU\...\Run: [Personal ID] - C:\COOLSP~1\PERSON~1\PID.EXE [1134008 2009-03-04] (coolspot AG, Düsseldorf)
HKCU\...\Run: [SCheck] - "C:\Users\Thomas\AppData\Roaming\SCheck\SCheck.exe" check  [36864 2013-04-10] ()
HKCU\...\Run: [SSync] - "C:\Users\Thomas\AppData\Roaming\SSync\SSync.exe" [36864 2013-04-10] ()
HKCU\...\Run: [Intermediate] - "C:\Users\Thomas\AppData\Roaming\Intermediate\Intermediate.exe" [36864 2013-04-10] ()
HKCU\...\Run: [Spybot-S&D Cleaning] - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean [3642312 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [5015040 2012-02-09] (VIA)
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [98304 2010-02-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SDTray] - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [3830224 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Ad-Aware Browsing Protection] - "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe" [554408 2013-05-15] (Lavasoft)
HKLM-x32\...\Run: [Ad-Aware Antivirus] - "C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareLauncher" --windows-run [x]

==================== Internet (Whitelisted) ====================

ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:tabs
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:tabs
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: No Name - {32E3F0F9-F877-9DFF-AD4E-BFB58068F278} -  No File
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab
Winsock: Catalog5 01 %SystemRoot%\System32\mswsock.dll [232448] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [326144] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\Thomas\AppData\Roaming\Mozilla\Extensions\{C4A4F5A0-4B89-4392-AFAC-D58010E349AF}
FF Extension: DoNotTrackMe - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\donottrackplus@abine.com
FF Extension: SeaariCh-NNewTAib - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\eeey.i@jgpjjdk.net
FF Extension: pricealarm - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
FF Extension: suaafEE ssave - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\iuq6dmgwr@uuyyoopqeeue.org
FF Extension: sayfEE osyAve - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\sbz2uue@lyyeo.net
FF Extension: SEEarchh-iNewTab - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\uoioji5o@ioeeu.co.uk
FF Extension: SEaaroch-NaewTaib - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\vqfwad@csxlye.net
FF Extension: ssaafe  saave - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\zo1bf@yatkewu-.co.uk
FF Extension: ftd - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\ftd@ftd.com.xpi
FF Extension: trtv3 - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\trtv3@trtv.com.xpi
FF Extension: umauoaqox9uuye - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\umauoaqox9uuye@lyjpayoayu.com.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn\

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (FTdownloader V4.0) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bebnnlollpcjnfpkafhoclljaojgnfok\4.0_0
CHR Extension: (YouTube) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: () - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html
CHR Extension: (SEaaroch-NaewTaib) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gabakelkhlkfbibdngkjmmpnhkjkogch\1
CHR Extension: (OfferMosquito) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\0.4.1_0
CHR Extension: (SeaariCh-NNewTAib) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\jebbilelhgjmofbjmfaocdglilladgpf\1
CHR Extension: (ssaafe  saave) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\klpibhpiooemnakpklemdcbhldoojjjg\1
CHR Extension: (SEEarchh-iNewTab) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcjhhcdhfamdklpdjdjgnokfkhnmnfnb\1
CHR Extension: (Norton Identity Protection) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0
CHR Extension: (Cool Smiley Bar for Facebook) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.4_0
CHR Extension: (suaafEE ssave) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pakblkgcmhjcpfedglmhojonabkjjemp\1
CHR Extension: (sayfEE osyAve) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdncopncngigainmcdjndjihapgiboef\1
CHR Extension: (Gmail) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 Ad-Aware Service; C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe [1236336 2013-06-13] (Lavasoft Limited)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
S2 SBAMSvc; C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe [3677000 2012-09-20] (GFI Software)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-11-11] (VIA Technologies, Inc.)
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [x]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [x]

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-23] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-23] ()
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-07-02] (Symantec Corporation)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-07-02] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-18] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-18] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2012-08-18] (Symantec Corporation)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-07-01] (GFI Software)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130716.001\IDSvia64.sys [513184 2013-07-05] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130716.001\IDSvia64.sys [513184 2013-07-05] (Symantec Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] ()
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130716.017\ENG64.SYS [126040 2013-07-11] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130716.017\ENG64.SYS [126040 2013-07-11] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130716.017\EX64.SYS [2098776 2013-07-11] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130716.017\EX64.SYS [2098776 2013-07-11] (Symantec Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-07-09] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 cleanhlp; \??\C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 rm; \??\C:\Windows\system32\drivers\rm.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-17 08:52 - 2013-07-17 08:52 - 00002283 _____ C:\Users\Thomas\Desktop\JRT.txt
2013-07-17 08:48 - 2013-07-17 08:48 - 00000000 ____D C:\Windows\ERUNT
2013-07-17 08:47 - 2013-07-17 08:46 - 00558958 _____ (Oleg N. Scherbakov) C:\Users\Thomas\Desktop\JRT.exe
2013-07-17 08:46 - 2013-07-17 08:46 - 00558958 _____ (Oleg N. Scherbakov) C:\Users\Thomas\Downloads\JRT.exe
2013-07-17 08:34 - 2013-07-17 08:34 - 00023984 _____ C:\AdwCleaner[S1].txt
2013-07-17 08:33 - 2013-07-17 08:32 - 00662345 _____ C:\Users\Thomas\Desktop\adwcleaner.exe
2013-07-17 08:32 - 2013-07-17 08:32 - 00662345 _____ C:\Users\Thomas\Downloads\adwcleaner.exe
2013-07-16 16:02 - 2013-07-16 16:02 - 00038928 _____ C:\ComboFix.txt
2013-07-16 15:41 - 2013-07-16 15:46 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner (3)
2013-07-16 15:40 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-16 15:40 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-16 15:40 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-16 15:40 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-16 15:40 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-16 15:40 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-16 15:40 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-16 15:40 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-16 15:39 - 2013-07-16 16:02 - 00000000 ____D C:\Qoobox
2013-07-16 15:38 - 2013-07-16 16:01 - 00000000 ____D C:\Windows\erdnt
2013-07-16 15:29 - 2013-07-16 15:24 - 05089088 ____R (Swearware) C:\Users\Thomas\Desktop\ComboFix.exe
2013-07-16 15:26 - 2013-07-16 15:26 - 484631833 _____ C:\Windows\MEMORY.DMP
2013-07-16 15:26 - 2013-07-16 15:26 - 00275608 _____ C:\Windows\Minidump\071613-37206-01.dmp
2013-07-16 15:24 - 2013-07-16 15:24 - 05089088 _____ (Swearware) C:\Users\Thomas\Downloads\ComboFix.exe
2013-07-16 13:35 - 2013-07-16 13:36 - 00027086 _____ C:\Users\Thomas\Desktop\FRST.zip
2013-07-16 13:04 - 2013-07-16 13:04 - 00022178 _____ C:\Users\Thomas\Desktop\Addition.txt
2013-07-16 13:02 - 2013-07-16 15:32 - 00000000 ____D C:\FRST
2013-07-16 12:59 - 2013-07-16 15:36 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner (2)
2013-07-16 12:59 - 2013-07-16 12:59 - 01778135 _____ (Farbar) C:\Users\Thomas\Desktop\FRST64.exe
2013-07-16 12:58 - 2013-07-16 12:59 - 01778135 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe
2013-07-16 12:44 - 2013-07-16 12:44 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64(2).exe
2013-07-16 11:59 - 2013-07-16 11:59 - 00019198 _____ C:\Users\Thomas\Desktop\VirusRemover.zip
2013-07-16 11:48 - 2013-07-16 11:48 - 00253425 _____ C:\Users\Thomas\Desktop\VirusRemover.log
2013-07-16 10:59 - 2013-07-16 10:58 - 03651120 _____ C:\Users\Thomas\Desktop\avg_remover_zeroaccess.exe
2013-07-16 10:58 - 2013-07-16 10:58 - 03651120 _____ C:\Users\Thomas\Downloads\avg_remover_zeroaccess.exe
2013-07-16 10:51 - 2013-07-16 10:51 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\QuickScan
2013-07-16 10:42 - 2013-07-16 10:42 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64(1).exe
2013-07-16 10:39 - 2013-07-16 10:39 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64.exe
2013-07-16 10:39 - 2013-07-16 10:39 - 00000036 _____ C:\Users\Thomas\AppData\Local\housecall.guid.cache
2013-07-15 21:07 - 2013-07-15 21:07 - 05799944 _____ (ParetoLogic, Inc.) C:\Users\Thomas\Downloads\RegCureProSetup_RW.exe
2013-07-15 21:06 - 2013-07-15 21:06 - 00001205 _____ C:\Users\Thomas\Downloads\FixNCR.reg
2013-07-15 18:18 - 2013-07-16 10:25 - 00003800 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2013-07-15 18:04 - 2013-07-17 06:54 - 00004130 _____ C:\Windows\System32\Tasks\Software Updater
2013-07-15 18:04 - 2013-07-17 06:54 - 00004092 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-07-15 18:04 - 2013-05-13 05:52 - 00023624 _____ C:\Windows\Launcher.exe
2013-07-15 18:03 - 2013-07-15 18:03 - 00002563 _____ C:\Users\Public\Desktop\Free System Utilities.lnk
2013-07-15 18:03 - 2013-07-15 18:03 - 00000000 ____D C:\ProgramData\Package Cache
2013-07-15 18:03 - 2013-07-15 18:03 - 00000000 ____D C:\ProgramData\FreeSystemUtilities
2013-07-15 18:02 - 2013-07-15 18:02 - 00444408 _____ C:\Users\Thomas\Downloads\free-system-utilities-DE.exe
2013-07-15 18:01 - 2013-07-15 18:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\GlarySoft
2013-07-15 17:59 - 2013-07-15 17:59 - 00001184 _____ C:\Users\Thomas\Desktop\Registry Repair.lnk
2013-07-15 17:59 - 2013-07-15 17:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Glarysoft
2013-07-15 17:59 - 2013-07-15 17:59 - 00000000 ____D C:\Program Files (x86)\Glarysoft
2013-07-14 18:25 - 2013-07-14 18:42 - 00001035 _____ C:\Users\Thomas\Desktop\ball.xpadderprofile
2013-07-14 18:12 - 2013-07-14 18:12 - 00001360 _____ C:\Users\Thomas\Desktop\My T Mini Wireless.xpaddercontroller
2013-07-13 19:47 - 2013-07-13 19:47 - 00000000 ____D C:\Program Files (x86)\MSECache
2013-07-13 19:45 - 2013-07-13 19:45 - 00012162 _____ C:\Users\Thomas\Downloads\mu0738.zip
2013-07-12 03:05 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-12 03:05 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-12 03:05 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-12 03:05 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-12 03:05 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-12 03:05 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-12 03:05 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-12 03:05 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-12 03:05 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-12 03:05 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-12 03:05 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-12 03:05 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-12 03:05 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-12 03:05 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-12 03:04 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-12 03:04 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-12 03:04 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-12 03:04 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-12 03:04 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-12 03:04 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-12 03:04 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-12 03:04 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-12 03:04 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-12 03:04 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-12 03:04 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-12 03:04 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-12 03:04 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-12 03:04 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-12 03:04 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-12 03:04 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-12 03:04 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 00:19 - 2013-07-11 00:19 - 00000000 ____D C:\4a4b3f6258420da740c754
2013-07-10 20:40 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 20:40 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 20:40 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 20:40 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 20:39 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 20:39 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 20:39 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-09 17:13 - 2013-07-09 17:14 - 00000000 ____D C:\Windows\System32\Tasks\Norton 360
2013-07-08 20:57 - 2013-07-08 20:58 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner
2013-07-08 20:56 - 2013-07-15 19:40 - 00002342 _____ C:\Users\Thomas\Downloads\NowSmart Cut v1.1 Patch by Team IREC.zip
2013-07-08 19:58 - 2013-07-13 19:47 - 00003238 _____ C:\Windows\System32\Tasks\Dealply
2013-07-08 12:11 - 2013-07-15 19:43 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD(2).ZIP
2013-07-08 11:04 - 2013-07-08 11:04 - 00007053 _____ C:\Users\Thomas\Downloads\BFE-Repair-Windows-7.zip
2013-07-08 10:50 - 2013-07-09 17:08 - 00003206 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-07-08 10:50 - 2013-07-09 13:11 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-07-08 10:50 - 2013-07-09 13:11 - 00007631 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-07-08 10:50 - 2013-07-08 10:50 - 00000000 ____D C:\Program Files\Symantec
2013-07-08 10:50 - 2013-07-08 10:50 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-07-08 10:49 - 2013-07-09 17:08 - 00000000 ____D C:\Windows\system32\Drivers\N360x64
2013-07-08 10:49 - 2013-07-08 10:49 - 00000000 ____D C:\Program Files (x86)\Norton 360
2013-07-08 10:39 - 2013-07-08 10:43 - 154147384 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\norton_360_setup.exe
2013-07-08 10:30 - 2013-07-08 10:30 - 00867880 _____ C:\Users\Thomas\Downloads\Norton_Removal_Tool.exe
2013-07-08 10:28 - 2013-07-08 10:28 - 06260632 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NRnR(1).exe
2013-07-08 10:27 - 2013-07-08 10:27 - 06258072 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NRnR.exe
2013-07-08 08:31 - 2013-07-08 08:31 - 00347424 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\MicrosoftFixit.WindowsFirewall.RNP.Run.exe
2013-07-08 07:45 - 2013-07-16 08:06 - 00000000 ____D C:\Users\Thomas\AppData\Local\NPE
2013-07-08 07:45 - 2013-07-08 07:45 - 02986440 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NPE.exe
2013-07-08 07:34 - 2013-07-08 07:34 - 00000000 ____D C:\TDSSKiller_Quarantine
2013-07-08 07:29 - 2013-07-08 07:29 - 02240864 _____ (Kaspersky Lab ZAO) C:\Users\Thomas\Downloads\tdsskiller.exe
2013-07-07 21:34 - 2013-07-07 21:34 - 00000000 ____D C:\ProgramData\Sophos
2013-07-07 21:33 - 2013-07-07 21:33 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sophos
2013-07-07 21:33 - 2013-07-07 21:33 - 00000000 ____D C:\Program Files (x86)\Sophos
2013-07-07 21:31 - 2013-07-07 21:32 - 73043664 _____ (Sophos Limited) C:\Users\Thomas\Downloads\Sophos Virus Removal Tool.exe
2013-07-07 19:03 - 2013-07-07 19:03 - 00001160 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2013-07-05 18:25 - 2013-07-05 18:25 - 00000000 ____D C:\Users\Thomas\AppData\Local\FLT
2013-07-05 18:24 - 2013-07-08 10:22 - 00002072 _____ C:\Users\Thomas\Documents\TombRaider.log
2013-07-05 18:21 - 2013-07-05 18:21 - 00001602 _____ C:\Users\Public\Desktop\Tomb Raider.lnk
2013-07-05 17:42 - 2013-07-05 17:42 - 00000000 ____D C:\Users\Thomas\Downloads\tomby
2013-07-05 17:07 - 2013-07-05 17:07 - 03030370 _____ C:\Users\Thomas\Downloads\KeygenBySkid_and_FULLTorrent.rar
2013-07-05 17:03 - 2013-07-05 17:03 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-07-05 14:35 - 2013-07-05 15:14 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part27.rar
2013-07-05 12:29 - 2013-07-05 12:29 - 00000000 ____D C:\Users\Thomas\Documents\Test Drive Ferrari Racing Legends
2013-07-05 12:27 - 2013-07-07 21:14 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD.ZIP
2013-07-05 12:27 - 2013-07-07 21:14 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD(1).ZIP
2013-07-05 12:27 - 2013-07-05 12:27 - 00000000 ____D C:\Users\Thomas\Downloads\Neuer Ordner (2)
2013-07-04 23:19 - 2013-07-05 00:04 - 136860406 _____ C:\Users\Thomas\Downloads\sfn.part18.rar
2013-07-04 23:14 - 2013-07-05 08:26 - 01446192 _____ C:\Users\Thomas\Downloads\sfn.part01.rar
2013-07-04 22:27 - 2013-07-05 09:03 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part17.rar
2013-07-04 22:27 - 2013-07-05 09:03 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part16.rar
2013-07-04 22:27 - 2013-07-05 08:27 - 03068076 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part15.rar
2013-07-04 22:27 - 2013-07-05 00:54 - 218102557 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part19.rar
2013-07-04 22:26 - 2013-07-05 09:04 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part12.rar
2013-07-04 22:26 - 2013-07-05 09:04 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part11.rar
2013-07-04 22:26 - 2013-07-05 08:28 - 11412720 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part07.rar
2013-07-04 22:26 - 2013-07-05 08:27 - 02252052 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part10.rar
2013-07-04 22:26 - 2013-07-05 08:27 - 02160576 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part09.rar
2013-07-04 22:26 - 2013-07-05 08:27 - 01862916 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part08.rar
2013-07-04 22:25 - 2013-07-05 09:04 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part05.rar
2013-07-04 22:25 - 2013-07-05 09:04 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part01.rar
2013-07-04 22:25 - 2013-07-05 09:02 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part04.rar
2013-07-04 22:25 - 2013-07-05 09:02 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part02.rar
2013-07-04 22:25 - 2013-07-05 08:28 - 03014352 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part03.rar
2013-07-04 22:25 - 2013-07-05 08:27 - 01598652 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part06.rar
2013-07-04 19:15 - 2013-07-04 19:54 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part4.rar
2013-07-04 19:15 - 2013-07-04 19:54 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part3.rar
2013-07-04 19:15 - 2013-07-04 19:53 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part5.rar
2013-07-04 19:15 - 2013-07-04 19:52 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part2.rar
2013-07-04 19:15 - 2013-07-04 19:51 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part6.rar
2013-07-04 19:15 - 2013-07-04 19:49 - 355045600 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part7.rar
2013-07-04 19:14 - 2013-07-04 19:53 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part1.rar
2013-07-04 19:13 - 2013-07-04 19:51 - 413627629 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part2.rar
2013-07-04 19:13 - 2013-07-04 19:48 - 413958462 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part1.rar
2013-07-04 19:13 - 2013-07-04 19:46 - 349345391 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part3.rar
2013-07-04 16:31 - 2013-07-04 16:54 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part14.rar
2013-07-04 16:31 - 2013-07-04 16:54 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part13.rar
2013-07-04 16:31 - 2013-07-04 16:53 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part18.rar
2013-07-04 15:31 - 2013-07-04 16:04 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part32.rar
2013-07-04 15:31 - 2013-07-04 16:03 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part33.rar
2013-07-04 15:31 - 2013-07-04 16:02 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part34.rar
2013-07-04 15:31 - 2013-07-04 15:53 - 210902382 _____ C:\Users\Thomas\Downloads\tomby.part35.rar
2013-07-04 15:30 - 2013-07-04 16:04 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part31.rar
2013-07-04 15:29 - 2013-07-04 16:02 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part04.rar
2013-07-04 12:56 - 2013-07-04 12:58 - 01945127 _____ C:\Users\Thomas\Downloads\blAde-DP3DVaDCUcrk(1).rar
2013-07-04 12:54 - 2013-07-04 12:56 - 01945127 _____ C:\Users\Thomas\Downloads\blAde-DP3DVaDCUcrk.rar
2013-07-04 12:31 - 2013-07-04 12:31 - 00270436 _____ C:\Users\Thomas\Downloads\GotClip_Setup.exe
2013-07-04 11:10 - 2013-07-04 15:20 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part30.rar
2013-07-04 11:10 - 2013-07-04 15:20 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part29.rar
2013-07-04 11:10 - 2013-07-04 15:20 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part28.rar
2013-07-04 11:09 - 2013-07-04 15:51 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part26.rar
2013-07-04 11:09 - 2013-07-04 15:50 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part23.rar
2013-07-04 11:09 - 2013-07-04 15:47 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part25.rar
2013-07-04 11:09 - 2013-07-04 15:19 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part22.rar
2013-07-04 11:09 - 2013-07-04 15:15 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part24.rar
2013-07-04 11:08 - 2013-07-04 15:20 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part20.rar
2013-07-04 11:08 - 2013-07-04 15:19 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part17.rar
2013-07-04 11:08 - 2013-07-04 15:18 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part21.rar
2013-07-04 11:08 - 2013-07-04 15:18 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part16.rar
2013-07-04 11:08 - 2013-07-04 15:14 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part19.rar
2013-07-04 11:08 - 2013-07-04 15:13 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part15.rar
2013-07-04 11:07 - 2013-07-04 15:47 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part09.rar
2013-07-04 11:07 - 2013-07-04 15:47 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part08.rar
2013-07-04 11:07 - 2013-07-04 15:18 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part11.rar
2013-07-04 11:07 - 2013-07-04 15:16 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part12.rar
2013-07-04 11:07 - 2013-07-04 15:14 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part10.rar
2013-07-04 11:06 - 2013-07-04 15:51 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part02.rar
2013-07-04 11:06 - 2013-07-04 15:19 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part07.rar
2013-07-04 11:06 - 2013-07-04 15:19 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part03.rar
2013-07-04 11:06 - 2013-07-04 15:15 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part01.rar
2013-07-04 11:06 - 2013-07-04 15:14 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part05.rar
2013-07-04 11:06 - 2013-07-04 15:13 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part06.rar
2013-07-04 10:52 - 2013-07-04 21:55 - 00000036 _____ C:\Windows\mafosav.INI
2013-07-04 10:27 - 2013-07-04 10:27 - 00001027 _____ C:\Users\Public\Desktop\Mario Forever.lnk
2013-07-04 10:27 - 2013-07-04 10:27 - 00000000 ____D C:\Program Files (x86)\Mario Forever
2013-07-04 10:26 - 2013-07-04 10:26 - 19438312 _____ C:\Users\Thomas\Downloads\Install_Mario_Forever_5_9.exe
2013-07-04 09:34 - 2013-07-04 09:34 - 00003120 _____ C:\Windows\System32\Tasks\YourFile DownloaderUpdate
2013-07-04 08:26 - 2013-07-04 08:26 - 00159228 _____ C:\Users\Thomas\Downloads\msvcp110.zip
2013-07-04 08:21 - 2013-07-04 08:21 - 00474830 _____ C:\Users\Thomas\Downloads\msvcr110.zip
2013-07-04 08:14 - 2013-07-04 08:14 - 00115691 _____ C:\Users\Thomas\Downloads\Pinball FX2_LumaEmu.rar
2013-07-04 08:06 - 2013-07-04 08:06 - 00000000 ____D C:\ProgramData\RELOADED
2013-07-04 07:36 - 2013-07-04 10:57 - 00000000 ____D C:\SMBX
2013-07-04 07:36 - 2013-07-04 07:36 - 00000550 _____ C:\Users\Public\Desktop\Super Mario Bros. X.lnk
2013-07-04 07:34 - 2013-07-04 07:34 - 00541544 _____ (JooSoft GmbH) C:\Users\Thomas\Downloads\Downloader_fuer_Super_Mario_Bros._X_1.3.exe
2013-07-03 22:24 - 2013-07-03 22:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part08.rar
2013-07-03 22:24 - 2013-07-03 22:24 - 06362382 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part09.rar
2013-07-03 22:23 - 2013-07-03 22:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part06.rar
2013-07-03 22:23 - 2013-07-03 22:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part05.rar
2013-07-03 22:23 - 2013-07-03 22:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part03.rar
2013-07-03 22:23 - 2013-07-03 22:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part07.rar
2013-07-03 22:23 - 2013-07-03 22:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part04.rar
2013-07-03 22:23 - 2013-07-03 22:54 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part02.rar
2013-07-03 22:23 - 2013-07-03 22:52 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part01.rar
2013-07-03 19:49 - 2013-07-03 19:49 - 04241280 _____ (Dll-Files.com                                               ) C:\Users\Thomas\Downloads\dffsetup-steam_api.exe
2013-07-03 19:46 - 2013-07-03 19:42 - 00062976 _____ C:\Windows\system32\steam_api.dll
2013-07-03 19:42 - 2013-07-03 19:42 - 00062976 _____ C:\Users\Thomas\Downloads\steam_api.dll
2013-07-03 19:33 - 2013-07-03 19:33 - 00055394 _____ C:\Users\Thomas\Downloads\steam_api.zip
2013-07-03 19:25 - 2013-07-03 19:25 - 00001621 _____ C:\Users\Public\Desktop\Pinball FX2.lnk
2013-07-03 19:20 - 2013-07-03 19:43 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part5.rar
2013-07-03 19:20 - 2013-07-03 19:22 - 40211239 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part6.rar
2013-07-03 19:19 - 2013-07-03 19:43 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part2.rar
2013-07-03 19:19 - 2013-07-03 19:42 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part4.rar
2013-07-03 19:19 - 2013-07-03 19:42 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part3.rar
2013-07-03 19:19 - 2013-07-03 19:41 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part1.rar
2013-07-03 19:08 - 2013-07-03 20:32 - 209715200 _____ C:\Users\Thomas\Downloads\Jump.Jack.2.German-Bamboocha(1).rar
2013-07-03 19:01 - 2013-07-03 19:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Namco
2013-07-03 18:58 - 2013-07-03 18:59 - 05081786 _____ C:\Users\Thomas\Downloads\Pacman.v1.0.Cracked-F4CG.rar
2013-07-03 18:53 - 2013-07-03 19:17 - 524288000 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part1.rar
2013-07-03 18:53 - 2013-07-03 19:15 - 524288000 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part2.rar
2013-07-03 18:53 - 2013-07-03 18:59 - 157824496 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part3.rar
2013-07-03 18:07 - 2013-07-03 19:06 - 00000508 _____ C:\Users\Thomas\Downloads\Jump.Jack.2.German-Bamboocha.rar
2013-07-03 17:55 - 2013-07-03 17:55 - 00000000 ____D C:\Users\Thomas\Documents\CAPCOM
2013-07-03 17:34 - 2013-07-03 17:34 - 00002077 _____ C:\Users\Public\Desktop\Street Fighter X Tekken.lnk
2013-07-03 17:33 - 2013-07-03 17:33 - 00100501 _____ C:\Users\Thomas\Downloads\STREET.FIGHTER.X.TEKKEN.V1.0.ALL.THETA.NODVD.ZIP
2013-07-03 17:25 - 2013-07-03 17:25 - 00000000 ____D C:\Program Files (x86)\Capcom
2013-07-03 16:56 - 2013-07-04 13:27 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\dp3d
2013-07-03 16:55 - 2013-07-04 09:16 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TopWare
2013-07-03 16:14 - 2013-07-03 16:14 - 00572424 _____ C:\Users\Thomas\Downloads\3245_TM2Ccrack.rar
2013-07-03 14:59 - 2013-07-03 14:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\EZDownloader
2013-07-03 14:36 - 2013-07-03 15:47 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part09.rar
2013-07-03 14:36 - 2013-07-03 15:42 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part08.rar
2013-07-03 14:36 - 2013-07-03 14:46 - 66298693 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part10.rar
2013-07-03 14:35 - 2013-07-03 15:53 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part05.rar
2013-07-03 14:35 - 2013-07-03 15:47 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part07.rar
2013-07-03 14:35 - 2013-07-03 15:45 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part03.rar
2013-07-03 14:35 - 2013-07-03 15:43 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part06.rar
2013-07-03 14:35 - 2013-07-03 15:42 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part04.rar
2013-07-03 14:35 - 2013-07-03 15:41 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part02.rar
2013-07-03 14:34 - 2013-07-03 15:41 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part01.rar
2013-07-03 14:22 - 2013-07-03 14:22 - 00001064 _____ C:\Users\Thomas\Desktop\VT4 - Verknüpfung.lnk
2013-07-03 14:20 - 2013-07-03 14:20 - 00000000 ____D C:\Users\Thomas\Documents\Virtua Tennis 4
2013-07-03 14:11 - 2013-07-03 14:11 - 00000000 ____D C:\Windows\SysWOW64\xlive
2013-07-03 14:11 - 2013-07-03 14:11 - 00000000 ____D C:\Users\Thomas\Documents\Games for Windows - LIVE Demos
2013-07-03 14:10 - 2013-07-05 15:55 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-07-03 14:09 - 2013-07-03 14:09 - 00541544 _____ (JooSoft GmbH) C:\Users\Thomas\Downloads\Downloader_fuer_Games_for_Windows_LIVE_3.5.exe
2013-07-03 14:02 - 2013-07-03 14:02 - 00007802 _____ C:\Users\Thomas\Downloads\xlive.dll_Recipester.zip
2013-07-03 13:53 - 2013-07-03 13:53 - 01624112 _____ (Bandoo Media Inc) C:\Users\Thomas\Downloads\iLividSetup-r362-n-bf.exe
2013-07-03 13:33 - 2013-07-03 13:33 - 04241280 _____ (Dll-Files.com                                               ) C:\Users\Thomas\Downloads\dffsetup-xlive.exe
2013-07-03 13:06 - 2013-07-03 13:19 - 408944640 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part2.rar
2013-07-03 13:06 - 2013-07-03 13:19 - 408944640 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part1.rar
2013-07-03 13:06 - 2013-07-03 13:14 - 163552364 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part3.rar
2013-07-03 12:29 - 2013-07-16 15:35 - 00000000 ____D C:\Users\Thomas\Documents\ManiaPlanet
2013-07-03 12:29 - 2013-07-03 12:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-07-03 12:28 - 2013-07-16 15:35 - 00000000 ____D C:\ProgramData\ManiaPlanet
2013-07-03 12:28 - 2013-07-03 16:31 - 00000000 ____D C:\Program Files (x86)\ManiaPlanet
2013-07-03 11:30 - 2013-07-03 11:30 - 00000000 ____D C:\Users\Thomas\AppData\Local\.inapptracking
2013-07-03 11:05 - 2013-07-03 11:05 - 08531968 _____ C:\Users\Thomas\Downloads\steaminstall_german.msi
2013-07-03 10:16 - 2013-07-03 10:16 - 00000824 _____ C:\Users\Public\Desktop\Sonic Generations.lnk
2013-07-03 09:57 - 2013-07-03 10:21 - 91530052 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part12.rar
2013-07-03 09:56 - 2013-07-03 10:29 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part05.rar
2013-07-03 09:56 - 2013-07-03 10:27 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part11.rar
2013-07-03 09:56 - 2013-07-03 10:27 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part10.rar
2013-07-03 09:56 - 2013-07-03 10:27 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part06.rar
2013-07-03 09:56 - 2013-07-03 10:26 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part09.rar
2013-07-03 09:56 - 2013-07-03 10:26 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part08.rar
2013-07-03 09:56 - 2013-07-03 10:26 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part07.rar
2013-07-03 09:55 - 2013-07-03 10:28 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part04.rar
2013-07-03 09:55 - 2013-07-03 10:28 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part03.rar
2013-07-03 09:55 - 2013-07-03 10:26 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part02.rar
2013-07-03 09:55 - 2013-07-03 10:23 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part01.rar
2013-07-03 09:44 - 2013-07-03 09:51 - 408944640 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part1.rar
2013-07-03 09:44 - 2013-07-03 09:48 - 151968579 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part3.rar
2013-07-03 08:10 - 2013-07-03 08:59 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part19.rar
2013-07-03 08:10 - 2013-07-03 08:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part18.rar
2013-07-03 08:10 - 2013-07-03 08:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part17.rar
2013-07-03 08:10 - 2013-07-03 08:47 - 309588453 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part20.rar
2013-07-03 08:09 - 2013-07-03 08:59 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part16.rar
2013-07-03 08:09 - 2013-07-03 08:59 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part12.rar
2013-07-03 08:09 - 2013-07-03 08:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part14.rar
2013-07-03 08:09 - 2013-07-03 08:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part15.rar
2013-07-03 08:09 - 2013-07-03 08:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part13.rar
2013-07-03 08:09 - 2013-07-03 08:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part11.rar
2013-07-03 08:08 - 2013-07-03 08:59 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part10.rar
2013-07-03 08:08 - 2013-07-03 08:55 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part09.rar
2013-07-03 07:57 - 2013-07-03 08:07 - 408944640 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part2.rar
2013-07-03 06:43 - 2013-07-13 19:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
         

Alt 17.07.2013, 08:12   #8
Tommytom77
 
w32 zero access entfernen ? - Standard

w32 zero access entfernen ?



FRST log 2/2

Code:
ATTFilter
44640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part08.rar
2013-07-02 22:19 - 2013-07-02 22:41 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part07.rar
2013-07-02 21:09 - 2013-07-02 21:31 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part06.rar
2013-07-02 19:36 - 2013-07-02 19:58 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part05.rar
2013-07-02 18:19 - 2013-07-02 18:42 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part04.rar
2013-07-02 17:14 - 2013-07-02 17:36 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part03.rar
2013-07-02 13:57 - 2013-07-02 14:19 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part02.rar
2013-07-02 09:01 - 2013-07-02 09:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part01(1).rar
2013-07-02 08:36 - 2013-07-02 08:36 - 00001184 _____ C:\Users\Thomas\Desktop\Rayman Origins.lnk
2013-07-02 08:04 - 2013-07-03 10:25 - 00000000 ____D C:\Users\Thomas\Documents\My Games
2013-07-02 08:03 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2013-07-02 08:03 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2013-07-02 08:03 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-07-02 08:03 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-07-02 08:03 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2013-07-02 08:03 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2013-07-02 08:03 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-07-02 08:03 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2013-07-02 08:03 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2013-07-02 08:03 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-07-02 08:03 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-07-02 08:03 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2013-07-02 08:03 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-07-02 08:03 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2013-07-02 08:03 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-07-02 08:03 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2013-07-02 08:03 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-07-02 08:03 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-07-02 08:03 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-07-02 08:03 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-07-02 08:03 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-07-02 08:03 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2013-07-02 08:03 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2013-07-02 08:03 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-07-02 08:03 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-07-02 08:03 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2013-07-02 08:03 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-07-02 08:03 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2013-07-02 08:03 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-07-02 08:03 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2013-07-02 08:03 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-07-02 08:03 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2013-07-02 08:03 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-07-02 08:03 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-07-02 08:03 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-07-02 08:03 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-07-02 08:03 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-07-02 08:03 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-07-02 08:03 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-07-02 08:03 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-07-02 08:03 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-07-02 08:03 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2013-07-02 08:03 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-07-02 08:03 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2013-07-02 08:03 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-07-02 08:03 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2013-07-02 08:03 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-07-02 08:03 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-07-02 08:03 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-07-02 08:03 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-07-02 08:03 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-07-02 08:03 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-07-02 08:03 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-07-02 08:03 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-07-02 08:03 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-07-02 08:03 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-07-02 08:03 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-07-02 08:03 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-07-02 08:03 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-07-02 08:03 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2013-07-02 08:03 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2013-07-02 08:03 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-07-02 08:03 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-07-02 08:03 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2013-07-02 08:03 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2013-07-02 08:03 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-07-02 08:03 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-07-02 08:03 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2013-07-02 08:03 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-07-02 08:03 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2013-07-02 08:03 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-07-02 08:03 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2013-07-02 08:03 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2013-07-02 08:03 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2013-07-02 08:03 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2013-07-02 08:03 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2013-07-02 08:03 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2013-07-02 08:03 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2013-07-02 08:03 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2013-07-02 08:03 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2013-07-02 08:03 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2013-07-02 08:03 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2013-07-02 08:03 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2013-07-02 08:03 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2013-07-02 08:03 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2013-07-02 08:03 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2013-07-02 08:03 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2013-07-02 08:03 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2013-07-02 08:03 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2013-07-02 08:03 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2013-07-02 08:03 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2013-07-02 08:03 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2013-07-02 08:03 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2013-07-02 08:03 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2013-07-02 08:03 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2013-07-02 08:03 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2013-07-02 08:03 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2013-07-02 08:03 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2013-07-02 08:02 - 2013-07-02 08:03 - 00010047 _____ C:\Windows\DirectX.log
2013-07-02 08:02 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2013-07-02 08:02 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2013-07-02 08:02 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2013-07-02 08:02 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2013-07-02 08:02 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2013-07-02 08:02 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2013-07-02 08:02 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2013-07-02 08:02 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2013-07-02 08:02 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2013-07-02 08:02 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2013-07-02 08:02 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2013-07-02 08:02 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2013-07-02 08:02 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2013-07-02 08:02 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2013-07-02 08:02 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-07-02 08:02 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2013-07-02 08:02 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2013-07-02 08:02 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2013-07-02 08:02 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2013-07-02 08:02 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2013-07-02 08:02 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2013-07-02 08:02 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2013-07-02 08:02 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-07-02 08:02 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2013-07-02 08:02 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-07-02 08:02 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2013-07-02 08:02 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2013-07-02 08:02 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-07-02 08:02 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-07-02 08:02 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2013-07-02 08:02 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-07-02 08:02 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2013-07-02 08:02 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-07-02 08:02 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2013-07-02 08:02 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2013-07-02 08:02 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-07-02 08:02 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-07-02 08:02 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-07-02 08:02 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2013-07-02 08:02 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2013-07-02 08:02 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2013-07-02 08:02 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-07-02 08:02 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-07-02 08:02 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2013-07-02 08:02 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-07-02 08:02 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2013-07-02 08:02 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-07-02 08:02 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2013-07-02 08:02 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-07-02 08:02 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2013-07-02 08:02 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-07-02 08:02 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2013-07-02 08:02 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-07-02 08:02 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2013-07-02 08:02 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-07-02 08:02 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2013-07-02 08:02 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-07-02 08:02 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2013-07-02 08:02 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-07-02 08:02 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2013-07-02 08:02 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-07-02 08:02 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2013-07-02 08:02 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-07-02 08:02 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2013-07-02 08:00 - 2013-07-02 08:02 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-07-02 07:59 - 2013-07-02 08:03 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-07-02 07:20 - 2013-07-08 11:46 - 00000000 ____D C:\Spiele
2013-07-02 06:28 - 2013-07-02 07:02 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part2.rar
2013-07-01 21:15 - 2013-07-01 21:49 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part1.rar
2013-07-01 19:30 - 2013-07-02 21:42 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware
2013-07-01 19:30 - 2013-07-02 21:40 - 00000000 ____D C:\Users\Thomas\Documents\Anti-Malware
2013-07-01 18:45 - 2013-07-01 18:45 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Malwarebytes
2013-07-01 18:45 - 2013-07-01 18:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-01 17:40 - 2013-07-01 21:05 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part3.rar
2013-07-01 17:39 - 2013-07-01 20:06 - 503317084 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part4.rar
2013-07-01 17:31 - 2013-07-02 21:41 - 00000000 ____D C:\Program Files (x86)\Qvo 6 Virus Removal Tool
2013-07-01 17:31 - 2013-04-11 16:12 - 00019392 _____ (Dll-Files.com) C:\Windows\system32\roboot64.exe
2013-07-01 17:31 - 2012-12-10 11:04 - 00356352 _____ (eSellerate Inc.) C:\Windows\eSellerateEngine.dll
2013-07-01 17:31 - 2012-12-10 11:04 - 00081920 _____ (eSellerate Inc.) C:\Windows\eSellerateControl350.dll
2013-07-01 17:31 - 2009-07-23 18:32 - 01122304 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\libeay32.dll
2013-07-01 17:31 - 2009-07-23 18:32 - 00274432 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\ssleay32.dll
2013-07-01 17:08 - 2013-07-01 17:08 - 00001078 _____ C:\Users\Thomas\Documents\strikeball.xpadderprofile
2013-07-01 15:56 - 2013-07-02 08:54 - 00001361 _____ C:\Users\Thomas\Documents\Strike Ball.xpaddercontroller
2013-07-01 15:36 - 2013-07-01 15:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\AlawarWrapper
2013-07-01 15:35 - 2013-07-01 15:39 - 00000000 ____D C:\Program Files (x86)\Alawar
2013-07-01 14:44 - 2013-07-01 15:06 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part01.rar
2013-07-01 13:53 - 2013-07-01 15:40 - 00000000 ____D C:\Program Files (x86)\data
2013-07-01 13:53 - 2013-07-01 13:53 - 00075915 _____ C:\Program Files (x86)\Uninstal.exe
2013-07-01 13:41 - 2013-06-30 22:30 - 00001910 _____ C:\Users\Thomas\Desktop\Strike Ball 2.lnk
2013-07-01 13:17 - 2013-07-01 13:17 - 00004462 _____ C:\Windows\System32\Tasks\Ad-Aware Antivirus Scheduled Scan
2013-07-01 13:17 - 2013-07-01 13:17 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\LavasoftStatistics
2013-07-01 13:17 - 2013-07-01 13:17 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus
2013-07-01 13:15 - 2013-07-08 08:18 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus
2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Lavasoft
2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Downloaded Installations
2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection
2013-07-01 13:14 - 2013-07-01 13:14 - 00000000 ____D C:\Program Files (x86)\Toolbar Cleaner
2013-07-01 13:12 - 2013-07-01 17:09 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Ad-Aware Antivirus
2013-07-01 13:12 - 2013-07-01 13:12 - 00047496 _____ (GFI Software) C:\Windows\system32\sbbd.exe
2013-07-01 13:12 - 2013-07-01 13:12 - 00014456 _____ (GFI Software) C:\Windows\system32\Drivers\gfibto.sys
2013-07-01 12:13 - 2013-07-01 12:29 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-01 12:13 - 2013-07-01 12:13 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-07-01 12:12 - 2013-07-01 12:30 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-07-01 12:12 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2013-07-01 12:00 - 2013-07-01 12:00 - 00000000 _____ C:\autoexec.bat
2013-07-01 11:58 - 2013-07-01 11:58 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-07-01 11:57 - 2013-07-01 12:28 - 00000000 ____D C:\Windows\BCD5545077AC4347B24F654B1189F8D4.TMP
2013-07-01 10:54 - 2013-07-14 19:00 - 00001749 _____ C:\Users\Thomas\Desktop\Xpadder.ini
2013-07-01 10:31 - 2013-07-01 10:43 - 00001361 _____ C:\Users\Thomas\My T Mini Wireless.xpaddercontroller
2013-07-01 07:36 - 2013-07-01 07:38 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DreamDale
2013-07-01 07:36 - 2013-07-01 07:37 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SmashFrenzy4
2013-07-01 07:35 - 2013-07-01 09:16 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CasualGameBox
2013-07-01 07:35 - 2013-07-01 09:16 - 00000000 ____D C:\Program Files (x86)\CasualGameBox
2013-07-01 06:55 - 2013-07-01 12:30 - 00000000 ____D C:\Users\Thomas\AppData\Local\MPCBrowser
2013-07-01 06:55 - 2013-07-01 11:43 - 00000000 ____D C:\Users\Thomas\AppData\Local\PlayFree Browser
2013-06-30 22:30 - 2013-07-01 13:44 - 00000000 ____D C:\Program Files (x86)\Strike Ball 2
2013-06-30 21:57 - 2013-07-01 15:15 - 00000000 ____D C:\Program Files (x86)\Strike Ball
2013-06-30 21:44 - 2013-06-30 21:52 - 00000000 ____D C:\Users\Thomas\Documents\Strike Ball Games Collection 1,2 & 3  (CRACKED) (DIRECT PLAY) [blaze69]
2013-06-30 21:11 - 2013-07-01 15:36 - 00000000 ____D C:\ProgramData\AlawarWrapper
2013-06-30 21:11 - 2013-07-01 09:38 - 00000000 ____D C:\Program Files (x86)\Alawar.de
2013-06-30 21:11 - 2013-06-30 21:11 - 00001141 _____ C:\Users\Thomas\Desktop\Strike Ball 3.lnk
2013-06-30 21:11 - 2013-06-30 21:11 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alawar.de
2013-06-30 21:11 - 2013-06-30 21:11 - 00000000 ____D C:\Users\Public\Documents\AlawarWrapper
2013-06-30 20:27 - 2013-06-30 20:27 - 00000000 ____D C:\Program Files (x86)\bfgclient
2013-06-30 20:25 - 2013-06-30 23:06 - 00000000 ____D C:\BigFishGamesCache
2013-06-30 19:56 - 2013-07-01 09:17 - 00000000 ____D C:\Program Files (x86)\MyPlayCity.com
2013-06-29 20:13 - 2013-06-29 20:13 - 00435979 _____ C:\Users\Thomas\Downloads\Xpadder5-3.zip
2013-06-29 20:13 - 2008-08-29 09:12 - 00932864 _____ C:\Users\Thomas\Desktop\Xpadder.exe
2013-06-29 19:53 - 2013-06-29 19:53 - 00000000 ____D C:\Program Files (x86)\Thrustmaster
2013-06-29 19:53 - 2007-04-16 10:56 - 00043520 _____ (Thrustmaster) C:\Windows\system32\tmffbdrv.dll
2013-06-29 19:53 - 2007-04-16 10:55 - 00156160 _____ (Thrustmaster) C:\Windows\system32\tmffbcpl.dll
2013-06-29 19:53 - 2007-04-16 10:55 - 00135168 _____ (Thrustmaster) C:\Windows\SysWOW64\tmffbcpl.dll
2013-06-29 19:53 - 2007-04-16 10:55 - 00034304 _____ (Thrustmaster) C:\Windows\SysWOW64\tmffbdrv.dll
2013-06-29 19:53 - 2007-01-20 04:44 - 00208304 _____ (Macrovision Corporation) C:\Windows\system32\isrt.dll
2013-06-29 19:53 - 2006-05-16 15:07 - 00099840 _____ (Macrovision Corporation) C:\Windows\system32\_IsRes.dll
2013-06-29 19:53 - 2005-09-09 11:16 - 00135168 _____ (Guillemot Corporation) C:\Windows\system32\GUStrLib.dll
2013-06-29 19:53 - 2005-01-28 12:49 - 00106496 _____ (Guillemot Corporation) C:\Windows\SysWOW64\GUStrLib.dll
2013-06-29 19:53 - 2003-02-21 05:42 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-06-29 19:52 - 2013-06-29 19:52 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\InstallShield
2013-06-29 19:41 - 2013-06-30 22:15 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Alawar
2013-06-29 19:41 - 2013-06-29 19:41 - 00000000 ____D C:\ProgramData\Intenium
2013-06-29 19:40 - 2013-07-01 09:14 - 00000000 ____D C:\Program Files (x86)\OXXOGames
2013-06-29 19:25 - 2013-06-29 19:25 - 00000000 ____D C:\Program Files (x86)\softendo.com
2013-06-29 18:28 - 2013-06-29 18:28 - 00004096 _____ C:\Windows\d3dx.dat
2013-06-29 18:28 - 2013-06-29 18:28 - 00000000 ____D C:\ProgramData\BlockBreaker
2013-06-29 17:07 - 2013-06-29 19:09 - 00000000 ____D C:\ProgramData\WildTangent
2013-06-29 14:37 - 2013-06-29 14:43 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\337 Wallpaper
2013-06-29 14:25 - 2013-07-01 09:07 - 00000000 ____D C:\Program Files (x86)\WinZipper
2013-06-29 14:25 - 2013-06-29 18:09 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\WinZipper
2013-06-29 14:24 - 2013-06-29 14:24 - 00000725 _____ C:\Users\Thomas\AppData\Local\recently-used.xbel
2013-06-27 09:51 - 2013-06-27 11:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-06-26 17:26 - 2013-06-26 17:26 - 00001000 _____ C:\Users\Public\Desktop\MPU 2012.lnk
2013-06-26 17:25 - 2013-06-26 17:26 - 00000000 ____D C:\Program Files (x86)\MPU 2012
2013-06-26 17:23 - 2013-06-26 17:23 - 00000000 ____D C:\Program Files (x86)\Smart Projects
2013-06-26 15:29 - 2013-06-30 18:08 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\.ABC
2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SSync
2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SCheck
2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Intermediate
2013-06-26 15:28 - 2013-06-26 15:28 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Common
2013-06-26 15:27 - 2013-06-26 15:27 - 00000000 ____D C:\Program Files (x86)\ABC
2013-06-26 14:31 - 2013-05-16 14:02 - 00829264 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll
2013-06-26 14:31 - 2013-05-16 14:02 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll
2013-06-22 17:51 - 2013-06-22 17:52 - 00000000 ____D C:\Users\Thomas\.dia
2013-06-22 17:50 - 2013-06-22 17:50 - 00000000 ____D C:\Program Files (x86)\Dia
2013-06-20 11:43 - 2013-07-08 20:23 - 00000118 _____ C:\Users\Thomas\Desktop\termin.txt

==================== One Month Modified Files and Folders =======

2013-07-17 08:52 - 2013-07-17 08:52 - 00002283 _____ C:\Users\Thomas\Desktop\JRT.txt
2013-07-17 08:48 - 2013-07-17 08:48 - 00000000 ____D C:\Windows\ERUNT
2013-07-17 08:46 - 2013-07-17 08:47 - 00558958 _____ (Oleg N. Scherbakov) C:\Users\Thomas\Desktop\JRT.exe
2013-07-17 08:46 - 2013-07-17 08:46 - 00558958 _____ (Oleg N. Scherbakov) C:\Users\Thomas\Downloads\JRT.exe
2013-07-17 08:43 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-17 08:43 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-17 08:36 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-17 08:35 - 2009-07-14 06:51 - 00094386 _____ C:\Windows\setupact.log
2013-07-17 08:34 - 2013-07-17 08:34 - 00023984 _____ C:\AdwCleaner[S1].txt
2013-07-17 08:34 - 2013-04-17 15:34 - 00000997 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-07-17 08:34 - 2013-04-17 15:23 - 01637246 _____ C:\Windows\WindowsUpdate.log
2013-07-17 08:32 - 2013-07-17 08:33 - 00662345 _____ C:\Users\Thomas\Desktop\adwcleaner.exe
2013-07-17 08:32 - 2013-07-17 08:32 - 00662345 _____ C:\Users\Thomas\Downloads\adwcleaner.exe
2013-07-17 07:56 - 2013-04-17 22:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-17 06:54 - 2013-07-15 18:04 - 00004130 _____ C:\Windows\System32\Tasks\Software Updater
2013-07-17 06:54 - 2013-07-15 18:04 - 00004092 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-07-16 16:02 - 2013-07-16 16:02 - 00038928 _____ C:\ComboFix.txt
2013-07-16 16:02 - 2013-07-16 15:39 - 00000000 ____D C:\Qoobox
2013-07-16 16:02 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-07-16 16:01 - 2013-07-16 15:38 - 00000000 ____D C:\Windows\erdnt
2013-07-16 15:58 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-07-16 15:57 - 2013-04-17 15:56 - 01151256 _____ C:\Windows\PFRO.log
2013-07-16 15:46 - 2013-07-16 15:41 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner (3)
2013-07-16 15:36 - 2013-07-16 12:59 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner (2)
2013-07-16 15:35 - 2013-07-03 12:29 - 00000000 ____D C:\Users\Thomas\Documents\ManiaPlanet
2013-07-16 15:35 - 2013-07-03 12:28 - 00000000 ____D C:\ProgramData\ManiaPlanet
2013-07-16 15:35 - 2013-05-30 20:57 - 00000000 ____D C:\Users\Thomas\Desktop\mucke
2013-07-16 15:32 - 2013-07-16 13:02 - 00000000 ____D C:\FRST
2013-07-16 15:26 - 2013-07-16 15:26 - 484631833 _____ C:\Windows\MEMORY.DMP
2013-07-16 15:26 - 2013-07-16 15:26 - 00275608 _____ C:\Windows\Minidump\071613-37206-01.dmp
2013-07-16 15:26 - 2013-04-19 08:14 - 00000000 ____D C:\Windows\Minidump
2013-07-16 15:24 - 2013-07-16 15:29 - 05089088 ____R (Swearware) C:\Users\Thomas\Desktop\ComboFix.exe
2013-07-16 15:24 - 2013-07-16 15:24 - 05089088 _____ (Swearware) C:\Users\Thomas\Downloads\ComboFix.exe
2013-07-16 13:36 - 2013-07-16 13:35 - 00027086 _____ C:\Users\Thomas\Desktop\FRST.zip
2013-07-16 13:04 - 2013-07-16 13:04 - 00022178 _____ C:\Users\Thomas\Desktop\Addition.txt
2013-07-16 12:59 - 2013-07-16 12:59 - 01778135 _____ (Farbar) C:\Users\Thomas\Desktop\FRST64.exe
2013-07-16 12:59 - 2013-07-16 12:58 - 01778135 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe
2013-07-16 12:44 - 2013-07-16 12:44 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64(2).exe
2013-07-16 11:59 - 2013-07-16 11:59 - 00019198 _____ C:\Users\Thomas\Desktop\VirusRemover.zip
2013-07-16 11:48 - 2013-07-16 11:48 - 00253425 _____ C:\Users\Thomas\Desktop\VirusRemover.log
2013-07-16 10:58 - 2013-07-16 10:59 - 03651120 _____ C:\Users\Thomas\Desktop\avg_remover_zeroaccess.exe
2013-07-16 10:58 - 2013-07-16 10:58 - 03651120 _____ C:\Users\Thomas\Downloads\avg_remover_zeroaccess.exe
2013-07-16 10:51 - 2013-07-16 10:51 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\QuickScan
2013-07-16 10:42 - 2013-07-16 10:42 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64(1).exe
2013-07-16 10:39 - 2013-07-16 10:39 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64.exe
2013-07-16 10:39 - 2013-07-16 10:39 - 00000036 _____ C:\Users\Thomas\AppData\Local\housecall.guid.cache
2013-07-16 10:29 - 2013-04-30 17:43 - 00000000 ____D C:\Users\Thomas\AppData\Local\CrashDumps
2013-07-16 10:25 - 2013-07-15 18:18 - 00003800 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2013-07-16 08:06 - 2013-07-08 07:45 - 00000000 ____D C:\Users\Thomas\AppData\Local\NPE
2013-07-16 07:58 - 2013-05-14 16:06 - 01600512 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2013-07-15 21:07 - 2013-07-15 21:07 - 05799944 _____ (ParetoLogic, Inc.) C:\Users\Thomas\Downloads\RegCureProSetup_RW.exe
2013-07-15 21:06 - 2013-07-15 21:06 - 00001205 _____ C:\Users\Thomas\Downloads\FixNCR.reg
2013-07-15 19:57 - 2013-04-17 15:32 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-15 19:43 - 2013-07-08 12:11 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD(2).ZIP
2013-07-15 19:40 - 2013-07-08 20:56 - 00002342 _____ C:\Users\Thomas\Downloads\NowSmart Cut v1.1 Patch by Team IREC.zip
2013-07-15 18:16 - 2013-04-19 20:32 - 00003583 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog
2013-07-15 18:14 - 2013-06-01 15:13 - 00000000 ____D C:\Program Files (x86)\Epson Software
2013-07-15 18:03 - 2013-07-15 18:03 - 00002563 _____ C:\Users\Public\Desktop\Free System Utilities.lnk
2013-07-15 18:03 - 2013-07-15 18:03 - 00000000 ____D C:\ProgramData\Package Cache
2013-07-15 18:03 - 2013-07-15 18:03 - 00000000 ____D C:\ProgramData\FreeSystemUtilities
2013-07-15 18:02 - 2013-07-15 18:02 - 00444408 _____ C:\Users\Thomas\Downloads\free-system-utilities-DE.exe
2013-07-15 18:01 - 2013-07-15 18:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\GlarySoft
2013-07-15 17:59 - 2013-07-15 17:59 - 00001184 _____ C:\Users\Thomas\Desktop\Registry Repair.lnk
2013-07-15 17:59 - 2013-07-15 17:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Glarysoft
2013-07-15 17:59 - 2013-07-15 17:59 - 00000000 ____D C:\Program Files (x86)\Glarysoft
2013-07-15 17:53 - 2013-04-17 15:46 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-14 19:00 - 2013-07-01 10:54 - 00001749 _____ C:\Users\Thomas\Desktop\Xpadder.ini
2013-07-14 18:42 - 2013-07-14 18:25 - 00001035 _____ C:\Users\Thomas\Desktop\ball.xpadderprofile
2013-07-14 18:12 - 2013-07-14 18:12 - 00001360 _____ C:\Users\Thomas\Desktop\My T Mini Wireless.xpaddercontroller
2013-07-13 19:49 - 2013-07-03 06:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-13 19:47 - 2013-07-13 19:47 - 00000000 ____D C:\Program Files (x86)\MSECache
2013-07-13 19:47 - 2013-07-08 19:58 - 00003238 _____ C:\Windows\System32\Tasks\Dealply
2013-07-13 19:45 - 2013-07-13 19:45 - 00012162 _____ C:\Users\Thomas\Downloads\mu0738.zip
2013-07-12 03:25 - 2009-07-14 06:45 - 00273288 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-12 03:07 - 2009-07-14 19:58 - 00696878 _____ C:\Windows\system32\perfh007.dat
2013-07-12 03:07 - 2009-07-14 19:58 - 00148174 _____ C:\Windows\system32\perfc007.dat
2013-07-12 03:07 - 2009-07-14 07:13 - 01634596 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-12 03:01 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 13:54 - 2013-06-14 10:35 - 00001470 _____ C:\Users\Thomas\Desktop\strom.txt
2013-07-11 08:11 - 2013-04-22 21:34 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 08:11 - 2013-04-22 21:34 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-11 00:19 - 2013-07-11 00:19 - 00000000 ____D C:\4a4b3f6258420da740c754
2013-07-09 17:14 - 2013-07-09 17:13 - 00000000 ____D C:\Windows\System32\Tasks\Norton 360
2013-07-09 17:08 - 2013-07-08 10:50 - 00003206 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-07-09 17:08 - 2013-07-08 10:49 - 00000000 ____D C:\Windows\system32\Drivers\N360x64
2013-07-09 13:11 - 2013-07-08 10:50 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-07-09 13:11 - 2013-07-08 10:50 - 00007631 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-07-08 20:58 - 2013-07-08 20:57 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner
2013-07-08 20:23 - 2013-06-20 11:43 - 00000118 _____ C:\Users\Thomas\Desktop\termin.txt
2013-07-08 11:46 - 2013-07-02 07:20 - 00000000 ____D C:\Spiele
2013-07-08 11:04 - 2013-07-08 11:04 - 00007053 _____ C:\Users\Thomas\Downloads\BFE-Repair-Windows-7.zip
2013-07-08 10:50 - 2013-07-08 10:50 - 00000000 ____D C:\Program Files\Symantec
2013-07-08 10:50 - 2013-07-08 10:50 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-07-08 10:49 - 2013-07-08 10:49 - 00000000 ____D C:\Program Files (x86)\Norton 360
2013-07-08 10:49 - 2013-04-17 15:51 - 00000000 ____D C:\ProgramData\Norton
2013-07-08 10:43 - 2013-07-08 10:39 - 154147384 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\norton_360_setup.exe
2013-07-08 10:30 - 2013-07-08 10:30 - 00867880 _____ C:\Users\Thomas\Downloads\Norton_Removal_Tool.exe
2013-07-08 10:28 - 2013-07-08 10:28 - 06260632 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NRnR(1).exe
2013-07-08 10:27 - 2013-07-08 10:27 - 06258072 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NRnR.exe
2013-07-08 10:22 - 2013-07-05 18:24 - 00002072 _____ C:\Users\Thomas\Documents\TombRaider.log
2013-07-08 08:31 - 2013-07-08 08:31 - 00347424 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\MicrosoftFixit.WindowsFirewall.RNP.Run.exe
2013-07-08 08:18 - 2013-07-01 13:15 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus
2013-07-08 08:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-07-08 07:57 - 2009-07-14 01:19 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2013-07-08 07:45 - 2013-07-08 07:45 - 02986440 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NPE.exe
2013-07-08 07:34 - 2013-07-08 07:34 - 00000000 ____D C:\TDSSKiller_Quarantine
2013-07-08 07:29 - 2013-07-08 07:29 - 02240864 _____ (Kaspersky Lab ZAO) C:\Users\Thomas\Downloads\tdsskiller.exe
2013-07-08 07:19 - 2013-04-17 15:32 - 00000000 ____D C:\Users\Thomas
2013-07-07 21:34 - 2013-07-07 21:34 - 00000000 ____D C:\ProgramData\Sophos
2013-07-07 21:33 - 2013-07-07 21:33 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sophos
2013-07-07 21:33 - 2013-07-07 21:33 - 00000000 ____D C:\Program Files (x86)\Sophos
2013-07-07 21:32 - 2013-07-07 21:31 - 73043664 _____ (Sophos Limited) C:\Users\Thomas\Downloads\Sophos Virus Removal Tool.exe
2013-07-07 21:14 - 2013-07-05 12:27 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD.ZIP
2013-07-07 21:14 - 2013-07-05 12:27 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD(1).ZIP
2013-07-07 19:03 - 2013-07-07 19:03 - 00001160 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2013-07-05 18:25 - 2013-07-05 18:25 - 00000000 ____D C:\Users\Thomas\AppData\Local\FLT
2013-07-05 18:21 - 2013-07-05 18:21 - 00001602 _____ C:\Users\Public\Desktop\Tomb Raider.lnk
2013-07-05 17:42 - 2013-07-05 17:42 - 00000000 ____D C:\Users\Thomas\Downloads\tomby
2013-07-05 17:07 - 2013-07-05 17:07 - 03030370 _____ C:\Users\Thomas\Downloads\KeygenBySkid_and_FULLTorrent.rar
2013-07-05 17:03 - 2013-07-05 17:03 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-07-05 15:55 - 2013-07-03 14:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-07-05 15:54 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-07-05 15:14 - 2013-07-05 14:35 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part27.rar
2013-07-05 12:29 - 2013-07-05 12:29 - 00000000 ____D C:\Users\Thomas\Documents\Test Drive Ferrari Racing Legends
2013-07-05 12:27 - 2013-07-05 12:27 - 00000000 ____D C:\Users\Thomas\Downloads\Neuer Ordner (2)
2013-07-05 11:11 - 2013-04-19 20:37 - 01590498 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-07-05 09:04 - 2013-07-04 22:26 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part12.rar
2013-07-05 09:04 - 2013-07-04 22:26 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part11.rar
2013-07-05 09:04 - 2013-07-04 22:25 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part05.rar
2013-07-05 09:04 - 2013-07-04 22:25 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part01.rar
2013-07-05 09:03 - 2013-07-04 22:27 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part17.rar
2013-07-05 09:03 - 2013-07-04 22:27 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part16.rar
2013-07-05 09:02 - 2013-07-04 22:25 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part04.rar
2013-07-05 09:02 - 2013-07-04 22:25 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part02.rar
2013-07-05 08:28 - 2013-07-04 22:26 - 11412720 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part07.rar
2013-07-05 08:28 - 2013-07-04 22:25 - 03014352 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part03.rar
2013-07-05 08:27 - 2013-07-04 22:27 - 03068076 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part15.rar
2013-07-05 08:27 - 2013-07-04 22:26 - 02252052 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part10.rar
2013-07-05 08:27 - 2013-07-04 22:26 - 02160576 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part09.rar
2013-07-05 08:27 - 2013-07-04 22:26 - 01862916 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part08.rar
2013-07-05 08:27 - 2013-07-04 22:25 - 01598652 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part06.rar
2013-07-05 08:26 - 2013-07-04 23:14 - 01446192 _____ C:\Users\Thomas\Downloads\sfn.part01.rar
2013-07-05 00:54 - 2013-07-04 22:27 - 218102557 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part19.rar
2013-07-05 00:04 - 2013-07-04 23:19 - 136860406 _____ C:\Users\Thomas\Downloads\sfn.part18.rar
2013-07-04 21:55 - 2013-07-04 10:52 - 00000036 _____ C:\Windows\mafosav.INI
2013-07-04 19:54 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part4.rar
2013-07-04 19:54 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part3.rar
2013-07-04 19:53 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part5.rar
2013-07-04 19:53 - 2013-07-04 19:14 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part1.rar
2013-07-04 19:52 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part2.rar
2013-07-04 19:51 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part6.rar
2013-07-04 19:51 - 2013-07-04 19:13 - 413627629 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part2.rar
2013-07-04 19:49 - 2013-07-04 19:15 - 355045600 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part7.rar
2013-07-04 19:48 - 2013-07-04 19:13 - 413958462 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part1.rar
2013-07-04 19:46 - 2013-07-04 19:13 - 349345391 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part3.rar
2013-07-04 16:54 - 2013-07-04 16:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part14.rar
2013-07-04 16:54 - 2013-07-04 16:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part13.rar
2013-07-04 16:53 - 2013-07-04 16:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part18.rar
2013-07-04 16:04 - 2013-07-04 15:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part32.rar
2013-07-04 16:04 - 2013-07-04 15:30 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part31.rar
2013-07-04 16:03 - 2013-07-04 15:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part33.rar
2013-07-04 16:02 - 2013-07-04 15:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part34.rar
2013-07-04 16:02 - 2013-07-04 15:29 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part04.rar
2013-07-04 15:53 - 2013-07-04 15:31 - 210902382 _____ C:\Users\Thomas\Downloads\tomby.part35.rar
2013-07-04 15:51 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part26.rar
2013-07-04 15:51 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part02.rar
2013-07-04 15:50 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part23.rar
2013-07-04 15:47 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part25.rar
2013-07-04 15:47 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part09.rar
2013-07-04 15:47 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part08.rar
2013-07-04 15:20 - 2013-07-04 11:10 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part30.rar
2013-07-04 15:20 - 2013-07-04 11:10 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part29.rar
2013-07-04 15:20 - 2013-07-04 11:10 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part28.rar
2013-07-04 15:20 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part20.rar
2013-07-04 15:19 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part22.rar
2013-07-04 15:19 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part17.rar
2013-07-04 15:19 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part07.rar
2013-07-04 15:19 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part03.rar
2013-07-04 15:18 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part21.rar
2013-07-04 15:18 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part16.rar
2013-07-04 15:18 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part11.rar
2013-07-04 15:16 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part12.rar
2013-07-04 15:15 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part24.rar
2013-07-04 15:15 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part01.rar
2013-07-04 15:14 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part19.rar
2013-07-04 15:14 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part10.rar
2013-07-04 15:14 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part05.rar
2013-07-04 15:13 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part15.rar
2013-07-04 15:13 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part06.rar
2013-07-04 13:27 - 2013-07-03 16:56 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\dp3d
2013-07-04 12:58 - 2013-07-04 12:56 - 01945127 _____ C:\Users\Thomas\Downloads\blAde-DP3DVaDCUcrk(1).rar
2013-07-04 12:56 - 2013-07-04 12:54 - 01945127 _____ C:\Users\Thomas\Downloads\blAde-DP3DVaDCUcrk.rar
2013-07-04 12:31 - 2013-07-04 12:31 - 00270436 _____ C:\Users\Thomas\Downloads\GotClip_Setup.exe
2013-07-04 10:57 - 2013-07-04 07:36 - 00000000 ____D C:\SMBX
2013-07-04 10:27 - 2013-07-04 10:27 - 00001027 _____ C:\Users\Public\Desktop\Mario Forever.lnk
2013-07-04 10:27 - 2013-07-04 10:27 - 00000000 ____D C:\Program Files (x86)\Mario Forever
2013-07-04 10:26 - 2013-07-04 10:26 - 19438312 _____ C:\Users\Thomas\Downloads\Install_Mario_Forever_5_9.exe
2013-07-04 09:34 - 2013-07-04 09:34 - 00003120 _____ C:\Windows\System32\Tasks\YourFile DownloaderUpdate
2013-07-04 09:16 - 2013-07-03 16:55 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TopWare
2013-07-04 08:27 - 2013-01-07 12:00 - 00535008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp110.dll
2013-07-04 08:26 - 2013-07-04 08:26 - 00159228 _____ C:\Users\Thomas\Downloads\msvcp110.zip
2013-07-04 08:26 - 2013-05-24 10:11 - 00875472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr110.dll
2013-07-04 08:21 - 2013-07-04 08:21 - 00474830 _____ C:\Users\Thomas\Downloads\msvcr110.zip
2013-07-04 08:14 - 2013-07-04 08:14 - 00115691 _____ C:\Users\Thomas\Downloads\Pinball FX2_LumaEmu.rar
2013-07-04 08:06 - 2013-07-04 08:06 - 00000000 ____D C:\ProgramData\RELOADED
2013-07-04 07:36 - 2013-07-04 07:36 - 00000550 _____ C:\Users\Public\Desktop\Super Mario Bros. X.lnk
2013-07-04 07:34 - 2013-07-04 07:34 - 00541544 _____ (JooSoft GmbH) C:\Users\Thomas\Downloads\Downloader_fuer_Super_Mario_Bros._X_1.3.exe
2013-07-03 22:57 - 2013-07-03 22:24 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part08.rar
2013-07-03 22:57 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part06.rar
2013-07-03 22:57 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part05.rar
2013-07-03 22:57 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part03.rar
2013-07-03 22:56 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part07.rar
2013-07-03 22:56 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part04.rar
2013-07-03 22:54 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part02.rar
2013-07-03 22:52 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part01.rar
2013-07-03 22:24 - 2013-07-03 22:24 - 06362382 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part09.rar
2013-07-03 20:32 - 2013-07-03 19:08 - 209715200 _____ C:\Users\Thomas\Downloads\Jump.Jack.2.German-Bamboocha(1).rar
2013-07-03 19:50 - 2013-04-02 11:27 - 00105808 _____ (Valve Corporation) C:\Windows\SysWOW64\steam_api.dll
2013-07-03 19:49 - 2013-07-03 19:49 - 04241280 _____ (Dll-Files.com                                               ) C:\Users\Thomas\Downloads\dffsetup-steam_api.exe
2013-07-03 19:43 - 2013-07-03 19:20 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part5.rar
2013-07-03 19:43 - 2013-07-03 19:19 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part2.rar
2013-07-03 19:42 - 2013-07-03 19:46 - 00062976 _____ C:\Windows\system32\steam_api.dll
2013-07-03 19:42 - 2013-07-03 19:42 - 00062976 _____ C:\Users\Thomas\Downloads\steam_api.dll
2013-07-03 19:42 - 2013-07-03 19:19 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part4.rar
2013-07-03 19:42 - 2013-07-03 19:19 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part3.rar
2013-07-03 19:41 - 2013-07-03 19:19 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part1.rar
2013-07-03 19:33 - 2013-07-03 19:33 - 00055394 _____ C:\Users\Thomas\Downloads\steam_api.zip
2013-07-03 19:25 - 2013-07-03 19:25 - 00001621 _____ C:\Users\Public\Desktop\Pinball FX2.lnk
2013-07-03 19:22 - 2013-07-03 19:20 - 40211239 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part6.rar
2013-07-03 19:17 - 2013-07-03 18:53 - 524288000 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part1.rar
2013-07-03 19:15 - 2013-07-03 18:53 - 524288000 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part2.rar
2013-07-03 19:06 - 2013-07-03 18:07 - 00000508 _____ C:\Users\Thomas\Downloads\Jump.Jack.2.German-Bamboocha.rar
2013-07-03 19:01 - 2013-07-03 19:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Namco
2013-07-03 18:59 - 2013-07-03 18:58 - 05081786 _____ C:\Users\Thomas\Downloads\Pacman.v1.0.Cracked-F4CG.rar
2013-07-03 18:59 - 2013-07-03 18:53 - 157824496 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part3.rar
2013-07-03 17:55 - 2013-07-03 17:55 - 00000000 ____D C:\Users\Thomas\Documents\CAPCOM
2013-07-03 17:35 - 2013-04-17 15:56 - 00060432 _____ C:\Users\Thomas\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-03 17:34 - 2013-07-03 17:34 - 00002077 _____ C:\Users\Public\Desktop\Street Fighter X Tekken.lnk
2013-07-03 17:33 - 2013-07-03 17:33 - 00100501 _____ C:\Users\Thomas\Downloads\STREET.FIGHTER.X.TEKKEN.V1.0.ALL.THETA.NODVD.ZIP
2013-07-03 17:25 - 2013-07-03 17:25 - 00000000 ____D C:\Program Files (x86)\Capcom
2013-07-03 16:31 - 2013-07-03 12:28 - 00000000 ____D C:\Program Files (x86)\ManiaPlanet
2013-07-03 16:14 - 2013-07-03 16:14 - 00572424 _____ C:\Users\Thomas\Downloads\3245_TM2Ccrack.rar
2013-07-03 15:53 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part05.rar
2013-07-03 15:47 - 2013-07-03 14:36 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part09.rar
2013-07-03 15:47 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part07.rar
2013-07-03 15:45 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part03.rar
2013-07-03 15:43 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part06.rar
2013-07-03 15:42 - 2013-07-03 14:36 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part08.rar
2013-07-03 15:42 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part04.rar
2013-07-03 15:41 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part02.rar
2013-07-03 15:41 - 2013-07-03 14:34 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part01.rar
2013-07-03 14:59 - 2013-07-03 14:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\EZDownloader
2013-07-03 14:46 - 2013-07-03 14:36 - 66298693 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part10.rar
2013-07-03 14:22 - 2013-07-03 14:22 - 00001064 _____ C:\Users\Thomas\Desktop\VT4 - Verknüpfung.lnk
2013-07-03 14:20 - 2013-07-03 14:20 - 00000000 ____D C:\Users\Thomas\Documents\Virtua Tennis 4
2013-07-03 14:11 - 2013-07-03 14:11 - 00000000 ____D C:\Windows\SysWOW64\xlive
2013-07-03 14:11 - 2013-07-03 14:11 - 00000000 ____D C:\Users\Thomas\Documents\Games for Windows - LIVE Demos
2013-07-03 14:09 - 2013-07-03 14:09 - 00541544 _____ (JooSoft GmbH) C:\Users\Thomas\Downloads\Downloader_fuer_Games_for_Windows_LIVE_3.5.exe
2013-07-03 14:02 - 2013-07-03 14:02 - 00007802 _____ C:\Users\Thomas\Downloads\xlive.dll_Recipester.zip
2013-07-03 13:53 - 2013-07-03 13:53 - 01624112 _____ (Bandoo Media Inc) C:\Users\Thomas\Downloads\iLividSetup-r362-n-bf.exe
2013-07-03 13:33 - 2013-07-03 13:33 - 04241280 _____ (Dll-Files.com                                               ) C:\Users\Thomas\Downloads\dffsetup-xlive.exe
2013-07-03 13:19 - 2013-07-03 13:06 - 408944640 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part2.rar
2013-07-03 13:19 - 2013-07-03 13:06 - 408944640 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part1.rar
2013-07-03 13:14 - 2013-07-03 13:06 - 163552364 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part3.rar
2013-07-03 12:29 - 2013-07-03 12:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-07-03 12:29 - 2013-04-17 15:32 - 00000000 ____D C:\Users\Thomas\AppData\Local\VirtualStore
2013-07-03 11:30 - 2013-07-03 11:30 - 00000000 ____D C:\Users\Thomas\AppData\Local\.inapptracking
2013-07-03 11:05 - 2013-07-03 11:05 - 08531968 _____ C:\Users\Thomas\Downloads\steaminstall_german.msi
2013-07-03 10:33 - 2013-04-17 15:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-03 10:29 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part05.rar
2013-07-03 10:28 - 2013-07-03 09:55 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part04.rar
2013-07-03 10:28 - 2013-07-03 09:55 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part03.rar
2013-07-03 10:27 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part11.rar
2013-07-03 10:27 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part10.rar
2013-07-03 10:27 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part06.rar
2013-07-03 10:26 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part09.rar
2013-07-03 10:26 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part08.rar
2013-07-03 10:26 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part07.rar
2013-07-03 10:26 - 2013-07-03 09:55 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part02.rar
2013-07-03 10:25 - 2013-07-02 08:04 - 00000000 ____D C:\Users\Thomas\Documents\My Games
2013-07-03 10:23 - 2013-07-03 09:55 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part01.rar
2013-07-03 10:21 - 2013-07-03 09:57 - 91530052 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part12.rar
2013-07-03 10:16 - 2013-07-03 10:16 - 00000824 _____ C:\Users\Public\Desktop\Sonic Generations.lnk
2013-07-03 09:51 - 2013-07-03 09:44 - 408944640 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part1.rar
2013-07-03 09:48 - 2013-07-03 09:44 - 151968579 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part3.rar
2013-07-03 08:59 - 2013-07-03 08:10 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part19.rar
2013-07-03 08:59 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part16.rar
2013-07-03 08:59 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part12.rar
2013-07-03 08:59 - 2013-07-03 08:08 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part10.rar
2013-07-03 08:57 - 2013-07-03 08:10 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part18.rar
2013-07-03 08:57 - 2013-07-03 08:10 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part17.rar
2013-07-03 08:57 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part14.rar
2013-07-03 08:56 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part15.rar
2013-07-03 08:56 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part13.rar
2013-07-03 08:56 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part11.rar
2013-07-03 08:55 - 2013-07-03 08:08 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part09.rar
2013-07-03 08:47 - 2013-07-03 08:10 - 309588453 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part20.rar
2013-07-03 08:07 - 2013-07-03 07:57 - 408944640 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part2.rar
2013-07-03 07:00 - 2013-07-03 06:38 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part08.rar
2013-07-02 22:41 - 2013-07-02 22:19 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part07.rar
2013-07-02 21:42 - 2013-07-01 19:30 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware
2013-07-02 21:41 - 2013-07-01 17:31 - 00000000 ____D C:\Program Files (x86)\Qvo 6 Virus Removal Tool
2013-07-02 21:40 - 2013-07-01 19:30 - 00000000 ____D C:\Users\Thomas\Documents\Anti-Malware
2013-07-02 21:31 - 2013-07-02 21:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part06.rar
2013-07-02 19:58 - 2013-07-02 19:36 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part05.rar
2013-07-02 18:42 - 2013-07-02 18:19 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part04.rar
2013-07-02 17:36 - 2013-07-02 17:14 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part03.rar
2013-07-02 14:19 - 2013-07-02 13:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part02.rar
2013-07-02 09:23 - 2013-07-02 09:01 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part01(1).rar
2013-07-02 08:54 - 2013-07-01 15:56 - 00001361 _____ C:\Users\Thomas\Documents\Strike Ball.xpaddercontroller
2013-07-02 08:36 - 2013-07-02 08:36 - 00001184 _____ C:\Users\Thomas\Desktop\Rayman Origins.lnk
2013-07-02 08:03 - 2013-07-02 08:02 - 00010047 _____ C:\Windows\DirectX.log
2013-07-02 08:03 - 2013-07-02 07:59 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-07-02 08:02 - 2013-07-02 08:00 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-07-02 07:02 - 2013-07-02 06:28 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part2.rar
2013-07-01 21:49 - 2013-07-01 21:15 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part1.rar
2013-07-01 21:05 - 2013-07-01 17:40 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part3.rar
2013-07-01 20:06 - 2013-07-01 17:39 - 503317084 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part4.rar
2013-07-01 18:45 - 2013-07-01 18:45 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Malwarebytes
2013-07-01 18:45 - 2013-07-01 18:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-01 17:09 - 2013-07-01 13:12 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Ad-Aware Antivirus
2013-07-01 17:08 - 2013-07-01 17:08 - 00001078 _____ C:\Users\Thomas\Documents\strikeball.xpadderprofile
2013-07-01 15:40 - 2013-07-01 13:53 - 00000000 ____D C:\Program Files (x86)\data
2013-07-01 15:39 - 2013-07-01 15:35 - 00000000 ____D C:\Program Files (x86)\Alawar
2013-07-01 15:36 - 2013-07-01 15:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\AlawarWrapper
2013-07-01 15:36 - 2013-06-30 21:11 - 00000000 ____D C:\ProgramData\AlawarWrapper
2013-07-01 15:15 - 2013-06-30 21:57 - 00000000 ____D C:\Program Files (x86)\Strike Ball
2013-07-01 15:06 - 2013-07-01 14:44 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part01.rar
2013-07-01 13:53 - 2013-07-01 13:53 - 00075915 _____ C:\Program Files (x86)\Uninstal.exe
2013-07-01 13:44 - 2013-06-30 22:30 - 00000000 ____D C:\Program Files (x86)\Strike Ball 2
2013-07-01 13:17 - 2013-07-01 13:17 - 00004462 _____ C:\Windows\System32\Tasks\Ad-Aware Antivirus Scheduled Scan
2013-07-01 13:17 - 2013-07-01 13:17 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\LavasoftStatistics
2013-07-01 13:17 - 2013-07-01 13:17 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus
2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Lavasoft
2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Downloaded Installations
2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection
2013-07-01 13:14 - 2013-07-01 13:14 - 00000000 ____D C:\Program Files (x86)\Toolbar Cleaner
2013-07-01 13:12 - 2013-07-01 13:12 - 00047496 _____ (GFI Software) C:\Windows\system32\sbbd.exe
2013-07-01 13:12 - 2013-07-01 13:12 - 00014456 _____ (GFI Software) C:\Windows\system32\Drivers\gfibto.sys
2013-07-01 12:30 - 2013-07-01 12:12 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-07-01 12:30 - 2013-07-01 06:55 - 00000000 ____D C:\Users\Thomas\AppData\Local\MPCBrowser
2013-07-01 12:29 - 2013-07-01 12:13 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-01 12:28 - 2013-07-01 11:57 - 00000000 ____D C:\Windows\BCD5545077AC4347B24F654B1189F8D4.TMP
2013-07-01 12:28 - 2013-05-01 21:55 - 00000000 ____D C:\Windows\system32\appmgmt
2013-07-01 12:13 - 2013-07-01 12:13 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-07-01 12:00 - 2013-07-01 12:00 - 00000000 _____ C:\autoexec.bat
2013-07-01 11:58 - 2013-07-01 11:58 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-07-01 11:43 - 2013-07-01 06:55 - 00000000 ____D C:\Users\Thomas\AppData\Local\PlayFree Browser
2013-07-01 10:43 - 2013-07-01 10:31 - 00001361 _____ C:\Users\Thomas\My T Mini Wireless.xpaddercontroller
2013-07-01 09:38 - 2013-06-30 21:11 - 00000000 ____D C:\Program Files (x86)\Alawar.de
2013-07-01 09:17 - 2013-06-30 19:56 - 00000000 ____D C:\Program Files (x86)\MyPlayCity.com
2013-07-01 09:16 - 2013-07-01 07:35 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CasualGameBox
2013-07-01 09:16 - 2013-07-01 07:35 - 00000000 ____D C:\Program Files (x86)\CasualGameBox
2013-07-01 09:14 - 2013-06-29 19:40 - 00000000 ____D C:\Program Files (x86)\OXXOGames
2013-07-01 09:07 - 2013-06-29 14:25 - 00000000 ____D C:\Program Files (x86)\WinZipper
2013-07-01 09:07 - 2013-04-19 20:37 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\player
2013-07-01 07:38 - 2013-07-01 07:36 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DreamDale
2013-07-01 07:37 - 2013-07-01 07:36 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SmashFrenzy4
2013-06-30 23:06 - 2013-06-30 20:25 - 00000000 ____D C:\BigFishGamesCache
2013-06-30 22:30 - 2013-07-01 13:41 - 00001910 _____ C:\Users\Thomas\Desktop\Strike Ball 2.lnk
2013-06-30 22:15 - 2013-06-29 19:41 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Alawar
2013-06-30 21:52 - 2013-06-30 21:44 - 00000000 ____D C:\Users\Thomas\Documents\Strike Ball Games Collection 1,2 & 3  (CRACKED) (DIRECT PLAY) [blaze69]
2013-06-30 21:11 - 2013-06-30 21:11 - 00001141 _____ C:\Users\Thomas\Desktop\Strike Ball 3.lnk
2013-06-30 21:11 - 2013-06-30 21:11 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alawar.de
2013-06-30 21:11 - 2013-06-30 21:11 - 00000000 ____D C:\Users\Public\Documents\AlawarWrapper
2013-06-30 20:27 - 2013-06-30 20:27 - 00000000 ____D C:\Program Files (x86)\bfgclient
2013-06-30 18:08 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\.ABC
2013-06-29 20:13 - 2013-06-29 20:13 - 00435979 _____ C:\Users\Thomas\Downloads\Xpadder5-3.zip
2013-06-29 19:53 - 2013-06-29 19:53 - 00000000 ____D C:\Program Files (x86)\Thrustmaster
2013-06-29 19:52 - 2013-06-29 19:52 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\InstallShield
2013-06-29 19:41 - 2013-06-29 19:41 - 00000000 ____D C:\ProgramData\Intenium
2013-06-29 19:25 - 2013-06-29 19:25 - 00000000 ____D C:\Program Files (x86)\softendo.com
2013-06-29 19:09 - 2013-06-29 17:07 - 00000000 ____D C:\ProgramData\WildTangent
2013-06-29 18:28 - 2013-06-29 18:28 - 00004096 _____ C:\Windows\d3dx.dat
2013-06-29 18:28 - 2013-06-29 18:28 - 00000000 ____D C:\ProgramData\BlockBreaker
2013-06-29 18:09 - 2013-06-29 14:25 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\WinZipper
2013-06-29 14:43 - 2013-06-29 14:37 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\337 Wallpaper
2013-06-29 14:25 - 2011-02-19 23:03 - 00421032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp100.dll
2013-06-29 14:24 - 2013-06-29 14:24 - 00000725 _____ C:\Users\Thomas\AppData\Local\recently-used.xbel
2013-06-28 10:22 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-27 11:01 - 2013-06-27 09:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-06-26 17:26 - 2013-06-26 17:26 - 00001000 _____ C:\Users\Public\Desktop\MPU 2012.lnk
2013-06-26 17:26 - 2013-06-26 17:25 - 00000000 ____D C:\Program Files (x86)\MPU 2012
2013-06-26 17:23 - 2013-06-26 17:23 - 00000000 ____D C:\Program Files (x86)\Smart Projects
2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SSync
2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SCheck
2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Intermediate
2013-06-26 15:28 - 2013-06-26 15:28 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Common
2013-06-26 15:27 - 2013-06-26 15:27 - 00000000 ____D C:\Program Files (x86)\ABC
2013-06-24 19:01 - 2013-04-19 20:36 - 00001088 _____ C:\Windows\KB893803v2.log
2013-06-24 18:53 - 2011-02-19 00:40 - 00773712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100.dll
2013-06-22 17:52 - 2013-06-22 17:51 - 00000000 ____D C:\Users\Thomas\.dia
2013-06-22 17:50 - 2013-06-22 17:50 - 00000000 ____D C:\Program Files (x86)\Dia

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-13 22:12

==================== End Of Log ============================
         

MFG Tom

Alt 17.07.2013, 08:29   #9
schrauber
/// the machine
/// TB-Ausbilder
 

w32 zero access entfernen ? - Standard

w32 zero access entfernen ?



Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
Winsock: Catalog5 01 %SystemRoot%\System32\mswsock.dll [232448] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [326144] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
CHR Extension: (SEaaroch-NaewTaib) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gabakelkhlkfbibdngkjmmpnhkjkogch\1
CHR Extension: (OfferMosquito) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\0.4.1_0
CHR Extension: (SeaariCh-NNewTAib) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\jebbilelhgjmofbjmfaocdglilladgpf\1
CHR Extension: (ssaafe  saave) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\klpibhpiooemnakpklemdcbhldoojjjg\1
CHR Extension: (SEEarchh-iNewTab) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcjhhcdhfamdklpdjdjgnokfkhnmnfnb\1
CHR Extension: (suaafEE ssave) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pakblkgcmhjcpfedglmhojonabkjjemp\1
CHR Extension: (sayfEE osyAve) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdncopncngigainmcdjndjihapgiboef\1
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
2013-07-08 19:58 - 2013-07-13 19:47 - 00003238 _____ C:\Windows\System32\Tasks\Dealply
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 17.07.2013, 11:49   #10
Tommytom77
 
w32 zero access entfernen ? - Standard

w32 zero access entfernen ?



hier die fixlog.txt


Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-07-2013 02
Ran by Thomas at 2013-07-17 11:36:53 Run:2
Running from C:\Users\Thomas\Desktop
Boot Mode: Normal
==============================================

Winsock: Catalog5 entry 000000000001\\LibraryPath  was set successfully to %SystemRoot%\system32\NLAapi.dll
Winsock: Catalog5-x64 entry 000000000001\\LibraryPath  was set successfully to %SystemRoot%\system32\NLAapi.dll
C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gabakelkhlkfbibdngkjmmpnhkjkogch => Moved successfully.
C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk => Moved successfully.
C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\jebbilelhgjmofbjmfaocdglilladgpf => Moved successfully.
C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\klpibhpiooemnakpklemdcbhldoojjjg => Moved successfully.
C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcjhhcdhfamdklpdjdjgnokfkhnmnfnb => Moved successfully.
C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pakblkgcmhjcpfedglmhojonabkjjemp => Moved successfully.
C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdncopncngigainmcdjndjihapgiboef => Moved successfully.
esgiguard => Service deleted successfully.
C:\Windows\System32\Tasks\Dealply => Moved successfully.

==== End of Fixlog ====
         
hier die log.txt vom eset scanner



Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=9bea8be20ceb8d49bd300502fa76e2aa
# engine=14427
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-07-17 10:37:20
# local_time=2013-07-17 12:37:20 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=3592 16777213 100 91 561990 124719936 0 0
# compatibility_mode=5893 16776574 100 94 12071 125687290 0 0
# scanned=153188
# found=6
# cleaned=0
# scan_time=3075
sh=6EC29E5CD2566E483C7974B0FA9C168DA2DF2E26 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\FRST\Quarantine\gabakelkhlkfbibdngkjmmpnhkjkogch\1\51d42a8a022473.12063695.js"
sh=9C0B3A55BB2CA23A9803ADFC59EF2D32EA367ADE ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\FRST\Quarantine\jebbilelhgjmofbjmfaocdglilladgpf\1\51da8df6240b19.32154066.js"
sh=F00D179A085E03D0302FEC88942883AD47E0269E ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\FRST\Quarantine\klpibhpiooemnakpklemdcbhldoojjjg\1\51da8dcbe8ae69.12509569.js"
sh=45D92F5397C134F0786D6D2475E0BB4DA2C1B46A ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\FRST\Quarantine\mcjhhcdhfamdklpdjdjgnokfkhnmnfnb\1\51d9a609f0d003.72095747.js"
sh=584A9A5783A2698CD240740AFDBF934F9AD995CB ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\FRST\Quarantine\pakblkgcmhjcpfedglmhojonabkjjemp\1\51d42a18c76b50.67952827.js"
sh=F75871ADACA6B84D19D968EDE7C3C5164CD2F0DA ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\FRST\Quarantine\pdncopncngigainmcdjndjihapgiboef\1\51d9a5eecc92c3.64024319.js"
         
und hier die checkup.txt von SecurityCheck


Code:
ATTFilter
 Results of screen317's Security Check version 0.99.69  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
Lavasoft Ad-Aware   
Norton 360 Online   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Spybot - Search & Destroy 
 Adobe Flash Player 11.7.700.224  
 Adobe Reader XI  
 Mozilla Firefox (22.0) 
 Mozilla Thunderbird (17.0.7) 
````````Process Check: objlist.exe by Laurent````````  
 Norton ccSvcHst.exe 
 Spybot Teatimer.exe is disabled! 
 Ad-Aware Antivirus AdAwareService.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

Alt 17.07.2013, 11:57   #11
schrauber
/// the machine
/// TB-Ausbilder
 

w32 zero access entfernen ? - Standard

w32 zero access entfernen ?



frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 17.07.2013, 12:01   #12
Tommytom77
 
w32 zero access entfernen ? - Standard

w32 zero access entfernen ?



ein frisches FRST log

1/2

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-07-2013 02
Ran by Thomas (administrator) on 17-07-2013 12:54:14
Running from C:\Users\Thomas\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
(Lavasoft Limited) C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe
(VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKCU\...\Run: [Personal ID] - C:\COOLSP~1\PERSON~1\PID.EXE [1134008 2009-03-04] (coolspot AG, Düsseldorf)
HKCU\...\Run: [SCheck] - "C:\Users\Thomas\AppData\Roaming\SCheck\SCheck.exe" check  [36864 2013-04-10] ()
HKCU\...\Run: [SSync] - "C:\Users\Thomas\AppData\Roaming\SSync\SSync.exe" [36864 2013-04-10] ()
HKCU\...\Run: [Intermediate] - "C:\Users\Thomas\AppData\Roaming\Intermediate\Intermediate.exe" [36864 2013-04-10] ()
HKCU\...\Run: [Spybot-S&D Cleaning] - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean [3642312 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [5015040 2012-02-09] (VIA)
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [98304 2010-02-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SDTray] - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [3830224 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Ad-Aware Browsing Protection] - "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe" [554408 2013-05-15] (Lavasoft)
HKLM-x32\...\Run: [Ad-Aware Antivirus] - "C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareLauncher" --windows-run [x]

==================== Internet (Whitelisted) ====================

ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:tabs
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:tabs
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: No Name - {32E3F0F9-F877-9DFF-AD4E-BFB58068F278} -  No File
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\Thomas\AppData\Roaming\Mozilla\Extensions\{C4A4F5A0-4B89-4392-AFAC-D58010E349AF}
FF Extension: DoNotTrackMe - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\donottrackplus@abine.com
FF Extension: SeaariCh-NNewTAib - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\eeey.i@jgpjjdk.net
FF Extension: pricealarm - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
FF Extension: suaafEE ssave - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\iuq6dmgwr@uuyyoopqeeue.org
FF Extension: sayfEE osyAve - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\sbz2uue@lyyeo.net
FF Extension: SEEarchh-iNewTab - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\uoioji5o@ioeeu.co.uk
FF Extension: SEaaroch-NaewTaib - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\vqfwad@csxlye.net
FF Extension: ssaafe  saave - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\zo1bf@yatkewu-.co.uk
FF Extension: ftd - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\ftd@ftd.com.xpi
FF Extension: trtv3 - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\trtv3@trtv.com.xpi
FF Extension: umauoaqox9uuye - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ylc9upqr.default\Extensions\umauoaqox9uuye@lyjpayoayu.com.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn\

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (FTdownloader V4.0) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bebnnlollpcjnfpkafhoclljaojgnfok\4.0_0
CHR Extension: (YouTube) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: () - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html
CHR Extension: (Norton Identity Protection) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0
CHR Extension: (Cool Smiley Bar for Facebook) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.4_0
CHR Extension: (Gmail) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

R2 Ad-Aware Service; C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe [1236336 2013-06-13] (Lavasoft Limited)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
S2 SBAMSvc; C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe [3677000 2012-09-20] (GFI Software)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-11-11] (VIA Technologies, Inc.)
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [x]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [x]

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-23] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-23] ()
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-07-02] (Symantec Corporation)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-07-02] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-18] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-18] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2012-08-18] (Symantec Corporation)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-07-01] (GFI Software)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130716.001\IDSvia64.sys [513184 2013-07-05] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130716.001\IDSvia64.sys [513184 2013-07-05] (Symantec Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] ()
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130716.017\ENG64.SYS [126040 2013-07-11] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130716.017\ENG64.SYS [126040 2013-07-11] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130716.017\EX64.SYS [2098776 2013-07-11] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130716.017\EX64.SYS [2098776 2013-07-11] (Symantec Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R1 SRTSP; C:\Windows\System32\Drivers\N360x64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-07-09] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 cleanhlp; \??\C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [x]
S3 rm; \??\C:\Windows\system32\drivers\rm.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-17 12:45 - 2013-07-17 12:44 - 00891022 _____ C:\Users\Thomas\Desktop\SecurityCheck.exe
2013-07-17 12:44 - 2013-07-17 12:44 - 00891022 _____ C:\Users\Thomas\Downloads\SecurityCheck.exe
2013-07-17 11:43 - 2013-07-17 11:43 - 02347384 _____ (ESET) C:\Users\Thomas\Downloads\esetsmartinstaller_enu.exe
2013-07-17 09:21 - 2013-07-17 09:22 - 00000000 ____D C:\Users\Thomas\AppData\Local\adawarebp
2013-07-17 08:52 - 2013-07-17 08:52 - 00002283 _____ C:\Users\Thomas\Desktop\JRT.txt
2013-07-17 08:48 - 2013-07-17 08:48 - 00000000 ____D C:\Windows\ERUNT
2013-07-17 08:47 - 2013-07-17 08:46 - 00558958 _____ (Oleg N. Scherbakov) C:\Users\Thomas\Desktop\JRT.exe
2013-07-17 08:46 - 2013-07-17 08:46 - 00558958 _____ (Oleg N. Scherbakov) C:\Users\Thomas\Downloads\JRT.exe
2013-07-17 08:34 - 2013-07-17 08:34 - 00023984 _____ C:\AdwCleaner[S1].txt
2013-07-17 08:33 - 2013-07-17 08:32 - 00662345 _____ C:\Users\Thomas\Desktop\adwcleaner.exe
2013-07-17 08:32 - 2013-07-17 08:32 - 00662345 _____ C:\Users\Thomas\Downloads\adwcleaner.exe
2013-07-16 16:02 - 2013-07-16 16:02 - 00038928 _____ C:\ComboFix.txt
2013-07-16 15:41 - 2013-07-16 15:46 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner (3)
2013-07-16 15:40 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-16 15:40 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-16 15:40 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-16 15:40 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-16 15:40 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-16 15:40 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-16 15:40 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-16 15:40 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-16 15:39 - 2013-07-16 16:02 - 00000000 ____D C:\Qoobox
2013-07-16 15:38 - 2013-07-16 16:01 - 00000000 ____D C:\Windows\erdnt
2013-07-16 15:29 - 2013-07-16 15:24 - 05089088 ____R (Swearware) C:\Users\Thomas\Desktop\ComboFix.exe
2013-07-16 15:26 - 2013-07-16 15:26 - 484631833 _____ C:\Windows\MEMORY.DMP
2013-07-16 15:26 - 2013-07-16 15:26 - 00275608 _____ C:\Windows\Minidump\071613-37206-01.dmp
2013-07-16 15:24 - 2013-07-16 15:24 - 05089088 _____ (Swearware) C:\Users\Thomas\Downloads\ComboFix.exe
2013-07-16 13:35 - 2013-07-17 08:56 - 00027809 _____ C:\Users\Thomas\Desktop\FRST.zip
2013-07-16 13:04 - 2013-07-16 13:04 - 00022178 _____ C:\Users\Thomas\Desktop\Addition.txt
2013-07-16 13:02 - 2013-07-16 15:32 - 00000000 ____D C:\FRST
2013-07-16 12:59 - 2013-07-16 15:36 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner (2)
2013-07-16 12:59 - 2013-07-16 12:59 - 01778135 _____ (Farbar) C:\Users\Thomas\Desktop\FRST64.exe
2013-07-16 12:58 - 2013-07-16 12:59 - 01778135 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe
2013-07-16 12:44 - 2013-07-16 12:44 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64(2).exe
2013-07-16 11:59 - 2013-07-16 11:59 - 00019198 _____ C:\Users\Thomas\Desktop\VirusRemover.zip
2013-07-16 11:48 - 2013-07-16 11:48 - 00253425 _____ C:\Users\Thomas\Desktop\VirusRemover.log
2013-07-16 10:59 - 2013-07-16 10:58 - 03651120 _____ C:\Users\Thomas\Desktop\avg_remover_zeroaccess.exe
2013-07-16 10:58 - 2013-07-16 10:58 - 03651120 _____ C:\Users\Thomas\Downloads\avg_remover_zeroaccess.exe
2013-07-16 10:51 - 2013-07-16 10:51 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\QuickScan
2013-07-16 10:42 - 2013-07-16 10:42 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64(1).exe
2013-07-16 10:39 - 2013-07-16 10:39 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64.exe
2013-07-16 10:39 - 2013-07-16 10:39 - 00000036 _____ C:\Users\Thomas\AppData\Local\housecall.guid.cache
2013-07-15 21:07 - 2013-07-15 21:07 - 05799944 _____ (ParetoLogic, Inc.) C:\Users\Thomas\Downloads\RegCureProSetup_RW.exe
2013-07-15 21:06 - 2013-07-15 21:06 - 00001205 _____ C:\Users\Thomas\Downloads\FixNCR.reg
2013-07-15 18:18 - 2013-07-16 10:25 - 00003800 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2013-07-15 18:04 - 2013-07-17 06:54 - 00004130 _____ C:\Windows\System32\Tasks\Software Updater
2013-07-15 18:04 - 2013-07-17 06:54 - 00004092 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-07-15 18:04 - 2013-05-13 05:52 - 00023624 _____ C:\Windows\Launcher.exe
2013-07-15 18:03 - 2013-07-15 18:03 - 00002563 _____ C:\Users\Public\Desktop\Free System Utilities.lnk
2013-07-15 18:03 - 2013-07-15 18:03 - 00000000 ____D C:\ProgramData\Package Cache
2013-07-15 18:03 - 2013-07-15 18:03 - 00000000 ____D C:\ProgramData\FreeSystemUtilities
2013-07-15 18:02 - 2013-07-15 18:02 - 00444408 _____ C:\Users\Thomas\Downloads\free-system-utilities-DE.exe
2013-07-15 18:01 - 2013-07-15 18:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\GlarySoft
2013-07-15 17:59 - 2013-07-15 17:59 - 00001184 _____ C:\Users\Thomas\Desktop\Registry Repair.lnk
2013-07-15 17:59 - 2013-07-15 17:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Glarysoft
2013-07-15 17:59 - 2013-07-15 17:59 - 00000000 ____D C:\Program Files (x86)\Glarysoft
2013-07-14 18:25 - 2013-07-14 18:42 - 00001035 _____ C:\Users\Thomas\Desktop\ball.xpadderprofile
2013-07-14 18:12 - 2013-07-14 18:12 - 00001360 _____ C:\Users\Thomas\Desktop\My T Mini Wireless.xpaddercontroller
2013-07-13 19:47 - 2013-07-13 19:47 - 00000000 ____D C:\Program Files (x86)\MSECache
2013-07-13 19:45 - 2013-07-13 19:45 - 00012162 _____ C:\Users\Thomas\Downloads\mu0738.zip
2013-07-12 03:05 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-12 03:05 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-12 03:05 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-12 03:05 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-12 03:05 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-12 03:05 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-12 03:05 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-12 03:05 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-12 03:05 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-12 03:05 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-12 03:05 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-12 03:05 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-12 03:05 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-12 03:05 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-12 03:04 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-12 03:04 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-12 03:04 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-12 03:04 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-12 03:04 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-12 03:04 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-12 03:04 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-12 03:04 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-12 03:04 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-12 03:04 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-12 03:04 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-12 03:04 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-12 03:04 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-12 03:04 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-12 03:04 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-12 03:04 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-12 03:04 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 00:19 - 2013-07-11 00:19 - 00000000 ____D C:\4a4b3f6258420da740c754
2013-07-10 20:40 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 20:40 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 20:40 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 20:40 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 20:39 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 20:39 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 20:39 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-09 17:13 - 2013-07-09 17:14 - 00000000 ____D C:\Windows\System32\Tasks\Norton 360
2013-07-08 20:57 - 2013-07-17 11:33 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner
2013-07-08 20:56 - 2013-07-15 19:40 - 00002342 _____ C:\Users\Thomas\Downloads\NowSmart Cut v1.1 Patch by Team IREC.zip
2013-07-08 12:11 - 2013-07-15 19:43 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD(2).ZIP
2013-07-08 11:04 - 2013-07-08 11:04 - 00007053 _____ C:\Users\Thomas\Downloads\BFE-Repair-Windows-7.zip
2013-07-08 10:50 - 2013-07-09 17:08 - 00003206 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-07-08 10:50 - 2013-07-09 13:11 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-07-08 10:50 - 2013-07-09 13:11 - 00007631 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-07-08 10:50 - 2013-07-08 10:50 - 00000000 ____D C:\Program Files\Symantec
2013-07-08 10:50 - 2013-07-08 10:50 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-07-08 10:49 - 2013-07-09 17:08 - 00000000 ____D C:\Windows\system32\Drivers\N360x64
2013-07-08 10:49 - 2013-07-08 10:49 - 00000000 ____D C:\Program Files (x86)\Norton 360
2013-07-08 10:39 - 2013-07-08 10:43 - 154147384 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\norton_360_setup.exe
2013-07-08 10:30 - 2013-07-08 10:30 - 00867880 _____ C:\Users\Thomas\Downloads\Norton_Removal_Tool.exe
2013-07-08 10:28 - 2013-07-08 10:28 - 06260632 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NRnR(1).exe
2013-07-08 10:27 - 2013-07-08 10:27 - 06258072 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NRnR.exe
2013-07-08 08:31 - 2013-07-08 08:31 - 00347424 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\MicrosoftFixit.WindowsFirewall.RNP.Run.exe
2013-07-08 07:45 - 2013-07-16 08:06 - 00000000 ____D C:\Users\Thomas\AppData\Local\NPE
2013-07-08 07:45 - 2013-07-08 07:45 - 02986440 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NPE.exe
2013-07-08 07:34 - 2013-07-08 07:34 - 00000000 ____D C:\TDSSKiller_Quarantine
2013-07-08 07:29 - 2013-07-08 07:29 - 02240864 _____ (Kaspersky Lab ZAO) C:\Users\Thomas\Downloads\tdsskiller.exe
2013-07-07 21:34 - 2013-07-07 21:34 - 00000000 ____D C:\ProgramData\Sophos
2013-07-07 21:33 - 2013-07-07 21:33 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sophos
2013-07-07 21:33 - 2013-07-07 21:33 - 00000000 ____D C:\Program Files (x86)\Sophos
2013-07-07 21:31 - 2013-07-07 21:32 - 73043664 _____ (Sophos Limited) C:\Users\Thomas\Downloads\Sophos Virus Removal Tool.exe
2013-07-07 19:03 - 2013-07-07 19:03 - 00001160 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2013-07-05 18:25 - 2013-07-05 18:25 - 00000000 ____D C:\Users\Thomas\AppData\Local\FLT
2013-07-05 18:24 - 2013-07-08 10:22 - 00002072 _____ C:\Users\Thomas\Documents\TombRaider.log
2013-07-05 18:21 - 2013-07-05 18:21 - 00001602 _____ C:\Users\Public\Desktop\Tomb Raider.lnk
2013-07-05 17:42 - 2013-07-05 17:42 - 00000000 ____D C:\Users\Thomas\Downloads\tomby
2013-07-05 17:07 - 2013-07-05 17:07 - 03030370 _____ C:\Users\Thomas\Downloads\KeygenBySkid_and_FULLTorrent.rar
2013-07-05 17:03 - 2013-07-05 17:03 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-07-05 14:35 - 2013-07-05 15:14 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part27.rar
2013-07-05 12:29 - 2013-07-05 12:29 - 00000000 ____D C:\Users\Thomas\Documents\Test Drive Ferrari Racing Legends
2013-07-05 12:27 - 2013-07-07 21:14 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD.ZIP
2013-07-05 12:27 - 2013-07-07 21:14 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD(1).ZIP
2013-07-05 12:27 - 2013-07-05 12:27 - 00000000 ____D C:\Users\Thomas\Downloads\Neuer Ordner (2)
2013-07-04 23:19 - 2013-07-05 00:04 - 136860406 _____ C:\Users\Thomas\Downloads\sfn.part18.rar
2013-07-04 23:14 - 2013-07-05 08:26 - 01446192 _____ C:\Users\Thomas\Downloads\sfn.part01.rar
2013-07-04 22:27 - 2013-07-05 09:03 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part17.rar
2013-07-04 22:27 - 2013-07-05 09:03 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part16.rar
2013-07-04 22:27 - 2013-07-05 08:27 - 03068076 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part15.rar
2013-07-04 22:27 - 2013-07-05 00:54 - 218102557 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part19.rar
2013-07-04 22:26 - 2013-07-05 09:04 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part12.rar
2013-07-04 22:26 - 2013-07-05 09:04 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part11.rar
2013-07-04 22:26 - 2013-07-05 08:28 - 11412720 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part07.rar
2013-07-04 22:26 - 2013-07-05 08:27 - 02252052 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part10.rar
2013-07-04 22:26 - 2013-07-05 08:27 - 02160576 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part09.rar
2013-07-04 22:26 - 2013-07-05 08:27 - 01862916 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part08.rar
2013-07-04 22:25 - 2013-07-05 09:04 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part05.rar
2013-07-04 22:25 - 2013-07-05 09:04 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part01.rar
2013-07-04 22:25 - 2013-07-05 09:02 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part04.rar
2013-07-04 22:25 - 2013-07-05 09:02 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part02.rar
2013-07-04 22:25 - 2013-07-05 08:28 - 03014352 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part03.rar
2013-07-04 22:25 - 2013-07-05 08:27 - 01598652 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part06.rar
2013-07-04 19:15 - 2013-07-04 19:54 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part4.rar
2013-07-04 19:15 - 2013-07-04 19:54 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part3.rar
2013-07-04 19:15 - 2013-07-04 19:53 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part5.rar
2013-07-04 19:15 - 2013-07-04 19:52 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part2.rar
2013-07-04 19:15 - 2013-07-04 19:51 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part6.rar
2013-07-04 19:15 - 2013-07-04 19:49 - 355045600 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part7.rar
2013-07-04 19:14 - 2013-07-04 19:53 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part1.rar
2013-07-04 19:13 - 2013-07-04 19:51 - 413627629 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part2.rar
2013-07-04 19:13 - 2013-07-04 19:48 - 413958462 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part1.rar
2013-07-04 19:13 - 2013-07-04 19:46 - 349345391 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part3.rar
2013-07-04 16:31 - 2013-07-04 16:54 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part14.rar
2013-07-04 16:31 - 2013-07-04 16:54 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part13.rar
2013-07-04 16:31 - 2013-07-04 16:53 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part18.rar
2013-07-04 15:31 - 2013-07-04 16:04 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part32.rar
2013-07-04 15:31 - 2013-07-04 16:03 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part33.rar
2013-07-04 15:31 - 2013-07-04 16:02 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part34.rar
2013-07-04 15:31 - 2013-07-04 15:53 - 210902382 _____ C:\Users\Thomas\Downloads\tomby.part35.rar
2013-07-04 15:30 - 2013-07-04 16:04 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part31.rar
2013-07-04 15:29 - 2013-07-04 16:02 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part04.rar
2013-07-04 12:56 - 2013-07-04 12:58 - 01945127 _____ C:\Users\Thomas\Downloads\blAde-DP3DVaDCUcrk(1).rar
2013-07-04 12:54 - 2013-07-04 12:56 - 01945127 _____ C:\Users\Thomas\Downloads\blAde-DP3DVaDCUcrk.rar
2013-07-04 12:31 - 2013-07-04 12:31 - 00270436 _____ C:\Users\Thomas\Downloads\GotClip_Setup.exe
2013-07-04 11:10 - 2013-07-04 15:20 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part30.rar
2013-07-04 11:10 - 2013-07-04 15:20 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part29.rar
2013-07-04 11:10 - 2013-07-04 15:20 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part28.rar
2013-07-04 11:09 - 2013-07-04 15:51 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part26.rar
2013-07-04 11:09 - 2013-07-04 15:50 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part23.rar
2013-07-04 11:09 - 2013-07-04 15:47 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part25.rar
2013-07-04 11:09 - 2013-07-04 15:19 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part22.rar
2013-07-04 11:09 - 2013-07-04 15:15 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part24.rar
2013-07-04 11:08 - 2013-07-04 15:20 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part20.rar
2013-07-04 11:08 - 2013-07-04 15:19 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part17.rar
2013-07-04 11:08 - 2013-07-04 15:18 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part21.rar
2013-07-04 11:08 - 2013-07-04 15:18 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part16.rar
2013-07-04 11:08 - 2013-07-04 15:14 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part19.rar
2013-07-04 11:08 - 2013-07-04 15:13 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part15.rar
2013-07-04 11:07 - 2013-07-04 15:47 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part09.rar
2013-07-04 11:07 - 2013-07-04 15:47 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part08.rar
2013-07-04 11:07 - 2013-07-04 15:18 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part11.rar
2013-07-04 11:07 - 2013-07-04 15:16 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part12.rar
2013-07-04 11:07 - 2013-07-04 15:14 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part10.rar
2013-07-04 11:06 - 2013-07-04 15:51 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part02.rar
2013-07-04 11:06 - 2013-07-04 15:19 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part07.rar
2013-07-04 11:06 - 2013-07-04 15:19 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part03.rar
2013-07-04 11:06 - 2013-07-04 15:15 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part01.rar
2013-07-04 11:06 - 2013-07-04 15:14 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part05.rar
2013-07-04 11:06 - 2013-07-04 15:13 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part06.rar
2013-07-04 10:52 - 2013-07-04 21:55 - 00000036 _____ C:\Windows\mafosav.INI
2013-07-04 10:27 - 2013-07-04 10:27 - 00001027 _____ C:\Users\Public\Desktop\Mario Forever.lnk
2013-07-04 10:27 - 2013-07-04 10:27 - 00000000 ____D C:\Program Files (x86)\Mario Forever
2013-07-04 10:26 - 2013-07-04 10:26 - 19438312 _____ C:\Users\Thomas\Downloads\Install_Mario_Forever_5_9.exe
2013-07-04 09:34 - 2013-07-04 09:34 - 00003120 _____ C:\Windows\System32\Tasks\YourFile DownloaderUpdate
2013-07-04 08:26 - 2013-07-04 08:26 - 00159228 _____ C:\Users\Thomas\Downloads\msvcp110.zip
2013-07-04 08:21 - 2013-07-04 08:21 - 00474830 _____ C:\Users\Thomas\Downloads\msvcr110.zip
2013-07-04 08:14 - 2013-07-04 08:14 - 00115691 _____ C:\Users\Thomas\Downloads\Pinball FX2_LumaEmu.rar
2013-07-04 08:06 - 2013-07-04 08:06 - 00000000 ____D C:\ProgramData\RELOADED
2013-07-04 07:36 - 2013-07-04 10:57 - 00000000 ____D C:\SMBX
2013-07-04 07:36 - 2013-07-04 07:36 - 00000550 _____ C:\Users\Public\Desktop\Super Mario Bros. X.lnk
2013-07-04 07:34 - 2013-07-04 07:34 - 00541544 _____ (JooSoft GmbH) C:\Users\Thomas\Downloads\Downloader_fuer_Super_Mario_Bros._X_1.3.exe
2013-07-03 22:24 - 2013-07-03 22:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part08.rar
2013-07-03 22:24 - 2013-07-03 22:24 - 06362382 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part09.rar
2013-07-03 22:23 - 2013-07-03 22:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part06.rar
2013-07-03 22:23 - 2013-07-03 22:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part05.rar
2013-07-03 22:23 - 2013-07-03 22:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part03.rar
2013-07-03 22:23 - 2013-07-03 22:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part07.rar
2013-07-03 22:23 - 2013-07-03 22:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part04.rar
2013-07-03 22:23 - 2013-07-03 22:54 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part02.rar
2013-07-03 22:23 - 2013-07-03 22:52 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part01.rar
2013-07-03 19:49 - 2013-07-03 19:49 - 04241280 _____ (Dll-Files.com                                               ) C:\Users\Thomas\Downloads\dffsetup-steam_api.exe
2013-07-03 19:46 - 2013-07-03 19:42 - 00062976 _____ C:\Windows\system32\steam_api.dll
2013-07-03 19:42 - 2013-07-03 19:42 - 00062976 _____ C:\Users\Thomas\Downloads\steam_api.dll
2013-07-03 19:33 - 2013-07-03 19:33 - 00055394 _____ C:\Users\Thomas\Downloads\steam_api.zip
2013-07-03 19:25 - 2013-07-03 19:25 - 00001621 _____ C:\Users\Public\Desktop\Pinball FX2.lnk
2013-07-03 19:20 - 2013-07-03 19:43 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part5.rar
2013-07-03 19:20 - 2013-07-03 19:22 - 40211239 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part6.rar
2013-07-03 19:19 - 2013-07-03 19:43 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part2.rar
2013-07-03 19:19 - 2013-07-03 19:42 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part4.rar
2013-07-03 19:19 - 2013-07-03 19:42 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part3.rar
2013-07-03 19:19 - 2013-07-03 19:41 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part1.rar
2013-07-03 19:08 - 2013-07-03 20:32 - 209715200 _____ C:\Users\Thomas\Downloads\Jump.Jack.2.German-Bamboocha(1).rar
2013-07-03 19:01 - 2013-07-03 19:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Namco
2013-07-03 18:58 - 2013-07-03 18:59 - 05081786 _____ C:\Users\Thomas\Downloads\Pacman.v1.0.Cracked-F4CG.rar
2013-07-03 18:53 - 2013-07-03 19:17 - 524288000 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part1.rar
2013-07-03 18:53 - 2013-07-03 19:15 - 524288000 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part2.rar
2013-07-03 18:53 - 2013-07-03 18:59 - 157824496 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part3.rar
2013-07-03 18:07 - 2013-07-03 19:06 - 00000508 _____ C:\Users\Thomas\Downloads\Jump.Jack.2.German-Bamboocha.rar
2013-07-03 17:55 - 2013-07-03 17:55 - 00000000 ____D C:\Users\Thomas\Documents\CAPCOM
2013-07-03 17:34 - 2013-07-03 17:34 - 00002077 _____ C:\Users\Public\Desktop\Street Fighter X Tekken.lnk
2013-07-03 17:33 - 2013-07-03 17:33 - 00100501 _____ C:\Users\Thomas\Downloads\STREET.FIGHTER.X.TEKKEN.V1.0.ALL.THETA.NODVD.ZIP
2013-07-03 17:25 - 2013-07-03 17:25 - 00000000 ____D C:\Program Files (x86)\Capcom
2013-07-03 16:56 - 2013-07-04 13:27 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\dp3d
2013-07-03 16:55 - 2013-07-04 09:16 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TopWare
2013-07-03 16:14 - 2013-07-03 16:14 - 00572424 _____ C:\Users\Thomas\Downloads\3245_TM2Ccrack.rar
2013-07-03 14:59 - 2013-07-03 14:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\EZDownloader
2013-07-03 14:36 - 2013-07-03 15:47 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part09.rar
2013-07-03 14:36 - 2013-07-03 15:42 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part08.rar
2013-07-03 14:36 - 2013-07-03 14:46 - 66298693 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part10.rar
2013-07-03 14:35 - 2013-07-03 15:53 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part05.rar
2013-07-03 14:35 - 2013-07-03 15:47 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part07.rar
2013-07-03 14:35 - 2013-07-03 15:45 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part03.rar
2013-07-03 14:35 - 2013-07-03 15:43 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part06.rar
2013-07-03 14:35 - 2013-07-03 15:42 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part04.rar
2013-07-03 14:35 - 2013-07-03 15:41 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part02.rar
2013-07-03 14:34 - 2013-07-03 15:41 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part01.rar
2013-07-03 14:22 - 2013-07-03 14:22 - 00001064 _____ C:\Users\Thomas\Desktop\VT4 - Verknüpfung.lnk
2013-07-03 14:20 - 2013-07-03 14:20 - 00000000 ____D C:\Users\Thomas\Documents\Virtua Tennis 4
2013-07-03 14:11 - 2013-07-03 14:11 - 00000000 ____D C:\Windows\SysWOW64\xlive
2013-07-03 14:11 - 2013-07-03 14:11 - 00000000 ____D C:\Users\Thomas\Documents\Games for Windows - LIVE Demos
2013-07-03 14:10 - 2013-07-05 15:55 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-07-03 14:09 - 2013-07-03 14:09 - 00541544 _____ (JooSoft GmbH) C:\Users\Thomas\Downloads\Downloader_fuer_Games_for_Windows_LIVE_3.5.exe
2013-07-03 14:02 - 2013-07-03 14:02 - 00007802 _____ C:\Users\Thomas\Downloads\xlive.dll_Recipester.zip
2013-07-03 13:53 - 2013-07-03 13:53 - 01624112 _____ (Bandoo Media Inc) C:\Users\Thomas\Downloads\iLividSetup-r362-n-bf.exe
2013-07-03 13:33 - 2013-07-03 13:33 - 04241280 _____ (Dll-Files.com                                               ) C:\Users\Thomas\Downloads\dffsetup-xlive.exe
2013-07-03 13:06 - 2013-07-03 13:19 - 408944640 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part2.rar
2013-07-03 13:06 - 2013-07-03 13:19 - 408944640 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part1.rar
2013-07-03 13:06 - 2013-07-03 13:14 - 163552364 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part3.rar
2013-07-03 12:29 - 2013-07-16 15:35 - 00000000 ____D C:\Users\Thomas\Documents\ManiaPlanet
2013-07-03 12:29 - 2013-07-03 12:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-07-03 12:28 - 2013-07-16 15:35 - 00000000 ____D C:\ProgramData\ManiaPlanet
2013-07-03 12:28 - 2013-07-03 16:31 - 00000000 ____D C:\Program Files (x86)\ManiaPlanet
2013-07-03 11:30 - 2013-07-03 11:30 - 00000000 ____D C:\Users\Thomas\AppData\Local\.inapptracking
2013-07-03 11:05 - 2013-07-03 11:05 - 08531968 _____ C:\Users\Thomas\Downloads\steaminstall_german.msi
2013-07-03 10:16 - 2013-07-03 10:16 - 00000824 _____ C:\Users\Public\Desktop\Sonic Generations.lnk
2013-07-03 09:57 - 2013-07-03 10:21 - 91530052 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part12.rar
2013-07-03 09:56 - 2013-07-03 10:29 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part05.rar
2013-07-03 09:56 - 2013-07-03 10:27 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part11.rar
2013-07-03 09:56 - 2013-07-03 10:27 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part10.rar
2013-07-03 09:56 - 2013-07-03 10:27 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part06.rar
2013-07-03 09:56 - 2013-07-03 10:26 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part09.rar
2013-07-03 09:56 - 2013-07-03 10:26 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part08.rar
2013-07-03 09:56 - 2013-07-03 10:26 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part07.rar
2013-07-03 09:55 - 2013-07-03 10:28 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part04.rar
2013-07-03 09:55 - 2013-07-03 10:28 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part03.rar
2013-07-03 09:55 - 2013-07-03 10:26 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part02.rar
2013-07-03 09:55 - 2013-07-03 10:23 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part01.rar
2013-07-03 09:44 - 2013-07-03 09:51 - 408944640 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part1.rar
2013-07-03 09:44 - 2013-07-03 09:48 - 151968579 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part3.rar
2013-07-03 08:10 - 2013-07-03 08:59 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part19.rar
2013-07-03 08:10 - 2013-07-03 08:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part18.rar
2013-07-03 08:10 - 2013-07-03 08:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part17.rar
2013-07-03 08:10 - 2013-07-03 08:47 - 309588453 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part20.rar
2013-07-03 08:09 - 2013-07-03 08:59 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part16.rar
2013-07-03 08:09 - 2013-07-03 08:59 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part12.rar
2013-07-03 08:09 - 2013-07-03 08:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part14.rar
2013-07-03 08:09 - 2013-07-03 08:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part15.rar
2013-07-03 08:09 - 2013-07-03 08:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part13.rar
2013-07-03 08:09 - 2013-07-03 08:56 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part11.rar
2013-07-03 08:08 - 2013-07-03 08:59 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part10.rar
2013-07-03 08:08 - 2013-07-03 08:55 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part09.rar
2013-07-03 07:57 - 2013-07-03 08:07 - 408944640 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part2.rar
2013-07-03 06:43 - 2013-07-13 19:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-03 06:38 - 2013-07-03 07:00 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part08.rar
2013-07-02 22:19 - 2013-07-02 22:41 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part07.rar
2013-07-02 21:09 - 2013-07-02 21:31 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part06.rar
2013-07-02 19:36 - 2013-07-02 19:58 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part05.rar
2013-07-02 18:19 - 2013-07-02 18:42 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part04.rar
2013-07-02 17:14 - 2013-07-02 17:36 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part03.rar
2013-07-02 13:57 - 2013-07-02 14:19 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part02.rar
2013-07-02 09:01 - 2013-07-02 09:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part01(1).rar
2013-07-02 08:36 - 2013-07-02 08:36 - 00001184 _____ C:\Users\Thomas\Desktop\Rayman Origins.lnk
2013-07-02 08:04 - 2013-07-03 10:25 - 00000000 ____D C:\Users\Thomas\Documents\My Games
2013-07-02 08:03 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2013-07-02 08:03 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2013-07-02 08:03 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-07-02 08:03 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-07-02 08:03 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2013-07-02 08:03 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-07-02 08:03 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2013-07-02 08:03 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-07-02 08:03 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2013-07-02 08:03 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2013-07-02 08:03 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-07-02 08:03 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-07-02 08:03 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2013-07-02 08:03 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-07-02 08:03 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2013-07-02 08:03 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-07-02 08:03 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2013-07-02 08:03 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-07-02 08:03 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-07-02 08:03 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-07-02 08:03 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-07-02 08:03 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-07-02 08:03 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-07-02 08:03 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2013-07-02 08:03 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2013-07-02 08:03 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-07-02 08:03 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-07-02 08:03 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2013-07-02 08:03 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-07-02 08:03 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2013-07-02 08:03 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-07-02 08:03 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2013-07-02 08:03 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-07-02 08:03 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2013-07-02 08:03 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-07-02 08:03 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-07-02 08:03 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-07-02 08:03 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-07-02 08:03 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-07-02 08:03 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-07-02 08:03 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-07-02 08:03 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-07-02 08:03 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-07-02 08:03 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2013-07-02 08:03 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-07-02 08:03 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2013-07-02 08:03 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-07-02 08:03 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2013-07-02 08:03 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-07-02 08:03 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-07-02 08:03 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-07-02 08:03 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-07-02 08:03 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-07-02 08:03 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-07-02 08:03 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-07-02 08:03 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-07-02 08:03 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-07-02 08:03 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-07-02 08:03 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-07-02 08:03 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-07-02 08:03 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-07-02 08:03 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2013-07-02 08:03 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2013-07-02 08:03 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-07-02 08:03 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-07-02 08:03 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2013-07-02 08:03 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2013-07-02 08:03 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-07-02 08:03 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-07-02 08:03 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2013-07-02 08:03 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-07-02 08:03 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2013-07-02 08:03 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-07-02 08:03 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2013-07-02 08:03 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2013-07-02 08:03 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2013-07-02 08:03 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2013-07-02 08:03 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2013-07-02 08:03 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2013-07-02 08:03 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2013-07-02 08:03 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2013-07-02 08:03 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2013-07-02 08:03 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2013-07-02 08:03 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2013-07-02 08:03 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2013-07-02 08:03 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2013-07-02 08:03 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2013-07-02 08:03 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2013-07-02 08:03 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2013-07-02 08:03 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2013-07-02 08:03 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2013-07-02 08:03 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2013-07-02 08:03 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2013-07-02 08:03 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2013-07-02 08:03 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2013-07-02 08:03 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2013-07-02 08:03 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2013-07-02 08:03 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2013-07-02 08:03 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2013-07-02 08:03 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2013-07-02 08:02 - 2013-07-02 08:03 - 00010047 _____ C:\Windows\DirectX.log
         

Alt 17.07.2013, 12:13   #13
schrauber
/// the machine
/// TB-Ausbilder
 

w32 zero access entfernen ? - Standard

w32 zero access entfernen ?



und denk an meine Frage
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 17.07.2013, 12:21   #14
Tommytom77
 
w32 zero access entfernen ? - Standard

w32 zero access entfernen ?



FRST log 2/2


Code:
ATTFilter
000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2013-07-02 08:02 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2013-07-02 08:02 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2013-07-02 08:02 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2013-07-02 08:02 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2013-07-02 08:02 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2013-07-02 08:02 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2013-07-02 08:02 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2013-07-02 08:02 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2013-07-02 08:02 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2013-07-02 08:02 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2013-07-02 08:02 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2013-07-02 08:02 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2013-07-02 08:02 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2013-07-02 08:02 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-07-02 08:02 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2013-07-02 08:02 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2013-07-02 08:02 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2013-07-02 08:02 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2013-07-02 08:02 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2013-07-02 08:02 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2013-07-02 08:02 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2013-07-02 08:02 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-07-02 08:02 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2013-07-02 08:02 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-07-02 08:02 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2013-07-02 08:02 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2013-07-02 08:02 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-07-02 08:02 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-07-02 08:02 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2013-07-02 08:02 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-07-02 08:02 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2013-07-02 08:02 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-07-02 08:02 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2013-07-02 08:02 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2013-07-02 08:02 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-07-02 08:02 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-07-02 08:02 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-07-02 08:02 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2013-07-02 08:02 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2013-07-02 08:02 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2013-07-02 08:02 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-07-02 08:02 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-07-02 08:02 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2013-07-02 08:02 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-07-02 08:02 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2013-07-02 08:02 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-07-02 08:02 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2013-07-02 08:02 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-07-02 08:02 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2013-07-02 08:02 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-07-02 08:02 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2013-07-02 08:02 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-07-02 08:02 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2013-07-02 08:02 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-07-02 08:02 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2013-07-02 08:02 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-07-02 08:02 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2013-07-02 08:02 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-07-02 08:02 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2013-07-02 08:02 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-07-02 08:02 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2013-07-02 08:02 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-07-02 08:02 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2013-07-02 08:00 - 2013-07-02 08:02 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-07-02 07:59 - 2013-07-02 08:03 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-07-02 07:20 - 2013-07-08 11:46 - 00000000 ____D C:\Spiele
2013-07-02 06:28 - 2013-07-02 07:02 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part2.rar
2013-07-01 21:15 - 2013-07-01 21:49 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part1.rar
2013-07-01 19:30 - 2013-07-02 21:42 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware
2013-07-01 19:30 - 2013-07-02 21:40 - 00000000 ____D C:\Users\Thomas\Documents\Anti-Malware
2013-07-01 18:45 - 2013-07-01 18:45 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Malwarebytes
2013-07-01 18:45 - 2013-07-01 18:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-01 17:40 - 2013-07-01 21:05 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part3.rar
2013-07-01 17:39 - 2013-07-01 20:06 - 503317084 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part4.rar
2013-07-01 17:31 - 2013-07-02 21:41 - 00000000 ____D C:\Program Files (x86)\Qvo 6 Virus Removal Tool
2013-07-01 17:31 - 2013-04-11 16:12 - 00019392 _____ (Dll-Files.com) C:\Windows\system32\roboot64.exe
2013-07-01 17:31 - 2012-12-10 11:04 - 00356352 _____ (eSellerate Inc.) C:\Windows\eSellerateEngine.dll
2013-07-01 17:31 - 2012-12-10 11:04 - 00081920 _____ (eSellerate Inc.) C:\Windows\eSellerateControl350.dll
2013-07-01 17:31 - 2009-07-23 18:32 - 01122304 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\libeay32.dll
2013-07-01 17:31 - 2009-07-23 18:32 - 00274432 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\ssleay32.dll
2013-07-01 17:08 - 2013-07-01 17:08 - 00001078 _____ C:\Users\Thomas\Documents\strikeball.xpadderprofile
2013-07-01 15:56 - 2013-07-02 08:54 - 00001361 _____ C:\Users\Thomas\Documents\Strike Ball.xpaddercontroller
2013-07-01 15:36 - 2013-07-01 15:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\AlawarWrapper
2013-07-01 15:35 - 2013-07-01 15:39 - 00000000 ____D C:\Program Files (x86)\Alawar
2013-07-01 14:44 - 2013-07-01 15:06 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part01.rar
2013-07-01 13:53 - 2013-07-01 15:40 - 00000000 ____D C:\Program Files (x86)\data
2013-07-01 13:53 - 2013-07-01 13:53 - 00075915 _____ C:\Program Files (x86)\Uninstal.exe
2013-07-01 13:41 - 2013-06-30 22:30 - 00001910 _____ C:\Users\Thomas\Desktop\Strike Ball 2.lnk
2013-07-01 13:17 - 2013-07-01 13:17 - 00004462 _____ C:\Windows\System32\Tasks\Ad-Aware Antivirus Scheduled Scan
2013-07-01 13:17 - 2013-07-01 13:17 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\LavasoftStatistics
2013-07-01 13:17 - 2013-07-01 13:17 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus
2013-07-01 13:15 - 2013-07-08 08:18 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus
2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Lavasoft
2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Downloaded Installations
2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection
2013-07-01 13:14 - 2013-07-01 13:14 - 00000000 ____D C:\Program Files (x86)\Toolbar Cleaner
2013-07-01 13:12 - 2013-07-01 17:09 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Ad-Aware Antivirus
2013-07-01 13:12 - 2013-07-01 13:12 - 00047496 _____ (GFI Software) C:\Windows\system32\sbbd.exe
2013-07-01 13:12 - 2013-07-01 13:12 - 00014456 _____ (GFI Software) C:\Windows\system32\Drivers\gfibto.sys
2013-07-01 12:13 - 2013-07-01 12:29 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-01 12:13 - 2013-07-01 12:13 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-07-01 12:12 - 2013-07-01 12:30 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-07-01 12:12 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2013-07-01 12:00 - 2013-07-01 12:00 - 00000000 _____ C:\autoexec.bat
2013-07-01 11:58 - 2013-07-01 11:58 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-07-01 11:57 - 2013-07-01 12:28 - 00000000 ____D C:\Windows\BCD5545077AC4347B24F654B1189F8D4.TMP
2013-07-01 10:54 - 2013-07-14 19:00 - 00001749 _____ C:\Users\Thomas\Desktop\Xpadder.ini
2013-07-01 10:31 - 2013-07-01 10:43 - 00001361 _____ C:\Users\Thomas\My T Mini Wireless.xpaddercontroller
2013-07-01 07:36 - 2013-07-01 07:38 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DreamDale
2013-07-01 07:36 - 2013-07-01 07:37 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SmashFrenzy4
2013-07-01 07:35 - 2013-07-01 09:16 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CasualGameBox
2013-07-01 07:35 - 2013-07-01 09:16 - 00000000 ____D C:\Program Files (x86)\CasualGameBox
2013-07-01 06:55 - 2013-07-01 12:30 - 00000000 ____D C:\Users\Thomas\AppData\Local\MPCBrowser
2013-07-01 06:55 - 2013-07-01 11:43 - 00000000 ____D C:\Users\Thomas\AppData\Local\PlayFree Browser
2013-06-30 22:30 - 2013-07-01 13:44 - 00000000 ____D C:\Program Files (x86)\Strike Ball 2
2013-06-30 21:57 - 2013-07-01 15:15 - 00000000 ____D C:\Program Files (x86)\Strike Ball
2013-06-30 21:44 - 2013-06-30 21:52 - 00000000 ____D C:\Users\Thomas\Documents\Strike Ball Games Collection 1,2 & 3  (CRACKED) (DIRECT PLAY) [blaze69]
2013-06-30 21:11 - 2013-07-01 15:36 - 00000000 ____D C:\ProgramData\AlawarWrapper
2013-06-30 21:11 - 2013-07-01 09:38 - 00000000 ____D C:\Program Files (x86)\Alawar.de
2013-06-30 21:11 - 2013-06-30 21:11 - 00001141 _____ C:\Users\Thomas\Desktop\Strike Ball 3.lnk
2013-06-30 21:11 - 2013-06-30 21:11 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alawar.de
2013-06-30 21:11 - 2013-06-30 21:11 - 00000000 ____D C:\Users\Public\Documents\AlawarWrapper
2013-06-30 20:27 - 2013-06-30 20:27 - 00000000 ____D C:\Program Files (x86)\bfgclient
2013-06-30 20:25 - 2013-06-30 23:06 - 00000000 ____D C:\BigFishGamesCache
2013-06-30 19:56 - 2013-07-01 09:17 - 00000000 ____D C:\Program Files (x86)\MyPlayCity.com
2013-06-29 20:13 - 2013-06-29 20:13 - 00435979 _____ C:\Users\Thomas\Downloads\Xpadder5-3.zip
2013-06-29 20:13 - 2008-08-29 09:12 - 00932864 _____ C:\Users\Thomas\Desktop\Xpadder.exe
2013-06-29 19:53 - 2013-06-29 19:53 - 00000000 ____D C:\Program Files (x86)\Thrustmaster
2013-06-29 19:53 - 2007-04-16 10:56 - 00043520 _____ (Thrustmaster) C:\Windows\system32\tmffbdrv.dll
2013-06-29 19:53 - 2007-04-16 10:55 - 00156160 _____ (Thrustmaster) C:\Windows\system32\tmffbcpl.dll
2013-06-29 19:53 - 2007-04-16 10:55 - 00135168 _____ (Thrustmaster) C:\Windows\SysWOW64\tmffbcpl.dll
2013-06-29 19:53 - 2007-04-16 10:55 - 00034304 _____ (Thrustmaster) C:\Windows\SysWOW64\tmffbdrv.dll
2013-06-29 19:53 - 2007-01-20 04:44 - 00208304 _____ (Macrovision Corporation) C:\Windows\system32\isrt.dll
2013-06-29 19:53 - 2006-05-16 15:07 - 00099840 _____ (Macrovision Corporation) C:\Windows\system32\_IsRes.dll
2013-06-29 19:53 - 2005-09-09 11:16 - 00135168 _____ (Guillemot Corporation) C:\Windows\system32\GUStrLib.dll
2013-06-29 19:53 - 2005-01-28 12:49 - 00106496 _____ (Guillemot Corporation) C:\Windows\SysWOW64\GUStrLib.dll
2013-06-29 19:53 - 2003-02-21 05:42 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-06-29 19:52 - 2013-06-29 19:52 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\InstallShield
2013-06-29 19:41 - 2013-06-30 22:15 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Alawar
2013-06-29 19:41 - 2013-06-29 19:41 - 00000000 ____D C:\ProgramData\Intenium
2013-06-29 19:40 - 2013-07-01 09:14 - 00000000 ____D C:\Program Files (x86)\OXXOGames
2013-06-29 19:25 - 2013-06-29 19:25 - 00000000 ____D C:\Program Files (x86)\softendo.com
2013-06-29 18:28 - 2013-06-29 18:28 - 00004096 _____ C:\Windows\d3dx.dat
2013-06-29 18:28 - 2013-06-29 18:28 - 00000000 ____D C:\ProgramData\BlockBreaker
2013-06-29 17:07 - 2013-06-29 19:09 - 00000000 ____D C:\ProgramData\WildTangent
2013-06-29 14:37 - 2013-06-29 14:43 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\337 Wallpaper
2013-06-29 14:25 - 2013-07-01 09:07 - 00000000 ____D C:\Program Files (x86)\WinZipper
2013-06-29 14:25 - 2013-06-29 18:09 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\WinZipper
2013-06-29 14:24 - 2013-06-29 14:24 - 00000725 _____ C:\Users\Thomas\AppData\Local\recently-used.xbel
2013-06-27 09:51 - 2013-06-27 11:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-06-26 17:26 - 2013-06-26 17:26 - 00001000 _____ C:\Users\Public\Desktop\MPU 2012.lnk
2013-06-26 17:25 - 2013-06-26 17:26 - 00000000 ____D C:\Program Files (x86)\MPU 2012
2013-06-26 17:23 - 2013-06-26 17:23 - 00000000 ____D C:\Program Files (x86)\Smart Projects
2013-06-26 15:29 - 2013-06-30 18:08 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\.ABC
2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SSync
2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SCheck
2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Intermediate
2013-06-26 15:28 - 2013-06-26 15:28 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Common
2013-06-26 15:27 - 2013-06-26 15:27 - 00000000 ____D C:\Program Files (x86)\ABC
2013-06-26 14:31 - 2013-05-16 14:02 - 00829264 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll
2013-06-26 14:31 - 2013-05-16 14:02 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll
2013-06-22 17:51 - 2013-06-22 17:52 - 00000000 ____D C:\Users\Thomas\.dia
2013-06-22 17:50 - 2013-06-22 17:50 - 00000000 ____D C:\Program Files (x86)\Dia
2013-06-20 11:43 - 2013-07-08 20:23 - 00000118 _____ C:\Users\Thomas\Desktop\termin.txt

==================== One Month Modified Files and Folders =======

2013-07-17 12:44 - 2013-07-17 12:45 - 00891022 _____ C:\Users\Thomas\Desktop\SecurityCheck.exe
2013-07-17 12:44 - 2013-07-17 12:44 - 00891022 _____ C:\Users\Thomas\Downloads\SecurityCheck.exe
2013-07-17 11:56 - 2013-04-17 22:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-17 11:43 - 2013-07-17 11:43 - 02347384 _____ (ESET) C:\Users\Thomas\Downloads\esetsmartinstaller_enu.exe
2013-07-17 11:33 - 2013-07-08 20:57 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner
2013-07-17 11:27 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-17 11:27 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-17 11:23 - 2013-04-17 15:23 - 01667706 _____ C:\Windows\WindowsUpdate.log
2013-07-17 11:20 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-17 11:20 - 2009-07-14 06:51 - 00094498 _____ C:\Windows\setupact.log
2013-07-17 09:22 - 2013-07-17 09:21 - 00000000 ____D C:\Users\Thomas\AppData\Local\adawarebp
2013-07-17 09:16 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-17 09:16 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-17 08:56 - 2013-07-16 13:35 - 00027809 _____ C:\Users\Thomas\Desktop\FRST.zip
2013-07-17 08:52 - 2013-07-17 08:52 - 00002283 _____ C:\Users\Thomas\Desktop\JRT.txt
2013-07-17 08:48 - 2013-07-17 08:48 - 00000000 ____D C:\Windows\ERUNT
2013-07-17 08:46 - 2013-07-17 08:47 - 00558958 _____ (Oleg N. Scherbakov) C:\Users\Thomas\Desktop\JRT.exe
2013-07-17 08:46 - 2013-07-17 08:46 - 00558958 _____ (Oleg N. Scherbakov) C:\Users\Thomas\Downloads\JRT.exe
2013-07-17 08:34 - 2013-07-17 08:34 - 00023984 _____ C:\AdwCleaner[S1].txt
2013-07-17 08:34 - 2013-04-17 15:34 - 00000997 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-07-17 08:32 - 2013-07-17 08:33 - 00662345 _____ C:\Users\Thomas\Desktop\adwcleaner.exe
2013-07-17 08:32 - 2013-07-17 08:32 - 00662345 _____ C:\Users\Thomas\Downloads\adwcleaner.exe
2013-07-17 06:54 - 2013-07-15 18:04 - 00004130 _____ C:\Windows\System32\Tasks\Software Updater
2013-07-17 06:54 - 2013-07-15 18:04 - 00004092 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-07-16 16:02 - 2013-07-16 16:02 - 00038928 _____ C:\ComboFix.txt
2013-07-16 16:02 - 2013-07-16 15:39 - 00000000 ____D C:\Qoobox
2013-07-16 16:02 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-07-16 16:01 - 2013-07-16 15:38 - 00000000 ____D C:\Windows\erdnt
2013-07-16 15:58 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-07-16 15:57 - 2013-04-17 15:56 - 01151256 _____ C:\Windows\PFRO.log
2013-07-16 15:46 - 2013-07-16 15:41 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner (3)
2013-07-16 15:36 - 2013-07-16 12:59 - 00000000 ____D C:\Users\Thomas\Desktop\Neuer Ordner (2)
2013-07-16 15:35 - 2013-07-03 12:29 - 00000000 ____D C:\Users\Thomas\Documents\ManiaPlanet
2013-07-16 15:35 - 2013-07-03 12:28 - 00000000 ____D C:\ProgramData\ManiaPlanet
2013-07-16 15:35 - 2013-05-30 20:57 - 00000000 ____D C:\Users\Thomas\Desktop\mucke
2013-07-16 15:32 - 2013-07-16 13:02 - 00000000 ____D C:\FRST
2013-07-16 15:26 - 2013-07-16 15:26 - 484631833 _____ C:\Windows\MEMORY.DMP
2013-07-16 15:26 - 2013-07-16 15:26 - 00275608 _____ C:\Windows\Minidump\071613-37206-01.dmp
2013-07-16 15:26 - 2013-04-19 08:14 - 00000000 ____D C:\Windows\Minidump
2013-07-16 15:24 - 2013-07-16 15:29 - 05089088 ____R (Swearware) C:\Users\Thomas\Desktop\ComboFix.exe
2013-07-16 15:24 - 2013-07-16 15:24 - 05089088 _____ (Swearware) C:\Users\Thomas\Downloads\ComboFix.exe
2013-07-16 13:04 - 2013-07-16 13:04 - 00022178 _____ C:\Users\Thomas\Desktop\Addition.txt
2013-07-16 12:59 - 2013-07-16 12:59 - 01778135 _____ (Farbar) C:\Users\Thomas\Desktop\FRST64.exe
2013-07-16 12:59 - 2013-07-16 12:58 - 01778135 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe
2013-07-16 12:44 - 2013-07-16 12:44 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64(2).exe
2013-07-16 11:59 - 2013-07-16 11:59 - 00019198 _____ C:\Users\Thomas\Desktop\VirusRemover.zip
2013-07-16 11:48 - 2013-07-16 11:48 - 00253425 _____ C:\Users\Thomas\Desktop\VirusRemover.log
2013-07-16 10:58 - 2013-07-16 10:59 - 03651120 _____ C:\Users\Thomas\Desktop\avg_remover_zeroaccess.exe
2013-07-16 10:58 - 2013-07-16 10:58 - 03651120 _____ C:\Users\Thomas\Downloads\avg_remover_zeroaccess.exe
2013-07-16 10:51 - 2013-07-16 10:51 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\QuickScan
2013-07-16 10:42 - 2013-07-16 10:42 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64(1).exe
2013-07-16 10:39 - 2013-07-16 10:39 - 02405664 _____ (Trend Micro Inc.) C:\Users\Thomas\Downloads\HousecallLauncher64.exe
2013-07-16 10:39 - 2013-07-16 10:39 - 00000036 _____ C:\Users\Thomas\AppData\Local\housecall.guid.cache
2013-07-16 10:29 - 2013-04-30 17:43 - 00000000 ____D C:\Users\Thomas\AppData\Local\CrashDumps
2013-07-16 10:25 - 2013-07-15 18:18 - 00003800 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2013-07-16 08:06 - 2013-07-08 07:45 - 00000000 ____D C:\Users\Thomas\AppData\Local\NPE
2013-07-16 07:58 - 2013-05-14 16:06 - 01600512 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2013-07-15 21:07 - 2013-07-15 21:07 - 05799944 _____ (ParetoLogic, Inc.) C:\Users\Thomas\Downloads\RegCureProSetup_RW.exe
2013-07-15 21:06 - 2013-07-15 21:06 - 00001205 _____ C:\Users\Thomas\Downloads\FixNCR.reg
2013-07-15 19:57 - 2013-04-17 15:32 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-15 19:43 - 2013-07-08 12:11 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD(2).ZIP
2013-07-15 19:40 - 2013-07-08 20:56 - 00002342 _____ C:\Users\Thomas\Downloads\NowSmart Cut v1.1 Patch by Team IREC.zip
2013-07-15 18:16 - 2013-04-19 20:32 - 00003583 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog
2013-07-15 18:14 - 2013-06-01 15:13 - 00000000 ____D C:\Program Files (x86)\Epson Software
2013-07-15 18:03 - 2013-07-15 18:03 - 00002563 _____ C:\Users\Public\Desktop\Free System Utilities.lnk
2013-07-15 18:03 - 2013-07-15 18:03 - 00000000 ____D C:\ProgramData\Package Cache
2013-07-15 18:03 - 2013-07-15 18:03 - 00000000 ____D C:\ProgramData\FreeSystemUtilities
2013-07-15 18:02 - 2013-07-15 18:02 - 00444408 _____ C:\Users\Thomas\Downloads\free-system-utilities-DE.exe
2013-07-15 18:01 - 2013-07-15 18:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\GlarySoft
2013-07-15 17:59 - 2013-07-15 17:59 - 00001184 _____ C:\Users\Thomas\Desktop\Registry Repair.lnk
2013-07-15 17:59 - 2013-07-15 17:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Glarysoft
2013-07-15 17:59 - 2013-07-15 17:59 - 00000000 ____D C:\Program Files (x86)\Glarysoft
2013-07-15 17:53 - 2013-04-17 15:46 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-14 19:00 - 2013-07-01 10:54 - 00001749 _____ C:\Users\Thomas\Desktop\Xpadder.ini
2013-07-14 18:42 - 2013-07-14 18:25 - 00001035 _____ C:\Users\Thomas\Desktop\ball.xpadderprofile
2013-07-14 18:12 - 2013-07-14 18:12 - 00001360 _____ C:\Users\Thomas\Desktop\My T Mini Wireless.xpaddercontroller
2013-07-13 19:49 - 2013-07-03 06:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-13 19:47 - 2013-07-13 19:47 - 00000000 ____D C:\Program Files (x86)\MSECache
2013-07-13 19:45 - 2013-07-13 19:45 - 00012162 _____ C:\Users\Thomas\Downloads\mu0738.zip
2013-07-12 03:25 - 2009-07-14 06:45 - 00273288 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-12 03:07 - 2009-07-14 19:58 - 00696878 _____ C:\Windows\system32\perfh007.dat
2013-07-12 03:07 - 2009-07-14 19:58 - 00148174 _____ C:\Windows\system32\perfc007.dat
2013-07-12 03:07 - 2009-07-14 07:13 - 01634596 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-12 03:01 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 13:54 - 2013-06-14 10:35 - 00001470 _____ C:\Users\Thomas\Desktop\strom.txt
2013-07-11 08:11 - 2013-04-22 21:34 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 08:11 - 2013-04-22 21:34 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-11 00:19 - 2013-07-11 00:19 - 00000000 ____D C:\4a4b3f6258420da740c754
2013-07-09 17:14 - 2013-07-09 17:13 - 00000000 ____D C:\Windows\System32\Tasks\Norton 360
2013-07-09 17:08 - 2013-07-08 10:50 - 00003206 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-07-09 17:08 - 2013-07-08 10:49 - 00000000 ____D C:\Windows\system32\Drivers\N360x64
2013-07-09 13:11 - 2013-07-08 10:50 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-07-09 13:11 - 2013-07-08 10:50 - 00007631 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-07-08 20:23 - 2013-06-20 11:43 - 00000118 _____ C:\Users\Thomas\Desktop\termin.txt
2013-07-08 11:46 - 2013-07-02 07:20 - 00000000 ____D C:\Spiele
2013-07-08 11:04 - 2013-07-08 11:04 - 00007053 _____ C:\Users\Thomas\Downloads\BFE-Repair-Windows-7.zip
2013-07-08 10:50 - 2013-07-08 10:50 - 00000000 ____D C:\Program Files\Symantec
2013-07-08 10:50 - 2013-07-08 10:50 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-07-08 10:49 - 2013-07-08 10:49 - 00000000 ____D C:\Program Files (x86)\Norton 360
2013-07-08 10:49 - 2013-04-17 15:51 - 00000000 ____D C:\ProgramData\Norton
2013-07-08 10:43 - 2013-07-08 10:39 - 154147384 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\norton_360_setup.exe
2013-07-08 10:30 - 2013-07-08 10:30 - 00867880 _____ C:\Users\Thomas\Downloads\Norton_Removal_Tool.exe
2013-07-08 10:28 - 2013-07-08 10:28 - 06260632 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NRnR(1).exe
2013-07-08 10:27 - 2013-07-08 10:27 - 06258072 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NRnR.exe
2013-07-08 10:22 - 2013-07-05 18:24 - 00002072 _____ C:\Users\Thomas\Documents\TombRaider.log
2013-07-08 08:31 - 2013-07-08 08:31 - 00347424 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\MicrosoftFixit.WindowsFirewall.RNP.Run.exe
2013-07-08 08:18 - 2013-07-01 13:15 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus
2013-07-08 08:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-07-08 07:57 - 2009-07-14 01:19 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2013-07-08 07:45 - 2013-07-08 07:45 - 02986440 _____ (Symantec Corporation) C:\Users\Thomas\Downloads\NPE.exe
2013-07-08 07:34 - 2013-07-08 07:34 - 00000000 ____D C:\TDSSKiller_Quarantine
2013-07-08 07:29 - 2013-07-08 07:29 - 02240864 _____ (Kaspersky Lab ZAO) C:\Users\Thomas\Downloads\tdsskiller.exe
2013-07-08 07:19 - 2013-04-17 15:32 - 00000000 ____D C:\Users\Thomas
2013-07-07 21:34 - 2013-07-07 21:34 - 00000000 ____D C:\ProgramData\Sophos
2013-07-07 21:33 - 2013-07-07 21:33 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sophos
2013-07-07 21:33 - 2013-07-07 21:33 - 00000000 ____D C:\Program Files (x86)\Sophos
2013-07-07 21:32 - 2013-07-07 21:31 - 73043664 _____ (Sophos Limited) C:\Users\Thomas\Downloads\Sophos Virus Removal Tool.exe
2013-07-07 21:14 - 2013-07-05 12:27 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD.ZIP
2013-07-07 21:14 - 2013-07-05 12:27 - 04911632 _____ C:\Users\Thomas\Downloads\TEST.DRIVE.FRL.V1.0.ALL.SKIDROW.NODVD(1).ZIP
2013-07-07 19:03 - 2013-07-07 19:03 - 00001160 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2013-07-05 18:25 - 2013-07-05 18:25 - 00000000 ____D C:\Users\Thomas\AppData\Local\FLT
2013-07-05 18:21 - 2013-07-05 18:21 - 00001602 _____ C:\Users\Public\Desktop\Tomb Raider.lnk
2013-07-05 17:42 - 2013-07-05 17:42 - 00000000 ____D C:\Users\Thomas\Downloads\tomby
2013-07-05 17:07 - 2013-07-05 17:07 - 03030370 _____ C:\Users\Thomas\Downloads\KeygenBySkid_and_FULLTorrent.rar
2013-07-05 17:03 - 2013-07-05 17:03 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-07-05 15:55 - 2013-07-03 14:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-07-05 15:54 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-07-05 15:14 - 2013-07-05 14:35 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part27.rar
2013-07-05 12:29 - 2013-07-05 12:29 - 00000000 ____D C:\Users\Thomas\Documents\Test Drive Ferrari Racing Legends
2013-07-05 12:27 - 2013-07-05 12:27 - 00000000 ____D C:\Users\Thomas\Downloads\Neuer Ordner (2)
2013-07-05 11:11 - 2013-04-19 20:37 - 01590498 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-07-05 09:04 - 2013-07-04 22:26 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part12.rar
2013-07-05 09:04 - 2013-07-04 22:26 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part11.rar
2013-07-05 09:04 - 2013-07-04 22:25 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part05.rar
2013-07-05 09:04 - 2013-07-04 22:25 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part01.rar
2013-07-05 09:03 - 2013-07-04 22:27 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part17.rar
2013-07-05 09:03 - 2013-07-04 22:27 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part16.rar
2013-07-05 09:02 - 2013-07-04 22:25 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part04.rar
2013-07-05 09:02 - 2013-07-04 22:25 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part02.rar
2013-07-05 08:28 - 2013-07-04 22:26 - 11412720 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part07.rar
2013-07-05 08:28 - 2013-07-04 22:25 - 03014352 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part03.rar
2013-07-05 08:27 - 2013-07-04 22:27 - 03068076 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part15.rar
2013-07-05 08:27 - 2013-07-04 22:26 - 02252052 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part10.rar
2013-07-05 08:27 - 2013-07-04 22:26 - 02160576 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part09.rar
2013-07-05 08:27 - 2013-07-04 22:26 - 01862916 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part08.rar
2013-07-05 08:27 - 2013-07-04 22:25 - 01598652 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part06.rar
2013-07-05 08:26 - 2013-07-04 23:14 - 01446192 _____ C:\Users\Thomas\Downloads\sfn.part01.rar
2013-07-05 00:54 - 2013-07-04 22:27 - 218102557 _____ C:\Users\Thomas\Downloads\Sonic.and.All.Stars.Racing.Transformed-RELOADED.part19.rar
2013-07-05 00:04 - 2013-07-04 23:19 - 136860406 _____ C:\Users\Thomas\Downloads\sfn.part18.rar
2013-07-04 21:55 - 2013-07-04 10:52 - 00000036 _____ C:\Windows\mafosav.INI
2013-07-04 19:54 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part4.rar
2013-07-04 19:54 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part3.rar
2013-07-04 19:53 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part5.rar
2013-07-04 19:53 - 2013-07-04 19:14 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part1.rar
2013-07-04 19:52 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part2.rar
2013-07-04 19:51 - 2013-07-04 19:15 - 408944640 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part6.rar
2013-07-04 19:51 - 2013-07-04 19:13 - 413627629 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part2.rar
2013-07-04 19:49 - 2013-07-04 19:15 - 355045600 _____ C:\Users\Thomas\Downloads\Test.Drive.Ferrari.Racing.Legends-SKIDROW.part7.rar
2013-07-04 19:48 - 2013-07-04 19:13 - 413958462 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part1.rar
2013-07-04 19:46 - 2013-07-04 19:13 - 349345391 _____ C:\Users\Thomas\Downloads\COMPLETE.RACING.GAMES.COLLECTION-POSTMORTEM.part3.rar
2013-07-04 16:54 - 2013-07-04 16:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part14.rar
2013-07-04 16:54 - 2013-07-04 16:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part13.rar
2013-07-04 16:53 - 2013-07-04 16:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part18.rar
2013-07-04 16:04 - 2013-07-04 15:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part32.rar
2013-07-04 16:04 - 2013-07-04 15:30 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part31.rar
2013-07-04 16:03 - 2013-07-04 15:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part33.rar
2013-07-04 16:02 - 2013-07-04 15:31 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part34.rar
2013-07-04 16:02 - 2013-07-04 15:29 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part04.rar
2013-07-04 15:53 - 2013-07-04 15:31 - 210902382 _____ C:\Users\Thomas\Downloads\tomby.part35.rar
2013-07-04 15:51 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part26.rar
2013-07-04 15:51 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part02.rar
2013-07-04 15:50 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part23.rar
2013-07-04 15:47 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part25.rar
2013-07-04 15:47 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part09.rar
2013-07-04 15:47 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part08.rar
2013-07-04 15:20 - 2013-07-04 11:10 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part30.rar
2013-07-04 15:20 - 2013-07-04 11:10 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part29.rar
2013-07-04 15:20 - 2013-07-04 11:10 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part28.rar
2013-07-04 15:20 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part20.rar
2013-07-04 15:19 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part22.rar
2013-07-04 15:19 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part17.rar
2013-07-04 15:19 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part07.rar
2013-07-04 15:19 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part03.rar
2013-07-04 15:18 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part21.rar
2013-07-04 15:18 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part16.rar
2013-07-04 15:18 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part11.rar
2013-07-04 15:16 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part12.rar
2013-07-04 15:15 - 2013-07-04 11:09 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part24.rar
2013-07-04 15:15 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part01.rar
2013-07-04 15:14 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part19.rar
2013-07-04 15:14 - 2013-07-04 11:07 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part10.rar
2013-07-04 15:14 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part05.rar
2013-07-04 15:13 - 2013-07-04 11:08 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part15.rar
2013-07-04 15:13 - 2013-07-04 11:06 - 408944640 _____ C:\Users\Thomas\Downloads\tomby.part06.rar
2013-07-04 13:27 - 2013-07-03 16:56 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\dp3d
2013-07-04 12:58 - 2013-07-04 12:56 - 01945127 _____ C:\Users\Thomas\Downloads\blAde-DP3DVaDCUcrk(1).rar
2013-07-04 12:56 - 2013-07-04 12:54 - 01945127 _____ C:\Users\Thomas\Downloads\blAde-DP3DVaDCUcrk.rar
2013-07-04 12:31 - 2013-07-04 12:31 - 00270436 _____ C:\Users\Thomas\Downloads\GotClip_Setup.exe
2013-07-04 10:57 - 2013-07-04 07:36 - 00000000 ____D C:\SMBX
2013-07-04 10:27 - 2013-07-04 10:27 - 00001027 _____ C:\Users\Public\Desktop\Mario Forever.lnk
2013-07-04 10:27 - 2013-07-04 10:27 - 00000000 ____D C:\Program Files (x86)\Mario Forever
2013-07-04 10:26 - 2013-07-04 10:26 - 19438312 _____ C:\Users\Thomas\Downloads\Install_Mario_Forever_5_9.exe
2013-07-04 09:34 - 2013-07-04 09:34 - 00003120 _____ C:\Windows\System32\Tasks\YourFile DownloaderUpdate
2013-07-04 09:16 - 2013-07-03 16:55 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TopWare
2013-07-04 08:27 - 2013-01-07 12:00 - 00535008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp110.dll
2013-07-04 08:26 - 2013-07-04 08:26 - 00159228 _____ C:\Users\Thomas\Downloads\msvcp110.zip
2013-07-04 08:26 - 2013-05-24 10:11 - 00875472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr110.dll
2013-07-04 08:21 - 2013-07-04 08:21 - 00474830 _____ C:\Users\Thomas\Downloads\msvcr110.zip
2013-07-04 08:14 - 2013-07-04 08:14 - 00115691 _____ C:\Users\Thomas\Downloads\Pinball FX2_LumaEmu.rar
2013-07-04 08:06 - 2013-07-04 08:06 - 00000000 ____D C:\ProgramData\RELOADED
2013-07-04 07:36 - 2013-07-04 07:36 - 00000550 _____ C:\Users\Public\Desktop\Super Mario Bros. X.lnk
2013-07-04 07:34 - 2013-07-04 07:34 - 00541544 _____ (JooSoft GmbH) C:\Users\Thomas\Downloads\Downloader_fuer_Super_Mario_Bros._X_1.3.exe
2013-07-03 22:57 - 2013-07-03 22:24 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part08.rar
2013-07-03 22:57 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part06.rar
2013-07-03 22:57 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part05.rar
2013-07-03 22:57 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part03.rar
2013-07-03 22:56 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part07.rar
2013-07-03 22:56 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part04.rar
2013-07-03 22:54 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part02.rar
2013-07-03 22:52 - 2013-07-03 22:23 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part01.rar
2013-07-03 22:24 - 2013-07-03 22:24 - 06362382 _____ C:\Users\Thomas\Downloads\Sonic.Adventure.2-RELOADED.part09.rar
2013-07-03 20:32 - 2013-07-03 19:08 - 209715200 _____ C:\Users\Thomas\Downloads\Jump.Jack.2.German-Bamboocha(1).rar
2013-07-03 19:50 - 2013-04-02 11:27 - 00105808 _____ (Valve Corporation) C:\Windows\SysWOW64\steam_api.dll
2013-07-03 19:49 - 2013-07-03 19:49 - 04241280 _____ (Dll-Files.com                                               ) C:\Users\Thomas\Downloads\dffsetup-steam_api.exe
2013-07-03 19:43 - 2013-07-03 19:20 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part5.rar
2013-07-03 19:43 - 2013-07-03 19:19 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part2.rar
2013-07-03 19:42 - 2013-07-03 19:46 - 00062976 _____ C:\Windows\system32\steam_api.dll
2013-07-03 19:42 - 2013-07-03 19:42 - 00062976 _____ C:\Users\Thomas\Downloads\steam_api.dll
2013-07-03 19:42 - 2013-07-03 19:19 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part4.rar
2013-07-03 19:42 - 2013-07-03 19:19 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part3.rar
2013-07-03 19:41 - 2013-07-03 19:19 - 408944640 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part1.rar
2013-07-03 19:33 - 2013-07-03 19:33 - 00055394 _____ C:\Users\Thomas\Downloads\steam_api.zip
2013-07-03 19:25 - 2013-07-03 19:25 - 00001621 _____ C:\Users\Public\Desktop\Pinball FX2.lnk
2013-07-03 19:22 - 2013-07-03 19:20 - 40211239 _____ C:\Users\Thomas\Downloads\Mark_of_the_Ninja-FLT.part6.rar
2013-07-03 19:17 - 2013-07-03 18:53 - 524288000 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part1.rar
2013-07-03 19:15 - 2013-07-03 18:53 - 524288000 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part2.rar
2013-07-03 19:06 - 2013-07-03 18:07 - 00000508 _____ C:\Users\Thomas\Downloads\Jump.Jack.2.German-Bamboocha.rar
2013-07-03 19:01 - 2013-07-03 19:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Namco
2013-07-03 18:59 - 2013-07-03 18:58 - 05081786 _____ C:\Users\Thomas\Downloads\Pacman.v1.0.Cracked-F4CG.rar
2013-07-03 18:59 - 2013-07-03 18:53 - 157824496 _____ C:\Users\Thomas\Downloads\Pinball.FX2-SKIDROW.part3.rar
2013-07-03 17:55 - 2013-07-03 17:55 - 00000000 ____D C:\Users\Thomas\Documents\CAPCOM
2013-07-03 17:35 - 2013-04-17 15:56 - 00060432 _____ C:\Users\Thomas\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-03 17:34 - 2013-07-03 17:34 - 00002077 _____ C:\Users\Public\Desktop\Street Fighter X Tekken.lnk
2013-07-03 17:33 - 2013-07-03 17:33 - 00100501 _____ C:\Users\Thomas\Downloads\STREET.FIGHTER.X.TEKKEN.V1.0.ALL.THETA.NODVD.ZIP
2013-07-03 17:25 - 2013-07-03 17:25 - 00000000 ____D C:\Program Files (x86)\Capcom
2013-07-03 16:31 - 2013-07-03 12:28 - 00000000 ____D C:\Program Files (x86)\ManiaPlanet
2013-07-03 16:14 - 2013-07-03 16:14 - 00572424 _____ C:\Users\Thomas\Downloads\3245_TM2Ccrack.rar
2013-07-03 15:53 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part05.rar
2013-07-03 15:47 - 2013-07-03 14:36 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part09.rar
2013-07-03 15:47 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part07.rar
2013-07-03 15:45 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part03.rar
2013-07-03 15:43 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part06.rar
2013-07-03 15:42 - 2013-07-03 14:36 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part08.rar
2013-07-03 15:42 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part04.rar
2013-07-03 15:41 - 2013-07-03 14:35 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part02.rar
2013-07-03 15:41 - 2013-07-03 14:34 - 529145600 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part01.rar
2013-07-03 14:59 - 2013-07-03 14:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\EZDownloader
2013-07-03 14:46 - 2013-07-03 14:36 - 66298693 _____ C:\Users\Thomas\Downloads\Street.Fighter.X.Tekken-SKIDROW.part10.rar
2013-07-03 14:22 - 2013-07-03 14:22 - 00001064 _____ C:\Users\Thomas\Desktop\VT4 - Verknüpfung.lnk
2013-07-03 14:20 - 2013-07-03 14:20 - 00000000 ____D C:\Users\Thomas\Documents\Virtua Tennis 4
2013-07-03 14:11 - 2013-07-03 14:11 - 00000000 ____D C:\Windows\SysWOW64\xlive
2013-07-03 14:11 - 2013-07-03 14:11 - 00000000 ____D C:\Users\Thomas\Documents\Games for Windows - LIVE Demos
2013-07-03 14:09 - 2013-07-03 14:09 - 00541544 _____ (JooSoft GmbH) C:\Users\Thomas\Downloads\Downloader_fuer_Games_for_Windows_LIVE_3.5.exe
2013-07-03 14:02 - 2013-07-03 14:02 - 00007802 _____ C:\Users\Thomas\Downloads\xlive.dll_Recipester.zip
2013-07-03 13:53 - 2013-07-03 13:53 - 01624112 _____ (Bandoo Media Inc) C:\Users\Thomas\Downloads\iLividSetup-r362-n-bf.exe
2013-07-03 13:33 - 2013-07-03 13:33 - 04241280 _____ (Dll-Files.com                                               ) C:\Users\Thomas\Downloads\dffsetup-xlive.exe
2013-07-03 13:19 - 2013-07-03 13:06 - 408944640 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part2.rar
2013-07-03 13:19 - 2013-07-03 13:06 - 408944640 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part1.rar
2013-07-03 13:14 - 2013-07-03 13:06 - 163552364 _____ C:\Users\Thomas\Downloads\Dream PinBall 3D Install.part3.rar
2013-07-03 12:29 - 2013-07-03 12:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-07-03 12:29 - 2013-04-17 15:32 - 00000000 ____D C:\Users\Thomas\AppData\Local\VirtualStore
2013-07-03 11:30 - 2013-07-03 11:30 - 00000000 ____D C:\Users\Thomas\AppData\Local\.inapptracking
2013-07-03 11:05 - 2013-07-03 11:05 - 08531968 _____ C:\Users\Thomas\Downloads\steaminstall_german.msi
2013-07-03 10:33 - 2013-04-17 15:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-03 10:29 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part05.rar
2013-07-03 10:28 - 2013-07-03 09:55 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part04.rar
2013-07-03 10:28 - 2013-07-03 09:55 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part03.rar
2013-07-03 10:27 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part11.rar
2013-07-03 10:27 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part10.rar
2013-07-03 10:27 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part06.rar
2013-07-03 10:26 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part09.rar
2013-07-03 10:26 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part08.rar
2013-07-03 10:26 - 2013-07-03 09:56 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part07.rar
2013-07-03 10:26 - 2013-07-03 09:55 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part02.rar
2013-07-03 10:25 - 2013-07-02 08:04 - 00000000 ____D C:\Users\Thomas\Documents\My Games
2013-07-03 10:23 - 2013-07-03 09:55 - 262244000 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part01.rar
2013-07-03 10:21 - 2013-07-03 09:57 - 91530052 _____ C:\Users\Thomas\Downloads\Virtua.Tennis.4-SKIDROW.part12.rar
2013-07-03 10:16 - 2013-07-03 10:16 - 00000824 _____ C:\Users\Public\Desktop\Sonic Generations.lnk
2013-07-03 09:51 - 2013-07-03 09:44 - 408944640 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part1.rar
2013-07-03 09:48 - 2013-07-03 09:44 - 151968579 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part3.rar
2013-07-03 08:59 - 2013-07-03 08:10 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part19.rar
2013-07-03 08:59 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part16.rar
2013-07-03 08:59 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part12.rar
2013-07-03 08:59 - 2013-07-03 08:08 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part10.rar
2013-07-03 08:57 - 2013-07-03 08:10 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part18.rar
2013-07-03 08:57 - 2013-07-03 08:10 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part17.rar
2013-07-03 08:57 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part14.rar
2013-07-03 08:56 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part15.rar
2013-07-03 08:56 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part13.rar
2013-07-03 08:56 - 2013-07-03 08:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part11.rar
2013-07-03 08:55 - 2013-07-03 08:08 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part09.rar
2013-07-03 08:47 - 2013-07-03 08:10 - 309588453 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part20.rar
2013-07-03 08:07 - 2013-07-03 07:57 - 408944640 _____ C:\Users\Thomas\Downloads\Man.Plan.ALi.part2.rar
2013-07-03 07:00 - 2013-07-03 06:38 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part08.rar
2013-07-02 22:41 - 2013-07-02 22:19 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part07.rar
2013-07-02 21:42 - 2013-07-01 19:30 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware
2013-07-02 21:41 - 2013-07-01 17:31 - 00000000 ____D C:\Program Files (x86)\Qvo 6 Virus Removal Tool
2013-07-02 21:40 - 2013-07-01 19:30 - 00000000 ____D C:\Users\Thomas\Documents\Anti-Malware
2013-07-02 21:31 - 2013-07-02 21:09 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part06.rar
2013-07-02 19:58 - 2013-07-02 19:36 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part05.rar
2013-07-02 18:42 - 2013-07-02 18:19 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part04.rar
2013-07-02 17:36 - 2013-07-02 17:14 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part03.rar
2013-07-02 14:19 - 2013-07-02 13:57 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part02.rar
2013-07-02 09:23 - 2013-07-02 09:01 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part01(1).rar
2013-07-02 08:54 - 2013-07-01 15:56 - 00001361 _____ C:\Users\Thomas\Documents\Strike Ball.xpaddercontroller
2013-07-02 08:36 - 2013-07-02 08:36 - 00001184 _____ C:\Users\Thomas\Desktop\Rayman Origins.lnk
2013-07-02 08:03 - 2013-07-02 08:02 - 00010047 _____ C:\Windows\DirectX.log
2013-07-02 08:03 - 2013-07-02 07:59 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-07-02 08:02 - 2013-07-02 08:00 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-07-02 07:02 - 2013-07-02 06:28 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part2.rar
2013-07-01 21:49 - 2013-07-01 21:15 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part1.rar
2013-07-01 21:05 - 2013-07-01 17:40 - 629145600 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part3.rar
2013-07-01 20:06 - 2013-07-01 17:39 - 503317084 _____ C:\Users\Thomas\Downloads\Rayman_Origins__RiP_DYCUS-Razor1911.part4.rar
2013-07-01 18:45 - 2013-07-01 18:45 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Malwarebytes
2013-07-01 18:45 - 2013-07-01 18:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-01 17:09 - 2013-07-01 13:12 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Ad-Aware Antivirus
2013-07-01 17:08 - 2013-07-01 17:08 - 00001078 _____ C:\Users\Thomas\Documents\strikeball.xpadderprofile
2013-07-01 15:40 - 2013-07-01 13:53 - 00000000 ____D C:\Program Files (x86)\data
2013-07-01 15:39 - 2013-07-01 15:35 - 00000000 ____D C:\Program Files (x86)\Alawar
2013-07-01 15:36 - 2013-07-01 15:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\AlawarWrapper
2013-07-01 15:36 - 2013-06-30 21:11 - 00000000 ____D C:\ProgramData\AlawarWrapper
2013-07-01 15:15 - 2013-06-30 21:57 - 00000000 ____D C:\Program Files (x86)\Strike Ball
2013-07-01 15:06 - 2013-07-01 14:44 - 408944640 _____ C:\Users\Thomas\Downloads\Sonic_Generations-FLT.part01.rar
2013-07-01 13:53 - 2013-07-01 13:53 - 00075915 _____ C:\Program Files (x86)\Uninstal.exe
2013-07-01 13:44 - 2013-06-30 22:30 - 00000000 ____D C:\Program Files (x86)\Strike Ball 2
2013-07-01 13:17 - 2013-07-01 13:17 - 00004462 _____ C:\Windows\System32\Tasks\Ad-Aware Antivirus Scheduled Scan
2013-07-01 13:17 - 2013-07-01 13:17 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\LavasoftStatistics
2013-07-01 13:17 - 2013-07-01 13:17 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus
2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Lavasoft
2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Downloaded Installations
2013-07-01 13:15 - 2013-07-01 13:15 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection
2013-07-01 13:14 - 2013-07-01 13:14 - 00000000 ____D C:\Program Files (x86)\Toolbar Cleaner
2013-07-01 13:12 - 2013-07-01 13:12 - 00047496 _____ (GFI Software) C:\Windows\system32\sbbd.exe
2013-07-01 13:12 - 2013-07-01 13:12 - 00014456 _____ (GFI Software) C:\Windows\system32\Drivers\gfibto.sys
2013-07-01 12:30 - 2013-07-01 12:12 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-07-01 12:30 - 2013-07-01 06:55 - 00000000 ____D C:\Users\Thomas\AppData\Local\MPCBrowser
2013-07-01 12:29 - 2013-07-01 12:13 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-01 12:28 - 2013-07-01 11:57 - 00000000 ____D C:\Windows\BCD5545077AC4347B24F654B1189F8D4.TMP
2013-07-01 12:28 - 2013-05-01 21:55 - 00000000 ____D C:\Windows\system32\appmgmt
2013-07-01 12:13 - 2013-07-01 12:13 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-07-01 12:00 - 2013-07-01 12:00 - 00000000 _____ C:\autoexec.bat
2013-07-01 11:58 - 2013-07-01 11:58 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-07-01 11:43 - 2013-07-01 06:55 - 00000000 ____D C:\Users\Thomas\AppData\Local\PlayFree Browser
2013-07-01 10:43 - 2013-07-01 10:31 - 00001361 _____ C:\Users\Thomas\My T Mini Wireless.xpaddercontroller
2013-07-01 09:38 - 2013-06-30 21:11 - 00000000 ____D C:\Program Files (x86)\Alawar.de
2013-07-01 09:17 - 2013-06-30 19:56 - 00000000 ____D C:\Program Files (x86)\MyPlayCity.com
2013-07-01 09:16 - 2013-07-01 07:35 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CasualGameBox
2013-07-01 09:16 - 2013-07-01 07:35 - 00000000 ____D C:\Program Files (x86)\CasualGameBox
2013-07-01 09:14 - 2013-06-29 19:40 - 00000000 ____D C:\Program Files (x86)\OXXOGames
2013-07-01 09:07 - 2013-06-29 14:25 - 00000000 ____D C:\Program Files (x86)\WinZipper
2013-07-01 09:07 - 2013-04-19 20:37 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\player
2013-07-01 07:38 - 2013-07-01 07:36 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DreamDale
2013-07-01 07:37 - 2013-07-01 07:36 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SmashFrenzy4
2013-06-30 23:06 - 2013-06-30 20:25 - 00000000 ____D C:\BigFishGamesCache
2013-06-30 22:30 - 2013-07-01 13:41 - 00001910 _____ C:\Users\Thomas\Desktop\Strike Ball 2.lnk
2013-06-30 22:15 - 2013-06-29 19:41 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Alawar
2013-06-30 21:52 - 2013-06-30 21:44 - 00000000 ____D C:\Users\Thomas\Documents\Strike Ball Games Collection 1,2 & 3  (CRACKED) (DIRECT PLAY) [blaze69]
2013-06-30 21:11 - 2013-06-30 21:11 - 00001141 _____ C:\Users\Thomas\Desktop\Strike Ball 3.lnk
2013-06-30 21:11 - 2013-06-30 21:11 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alawar.de
2013-06-30 21:11 - 2013-06-30 21:11 - 00000000 ____D C:\Users\Public\Documents\AlawarWrapper
2013-06-30 20:27 - 2013-06-30 20:27 - 00000000 ____D C:\Program Files (x86)\bfgclient
2013-06-30 18:08 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\.ABC
2013-06-29 20:13 - 2013-06-29 20:13 - 00435979 _____ C:\Users\Thomas\Downloads\Xpadder5-3.zip
2013-06-29 19:53 - 2013-06-29 19:53 - 00000000 ____D C:\Program Files (x86)\Thrustmaster
2013-06-29 19:52 - 2013-06-29 19:52 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\InstallShield
2013-06-29 19:41 - 2013-06-29 19:41 - 00000000 ____D C:\ProgramData\Intenium
2013-06-29 19:25 - 2013-06-29 19:25 - 00000000 ____D C:\Program Files (x86)\softendo.com
2013-06-29 19:09 - 2013-06-29 17:07 - 00000000 ____D C:\ProgramData\WildTangent
2013-06-29 18:28 - 2013-06-29 18:28 - 00004096 _____ C:\Windows\d3dx.dat
2013-06-29 18:28 - 2013-06-29 18:28 - 00000000 ____D C:\ProgramData\BlockBreaker
2013-06-29 18:09 - 2013-06-29 14:25 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\WinZipper
2013-06-29 14:43 - 2013-06-29 14:37 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\337 Wallpaper
2013-06-29 14:25 - 2011-02-19 23:03 - 00421032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp100.dll
2013-06-29 14:24 - 2013-06-29 14:24 - 00000725 _____ C:\Users\Thomas\AppData\Local\recently-used.xbel
2013-06-28 10:22 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-27 11:01 - 2013-06-27 09:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-06-26 17:26 - 2013-06-26 17:26 - 00001000 _____ C:\Users\Public\Desktop\MPU 2012.lnk
2013-06-26 17:26 - 2013-06-26 17:25 - 00000000 ____D C:\Program Files (x86)\MPU 2012
2013-06-26 17:23 - 2013-06-26 17:23 - 00000000 ____D C:\Program Files (x86)\Smart Projects
2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SSync
2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\SCheck
2013-06-26 15:29 - 2013-06-26 15:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Intermediate
2013-06-26 15:28 - 2013-06-26 15:28 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Common
2013-06-26 15:27 - 2013-06-26 15:27 - 00000000 ____D C:\Program Files (x86)\ABC
2013-06-24 19:01 - 2013-04-19 20:36 - 00001088 _____ C:\Windows\KB893803v2.log
2013-06-24 18:53 - 2011-02-19 00:40 - 00773712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100.dll
2013-06-22 17:52 - 2013-06-22 17:51 - 00000000 ____D C:\Users\Thomas\.dia
2013-06-22 17:50 - 2013-06-22 17:50 - 00000000 ____D C:\Program Files (x86)\Dia

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-13 22:12

==================== End Of Log ============================
         


hey , keine Probs mehr im Moment ist es geschafft ??

Alt 17.07.2013, 12:23   #15
schrauber
/// the machine
/// TB-Ausbilder
 

w32 zero access entfernen ? - Standard

w32 zero access entfernen ?



jup

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.


Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu w32 zero access entfernen ?
anderen, angeblich, bluescreen, computer, comuter, direkt, entfernen, explorer, firefox, infiziert., kaspersky, logfile, neu, nichts, norton, norton power eraser, power, programme, remover, scan, scannen, scanner, sophos, startet, w32, windows, windows explorer, öffnen




Ähnliche Themen: w32 zero access entfernen ?


  1. Ads By Quick Internet Access entfernen
    Anleitungen, FAQs & Links - 06.11.2015 (2)
  2. Internet Quick Access entfernen
    Anleitungen, FAQs & Links - 06.11.2015 (2)
  3. Wie Rootkit 0 access entfernen?
    Log-Analyse und Auswertung - 17.12.2013 (12)
  4. Trojaner O.access
    Log-Analyse und Auswertung - 02.01.2013 (22)
  5. Zero-Access Befall
    Log-Analyse und Auswertung - 01.10.2012 (35)
  6. (2x) Das Leben danach - Zero/Access
    Mülltonne - 23.09.2012 (3)
  7. AVG Zero.Access Remover
    Anleitungen, FAQs & Links - 28.04.2012 (0)
  8. Dialer Instant Access
    Log-Analyse und Auswertung - 21.10.2008 (15)
  9. virusprotectpro/Video ActiveX Access entfernen
    Plagegeister aller Art und deren Bekämpfung - 29.08.2007 (1)
  10. ZoneAlarm log access
    Antiviren-, Firewall- und andere Schutzprogramme - 07.04.2006 (6)
  11. Cannot access?
    Log-Analyse und Auswertung - 12.03.2006 (13)
  12. O10 - Hijacked Internet access by New.Net
    Log-Analyse und Auswertung - 03.01.2005 (3)
  13. O10 - Hijacked Internet access by New.Net
    Plagegeister aller Art und deren Bekämpfung - 28.12.2004 (1)
  14. Access violation
    Archiv - 18.01.2003 (4)
  15. Access-Online-Grundkurs???
    Alles rund um Windows - 16.01.2003 (0)

Zum Thema w32 zero access entfernen ? - hallo, mein computer ist mit zero access infiziert. Mehrere Scanner werden mal fündig , mal nicht. Sophos zu Bsp. habe ich 2 mal hintereinander durchlaufen lassen, beim ersten mal hat - w32 zero access entfernen ?...
Archiv
Du betrachtest: w32 zero access entfernen ? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.