Hallo zusammen,

seit einigen Tagen stelle ich eine erhöhte Netzwerklast fest, von der ich mir nicht erklären kann, woher sie kommt.

Selbst wenn ich die minimale Konfiguration im abgesicherten Modus (Win 7 x64, aktuellste Patches installiert) starte, tritt diese auf.
Leider kann ich mit den Verbindungen nicht sehr viel anfangen, scheinbar sind viele HTTPS Verbindungen u.a. zu Facebook dabei, von welchen ich definitiv ausschließen kann, dass Sie von mir kommen (Kein Browser geöffnet, keine Anwendung im Hintergrund).

Zusätzlich klagen zwei Bekannte von mir darüber, dass bei Ihnen Angriffe auf Emailkonten gestartet wurden. Da sich die beiden Kontakte nicht kennen scheine ich der kleinste gemeinsame Nenner zu sein.
Ein Fehlgeschlagener Hack-Versuch auf das hotmail-Konto eines der Bekannten kam von einer IP-Adresse welche zu meinem Anschluss passen könnte.
Meine Befürchtung ist nun, dass ich mir ein Rootkit oder ähnlichen Unrat eingefangen habe und nun als eine Art Proxy-Server missbraucht werde um Schindluder zu treiben.

Virenscans mit avast! auf aktuellster Version lieferten kein Ergebnis, mein System ist angeblich sauber.
defogger liefert keinen Fehler, die OTL & Gmer Ergebnisse habe ich unten angehangen.

Was haltet Ihr davon, bzw. wie würdet ihr weiter Vorgehen? Plattmachen würde ich mein Windows nur äußerst ungern, da ich beruflich Unmengen an Programme installieren und konfigurieren muss die sich nicht ohne weiteres Backupen lassen.

Danke schonmal!
Markus

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Hallo schrauber,

die OTL/Gmer Logs waren leider zu lang für das Code tag, darum hab ich sie angehangen.

Hier das FRST Ergebnis

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-07-2013 03
Ran by xxx at 2013-07-30 21:09:39
Running from E:\Downloads\Browserdownloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
3DMark (x32 Version: 1.0)
Adobe Acrobat X Pro - English, Français, Deutsch (x32 Version: 10.1.7)
Adobe AIR (x32 Version: 3.6.0.6090)
Adobe Creative Suite 6 Master Collection (x32 Version: 6)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Help Manager (x32 Version: 4.0.244)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Adobe Widget Browser (x32 Version: 2.0 Build 348)
Adobe Widget Browser (x32 Version: 2.0.348)
Age of Empires 2 HD Edition (x32 Version: 2.3)
AMD Accelerated Video Transcoding (Version: 12.5.100.21219)
AMD APP SDK Runtime (Version: 10.0.1084.4)
AMD Catalyst Install Manager (Version: 8.0.903.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Media Foundation Decoders (Version: 1.0.71219.1540)
ANNO 1404 - Venedig (x32 Version: 2.01.5010)
Anno 1404 (x32 Version: 1.00.0000)
ANNO 1404 (x32 Version: 1.02.0000)
ANNO 2070 (x32 Version: 1.0.0.0)
Anti-Twin (Installation 14.05.2013) (x32)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 2.1.0.7)
AudibleManager (x32 Version: 2009742574.48.56.8328434)
AutoMode Switcher (x32 Version: 1.00)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
Battlefield 3™ (x32 Version: 1.6.0.0)
Battlelog Web Plugins (x32 Version: 2.1.7)
BioShock Infinite (x32)
bl (x32 Version: 1.0.0)
Blobby Volley 2 Version 1.0RC3 (x32)
Call of Duty Black Ops II (x32)
Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.00.0000)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2012.1219.1521.27485)
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485)
Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485)
Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485)
CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485)
CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485)
CCC Help Czech (x32 Version: 2012.1219.1520.27485)
CCC Help Danish (x32 Version: 2012.1219.1520.27485)
CCC Help Dutch (x32 Version: 2012.1219.1520.27485)
CCC Help English (x32 Version: 2012.1219.1520.27485)
CCC Help Finnish (x32 Version: 2012.1219.1520.27485)
CCC Help French (x32 Version: 2012.1219.1520.27485)
CCC Help German (x32 Version: 2012.1219.1520.27485)
CCC Help Greek (x32 Version: 2012.1219.1520.27485)
CCC Help Hungarian (x32 Version: 2012.1219.1520.27485)
CCC Help Italian (x32 Version: 2012.1219.1520.27485)
CCC Help Japanese (x32 Version: 2012.1219.1520.27485)
CCC Help Korean (x32 Version: 2012.1219.1520.27485)
CCC Help Norwegian (x32 Version: 2012.1219.1520.27485)
CCC Help Polish (x32 Version: 2012.1219.1520.27485)
CCC Help Portuguese (x32 Version: 2012.1219.1520.27485)
CCC Help Russian (x32 Version: 2012.1219.1520.27485)
CCC Help Spanish (x32 Version: 2012.1219.1520.27485)
CCC Help Swedish (x32 Version: 2012.1219.1520.27485)
CCC Help Thai (x32 Version: 2012.1219.1520.27485)
CCC Help Turkish (x32 Version: 2012.1219.1520.27485)
ccc-utility64 (Version: 2012.1219.1521.27485)
Command & Conquer Die ersten 10 Jahre (x32 Version: 1.00.0000)
Company of Heroes (x32 Version: 1.0.0.78)
Company of Heroes 2 (x32 Version: 1)
Counter-Strike 1.6 (x32 Version: 1.00.0000)
Creative ALchemy (x32 Version: 1.43)
Creative Audio-Systemsteuerung (x32 Version: 3.00)
Creative Konsole Starter (x32 Version: 2.61)
Creative Software AutoUpdate (x32 Version: 1.40)
Creative Sound Blaster Properties x64 Edition (x32 Version: 1.02)
DAEMON Tools Lite (x32 Version: 4.46.1.0328)
DDL und DTS Connect-Lizenzaktivierung (x32)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition
DMIView Ver.1.5 B12.0314.1 (x32 Version: 1.5)
Dolby Digital Live Pack (x32 Version: 3.02)
Dropbox (HKCU Version: 2.0.22)
DTS Connect Pack (x32 Version: 1.00)
Easy Tune 6 B12.0912.1 (x32 Version: 1.00.0000)
ElsterFormular (x32 Version: 14.3.11574)
EndNote X6 (x32 Version: 16.0.0.6348)
Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.20810.00)
EPSON Scan (x32)
Erforderliche Komponenten für SSDT  (x32 Version: 11.0.2100.60)
ESN Sonar (x32 Version: 0.70.4)
Evernote v. 4.6.6 (x32 Version: 4.6.6.8360)
Far Cry 3 (x32 Version: 1.05)
Fiddler (x32 Version: 4.4.4.8)
FIFA 13 (x32 Version: 1.8.0.0)
FileZilla Client 3.7.1.1 (x32 Version: 3.7.1.1)
Foxit Reader (x32 Version: 5.4.5.114)
Free YouTube Download version 3.2.2.430 (x32 Version: 3.2.2.430)
Futuremark SystemInfo (x32 Version: 4.15.0)
Git version 1.8.1.2-preview20130201 (x32 Version: 1.8.1.2-preview20130201)
Google Chrome (x32 Version: 28.0.1500.72)
Google SketchUp 8 (x32 Version: 3.0.14358)
Google Update Helper (x32 Version: 1.3.21.153)
Griffith 0.13.0 (x32 Version: 0.13.0)
GTA2 (x32 Version: 1.00.001)
Hitman Absolution (x32)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.5.235)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
IntelliJ IDEA 12.0 (x32 Version: 123.72)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java SE Development Kit 7 Update 11 (x32 Version: 1.7.0.110)
JDownloader 0.9 (x32 Version: 0.9)
JDownloader 2 (Version: 2.0)
Jing (x32 Version: 2.8.13007.1)
Juniper Networks Host Checker (HKCU Version: 7.1.9.20893)
Juniper Networks, Inc. Setup Client (HKCU Version: 7.1.9.20595)
Juniper Networks, Inc. Setup Client Activex Control (x32 Version: 2.1.1.1)
KeePass Password Safe 2.20.1 (x32)
LameXP (x32)
LastPass(Nur deinstallieren) (x32)
Lautstärkefenster (x32 Version: 2.21)
Logitech Gaming Software 5.10 (Version: 5.10.127)
LogMeIn Hamachi (x32 Version: 2.1.0.374)
LyX 2.0.6 (x32 Version: 2.0.6)
Medal of Honor™ Warfighter (x32 Version: 1.0.0.2)
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709)
Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709)
Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709)
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727)
Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727)
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft NuGet - Visual Studio Express 2012 for Windows Desktop (x32 Version: 2.0.30717.9005)
Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017)
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017)
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017)
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2012 Command Line Utilities  (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Data-Tier App Framework  (Version: 11.0.2316.0)
Microsoft SQL Server 2012 Data-Tier App Framework  (x32 Version: 11.0.2316.0)
Microsoft SQL Server 2012 Express LocalDB  (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60)
Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Native Client  (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Transact-SQL Compiler Service  (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (Version: 11.0.2100.60)
Microsoft SQL Server 2012 T-SQL Language Service  (x32 Version: 11.0.2100.60)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (Version: 4.0.8876.1)
Microsoft SQL Server Data Tools - DEU (11.1.20828.01) (x32 Version: 11.1.20828.01)
Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20828.01) (x32 Version: 11.1.20828.01)
Microsoft Visio MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Visio Professional 2013 (Version: 15.0.4420.1017)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (x32 Version: 11.0.51106.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (x32 Version: 11.0.51106.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106)
Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106)
Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106)
Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Express Prerequisites x64 - DEU (Version: 11.0.50727)
Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1)
Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727)
Microsoft Visual Studio Express 2012 for Windows Desktop (x32 Version: 11.0.50727)
Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727)
Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727.42)
Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.50727)
Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.50727)
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727)
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727)
Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727)
Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727)
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000)
Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60)
Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60)
MiKTeX 2.9 (x32 Version: 2.9)
Mindjet (x32 Version: 11.1.353)
MongoVUE 1.5.3 (x32 Version: 1.5.3)
Mozilla Firefox 20.0.1 (x86 de) (x32 Version: 20.0.1)
Mozilla Maintenance Service (x32 Version: 17.0.7)
Mozilla Thunderbird 17.0.7 (x86 de) (x32 Version: 17.0.7)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Node.js (Version: 0.10.12)
Notepad++ (x32 Version: 6.4.2)
O&O SSD Migration Kit (Version: 7.0.35)
ON-Drucker-Software
OpenAL (x32)
Oracle VM VirtualBox 4.2.14 (Version: 4.2.14)
Origin (x32 Version: 9.2.1.4399)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017)
PDF Settings CS6 (x32 Version: 11.0)
PDF-XChange 3
ph (x32 Version: 1.0.0)
Protect Disc License Helper 1.0.125 (IE) (HKCU Version: 1.0.125)
ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.14)
PunkBuster Services (x32 Version: 0.991)
PuTTY version 0.62 (x32 Version: 0.62)
Python 2.7.5 (x32 Version: 2.7.5150)
Python 3.3.2 (x32 Version: 3.3.2150)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6519)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6662)
ResearchSoft Direct Export Helper (x32)
Ruby 1.9.3-p385 (HKCU Version: 1.9.3-p385)
SequoiaView (x32)
SketchUp 2013 (x32 Version: 13.0.4124)
Skype™ 6.5 (x32 Version: 6.5.158)
SoundFont-Bank-Manager (x32)
Spec Ops The Line (x32)
Spotify (HKCU Version: 0.9.1.57.ge7405149)
Steam (x32 Version: 1.0.0.0)
SyncBackPro (x32 Version: 6.3.13.0)
TeamSpeak 3 Client (x32 Version: 3.0.10)
TeamViewer 8 (x32 Version: 8.0.18930)
THX-Einrichtungskonsole (x32 Version: 3.50)
TmNationsForever (x32)
Toastify (x32 Version: 1.5)
tools-freebsd (x32 Version: 9.2.0.812388)
tools-linux (x32 Version: 9.2.0.812388)
tools-netware (x32 Version: 9.2.0.812388)
tools-solaris (x32 Version: 9.2.0.812388)
tools-windows (x32 Version: 9.2.0.812388)
tools-winPre2k (x32 Version: 9.2.0.812388)
TortoiseHg 2.6.2 (x64) (Version: 2.6.2)
TortoiseSVN 1.7.12.24070 (64 bit) (Version: 1.7.24070)
TP-LINK Wireless Client Utility (x32 Version: 2.0)
True Image 2013 (x32 Version: 16.0.5551)
True Image 2013 Plus Pack (x32 Version: 16.0.5551)
TrueCrypt (x32 Version: 7.1a)
TuneUp Utilities 2013 (x32 Version: 13.0.3020.2)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3020.2)
Update for  (KB2504637) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
Update for Microsoft Access 2013 (KB2760350) 64-Bit Edition
Update for Microsoft Excel 2013 (KB2760339) 64-Bit Edition
Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition
Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition
Update for Microsoft Office 2013 (KB2737954) 64-Bit Edition
Update for Microsoft Office 2013 (KB2752025) 64-Bit Edition
Update for Microsoft Office 2013 (KB2752094) 64-Bit Edition
Update for Microsoft Office 2013 (KB2752101) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760538) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition
Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition
Update for Microsoft Office 2013 (KB2767851) 64-Bit Edition
Update for Microsoft Office 2013 (KB2767860) 64-Bit Edition
Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition
Update for Microsoft Office 2013 (KB2810010) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817320) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817482) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817489) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817491) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817492) 64-Bit Edition
Update for Microsoft OneNote 2013 (KB2768011) 64-Bit Edition
Update for Microsoft OneNote 2013 (KB2817467) 64-Bit Edition
Update for Microsoft Outlook 2013 (KB2817468) 64-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2726947) 64-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2810006) 64-Bit Edition
Update for Microsoft SkyDrive Pro (KB2817469) 64-Bit Edition
Update for Microsoft Visio 2013 (KB2810008) 64-Bit Edition
Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition
Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.51219)
Update for Microsoft Word 2013 (KB2767863) 64-Bit Edition
Update for Microsoft Word 2013 (KB2810086) 64-Bit Edition
Uplay (x32 Version: 2.0)
VLC media player 2.0.6 (x32 Version: 2.0.6)
VMware Workstation (Version: 9.0.0)
VMware Workstation (x32 Version: 9.0.0)
Windows Software Development Kit (x32 Version: 8.59.25584)
Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584)
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584)
Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584)
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584)
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
Wolfenstein - Enemy Territory (x32)
XBMC (HKCU)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-02-12 13:49 - 00001056 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1                   activate.adobe.com
127.0.0.1                   practivate.adobe.com
127.0.0.1                   lmlicenses.wip4.adobe.com
127.0.0.1                   lm.licenses.adobe.com
127.0.0.1  evershare.de			


==================== Scheduled Tasks (whitelisted) =============

Task: {11A3D818-B9B0-496A-9B3C-184619801E61} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-02] (Google Inc.)
Task: {18D26F37-12E6-4601-8F67-AE163C04DBBC} - System32\Tasks\Microsoft\Office\Office First Run Task => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2012-11-23] (Microsoft Corporation)
Task: {1DA3FAF5-C5AA-4990-934F-E0C4BCF8085F} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {413E4FD8-B6EC-4BDE-A3CF-E2970D4A38B2} - System32\Tasks\Microsoft Office 15 Sync Maintenance for xxxDesktop-xxx xxxDesktop => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2012-10-01] (Microsoft Corporation)
Task: {474C05EA-64A6-4577-A488-A2945F996E6C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-02] (Google Inc.)
Task: {6AB1E190-C279-426A-8850-AC97DA421F88} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-20] (Adobe Systems Incorporated)
Task: {6CB699FA-5255-4133-A857-34F730E0E1BC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {C4F7628E-4F9D-4C58-A898-E9D221178662} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {D0DF130F-78FF-4108-8A9A-4CCFCBCB8214} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => D:\Programme\TuneUp\OneClick.exe [2013-01-28] (TuneUp Software)
Task: {DA5BD467-5963-459D-854F-E195639F80B5} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {DD044B2F-6953-4C2F-86B9-C06D5FD0C672} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {FB79F492-E4E4-4E82-8E26-993BC8470D0D} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/25/2013 04:46:50 PM) (Source: Application Hang) (User: )
Description: Programm Explorer.EXE, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 768

Startzeit: 01ce893f6f14bed0

Endzeit: 60000

Anwendungspfad: C:\Windows\Explorer.EXE

Berichts-ID: c6d63c76-f538-11e2-860d-005056c00008

Error: (07/25/2013 04:43:03 PM) (Source: Application Hang) (User: )
Description: Programm thunderbird.exe, Version 17.0.7.4919 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 8cc

Startzeit: 01ce89418be8e5d0

Endzeit: 60000

Anwendungspfad: C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe

Berichts-ID: 4d405745-f538-11e2-860d-005056c00008

Error: (07/24/2013 07:34:21 PM) (Source: Application Error) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm Windows-Explorer wurde wegen dieses Fehlers geschlossen.

Programm: Windows-Explorer
Datei: 

Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
	- diese sich im Netzwerk befindet, 
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
	- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt. 
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.

Zusätzliche Daten
Fehlerwert: C000026E
Datenträgertyp: 0

Error: (07/24/2013 07:34:21 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e
Ausnahmecode: 0xc0000006
Fehleroffset: 0x00000000000232df
ID des fehlerhaften Prozesses: 0xe10
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3

Error: (07/19/2013 09:20:03 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.0.6.0, Zeitstempel: 0x516ae039
Name des fehlerhaften Moduls: vlc.exe, Version: 2.0.6.0, Zeitstempel: 0x516ae039
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001cb9
ID des fehlerhaften Prozesses: 0x1bd0
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3

Error: (07/19/2013 05:49:54 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Acrobat.exe, Version: 10.1.7.27, Zeitstempel: 0x518c95a8
Name des fehlerhaften Moduls: Scan.api, Version: 10.1.7.27, Zeitstempel: 0x518ca19c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00034037
ID des fehlerhaften Prozesses: 0x14bc
Startzeit der fehlerhaften Anwendung: 0xAcrobat.exe0
Pfad der fehlerhaften Anwendung: Acrobat.exe1
Pfad des fehlerhaften Moduls: Acrobat.exe2
Berichtskennung: Acrobat.exe3

Error: (07/19/2013 00:25:51 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: hamachi-2.exe, Version: 2.1.0.374, Zeitstempel: 0x51cd7b1e
Name des fehlerhaften Moduls: hamachi-2.exe, Version: 2.1.0.374, Zeitstempel: 0x51cd7b1e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000001434fb
ID des fehlerhaften Prozesses: 0x830
Startzeit der fehlerhaften Anwendung: 0xhamachi-2.exe0
Pfad der fehlerhaften Anwendung: hamachi-2.exe1
Pfad des fehlerhaften Moduls: hamachi-2.exe2
Berichtskennung: hamachi-2.exe3

Error: (07/17/2013 00:59:29 PM) (Source: MsiInstaller) (User: xxxDesktop)
Description: Produkt: Evernote v. 4.6.6 -- Fehler 1706. Ein Installationspaket des Programms Evernote v. 4.6.6 konnte nicht gefunden werden. Wiederholen Sie das Setup unter Verwendung einer gültigen Kopie des Installationspakets "Evernote.msi".

Error: (07/13/2013 05:35:20 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (07/12/2013 07:55:02 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: hamachi-2.exe, Version: 2.1.0.374, Zeitstempel: 0x51cd7b1e
Name des fehlerhaften Moduls: hamachi-2.exe, Version: 2.1.0.374, Zeitstempel: 0x51cd7b1e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000001434fb
ID des fehlerhaften Prozesses: 0x878
Startzeit der fehlerhaften Anwendung: 0xhamachi-2.exe0
Pfad der fehlerhaften Anwendung: hamachi-2.exe1
Pfad des fehlerhaften Moduls: hamachi-2.exe2
Berichtskennung: hamachi-2.exe3


System errors:
=============
Error: (07/30/2013 01:49:28 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (07/29/2013 03:09:54 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.

Error: (07/29/2013 02:44:33 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.

Error: (07/29/2013 11:58:18 AM) (Source: NetBT) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.0.100
registriert werden. Der Computer mit IP-Adresse 192.168.0.130 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (07/28/2013 03:32:03 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.

Error: (07/28/2013 03:13:01 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.

Error: (07/28/2013 03:06:09 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.

Error: (07/28/2013 01:28:10 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.

Error: (07/28/2013 00:44:48 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "VMware Workstation Server" ist vom Dienst "VMware USB Arbitration Service" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (07/27/2013 10:36:44 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "VMware Workstation Server" ist vom Dienst "VMware USB Arbitration Service" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058


Microsoft Office Sessions:
=========================
Error: (07/25/2013 04:46:50 PM) (Source: Application Hang)(User: )
Description: Explorer.EXE6.1.7601.1756776801ce893f6f14bed060000C:\Windows\Explorer.EXEc6d63c76-f538-11e2-860d-005056c00008

Error: (07/25/2013 04:43:03 PM) (Source: Application Hang)(User: )
Description: thunderbird.exe17.0.7.49198cc01ce89418be8e5d060000C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe4d405745-f538-11e2-860d-005056c00008

Error: (07/24/2013 07:34:21 PM) (Source: Application Error)(User: )
Description: Windows-ExplorerC000026E0

Error: (07/24/2013 07:34:21 PM) (Source: Application Error)(User: )
Description: Explorer.EXE6.1.7601.175674d672ee4ntdll.dll6.1.7601.177254ec4aa8ec000000600000000000232dfe1001ce883cc611f49eC:\Windows\Explorer.EXEC:\Windows\SYSTEM32\ntdll.dll45aad628-f487-11e2-854d-005056c00008

Error: (07/19/2013 09:20:03 PM) (Source: Application Error)(User: )
Description: vlc.exe2.0.6.0516ae039vlc.exe2.0.6.0516ae039c000000500001cb91bd001ce8456ee40ca94C:\Program Files (x86)\VideoLAN\VLC\vlc.exeC:\Program Files (x86)\VideoLAN\VLC\vlc.exe36201f84-f0a8-11e2-ad2c-005056c00008

Error: (07/19/2013 05:49:54 PM) (Source: Application Error)(User: )
Description: Acrobat.exe10.1.7.27518c95a8Scan.api10.1.7.27518ca19cc00000050003403714bc01ce84976d9b3570D:\Programme\Adobe CS6\Acrobat 10.0\Acrobat\Acrobat.exeD:\Programme\Adobe CS6\Acrobat 10.0\Acrobat\plug_ins\Scan.apida9285df-f08a-11e2-ad2c-005056c00008

Error: (07/19/2013 00:25:51 PM) (Source: Application Error)(User: )
Description: hamachi-2.exe2.1.0.37451cd7b1ehamachi-2.exe2.1.0.37451cd7b1ec000000500000000001434fb83001ce844d75868fedC:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exeC:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe95a6fb7a-f05d-11e2-ad2c-005056c00008

Error: (07/17/2013 00:59:29 PM) (Source: MsiInstaller)(User: xxxDesktop)
Description: Produkt: Evernote v. 4.6.6 -- Fehler 1706. Ein Installationspaket des Programms Evernote v. 4.6.6 konnte nicht gefunden werden. Wiederholen Sie das Setup unter Verwendung einer gültigen Kopie des Installationspakets "Evernote.msi".(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (07/13/2013 05:35:20 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestE:\Downloads\Browserdownloads\SoftonicDownloader_fuer_anti-twin.exe

Error: (07/12/2013 07:55:02 PM) (Source: Application Error)(User: )
Description: hamachi-2.exe2.1.0.37451cd7b1ehamachi-2.exe2.1.0.37451cd7b1ec000000500000000001434fb87801ce7e9f571432a0C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exeC:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe2cd3611c-eb1c-11e2-9698-005056c00008


==================== Memory info =========================== 

Percentage of memory in use: 77%
Total physical RAM: 8153.06 MB
Available physical RAM: 1864.98 MB
Total Pagefile: 16304.31 MB
Available Pagefile: 9130.82 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:59.62 GB) (Free:8.74 GB) NTFS (Disk=0 Partition=1) ==>[Drive with boot components (obtained from BCD)]
Drive d: (Workbench) (Fixed) (Total:465.66 GB) (Free:63.59 GB) NTFS (Disk=3 Partition=2)
Drive e: (Daten) (Fixed) (Total:372.61 GB) (Free:250.11 GB) NTFS (Disk=2 Partition=1)
Drive f: (Software) (Fixed) (Total:931.51 GB) (Free:189.9 GB) NTFS (Disk=1 Partition=1)
Drive g: (Extern) (Fixed) (Total:931.51 GB) (Free:527.07 GB) NTFS (Disk=4 Partition=1)
Drive y: (Anno 2070 Addon) (CDROM) (Total:1.37 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 60 GB) (Disk ID: 2C84E735)
Partition 1: (Active) - (Size=60 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 932 GB) (Disk ID: 4D544F4F)
No partition Table on disk 1.

========================================================
Disk: 2 (Size: 373 GB) (Disk ID: 6F0D26C0)
Partition 1: (Active) - (Size=373 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 6F0D26DB)
Partition 1: (Not Active) - (Size=100 MB) - (Type=06)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 4 (Size: 932 GB) (Disk ID: E8900690)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-07-2013 03
Ran by xxx (administrator) on 30-07-2013 21:08:57
Running from E:\Downloads\Browserdownloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
() C:\Windows\SysWOW64\NMSAccessU.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
() C:\Program Files\TortoiseHg\TortoiseHgOverlayServer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Spotify Ltd) C:\Users\xxx\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Jesper Palm) C:\Program Files (x86)\Toastify\Toastify.exe
(Spotify Ltd) C:\Users\xxx\AppData\Roaming\Spotify\spotify.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Volume Panel\VolPanlu.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CTXFISPI.EXE
(Dropbox, Inc.) C:\Users\xxx\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
() D:\Coding\Programme\android-sdk\platform-tools\adb.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(TrueCrypt Foundation) C:\Program Files\TrueCrypt\TrueCrypt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(JetBrains s.r.o) C:\Program Files (x86)\JetBrains\IntelliJ IDEA 12.0\bin\idea.exe
(JetBrains, Inc.) C:\Program Files (x86)\JetBrains\IntelliJ IDEA 12.0\bin\fsnotifier.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Joyent, Inc) C:\Program Files\nodejs\node.exe
(Joyent, Inc) C:\Program Files\nodejs\node.exe
(Joyent, Inc) C:\Program Files\nodejs\node.exe
(Joyent, Inc) C:\Program Files\nodejs\node.exe
(Joyent, Inc) C:\Program Files\nodejs\node.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [TortoiseHgOverlayIconServer] - C:\Program Files\TortoiseHg\TortoiseHgOverlayServer.exe [53512 2013-01-02] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19603048 2013-06-03] (Skype Technologies S.A.)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\xxx\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-09] (Spotify Ltd)
HKCU\...\Run: [Toastify] - C:\Program Files (x86)\Toastify\Toastify.exe [238592 2012-11-13] (Jesper Palm)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3674320 2013-01-08] (DT Soft Ltd)
HKCU\...\Run: [Spotify] - C:\Users\xxx\AppData\Roaming\Spotify\spotify.exe [4640768 2013-07-09] (Spotify Ltd)
HKCU\...\RunOnce: [Application Restart #0] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe  --flag-switches-begin --enable-sync-favicons --sync-keystore-encryption --flag-switches-end --restore-last-session -- https://battlelog.battlefield.com/bf3/sso/TmV4dXNDb25uZWN0QVQ6UWNJNVpwOGNBUHpRdnJQVjZQaDR0YVUzQk9wdDN0U202b25XRGR5YjoxMzg2MA [846288 2013-07-12] (Google Inc.)
MountPoints2: Y - Y:\DBstart.exe
MountPoints2: {80e534ce-6d39-11e2-b67f-e15d3350554d} - Y:\Autorun.exe
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [VolPanel] - C:\Program Files (x86)\Creative\Volume Panel\VolPanlu.exe [241789 2009-07-07] (Creative Technology Ltd)
HKLM-x32\...\Run: [CTxfiHlp] - C:\Windows\\SysWOW64\CTXFIHLP.EXE [25600 2011-08-22] (Creative Technology Ltd)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass FF RunOnce.lnk
ShortcutTarget: Install LastPass FF RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
Startup: C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\xxx\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files (x86)\Mindjet\MindManager 11\Mm8InternetExplorer.dll (Mindjet)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://juniper.net/dana-cached/sc/JuniperSetupClient.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/121022/CTPID.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

FireFox:
========
FF ProfilePath: C:\Users\xxx\AppData\Roaming\Mozilla\Firefox\Profiles\w3cyqwp4.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Acrobat - D:\Programme\Adobe CS6\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @protectdisc.com/NPPDLicenseHelper - C:\Users\xxx\AppData\Roaming\ProtectDisc\License Helper v2\NPPDLicenseHelper.dll ( )
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: LastPass - C:\Users\xxx\AppData\Roaming\Mozilla\Firefox\Profiles\w3cyqwp4.default\Extensions\support@lastpass.com
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] D:\Programme\Adobe CS6\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - D:\Programme\Adobe CS6\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [fiddlerhook@fiddler2.com] C:\Program Files (x86)\Fiddler2\FiddlerHook
FF Extension: FiddlerHook - C:\Program Files (x86)\Fiddler2\FiddlerHook

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/", "https://www.wunderlist.com/#/lists/starred"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U11) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.110.21) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (A Quotation) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafpohheobbibbehfjogminpinjhlpmg\0.8_0
CHR Extension: (ProxTube) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.2.3_0
CHR Extension: (Google Translate) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb\1.2.4_0
CHR Extension: (Sort by Name) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\amigcgbheognjmfkaieeeadojiibgbdp\2.0.0_0
CHR Extension: (Google Docs) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (Bookmark Sentry) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdglbbcbmgnimogcmcdenggkpdmihlga\1.7.13_0
CHR Extension: (YouTube) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Firebug Lite for Google Chrome\u2122) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench\1.4.0.11967_0
CHR Extension: () - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.2_0
CHR Extension: (Spotify - Music for every moment) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnkjkdjlofllcpbemipjbcpfnglbgieh\0.2.3_0
CHR Extension: (Google Search) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (LEO Dictionary) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhmlplceigplahbkhifeaeinaeppccef\1.3.1_0
CHR Extension: (Bookmarks Tagger) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpiecafonfminhngabegejbligdagjfc\1.1.2_0
CHR Extension: (Timer) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\edebbhkhcaafmolanelponjjanocpacd\1.8.0.4_0
CHR Extension: (Google Calendar) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn\4.5.3_0
CHR Extension: (Facebook Disconnect) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpepffjfmamnambagiibghpglaidiec\1.3.0_0
CHR Extension: (Photo Zoom for Facebook) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\elioihkkcdgakfbahdoddophfngopipi\1.1208.30.1_0
CHR Extension: (DoNotTrackMe) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\2.2.9.620_0
CHR Extension: (PanicButton) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\faminaibgiklngmfpfbhmokfmnglamcm\0.14.2.2_0
CHR Extension: (Wunderlist - To-do & Task List) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjliknjliaohjgjajlgolhijphojjdkc\2.2.0_0
CHR Extension: (      "name": "Mail Checker Plus for Google Mail\u2122") - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\gffjhibehnempbkeheiccaincokdjbfe\1.3.19_0
CHR Extension: (AdBlock) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.4_0
CHR Extension: (Options \u2014 $EXTNAME$) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\gokffdfnlmampchciemmflgbckijpmlb\0.15.4_0
CHR Extension: (LastPass) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd\2.0.25_0
CHR Extension: (Stealthy) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieaebnkibonmpbhdaanjkmedikadnoje\3.0.1_0
CHR Extension: (GWT Developer Plugin) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjpnpmbddbjkfaccnmhnkdgjideieim\1.0.11357_0
CHR Extension: (1-Click Web Proxy) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjdehhkgdgjcekacdccoflccmhbkefce\2.1.3_0
CHR Extension: (StayFocusd) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\laankejkbhbdhmipfmgcngdelahlfoji\1.3.10_0
CHR Extension: (Google Maps) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh\5.2.7_0
CHR Extension: (Hangouts) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd\2013.717.433.1_0
CHR Extension: (Remind Me - by Astrid) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhfjhcbjeaioljbdmiddkmnidgmnolbc\1.3.1.2_0
CHR Extension: (dict-cc) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nknonnojlmhnmjhpeokdbeineeajcemh\1.6.88_0
CHR Extension: (Docs PDF/PowerPoint Viewer (by Google)) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbmlagghjjcbdhgmkedmbmedengocbn\3.10_0
CHR Extension: (Chrome to Phone) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadboiipflhobonjjffjbfekfjcgkhco\2.3.2_0
CHR Extension: (Spotify Web Player Launcher) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\oafegckanldnpojgnlfgloifiejbkgog\1.12_0
CHR Extension: (Neater Bookmarks) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofgjggbjanlhbgaemjbkiegeebmccifi\0.9.7.1_0
CHR Extension: (      "name": "MonitorTab") - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ognampngfcbddbfemdapefohjiobgbdl\0.27_0
CHR Extension: (LEO W\u00F6rterbuchsuche) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojniiiidjmoaiehegaedmfdclmgmmpdp\1.4_0
CHR Extension: (Diigo Web Collector - Capture and Annotate) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\oojbgadfejifecebmdnhhkbhdjaphole\2.2.5_0
CHR Extension: (Google Calendar Checker (by Google)) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookhcbgokankfmjafalglpofmolfopek\1.4.0_0
CHR Extension: (Leo Lookup) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\oopfkoeeodhelodbcebcelcicndoalcj\1.0_0
CHR Extension: (4chan Plus) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pinelipedelckihohgdlpcclgocodhjj\3.0.0_0
CHR Extension: (Gmail) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - C:\Program Files (x86)\LastPass\lpchrome.crx
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
S3 Creative Dolby Digital Live Pack Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\DDLLicensing.exe [79360 2013-02-06] (Creative Labs)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 NMSAccess; C:\Windows\SysWOW64\NMSAccessU.exe [71096 2009-01-12] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-06-23] ()
S4 TuneUp.UtilitiesSvc; D:\Programme\TuneUp\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software)
S4 VMAuthdService; D:\Programme\VMware Workstation\vmware-authd.exe [79872 2012-08-15] (VMware, Inc.)
S2 VMwareHostd; D:\Programme\VMware Workstation\vmware-hostd.exe [15680000 2012-08-15] ()

==================== Drivers (Whitelisted) ====================

S3 arusb_win7x; C:\Windows\System32\DRIVERS\arusb_win7x.sys [769024 2010-06-01] (Atheros Communications, Inc.)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-05-22] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-02-02] (DT Soft Ltd)
S3 etdrv; C:\Windows\etdrv.sys [25640 2013-02-04] (Windows (R) Server 2003 DDK provider)
S3 etdrv; C:\Windows\etdrv.sys [25640 2013-02-04] (Windows (R) Server 2003 DDK provider)
S3 gdrv; C:\Windows\gdrv.sys [25640 2013-02-06] (Windows (R) Server 2003 DDK provider)
S3 gdrv; C:\Windows\gdrv.sys [25640 2013-02-06] (Windows (R) Server 2003 DDK provider)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-02-06] ()
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-02-06] ()
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [110744 2012-07-19] (Qualcomm Atheros Co., Ltd.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-05-22] ()
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [1093256 2013-02-08] (Acronis)
S3 TuneUpUtilitiesDrv; D:\Programme\TuneUp\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software)
R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [166024 2013-02-08] (Acronis)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [70256 2012-07-06] (VMware, Inc.)
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [x]
U3 pxlyyaog; \??\C:\Users\xxx\AppData\Local\Temp\pxlyyaog.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-28 15:10 - 2013-07-28 15:10 - 00000000 ____D C:\Users\xxx\AppData\Roaming\EPSON
2013-07-25 17:16 - 2013-07-25 17:16 - 00000000 ____D C:\Users\xxx\AppData\Roaming\SketchUp
2013-07-25 17:15 - 2013-07-25 17:15 - 00003120 _____ C:\Windows\SysWOW64\ALLFSAF13a.ocx
2013-07-25 17:15 - 2013-07-25 17:15 - 00002195 _____ C:\Users\Public\Desktop\Style Builder 2013.lnk
2013-07-25 17:15 - 2013-07-25 17:15 - 00002109 _____ C:\Users\Public\Desktop\LayOut 2013.lnk
2013-07-25 17:15 - 2013-07-25 17:15 - 00002024 _____ C:\Users\Public\Desktop\SketchUp 2013.lnk
2013-07-25 17:15 - 2013-07-25 17:15 - 00000000 ____D C:\ProgramData\SketchUp
2013-07-25 17:15 - 2013-07-25 17:15 - 00000000 ____D C:\Program Files (x86)\SketchUp
2013-07-25 17:12 - 2013-07-25 17:12 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Google
2013-07-25 17:12 - 2013-07-25 17:12 - 00000000 ____D C:\ProgramData\Google
2013-07-25 17:11 - 2013-07-25 17:11 - 00002032 _____ C:\Users\Public\Desktop\Google SketchUp 8.lnk
2013-07-24 23:35 - 2013-07-24 23:35 - 00000863 _____ C:\Users\Public\Desktop\FIFA 13.lnk
2013-07-21 02:12 - 2013-07-21 03:21 - 00000000 ____D C:\Program Files (x86)\Blobby Volley 2 Version 1.0RC3
2013-07-19 22:58 - 2013-07-19 22:58 - 00000000 ____D C:\Users\xxx\AppData\Roaming\mkvtoolnix
2013-07-17 15:29 - 2013-07-28 15:19 - 00000132 _____ C:\Users\xxx\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2013-07-17 14:43 - 2013-07-17 14:43 - 00000000 ____D C:\Users\xxx\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2013-07-14 21:10 - 2013-07-14 21:11 - 00000000 ____D C:\Windows\system32\appmgmt
2013-07-14 16:25 - 2013-07-14 16:34 - 00000000 ____D C:\Users\xxx\AppData\Roaming\TrueCrypt
2013-07-14 16:25 - 2013-07-14 16:25 - 00231376 _____ (TrueCrypt Foundation) C:\Windows\system32\Drivers\truecrypt.sys
2013-07-14 16:25 - 2013-07-14 16:25 - 00000882 _____ C:\Users\Public\Desktop\TrueCrypt.lnk
2013-07-14 16:25 - 2013-07-14 16:25 - 00000000 ____D C:\Program Files\TrueCrypt
2013-07-14 15:54 - 2013-07-14 15:54 - 00000000 ____D C:\Users\xxx\Documents\ANNO 2070
2013-07-12 03:07 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-12 03:07 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-12 03:07 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-12 03:07 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-12 03:07 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-12 03:07 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-12 03:07 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-12 03:07 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-12 03:07 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-12 03:07 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-12 03:07 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-12 03:07 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-12 03:07 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-12 03:07 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-12 03:07 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-12 03:06 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-12 03:06 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-12 03:06 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-12 03:06 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-12 03:06 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-12 03:06 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-12 03:06 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-12 03:06 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-12 03:06 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-12 03:06 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-12 03:06 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-12 03:06 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-12 03:06 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-12 03:06 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-12 03:06 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-12 03:06 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 17:01 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-11 17:01 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-11 17:00 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-11 17:00 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-11 16:59 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-11 16:58 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-11 16:58 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-11 12:10 - 2013-07-11 18:13 - 00000000 ____D C:\Users\xxx\.rest-client
2013-07-11 12:08 - 2013-07-11 12:08 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Notepad++
2013-07-11 12:08 - 2013-07-11 12:08 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2013-07-11 12:08 - 2013-07-11 12:08 - 00000000 ____D C:\Program Files (x86)\Notepad++
2013-07-09 14:16 - 2013-07-09 17:33 - 00000000 ____D C:\Users\xxx\Documents\Fiddler2
2013-07-09 14:15 - 2013-07-09 14:15 - 00000000 ____D C:\Program Files (x86)\Fiddler2
2013-07-08 20:53 - 2013-07-08 20:56 - 00000000 ____D C:\Users\xxx\AppData\Roaming\TS3Client
2013-07-08 20:53 - 2013-07-08 20:53 - 00001173 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2013-07-08 20:53 - 2013-07-08 20:53 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client
2013-07-08 20:16 - 2009-03-18 18:35 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys
2013-07-08 20:15 - 2013-07-11 01:42 - 00000000 ____D C:\Users\xxx\AppData\Local\LogMeIn Hamachi
2013-07-08 20:15 - 2013-07-08 20:15 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-07-08 11:40 - 2013-07-08 11:40 - 00284736 _____ C:\Windows\msxml4-KB973688-enu.LOG
2013-07-08 11:39 - 2013-07-08 11:39 - 00289116 _____ C:\Windows\msxml4-KB954430-enu.LOG
2013-07-08 11:39 - 2013-07-08 11:39 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2012
2013-07-08 11:39 - 2013-07-08 11:39 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2012
2013-07-08 11:39 - 2013-07-08 11:39 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2013-07-07 18:51 - 2013-07-07 18:55 - 00000000 ____D C:\Users\xxx\Documents\Visual Studio 2012
2013-07-07 18:51 - 2013-07-07 18:51 - 00000000 ____D C:\Program Files (x86)\NuGet
2013-07-07 18:44 - 2013-07-07 18:44 - 00000000 ____D C:\Windows\symbols
2013-07-07 18:41 - 2013-07-07 18:41 - 00000000 ____D C:\Program Files (x86)\Windows Kits
2013-07-07 18:39 - 2013-07-07 18:39 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2013-07-07 18:39 - 2013-07-07 18:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer
2013-07-07 18:38 - 2013-07-07 18:38 - 00000000 ____D C:\Windows\SysWOW64\1033
2013-07-07 18:38 - 2013-07-07 18:38 - 00000000 ____D C:\Windows\SysWOW64\1031
2013-07-07 18:38 - 2013-07-07 18:38 - 00000000 ____D C:\Windows\system32\1033
2013-07-07 18:38 - 2013-07-07 18:38 - 00000000 ____D C:\Windows\system32\1031
2013-07-07 18:36 - 2013-07-07 18:36 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-07-07 18:36 - 2013-07-07 18:36 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-07-07 18:30 - 2013-07-07 18:30 - 00000000 ____D C:\Users\xxx\.node-gyp
2013-07-07 18:28 - 2013-07-07 18:28 - 00000000 ____D C:\Program Files (x86)\Python 2.7.5
2013-07-07 18:26 - 2013-07-07 18:26 - 00000000 ____D C:\Program Files (x86)\Python
2013-07-07 18:01 - 2013-07-07 18:01 - 00000000 ____D C:\Users\xxx\AppData\Local\Downloaded Installations
2013-07-07 18:01 - 2013-07-07 18:01 - 00000000 ____D C:\ProgramData\Seagate
2013-07-07 17:56 - 2013-07-07 18:01 - 00000000 ____D C:\Program Files (x86)\Seagate
2013-07-07 14:27 - 2013-07-07 14:39 - 00000000 ____D C:\Users\xxx\node_modules
2013-07-06 17:15 - 2013-07-11 12:20 - 00000000 ____D C:\Users\xxx\AppData\Roaming\npm-cache
2013-07-06 17:15 - 2013-07-07 18:22 - 00000000 ____D C:\Users\xxx\AppData\Roaming\npm
2013-07-06 17:10 - 2013-07-06 17:10 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Node.js
2013-07-06 17:10 - 2013-07-06 17:10 - 00000000 ____D C:\Program Files\nodejs
2013-07-06 13:15 - 2013-07-06 13:15 - 00000000 ____D C:\Program Files (x86)\PuTTY
2013-07-06 12:14 - 2013-07-06 12:14 - 00000000 ____D C:\Windows\System32\Tasks\Leader Technologies
2013-07-06 12:13 - 2013-07-06 12:13 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Leadertech
2013-07-05 14:57 - 2013-07-05 14:57 - 00000000 ____D C:\Users\xxx\AppData\Local\MiKTeX
2013-07-05 14:41 - 2013-07-05 14:41 - 00000000 ____D C:\ProgramData\MiKTeX
2013-07-05 14:40 - 2013-07-05 14:41 - 00000000 ____D C:\Program Files (x86)\MiKTeX 2.9
2013-07-04 22:55 - 2013-07-05 12:03 - 00000000 ____D C:\Program Files (x86)\SFTP Net Drive
2013-07-04 22:55 - 2013-03-01 17:19 - 00009064 _____ (EldoS Corporation) C:\Windows\system32\elevtmsg.dll
2013-07-04 22:54 - 2013-07-05 12:02 - 00000000 ____D C:\ProgramData\SftpNetDrive
2013-07-04 22:16 - 2013-07-10 01:43 - 00000000 ____D C:\Users\xxx\AppData\Roaming\FileZilla
2013-07-04 22:15 - 2013-07-04 22:15 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client
2013-07-01 20:18 - 2013-07-01 20:18 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Blender Foundation
2013-07-01 20:17 - 2013-07-01 20:17 - 00000000 ____D C:\Users\xxx\.thumbnails
2013-06-30 19:36 - 2013-07-03 23:25 - 00000000 ____D C:\Users\xxx\AppData\Roaming\XBMC
2013-06-30 19:35 - 2013-06-30 19:35 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XBMC
2013-06-30 16:12 - 2013-06-30 16:12 - 00000000 __RHD C:\MSOCache
2013-06-30 01:13 - 2013-06-30 01:13 - 00002720 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
119

==================== One Month Modified Files and Folders =======

2013-07-30 21:08 - 2013-07-30 21:08 - 00000000 ____D C:\FRST
2013-07-30 21:06 - 2013-02-02 15:50 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Skype
2013-07-30 20:51 - 2013-02-02 15:33 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-30 20:43 - 2013-02-02 15:29 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Spotify
2013-07-30 20:24 - 2013-03-28 13:45 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-30 19:35 - 2013-02-02 15:09 - 01639510 _____ C:\Windows\WindowsUpdate.log
2013-07-30 17:58 - 2013-02-04 19:47 - 00000000 ____D C:\Users\xxx\Documents\FIFA 13
2013-07-30 13:40 - 2013-05-06 00:25 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-07-30 13:40 - 2013-05-05 23:41 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-07-30 13:40 - 2013-05-05 20:59 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-07-30 09:58 - 2013-02-02 15:33 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-30 03:29 - 2013-02-08 22:57 - 00000000 ____D C:\Users\xxx\AppData\Roaming\vlc
2013-07-29 22:58 - 2013-06-23 13:36 - 00000000 ____D C:\Program Files (x86)\Origin
2013-07-29 10:34 - 2013-02-02 15:25 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-07-29 01:00 - 2013-02-02 15:28 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Dropbox
2013-07-28 23:06 - 2013-05-04 00:39 - 00000000 ____D C:\Users\xxx\.android
2013-07-28 22:34 - 2013-02-09 10:10 - 00000000 ____D C:\Users\xxx\AppData\Local\Eclipse
2013-07-28 15:19 - 2013-07-17 15:29 - 00000132 _____ C:\Users\xxx\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2013-07-28 15:13 - 2013-02-02 15:09 - 00000000 ____D C:\Users\xxx
2013-07-28 15:10 - 2013-07-28 15:10 - 00000000 ____D C:\Users\xxx\AppData\Roaming\EPSON
2013-07-28 12:52 - 2009-07-14 06:45 - 00014752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-28 12:52 - 2009-07-14 06:45 - 00014752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-28 12:50 - 2009-07-14 19:58 - 00701582 _____ C:\Windows\system32\perfh007.dat
2013-07-28 12:50 - 2009-07-14 19:58 - 00150248 _____ C:\Windows\system32\perfc007.dat
2013-07-28 12:50 - 2009-07-14 07:13 - 01626686 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-28 12:45 - 2013-06-21 14:36 - 00012367 _____ C:\Windows\setupact.log
2013-07-28 12:44 - 2013-06-29 12:19 - 00000000 ____D C:\ProgramData\VMware
2013-07-28 12:44 - 2013-02-02 15:43 - 00000000 ____D C:\Users\xxx\AppData\Roaming\TortoiseHg
2013-07-28 12:44 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-27 23:00 - 2013-04-26 10:40 - 00000000 ____D C:\Users\xxx\AppData\Local\TSVNCache
2013-07-25 17:16 - 2013-07-25 17:16 - 00000000 ____D C:\Users\xxx\AppData\Roaming\SketchUp
2013-07-25 17:15 - 2013-07-25 17:15 - 00003120 _____ C:\Windows\SysWOW64\ALLFSAF13a.ocx
2013-07-25 17:15 - 2013-07-25 17:15 - 00002195 _____ C:\Users\Public\Desktop\Style Builder 2013.lnk
2013-07-25 17:15 - 2013-07-25 17:15 - 00002109 _____ C:\Users\Public\Desktop\LayOut 2013.lnk
2013-07-25 17:15 - 2013-07-25 17:15 - 00002024 _____ C:\Users\Public\Desktop\SketchUp 2013.lnk
2013-07-25 17:15 - 2013-07-25 17:15 - 00000000 ____D C:\ProgramData\SketchUp
2013-07-25 17:15 - 2013-07-25 17:15 - 00000000 ____D C:\Program Files (x86)\SketchUp
2013-07-25 17:12 - 2013-07-25 17:12 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Google
2013-07-25 17:12 - 2013-07-25 17:12 - 00000000 ____D C:\ProgramData\Google
2013-07-25 17:11 - 2013-07-25 17:11 - 00002032 _____ C:\Users\Public\Desktop\Google SketchUp 8.lnk
2013-07-25 17:11 - 2013-02-02 15:33 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-24 23:38 - 2013-02-04 11:51 - 00000000 ____D C:\ProgramData\Origin
2013-07-24 23:35 - 2013-07-24 23:35 - 00000863 _____ C:\Users\Public\Desktop\FIFA 13.lnk
2013-07-24 23:34 - 2013-02-03 20:09 - 00109502 _____ C:\Windows\DirectX.log
2013-07-21 03:21 - 2013-07-21 02:12 - 00000000 ____D C:\Program Files (x86)\Blobby Volley 2 Version 1.0RC3
2013-07-20 13:32 - 2013-03-28 13:45 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-20 13:32 - 2013-03-28 13:45 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-20 13:32 - 2013-03-28 13:45 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-19 22:58 - 2013-07-19 22:58 - 00000000 ____D C:\Users\xxx\AppData\Roaming\mkvtoolnix
2013-07-18 01:00 - 2013-02-02 17:39 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Adobe
2013-07-18 01:00 - 2013-02-02 15:45 - 00000000 ____D C:\ProgramData\Adobe
2013-07-17 14:43 - 2013-07-17 14:43 - 00000000 ____D C:\Users\xxx\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2013-07-17 14:42 - 2013-02-02 17:36 - 00000000 ____D C:\Users\xxx\AppData\Local\Adobe
2013-07-14 21:11 - 2013-07-14 21:10 - 00000000 ____D C:\Windows\system32\appmgmt
2013-07-14 21:10 - 2013-02-02 15:30 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-14 16:34 - 2013-07-14 16:25 - 00000000 ____D C:\Users\xxx\AppData\Roaming\TrueCrypt
2013-07-14 16:25 - 2013-07-14 16:25 - 00231376 _____ (TrueCrypt Foundation) C:\Windows\system32\Drivers\truecrypt.sys
2013-07-14 16:25 - 2013-07-14 16:25 - 00000882 _____ C:\Users\Public\Desktop\TrueCrypt.lnk
2013-07-14 16:25 - 2013-07-14 16:25 - 00000000 ____D C:\Program Files\TrueCrypt
2013-07-14 15:54 - 2013-07-14 15:54 - 00000000 ____D C:\Users\xxx\Documents\ANNO 2070
2013-07-14 15:38 - 2013-05-22 00:54 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Ubisoft
2013-07-13 03:03 - 2013-02-02 15:47 - 00002190 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-07-13 03:01 - 2013-02-03 19:02 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-12 08:46 - 2013-02-02 15:33 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-12 08:46 - 2013-02-02 15:33 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-12 03:30 - 2009-07-14 06:45 - 05083088 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-12 03:29 - 2013-03-16 01:39 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-12 03:29 - 2013-03-16 01:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-12 03:29 - 2013-02-02 15:54 - 00071612 _____ C:\Windows\PFRO.log
2013-07-12 03:29 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-12 03:29 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-12 03:29 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-12 03:11 - 2013-02-03 21:00 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-12 03:02 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2013-07-11 18:13 - 2013-07-11 12:10 - 00000000 ____D C:\Users\xxx\.rest-client
2013-07-11 12:20 - 2013-07-06 17:15 - 00000000 ____D C:\Users\xxx\AppData\Roaming\npm-cache
2013-07-11 12:08 - 2013-07-11 12:08 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Notepad++
2013-07-11 12:08 - 2013-07-11 12:08 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2013-07-11 12:08 - 2013-07-11 12:08 - 00000000 ____D C:\Program Files (x86)\Notepad++
2013-07-11 01:42 - 2013-07-08 20:15 - 00000000 ____D C:\Users\xxx\AppData\Local\LogMeIn Hamachi
2013-07-10 01:43 - 2013-07-04 22:16 - 00000000 ____D C:\Users\xxx\AppData\Roaming\FileZilla
2013-07-09 23:22 - 2013-02-02 16:47 - 00000000 ____D C:\Users\xxx\AppData\Local\Spotify
2013-07-09 17:33 - 2013-07-09 14:16 - 00000000 ____D C:\Users\xxx\Documents\Fiddler2
2013-07-09 14:15 - 2013-07-09 14:15 - 00000000 ____D C:\Program Files (x86)\Fiddler2
2013-07-09 00:26 - 2013-02-02 17:15 - 00000000 ____D C:\Users\xxx\AppData\Roaming\KeePass
2013-07-08 20:56 - 2013-07-08 20:53 - 00000000 ____D C:\Users\xxx\AppData\Roaming\TS3Client
2013-07-08 20:53 - 2013-07-08 20:53 - 00001173 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2013-07-08 20:53 - 2013-07-08 20:53 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client
2013-07-08 20:15 - 2013-07-08 20:15 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-07-08 11:40 - 2013-07-08 11:40 - 00284736 _____ C:\Windows\msxml4-KB973688-enu.LOG
2013-07-08 11:39 - 2013-07-08 11:39 - 00289116 _____ C:\Windows\msxml4-KB954430-enu.LOG
2013-07-08 11:39 - 2013-07-08 11:39 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2012
2013-07-08 11:39 - 2013-07-08 11:39 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2012
2013-07-08 11:39 - 2013-07-08 11:39 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2013-07-08 11:39 - 2013-06-22 15:53 - 00000000 ____D C:\ProgramData\Package Cache
2013-07-07 18:55 - 2013-07-07 18:51 - 00000000 ____D C:\Users\xxx\Documents\Visual Studio 2012
2013-07-07 18:51 - 2013-07-07 18:51 - 00000000 ____D C:\Program Files (x86)\NuGet
2013-07-07 18:50 - 2013-02-03 19:04 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2013-07-07 18:50 - 2013-02-03 19:03 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-07-07 18:50 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-07-07 18:44 - 2013-07-07 18:44 - 00000000 ____D C:\Windows\symbols
2013-07-07 18:41 - 2013-07-07 18:41 - 00000000 ____D C:\Program Files (x86)\Windows Kits
2013-07-07 18:39 - 2013-07-07 18:39 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2013-07-07 18:39 - 2013-07-07 18:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer
2013-07-07 18:39 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-07-07 18:38 - 2013-07-07 18:38 - 00000000 ____D C:\Windows\SysWOW64\1033
2013-07-07 18:38 - 2013-07-07 18:38 - 00000000 ____D C:\Windows\SysWOW64\1031
2013-07-07 18:38 - 2013-07-07 18:38 - 00000000 ____D C:\Windows\system32\1033
2013-07-07 18:38 - 2013-07-07 18:38 - 00000000 ____D C:\Windows\system32\1031
2013-07-07 18:36 - 2013-07-07 18:36 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-07-07 18:36 - 2013-07-07 18:36 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-07-07 18:30 - 2013-07-07 18:30 - 00000000 ____D C:\Users\xxx\.node-gyp
2013-07-07 18:28 - 2013-07-07 18:28 - 00000000 ____D C:\Program Files (x86)\Python 2.7.5
2013-07-07 18:26 - 2013-07-07 18:26 - 00000000 ____D C:\Program Files (x86)\Python
2013-07-07 18:22 - 2013-07-06 17:15 - 00000000 ____D C:\Users\xxx\AppData\Roaming\npm
2013-07-07 18:01 - 2013-07-07 18:01 - 00000000 ____D C:\Users\xxx\AppData\Local\Downloaded Installations
2013-07-07 18:01 - 2013-07-07 18:01 - 00000000 ____D C:\ProgramData\Seagate
2013-07-07 18:01 - 2013-07-07 17:56 - 00000000 ____D C:\Program Files (x86)\Seagate
2013-07-07 14:39 - 2013-07-07 14:27 - 00000000 ____D C:\Users\xxx\node_modules
2013-07-06 17:10 - 2013-07-06 17:10 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Node.js
2013-07-06 17:10 - 2013-07-06 17:10 - 00000000 ____D C:\Program Files\nodejs
2013-07-06 13:25 - 2013-02-12 17:16 - 00000600 _____ C:\Users\xxx\AppData\Local\PUTTY.RND
2013-07-06 13:15 - 2013-07-06 13:15 - 00000000 ____D C:\Program Files (x86)\PuTTY
2013-07-06 12:14 - 2013-07-06 12:14 - 00000000 ____D C:\Windows\System32\Tasks\Leader Technologies
2013-07-06 12:13 - 2013-07-06 12:13 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Leadertech
2013-07-05 14:57 - 2013-07-05 14:57 - 00000000 ____D C:\Users\xxx\AppData\Local\MiKTeX
2013-07-05 14:41 - 2013-07-05 14:41 - 00000000 ____D C:\ProgramData\MiKTeX
2013-07-05 14:41 - 2013-07-05 14:40 - 00000000 ____D C:\Program Files (x86)\MiKTeX 2.9
2013-07-05 12:03 - 2013-07-04 22:55 - 00000000 ____D C:\Program Files (x86)\SFTP Net Drive
2013-07-05 12:02 - 2013-07-04 22:54 - 00000000 ____D C:\ProgramData\SftpNetDrive
2013-07-05 12:02 - 2013-02-02 15:09 - 00000000 ___RD C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-05 00:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-07-04 22:15 - 2013-07-04 22:15 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client
2013-07-03 23:25 - 2013-06-30 19:36 - 00000000 ____D C:\Users\xxx\AppData\Roaming\XBMC
2013-07-02 02:15 - 2013-06-29 12:23 - 00000000 ____D C:\Users\xxx\AppData\Roaming\VMware
2013-07-02 02:15 - 2013-06-29 12:23 - 00000000 ____D C:\Users\xxx\AppData\Local\VMware
2013-07-01 20:18 - 2013-07-01 20:18 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Blender Foundation
2013-07-01 20:17 - 2013-07-01 20:17 - 00000000 ____D C:\Users\xxx\.thumbnails
2013-06-30 20:03 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-06-30 19:35 - 2013-06-30 19:35 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XBMC
2013-06-30 16:12 - 2013-06-30 16:12 - 00000000 __RHD C:\MSOCache
2013-06-30 14:46 - 2013-06-29 11:48 - 00000000 ____D C:\Users\xxx\.VirtualBox
2013-06-30 14:19 - 2013-06-20 19:09 - 00000000 ____D C:\Users\xxx\AppData\Local\JDownloader v2.0
2013-06-30 01:13 - 2013-06-30 01:13 - 00002720 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-23 12:19

==================== End Of Log ============================
         

--- --- ---

127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 lmlicenses.wip4.adobe.com
127.0.0.1 lm.licenses.adobe.com

illegale Software wird nicht unterstützt. Wenn Du Support willst alles von Adobe deinstallieren, ebenso evtl vorhandene weitere gecrackte Software.

Nur als Info für Leute mit ähnlichen Problemen, welche Google hierher verweisen wird:

Ich habe mir den Netzwerk Traffic nochmal näher zu Gemüte geführt und scheinbar wurde ich tatsächlich mithilfe eines Rootkits als Proxy/Teil eines Botnetzes missbraucht -.-.

Auffallend viele Verbindungen gingen zu Facebook, diversen Versicherungswebseiten (kA warum gerade Versicherungen) sowie Email-Anbietern.
Ähnlich viele Verbindungen gingen an IP Adressen in China und Ostblockstaaten. Außerdem kann ich nicht gänzlich ausschließen, dass meine Email-Kontakte ausgelesen und angegriffen wurden.
Zum Analysieren des Netzwerktraffics habe ich Fiddler verwendet.

Aufgrund der Faktenlage habe ich den Rechner daher dann umgehend formatiert, jetzt scheint Ruhe zu sein.

Vielen Dank an schrauber für seine Hilfe an dieser Stelle.

Ich hoffe dieser Post hilft irgendwann jemandem weiter.

Viele Grüße
Markus