seid ein paar tagen geht IE automatisch an un der computer hängt ständig, weiss nicht mehr weiter

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-08-2013
Ran by Pluton_Mainz (administrator) on 19-08-2013 14:57:51
Running from C:\Users\Pluton_Mainz\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\windows\system32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\windows\system32\atieclxx.exe
(brother Industries Ltd) C:\windows\SysWOW64\brsvc01a.exe
(brother Industries Ltd) C:\windows\SysWOW64\brss01a.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Akamai Technologies, Inc.) C:\Users\Pluton_Mainz\AppData\Local\Akamai\netsession_win.exe
(Windows Net) C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data\net.exe
(Akamai Technologies, Inc.) C:\Users\Pluton_Mainz\AppData\Local\Akamai\netsession_win.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Lenovo) C:\Program Files\Lenovo\Power Dial\LitModeSwitch.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
() C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\IEXPLORE.EXE
() C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Roxio\BackOnTrack\File Backup\FileBackupSVC.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Lenovo) C:\Program Files\Lenovo\Power Dial\LenovoCOMSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesApp64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Lenovo) C:\Program Files\Lenovo\Power Dial\LitModeCtrl.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\OneClick.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TUDefragBackend64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3030256 2013-05-07] (Synaptics Incorporated)
HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [362952 2010-03-27] ()
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Pluton_Mainz\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-01-21] ()
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-11-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [ModeSwitch] - C:\Program Files\Lenovo\Power Dial\LitModeSwitch.exe [163840 2009-09-27] (Lenovo)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-03] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2255184 2013-06-28] (LogMeIn Inc.)
HKLM-x32\...\Run: [QuickTime Plugin Install] - C:\Program Files (x86)\QuickTime\Plugins\DeleteMe1.exe [86016 2013-07-07] ()
HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5141512 2010-03-27] ()
Startup: C:\Users\Pluton_Mainz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data\net.exe (Windows Net)

==================== Internet (Whitelisted) ====================

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.7&ts=1375086034716&tguid=46364-3869-1375086034716-DDE916C2F73510833FF8E6502D783EA2&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.7&ts=1375086034716&tguid=46364-3869-1375086034716-DDE916C2F73510833FF8E6502D783EA2&q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=FC604437E60A381B&affID=119357&tsp=4978
SearchScopes: HKCU - {84802E9B-92DE-4889-9D3C-2AE4B1A98312} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
SearchScopes: HKCU - {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} URL = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ie_de_display?ie=UTF8&tag=bds-p18-serp-de-ie-21&tagbase=bds-p18&tbrId=v1_abb-channel-18_6fa63ba5900744b18b787977b688dc15_18_38_20130131_DE_ie_ds_OC1&query={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - No Name - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} -  No File
Toolbar: HKCU - No Name - {78E516EF-11DE-47A1-8364-A99B917EC5EE} -  No File
Toolbar: HKCU - No Name - {213C8ED6-1D78-4D8F-8729-25006AA86A76} -  No File
Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Pluton_Mainz\AppData\Roaming\Mozilla\Firefox\Profiles\b2luevm7.default
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.5.0 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.5.0 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @4game.com/plugin - C:\Program Files (x86)\4game\npplugin4game.dll (Innova Co S.a r.l.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @real.com/nppl3260;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @t-immersion.com/DFusionHomeWebPlugIn - C:\Program Files (x86)\Total Immersion\DFusionHomeWebPlugIn\NPDFusionWebFirefox.dll (Total Immersion)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Pluton_Mainz\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\portaldosites.xml
FF Extension: No Name - C:\Users\Pluton_Mainz\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com
FF Extension: No Name - C:\Users\Pluton_Mainz\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: No Name - C:\Users\Pluton_Mainz\AppData\Roaming\Mozilla\Firefox\Profiles\b2luevm7.default\Extensions\6be3335b-ef79-4b0b-a0ba-b87afbc6f4ad@6bbb4d2e-e33e-4fa5-9b37-934f4fb50182.com
FF Extension: No Name - C:\Users\Pluton_Mainz\AppData\Roaming\Mozilla\Firefox\Profiles\b2luevm7.default\Extensions\ad80235d-5e5a-4a1d-a891-51b66a3e70f8@8f877d80-6977-415f-ac14-b52043838c19.com
FF Extension: pricealarm - C:\Users\Pluton_Mainz\AppData\Roaming\Mozilla\Firefox\Profiles\b2luevm7.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKCU\...\Firefox\Extensions: [{9309FA47-1B48-4768-AFA4-9E0556F5DC81}] C:\Program Files (x86)\LyricsPal\128.xpi

Chrome: 
=======
CHR HomePage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=FC604437E60A381B&affID=119357&tsp=4978
CHR RestoreOnStartup: "hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=FC604437E60A381B&affID=119357&tsp=4978"
CHR DefaultSearchURL: (Delta Search) - hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=FC604437E60A381B&affID=119357&tsp=4978
CHR DefaultSuggestURL: (Delta Search) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (4game) - C:\Program Files (x86)\4game\npplugin4game.dll (Innova Co S.a r.l.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (D'Fusion @Home Web Plug-In (3.10.17859)) - C:\Program Files (x86)\Total Immersion\DFusionHomeWebPlugIn\NPDFusionWebFirefox.dll (Total Immersion)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Pluton_Mainz\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Shockwave for Director) - C:\windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealJukebox NS Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
CHR Extension: (Feven) - C:\Users\PLUTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fglhnbihmeinbfgalpnaiembmdhfijli\1.23.23_0
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\PLUTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\PLUTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.2_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\PLUTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0
CHR Extension: (Battlefield Play4Free) - C:\Users\PLUTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh\1.0.96.0_0
CHR Extension: (Amazon for Chrome) - C:\Users\PLUTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam\2.2.2012.272_0
CHR HKLM-x32\...\Chrome\Extension: [aacbndibbcpajfgnkdkaakeiojmmgmnk] - C:\Users\Pluton_Mainz\AppData\Roaming\Media Finder\Extensions\mf_plugin_gc.crx
CHR HKLM-x32\...\Chrome\Extension: [ccbgjfdieajmokelnlapbedknchgenne] - C:\Users\Pluton_Mainz\AppData\Local\CRE\ccbgjfdieajmokelnlapbedknchgenne.crx
CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\Pluton_Mainz\AppData\Roaming\BabSolution\CR\Delta.crx
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx
CHR HKLM-x32\...\Chrome\Extension: [jpihmmhdcobmllpcnpfbhnipmhamldje] - C:\Users\Pluton_Mainz\AppData\Roaming\Media Finder\Extensions\gencrawler_gc.crx
CHR HKLM-x32\...\Chrome\Extension: [kfkcangbigakljkjeglcofaomihpejif] - C:\Users\Pluton_Mainz\AppData\Local\CRE\kfkcangbigakljkjeglcofaomihpejif.crx
CHR HKLM-x32\...\Chrome\Extension: [mmiopbgcekanlhpjkonogoljpfmhpkhf] - C:\Program Files (x86)\LyricsPal\125.crx
CHR HKLM-x32\...\Chrome\Extension: [ngnjhfpfhadncgafgbneeljaginimmmk] - C:\Users\PLUTON~1\AppData\Local\Temp\tbch.crx
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
CHR HKLM-x32\...\Chrome\Extension: [pnbbffeddnekkhjmokkhdebbfbibbflc] - C:\Program Files (x86)\LyricsPal\128.crx

==================== Services (Whitelisted) =================

S2 4game-service; C:\Program Files (x86)\4game\4game-service.exe [1133056 2013-05-23] (Innova Co S.a r.l.)
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1055288 2010-03-27] ()
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 Brother XP spl Service; C:\windows\SysWOW64\brsvc01a.exe [57344 2004-06-14] (brother Industries Ltd)
R2 CEEBC40A-FDED-4C59-B354-939132350B01; C:\Program Files (x86)\Roxio\BackOnTrack\File Backup\FileBackupSVC.exe [96752 2009-10-12] ()
R2 LenovoCOMSvc; C:\Program Files\Lenovo\Power Dial\LenovoCOMSvc.exe [49152 2009-09-30] (Lenovo)
R3 LitModeCtrl; C:\Program Files\Lenovo\Power Dial\LitModeCtrl.exe [81920 2009-09-27] (Lenovo)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-11-23] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [1974080 2010-10-26] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-20] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-20] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
S3 fwlanusb4; C:\Windows\System32\DRIVERS\fwlanusb4.sys [1293824 2010-10-22] (AVM GmbH)
S3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation                           )
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2013-05-07] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2010-11-19] ()
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [15712 2012-08-19] ()
R0 tdrpman258; C:\Windows\System32\DRIVERS\tdrpm258.sys [1477728 2013-08-18] (Acronis)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [11856 2010-10-07] (TuneUp Software)
R2 WinI2C-DDC; C:\windows\system32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.)
U3 ap39txag; C:\Windows\System32\Drivers\ap39txag.sys [0 ] (Microsoft Corporation)
U3 DfSdkS; 
S3 EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys [x]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [x]
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP1\WNt500x64\Sandra.sys [x]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [x]
S3 X6va011; \??\C:\windows\SysWOW64\Drivers\X6va011 [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-19 14:57 - 2013-08-19 14:57 - 00000000 ____D C:\FRST
2013-08-19 13:34 - 2013-08-19 13:34 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Pluton_Mainz\Downloads\mbam-setup-1.75.0.1300 (2).exe
2013-08-19 13:34 - 2013-08-19 13:34 - 00001073 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-19 13:34 - 2013-08-19 13:34 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-19 13:34 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-08-18 19:09 - 2013-08-18 19:21 - 3808428032 _____ C:\platt.tib
2013-08-18 19:06 - 2013-08-18 19:06 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Acronis
2013-08-18 19:05 - 2013-08-18 19:05 - 00000000 ____D C:\ProgramData\Acronis
2013-08-18 19:03 - 2013-08-18 19:03 - 01477728 _____ (Acronis) C:\windows\system32\Drivers\tdrpm258.sys
2013-08-18 19:03 - 2013-08-18 19:03 - 00943712 _____ (Acronis) C:\windows\system32\Drivers\timntr.sys
2013-08-18 19:03 - 2013-08-18 19:03 - 00271456 _____ (Acronis) C:\windows\system32\Drivers\snapman.sys
2013-08-18 19:03 - 2013-08-18 19:03 - 00252512 _____ (Acronis) C:\windows\system32\Drivers\afcdp.sys
2013-08-18 19:03 - 2013-08-18 19:03 - 00002195 _____ C:\Users\Public\Desktop\Acronis One-Click Backup.lnk
2013-08-18 19:03 - 2013-08-18 19:03 - 00001099 _____ C:\Users\Public\Desktop\Acronis True Image Home 2010.lnk
2013-08-18 19:03 - 2013-08-18 19:03 - 00000000 ____D C:\Program Files (x86)\Acronis
2013-08-18 17:59 - 2013-08-18 17:59 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Malwarebytes
2013-08-18 17:59 - 2013-08-18 17:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-18 17:57 - 2013-08-18 17:58 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Pluton_Mainz\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-08-18 12:31 - 2013-08-18 12:31 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Pluton_Mainz\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-18 12:25 - 2013-08-18 12:25 - 00000057 _____ C:\Users\Pluton_Mainz\AppData\Roaming\WB.CFG
2013-08-18 12:25 - 2013-08-18 12:25 - 00000005 _____ C:\Users\Pluton_Mainz\AppData\Roaming\WBPU-TTL.DAT
2013-08-18 09:25 - 2013-08-18 09:25 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\avgchrome
2013-08-18 09:24 - 2013-08-19 14:25 - 00000306 _____ C:\windows\Tasks\DSite.job
2013-08-18 09:24 - 2013-08-18 09:29 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2013-08-18 09:24 - 2013-08-18 09:26 - 00003274 _____ C:\windows\System32\Tasks\DSite
2013-08-18 09:24 - 2013-08-18 09:24 - 00003422 _____ C:\windows\System32\Tasks\EPUpdater
2013-08-18 09:24 - 2013-08-18 09:24 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\DSite
2013-08-18 09:24 - 2013-08-18 09:24 - 00000000 ____D C:\ProgramData\Babylon
2013-08-18 09:23 - 2013-08-18 09:23 - 00714352 _____ C:\Users\Pluton_Mainz\Downloads\ZipOpenerSetup.exe
2013-08-18 09:08 - 2013-08-18 09:08 - 00000306 _____ C:\windows\DeleteOnReboot.bat
2013-08-18 09:07 - 2013-08-18 09:08 - 00057539 _____ C:\AdwCleaner[S1].txt
2013-08-18 09:07 - 2013-08-18 09:07 - 00059284 _____ C:\AdwCleaner[R2].txt
2013-08-18 09:06 - 2013-08-18 09:07 - 00059223 _____ C:\AdwCleaner[R1].txt
2013-08-18 09:06 - 2013-08-18 09:06 - 00666633 _____ C:\Users\Pluton_Mainz\Downloads\adwcleaner2306.exe
2013-08-17 19:49 - 2013-08-17 19:50 - 02347384 _____ (ESET) C:\Users\Pluton_Mainz\Downloads\esetsmartinstaller_enu (1).exe
2013-08-17 19:48 - 2013-08-17 19:48 - 02347384 _____ (ESET) C:\Users\Pluton_Mainz\Downloads\esetsmartinstaller_enu.exe
2013-08-15 10:20 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-08-15 10:20 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-08-15 10:20 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-08-15 10:20 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-08-15 10:20 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-08-15 10:20 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-08-15 10:20 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-08-15 10:20 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-08-15 10:20 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-08-15 10:20 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-08-15 10:20 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-08-15 10:20 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 08:35 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-08-14 08:35 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2013-08-14 08:35 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-08-14 08:35 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-08-14 08:35 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-08-14 08:35 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-08-14 08:35 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-08-14 08:35 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2013-08-14 08:35 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2013-08-14 08:35 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-08-14 08:35 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2013-08-14 08:35 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2013-08-14 08:35 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-08-14 08:35 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-08-14 08:35 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-08-14 08:35 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2013-08-14 08:35 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2013-08-14 08:35 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-08-14 08:35 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-08-14 08:35 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2013-08-14 08:35 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
2013-08-14 08:35 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-08-14 08:35 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-08-14 08:35 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-08-14 08:35 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-08-14 08:35 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-08-14 08:35 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2013-08-09 18:24 - 2013-08-09 18:24 - 00000407 _____ C:\Users\Pluton_Mainz\Desktop\CD-Laufwerk - Verknüpfung.lnk
2013-08-09 18:07 - 2013-08-09 18:07 - 00000637 _____ C:\windows\KB942288-v3.log
2013-08-08 17:17 - 2013-08-08 17:18 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\Akamai
2013-08-08 17:17 - 2013-08-08 17:17 - 00558104 _____ (Aeria Games & Entertainment) C:\Users\Pluton_Mainz\Downloads\scarletblade_de_downloader.exe
2013-08-08 17:17 - 2013-08-08 17:17 - 00000000 ____D C:\ProgramData\BasicServe
2013-08-08 17:17 - 2013-08-08 17:17 - 00000000 ____D C:\Program Files (x86)\BasicServe
2013-08-08 17:17 - 2013-08-08 17:17 - 00000000 ____D C:\AeriaGames
2013-08-06 14:06 - 2013-08-06 14:06 - 36965680 _____ (Microsoft Corporation) C:\Users\Pluton_Mainz\Downloads\IE9-Windows7-x64-deu.exe
2013-08-06 14:06 - 2013-08-06 14:06 - 00001102 _____ C:\windows\IE9_main.log
2013-08-06 14:04 - 2013-08-06 14:06 - 00001556 _____ C:\windows\ie8_main.log
2013-08-06 14:04 - 2013-08-06 14:04 - 17010016 _____ (Microsoft Corporation) C:\Users\Pluton_Mainz\Downloads\IE8-WindowsXP-x86-DEU.exe
2013-08-01 20:01 - 2013-08-01 20:01 - 00263592 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-08-01 20:01 - 2013-08-01 20:01 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-01 20:00 - 2013-08-01 20:00 - 00903080 _____ (Oracle Corporation) C:\Users\Pluton_Mainz\Downloads\chromeinstall-7u25.exe
2013-08-01 19:59 - 2013-08-01 19:59 - 00000000 ____D C:\Users\Pluton_Mainz\Downloads\f6flpy-x86
2013-08-01 19:58 - 2013-08-01 19:58 - 00326034 _____ C:\Users\Pluton_Mainz\Downloads\f6flpy-x86.zip
2013-08-01 14:43 - 2013-08-01 14:43 - 02143832 _____ C:\Users\Pluton_Mainz\Downloads\instsf449 (2).exe
2013-08-01 14:33 - 2013-08-13 09:50 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-08-01 14:33 - 2013-08-01 14:43 - 00000971 _____ C:\Users\Pluton_Mainz\Desktop\SpeedFan.lnk
2013-08-01 14:33 - 2013-08-01 14:43 - 00000045 _____ C:\windows\SysWOW64\initdebug.nfo
2013-08-01 14:33 - 2013-08-01 14:33 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2013-08-01 14:20 - 2013-08-01 14:20 - 02143832 _____ C:\Users\Pluton_Mainz\Downloads\instsf449.exe
2013-08-01 14:20 - 2013-08-01 14:20 - 02143832 _____ C:\Users\Pluton_Mainz\Downloads\instsf449 (1).exe
2013-08-01 12:43 - 2013-08-01 12:43 - 02378752 _____ C:\Users\Pluton_Mainz\Downloads\Adblock_Installer.msi
2013-07-31 18:20 - 2013-07-31 18:20 - 02484499 _____ (Craften Dev Team                                            ) C:\Users\Pluton_Mainz\Downloads\craftenterminal.exe
2013-07-31 18:20 - 2013-07-31 18:20 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\Craften_Dev_Team
2013-07-31 18:20 - 2013-07-31 18:20 - 00000000 ____D C:\Program Files (x86)\Craften Terminal
2013-07-31 11:02 - 2013-07-31 11:02 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-07-31 11:02 - 2013-07-31 11:02 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2013-07-31 11:02 - 2013-07-31 11:02 - 00000000 ____D C:\Program Files\Synaptics
2013-07-31 11:01 - 2013-08-01 12:48 - 00015318 _____ C:\windows\DPINST.LOG
2013-07-31 11:01 - 2013-08-01 12:48 - 00001376 _____ C:\windows\Synaptics.log
2013-07-31 11:01 - 2013-05-07 16:41 - 00819440 _____ (Synaptics Incorporated) C:\windows\system32\SynCOM.dll
2013-07-31 11:01 - 2013-05-07 16:41 - 00524016 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\SynTP.sys
2013-07-31 11:01 - 2013-05-07 16:41 - 00351984 _____ (Synaptics Incorporated) C:\windows\SysWOW64\SynCom.dll
2013-07-31 11:01 - 2013-05-07 16:41 - 00264432 _____ (Synaptics Incorporated) C:\windows\system32\SynTPAPI.dll
2013-07-31 11:01 - 2013-05-07 16:41 - 00192240 _____ (Synaptics Incorporated) C:\windows\system32\SynTPCo19.dll
2013-07-31 11:01 - 2013-05-07 16:41 - 00151280 _____ (Synaptics Incorporated) C:\windows\SysWOW64\SynTPCom.dll
2013-07-31 11:01 - 2013-05-07 16:41 - 00033008 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_Intel.sys
2013-07-31 10:56 - 2013-07-31 10:56 - 00000423 _____ C:\InstallPackage.log
2013-07-31 10:56 - 2013-07-31 10:56 - 00000000 ____D C:\windows\SysWOW64\sda
2013-07-31 10:56 - 2013-06-14 14:14 - 09890008 _____ (Realtek Semiconductor Corp.) C:\windows\SysWOW64\RtsUStoricon.dll
2013-07-31 10:56 - 2013-06-14 14:14 - 00423640 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtsUStor.dll
2013-07-31 10:53 - 2013-07-31 10:53 - 00000000 ____D C:\Intel
2013-07-31 10:22 - 2013-07-31 10:22 - 00444400 _____ C:\Users\Pluton_Mainz\Downloads\DLG_free-driver-scout_chip_de-DE (1).exe
2013-07-31 09:49 - 2013-07-31 09:53 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\player
2013-07-31 09:49 - 2013-07-31 09:52 - 00000000 ____D C:\Program Files (x86)\WinZipper
2013-07-31 09:49 - 2013-07-31 09:49 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\WinZipper
2013-07-31 09:47 - 2013-08-19 13:16 - 00001172 _____ C:\windows\Tasks\Feven-updater.job
2013-07-31 09:47 - 2013-07-31 09:47 - 00004202 _____ C:\windows\System32\Tasks\Feven-updater
2013-07-31 09:46 - 2013-08-19 13:16 - 00001872 _____ C:\windows\Tasks\Feven-chromeinstaller.job
2013-07-31 09:46 - 2013-08-19 13:16 - 00001796 _____ C:\windows\Tasks\Feven-firefoxinstaller.job
2013-07-31 09:46 - 2013-08-19 13:16 - 00001176 _____ C:\windows\Tasks\Feven-codedownloader.job
2013-07-31 09:46 - 2013-08-19 13:16 - 00001076 _____ C:\windows\Tasks\Feven-enabler.job
2013-07-31 09:46 - 2013-07-31 09:47 - 00004106 _____ C:\windows\System32\Tasks\Feven-enabler
2013-07-31 09:46 - 2013-07-31 09:47 - 00000000 ____D C:\Program Files (x86)\Feven
2013-07-31 09:46 - 2013-07-31 09:46 - 00004206 _____ C:\windows\System32\Tasks\Feven-codedownloader
2013-07-31 09:46 - 2013-07-31 09:46 - 00000552 _____ C:\windows\KB893803v2.log
2013-07-31 09:45 - 2013-07-31 09:45 - 00000000 ____D C:\Users\Pluton_Mainz\Qtrax
2013-07-31 09:41 - 2013-07-31 09:41 - 00793536 _____ C:\Users\Pluton_Mainz\Downloads\ImageEditorSetup.exe
2013-07-31 09:41 - 2013-07-31 09:41 - 00003848 _____ C:\windows\System32\Tasks\QtraxPlayer
2013-07-31 09:41 - 2013-07-31 09:41 - 00003380 _____ C:\windows\System32\Tasks\DealPlyUpdate
2013-07-31 09:41 - 2013-07-31 09:41 - 00000000 ____D C:\Program Files (x86)\Image Converter
2013-07-31 09:39 - 2013-07-31 09:39 - 02003240 _____ C:\Users\Pluton_Mainz\Downloads\Horses.tls
2013-07-31 09:33 - 2013-07-31 09:33 - 00013553 _____ C:\Users\Pluton_Mainz\Downloads\Dik.xlsx
2013-07-29 22:47 - 2013-08-18 09:08 - 00001250 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-07-29 22:46 - 2013-08-19 14:51 - 00001122 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-29 22:46 - 2013-08-19 13:16 - 00001118 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-29 22:46 - 2013-08-18 19:33 - 00004128 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-29 22:46 - 2013-08-18 19:33 - 00003876 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-29 22:46 - 2013-07-29 22:46 - 00784888 _____ (Google Inc.) C:\Users\Pluton_Mainz\Downloads\ChromeSetup.exe
2013-07-29 22:43 - 2013-07-29 22:43 - 00280368 _____ (Mozilla) C:\Users\Pluton_Mainz\Downloads\Firefox Setup Stub 22.0.exe
2013-07-29 14:36 - 2013-07-29 14:36 - 00002112 _____ C:\windows\logboot_29.07.2013.tureg.log
2013-07-29 14:36 - 2013-07-29 14:36 - 00000000 _____ C:\windows\system32\config\COMPONENTS_tureg_new
2013-07-29 10:32 - 2013-07-29 10:37 - 00001688 _____ C:\windows\system32\ASOROSet.bin
2013-07-29 10:32 - 2013-07-29 10:32 - 00000000 ____D C:\windows\system32\config\RCCBakup
2013-07-29 10:27 - 2013-08-18 09:31 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-07-29 10:27 - 2013-08-18 09:29 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Systweak
2013-07-29 10:27 - 2013-06-19 17:27 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\windows\system32\roboot64.exe
2013-07-29 10:22 - 2013-08-01 12:37 - 00004224 _____ C:\windows\System32\Tasks\FreeDriverScout
2013-07-29 10:22 - 2013-07-29 10:22 - 00000000 ____D C:\Users\Pluton_Mainz\Documents\Freemium Driver Utilities
2013-07-29 10:22 - 2013-07-29 10:22 - 00000000 ____D C:\ProgramData\FreeDriverScout
2013-07-29 10:21 - 2013-08-01 17:03 - 00001922 _____ C:\windows\Tasks\Plus-HD-2.4-chromeinstaller.job
2013-07-29 10:21 - 2013-08-01 17:03 - 00001846 _____ C:\windows\Tasks\Plus-HD-2.4-firefoxinstaller.job
2013-07-29 10:21 - 2013-08-01 17:03 - 00001302 _____ C:\windows\Tasks\Plus-HD-2.4-updater.job
2013-07-29 10:21 - 2013-08-01 17:03 - 00001214 _____ C:\windows\Tasks\Plus-HD-2.4-codedownloader.job
2013-07-29 10:21 - 2013-08-01 17:03 - 00001112 _____ C:\windows\Tasks\Plus-HD-2.4-enabler.job
2013-07-29 10:21 - 2013-08-01 14:15 - 00004344 _____ C:\windows\System32\Tasks\Plus-HD-2.4-updater
2013-07-29 10:21 - 2013-08-01 14:15 - 00004256 _____ C:\windows\System32\Tasks\Plus-HD-2.4-codedownloader
2013-07-29 10:21 - 2013-08-01 14:15 - 00004154 _____ C:\windows\System32\Tasks\Plus-HD-2.4-enabler
2013-07-29 10:21 - 2013-07-31 10:23 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data
2013-07-29 10:21 - 2013-07-29 10:22 - 00000000 ____D C:\Program Files (x86)\Plus-HD-2.4
2013-07-29 10:21 - 2013-06-27 07:14 - 00031816 _____ C:\windows\Launcher.exe
2013-07-29 10:20 - 2013-08-17 19:17 - 00004232 _____ C:\windows\System32\Tasks\Software Updater Ui
2013-07-29 10:20 - 2013-08-17 19:17 - 00004196 _____ C:\windows\System32\Tasks\Software Updater
2013-07-29 10:19 - 2013-07-29 10:19 - 00444400 _____ C:\Users\Pluton_Mainz\Downloads\DLG_free-driver-scout_chip_de-DE.exe
2013-07-28 18:28 - 2008-07-12 08:18 - 01942552 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_39.dll
2013-07-28 18:28 - 2008-07-12 08:18 - 00540688 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_39.dll
2013-07-28 18:27 - 2013-08-09 18:09 - 00037174 _____ C:\windows\DirectX.log
2013-07-28 18:27 - 2008-07-12 08:18 - 04992520 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_39.dll
2013-07-28 18:00 - 2013-07-28 18:00 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\Ubisoft
2013-07-28 18:00 - 2013-07-28 18:00 - 00000000 ____D C:\ProgramData\Ubisoft
2013-07-28 17:55 - 2013-08-09 17:53 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-07-23 13:18 - 2013-08-15 10:15 - 00000000 ____D C:\windows\system32\MRT
2013-07-20 16:47 - 2013-08-18 18:21 - 00087340 _____ C:\windows\PFRO.log
2013-07-20 09:54 - 2013-08-19 13:16 - 00028230 _____ C:\windows\setupact.log

==================== One Month Modified Files and Folders =======

2013-08-19 14:57 - 2013-08-19 14:57 - 01575812 _____ (Farbar) C:\Users\Pluton_Mainz\Downloads\FRST64.exe
2013-08-19 14:57 - 2013-08-19 14:57 - 00000000 ____D C:\FRST
2013-08-19 14:51 - 2013-07-29 22:46 - 00001122 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-19 14:25 - 2013-08-18 09:24 - 00000306 _____ C:\windows\Tasks\DSite.job
2013-08-19 14:05 - 2012-04-17 13:38 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-08-19 13:46 - 2013-01-21 14:05 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\PMB Files
2013-08-19 13:34 - 2013-08-19 13:34 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Pluton_Mainz\Downloads\mbam-setup-1.75.0.1300 (2).exe
2013-08-19 13:34 - 2013-08-19 13:34 - 00001073 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-19 13:34 - 2013-08-19 13:34 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-19 13:24 - 2009-07-14 06:45 - 00017136 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-19 13:24 - 2009-07-14 06:45 - 00017136 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-19 13:20 - 2011-04-24 09:49 - 01717657 _____ C:\windows\WindowsUpdate.log
2013-08-19 13:18 - 2011-08-10 20:49 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Skype
2013-08-19 13:16 - 2013-07-31 09:47 - 00001172 _____ C:\windows\Tasks\Feven-updater.job
2013-08-19 13:16 - 2013-07-31 09:46 - 00001872 _____ C:\windows\Tasks\Feven-chromeinstaller.job
2013-08-19 13:16 - 2013-07-31 09:46 - 00001796 _____ C:\windows\Tasks\Feven-firefoxinstaller.job
2013-08-19 13:16 - 2013-07-31 09:46 - 00001176 _____ C:\windows\Tasks\Feven-codedownloader.job
2013-08-19 13:16 - 2013-07-31 09:46 - 00001076 _____ C:\windows\Tasks\Feven-enabler.job
2013-08-19 13:16 - 2013-07-29 22:46 - 00001118 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-19 13:16 - 2013-07-20 09:54 - 00028230 _____ C:\windows\setupact.log
2013-08-19 13:16 - 2012-11-25 22:00 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\LogMeIn Hamachi
2013-08-19 13:16 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-08-18 19:33 - 2013-07-29 22:46 - 00004128 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-08-18 19:33 - 2013-07-29 22:46 - 00003876 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-18 19:21 - 2013-08-18 19:09 - 3808428032 _____ C:\platt.tib
2013-08-18 19:06 - 2013-08-18 19:06 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Acronis
2013-08-18 19:05 - 2013-08-18 19:05 - 00000000 ____D C:\ProgramData\Acronis
2013-08-18 19:03 - 2013-08-18 19:03 - 01477728 _____ (Acronis) C:\windows\system32\Drivers\tdrpm258.sys
2013-08-18 19:03 - 2013-08-18 19:03 - 00943712 _____ (Acronis) C:\windows\system32\Drivers\timntr.sys
2013-08-18 19:03 - 2013-08-18 19:03 - 00271456 _____ (Acronis) C:\windows\system32\Drivers\snapman.sys
2013-08-18 19:03 - 2013-08-18 19:03 - 00252512 _____ (Acronis) C:\windows\system32\Drivers\afcdp.sys
2013-08-18 19:03 - 2013-08-18 19:03 - 00002195 _____ C:\Users\Public\Desktop\Acronis One-Click Backup.lnk
2013-08-18 19:03 - 2013-08-18 19:03 - 00001099 _____ C:\Users\Public\Desktop\Acronis True Image Home 2010.lnk
2013-08-18 19:03 - 2013-08-18 19:03 - 00000000 ____D C:\Program Files (x86)\Acronis
2013-08-18 18:58 - 2011-09-03 19:32 - 00000000 ____D C:\Users\Pluton_Mainz\Desktop\Musik
2013-08-18 18:53 - 2012-02-11 15:35 - 01104384 ___SH C:\Users\Pluton_Mainz\Downloads\Thumbs.db
2013-08-18 18:52 - 2012-11-03 18:08 - 00000000 ____D C:\Users\Pluton_Mainz\Desktop\Lukas Ordner
2013-08-18 18:50 - 2012-07-09 13:11 - 00000000 ____D C:\Users\Pluton_Mainz\Desktop\Destop
2013-08-18 18:36 - 2009-09-14 08:03 - 00642158 _____ C:\windows\system32\perfh007.dat
2013-08-18 18:36 - 2009-09-14 08:03 - 00128772 _____ C:\windows\system32\perfc007.dat
2013-08-18 18:36 - 2009-07-14 07:13 - 01493976 _____ C:\windows\system32\PerfStringBackup.INI
2013-08-18 18:21 - 2013-07-20 16:47 - 00087340 _____ C:\windows\PFRO.log
2013-08-18 17:59 - 2013-08-18 17:59 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Malwarebytes
2013-08-18 17:59 - 2013-08-18 17:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-18 17:58 - 2013-08-18 17:57 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Pluton_Mainz\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-08-18 17:51 - 2013-01-21 14:05 - 00000000 ____D C:\ProgramData\PMB Files
2013-08-18 15:08 - 2012-11-23 15:06 - 00282104 _____ C:\windows\SysWOW64\PnkBstrB.xtr
2013-08-18 15:08 - 2012-11-23 15:04 - 00282104 _____ C:\windows\SysWOW64\PnkBstrB.exe
2013-08-18 15:08 - 2012-11-23 15:04 - 00234768 _____ C:\windows\SysWOW64\PnkBstrB.ex0
2013-08-18 12:31 - 2013-08-18 12:31 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Pluton_Mainz\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-18 12:25 - 2013-08-18 12:25 - 00000057 _____ C:\Users\Pluton_Mainz\AppData\Roaming\WB.CFG
2013-08-18 12:25 - 2013-08-18 12:25 - 00000005 _____ C:\Users\Pluton_Mainz\AppData\Roaming\WBPU-TTL.DAT
2013-08-18 09:31 - 2013-07-29 10:27 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-08-18 09:31 - 2010-10-29 14:25 - 00000000 ___RD C:\Users\Pluton_Mainz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-18 09:29 - 2013-08-18 09:24 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2013-08-18 09:29 - 2013-07-29 10:27 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Systweak
2013-08-18 09:26 - 2013-08-18 09:24 - 00003274 _____ C:\windows\System32\Tasks\DSite
2013-08-18 09:25 - 2013-08-18 09:25 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\avgchrome
2013-08-18 09:24 - 2013-08-18 09:24 - 00003422 _____ C:\windows\System32\Tasks\EPUpdater
2013-08-18 09:24 - 2013-08-18 09:24 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\DSite
2013-08-18 09:24 - 2013-08-18 09:24 - 00000000 ____D C:\ProgramData\Babylon
2013-08-18 09:23 - 2013-08-18 09:23 - 00714352 _____ C:\Users\Pluton_Mainz\Downloads\ZipOpenerSetup.exe
2013-08-18 09:08 - 2013-08-18 09:08 - 00000306 _____ C:\windows\DeleteOnReboot.bat
2013-08-18 09:08 - 2013-08-18 09:07 - 00057539 _____ C:\AdwCleaner[S1].txt
2013-08-18 09:08 - 2013-07-29 22:47 - 00001250 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-18 09:08 - 2012-08-24 11:44 - 00000969 _____ C:\Users\Pluton_Mainz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-18 09:07 - 2013-08-18 09:07 - 00059284 _____ C:\AdwCleaner[R2].txt
2013-08-18 09:07 - 2013-08-18 09:06 - 00059223 _____ C:\AdwCleaner[R1].txt
2013-08-18 09:06 - 2013-08-18 09:06 - 00666633 _____ C:\Users\Pluton_Mainz\Downloads\adwcleaner2306.exe
2013-08-17 19:50 - 2013-08-17 19:49 - 02347384 _____ (ESET) C:\Users\Pluton_Mainz\Downloads\esetsmartinstaller_enu (1).exe
2013-08-17 19:48 - 2013-08-17 19:48 - 02347384 _____ (ESET) C:\Users\Pluton_Mainz\Downloads\esetsmartinstaller_enu.exe
2013-08-17 19:41 - 2012-12-29 21:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 19:17 - 2013-07-29 10:20 - 00004232 _____ C:\windows\System32\Tasks\Software Updater Ui
2013-08-17 19:17 - 2013-07-29 10:20 - 00004196 _____ C:\windows\System32\Tasks\Software Updater
2013-08-17 11:10 - 2012-05-13 15:07 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\.minecraft
2013-08-15 15:12 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache
2013-08-15 10:15 - 2013-07-23 13:18 - 00000000 ____D C:\windows\system32\MRT
2013-08-15 10:13 - 2010-10-29 18:56 - 78161360 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-08-13 09:50 - 2013-08-01 14:33 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-08-09 18:24 - 2013-08-09 18:24 - 00000407 _____ C:\Users\Pluton_Mainz\Desktop\CD-Laufwerk - Verknüpfung.lnk
2013-08-09 18:09 - 2013-07-28 18:27 - 00037174 _____ C:\windows\DirectX.log
2013-08-09 18:07 - 2013-08-09 18:07 - 00000637 _____ C:\windows\KB942288-v3.log
2013-08-09 17:53 - 2013-07-28 17:55 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-08-09 17:53 - 2010-10-13 04:22 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-09 13:18 - 2012-12-21 23:45 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Minecraft Version Changer
2013-08-08 17:18 - 2013-08-08 17:17 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\Akamai
2013-08-08 17:17 - 2013-08-08 17:17 - 00558104 _____ (Aeria Games & Entertainment) C:\Users\Pluton_Mainz\Downloads\scarletblade_de_downloader.exe
2013-08-08 17:17 - 2013-08-08 17:17 - 00000000 ____D C:\ProgramData\BasicServe
2013-08-08 17:17 - 2013-08-08 17:17 - 00000000 ____D C:\Program Files (x86)\BasicServe
2013-08-08 17:17 - 2013-08-08 17:17 - 00000000 ____D C:\AeriaGames
2013-08-06 14:06 - 2013-08-06 14:06 - 36965680 _____ (Microsoft Corporation) C:\Users\Pluton_Mainz\Downloads\IE9-Windows7-x64-deu.exe
2013-08-06 14:06 - 2013-08-06 14:06 - 00001102 _____ C:\windows\IE9_main.log
2013-08-06 14:06 - 2013-08-06 14:04 - 00001556 _____ C:\windows\ie8_main.log
2013-08-06 14:04 - 2013-08-06 14:04 - 17010016 _____ (Microsoft Corporation) C:\Users\Pluton_Mainz\Downloads\IE8-WindowsXP-x86-DEU.exe
2013-08-06 10:53 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF
2013-08-03 07:53 - 2010-11-14 21:07 - 00000000 ____D C:\Program Files (x86)\4game
2013-08-01 20:13 - 2010-11-20 16:44 - 00003826 _____ C:\windows\System32\Tasks\Java Update Scheduler
2013-08-01 20:01 - 2013-08-01 20:01 - 00263592 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-08-01 20:01 - 2013-08-01 20:01 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-01 20:01 - 2012-09-17 10:14 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-08-01 20:01 - 2012-09-17 10:14 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-08-01 20:01 - 2012-05-14 19:08 - 00867240 _____ (Oracle Corporation) C:\windows\SysWOW64\npdeployJava1.dll
2013-08-01 20:01 - 2012-05-14 19:08 - 00000000 ____D C:\Program Files (x86)\Java
2013-08-01 20:01 - 2010-11-19 21:43 - 00789416 _____ (Oracle Corporation) C:\windows\SysWOW64\deployJava1.dll
2013-08-01 20:00 - 2013-08-01 20:00 - 00903080 _____ (Oracle Corporation) C:\Users\Pluton_Mainz\Downloads\chromeinstall-7u25.exe
2013-08-01 19:59 - 2013-08-01 19:59 - 00000000 ____D C:\Users\Pluton_Mainz\Downloads\f6flpy-x86
2013-08-01 19:58 - 2013-08-01 19:58 - 00326034 _____ C:\Users\Pluton_Mainz\Downloads\f6flpy-x86.zip
2013-08-01 17:03 - 2013-07-29 10:21 - 00001922 _____ C:\windows\Tasks\Plus-HD-2.4-chromeinstaller.job
2013-08-01 17:03 - 2013-07-29 10:21 - 00001846 _____ C:\windows\Tasks\Plus-HD-2.4-firefoxinstaller.job
2013-08-01 17:03 - 2013-07-29 10:21 - 00001302 _____ C:\windows\Tasks\Plus-HD-2.4-updater.job
2013-08-01 17:03 - 2013-07-29 10:21 - 00001214 _____ C:\windows\Tasks\Plus-HD-2.4-codedownloader.job
2013-08-01 17:03 - 2013-07-29 10:21 - 00001112 _____ C:\windows\Tasks\Plus-HD-2.4-enabler.job
2013-08-01 17:03 - 2012-03-21 15:32 - 00001166 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3627293235-2912429573-1199883092-1001UA.job
2013-08-01 17:03 - 2012-03-21 15:32 - 00001144 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3627293235-2912429573-1199883092-1001Core.job
2013-08-01 14:43 - 2013-08-01 14:43 - 02143832 _____ C:\Users\Pluton_Mainz\Downloads\instsf449 (2).exe
2013-08-01 14:43 - 2013-08-01 14:33 - 00000971 _____ C:\Users\Pluton_Mainz\Desktop\SpeedFan.lnk
2013-08-01 14:43 - 2013-08-01 14:33 - 00000045 _____ C:\windows\SysWOW64\initdebug.nfo
2013-08-01 14:33 - 2013-08-01 14:33 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2013-08-01 14:20 - 2013-08-01 14:20 - 02143832 _____ C:\Users\Pluton_Mainz\Downloads\instsf449.exe
2013-08-01 14:20 - 2013-08-01 14:20 - 02143832 _____ C:\Users\Pluton_Mainz\Downloads\instsf449 (1).exe
2013-08-01 14:15 - 2013-07-29 10:21 - 00004344 _____ C:\windows\System32\Tasks\Plus-HD-2.4-updater
2013-08-01 14:15 - 2013-07-29 10:21 - 00004256 _____ C:\windows\System32\Tasks\Plus-HD-2.4-codedownloader
2013-08-01 14:15 - 2013-07-29 10:21 - 00004154 _____ C:\windows\System32\Tasks\Plus-HD-2.4-enabler
2013-08-01 14:14 - 2012-03-21 15:32 - 00004168 _____ C:\windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3627293235-2912429573-1199883092-1001UA
2013-08-01 14:14 - 2012-03-21 15:32 - 00003800 _____ C:\windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3627293235-2912429573-1199883092-1001Core
2013-08-01 12:48 - 2013-07-31 11:01 - 00015318 _____ C:\windows\DPINST.LOG
2013-08-01 12:48 - 2013-07-31 11:01 - 00001376 _____ C:\windows\Synaptics.log
2013-08-01 12:43 - 2013-08-01 12:43 - 02378752 _____ C:\Users\Pluton_Mainz\Downloads\Adblock_Installer.msi
2013-08-01 12:37 - 2013-07-29 10:22 - 00004224 _____ C:\windows\System32\Tasks\FreeDriverScout
2013-07-31 21:02 - 2013-07-07 08:54 - 00000000 ____D C:\Users\Pluton_Mainz\Documents\Bandicam
2013-07-31 18:20 - 2013-07-31 18:20 - 02484499 _____ (Craften Dev Team                                            ) C:\Users\Pluton_Mainz\Downloads\craftenterminal.exe
2013-07-31 18:20 - 2013-07-31 18:20 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\Craften_Dev_Team
2013-07-31 18:20 - 2013-07-31 18:20 - 00000000 ____D C:\Program Files (x86)\Craften Terminal
2013-07-31 18:19 - 2013-02-23 15:04 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\http___mvc.craften.de
2013-07-31 11:52 - 2012-11-09 07:26 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\.techniclauncher
2013-07-31 11:02 - 2013-07-31 11:02 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-07-31 11:02 - 2013-07-31 11:02 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2013-07-31 11:02 - 2013-07-31 11:02 - 00000000 ____D C:\Program Files\Synaptics
2013-07-31 10:58 - 2012-08-18 22:06 - 00000648 _____ C:\SetupCD.txt
2013-07-31 10:56 - 2013-07-31 10:56 - 00000423 _____ C:\InstallPackage.log
2013-07-31 10:56 - 2013-07-31 10:56 - 00000000 ____D C:\windows\SysWOW64\sda
2013-07-31 10:56 - 2010-10-13 04:26 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-07-31 10:53 - 2013-07-31 10:53 - 00000000 ____D C:\Intel
2013-07-31 10:23 - 2013-07-29 10:21 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data
2013-07-31 10:22 - 2013-07-31 10:22 - 00444400 _____ C:\Users\Pluton_Mainz\Downloads\DLG_free-driver-scout_chip_de-DE (1).exe
2013-07-31 09:53 - 2013-07-31 09:49 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\player
2013-07-31 09:53 - 2012-11-09 07:25 - 00000000 ____D C:\Program Files (x86)\Tuguu SL
2013-07-31 09:52 - 2013-07-31 09:49 - 00000000 ____D C:\Program Files (x86)\WinZipper
2013-07-31 09:49 - 2013-07-31 09:49 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\WinZipper
2013-07-31 09:48 - 2010-11-15 22:28 - 01581174 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2013-07-31 09:47 - 2013-07-31 09:47 - 00004202 _____ C:\windows\System32\Tasks\Feven-updater
2013-07-31 09:47 - 2013-07-31 09:46 - 00004106 _____ C:\windows\System32\Tasks\Feven-enabler
2013-07-31 09:47 - 2013-07-31 09:46 - 00000000 ____D C:\Program Files (x86)\Feven
2013-07-31 09:46 - 2013-07-31 09:46 - 00004206 _____ C:\windows\System32\Tasks\Feven-codedownloader
2013-07-31 09:46 - 2013-07-31 09:46 - 00000552 _____ C:\windows\KB893803v2.log
2013-07-31 09:45 - 2013-07-31 09:45 - 00000000 ____D C:\Users\Pluton_Mainz\Qtrax
2013-07-31 09:45 - 2010-10-29 14:25 - 00000000 ____D C:\Users\Pluton_Mainz
2013-07-31 09:41 - 2013-07-31 09:41 - 00793536 _____ C:\Users\Pluton_Mainz\Downloads\ImageEditorSetup.exe
2013-07-31 09:41 - 2013-07-31 09:41 - 00003848 _____ C:\windows\System32\Tasks\QtraxPlayer
2013-07-31 09:41 - 2013-07-31 09:41 - 00003380 _____ C:\windows\System32\Tasks\DealPlyUpdate
2013-07-31 09:41 - 2013-07-31 09:41 - 00000000 ____D C:\Program Files (x86)\Image Converter
2013-07-31 09:39 - 2013-07-31 09:39 - 02003240 _____ C:\Users\Pluton_Mainz\Downloads\Horses.tls
2013-07-31 09:33 - 2013-07-31 09:33 - 00013553 _____ C:\Users\Pluton_Mainz\Downloads\Dik.xlsx
2013-07-29 22:46 - 2013-07-29 22:46 - 00784888 _____ (Google Inc.) C:\Users\Pluton_Mainz\Downloads\ChromeSetup.exe
2013-07-29 22:46 - 2012-05-21 13:24 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-29 22:43 - 2013-07-29 22:43 - 00280368 _____ (Mozilla) C:\Users\Pluton_Mainz\Downloads\Firefox Setup Stub 22.0.exe
2013-07-29 14:44 - 2012-01-12 16:53 - 00000000 ____D C:\Program Files\Easeware
2013-07-29 14:36 - 2013-07-29 14:36 - 00002112 _____ C:\windows\logboot_29.07.2013.tureg.log
2013-07-29 14:36 - 2013-07-29 14:36 - 00000000 _____ C:\windows\system32\config\COMPONENTS_tureg_new
2013-07-29 10:37 - 2013-07-29 10:32 - 00001688 _____ C:\windows\system32\ASOROSet.bin
2013-07-29 10:37 - 2009-07-14 04:34 - 74186752 _____ C:\windows\system32\config\software.bak
2013-07-29 10:37 - 2009-07-14 04:34 - 22020096 _____ C:\windows\system32\config\system.bak
2013-07-29 10:37 - 2009-07-14 04:34 - 00024576 _____ C:\windows\system32\config\security.bak
2013-07-29 10:33 - 2009-07-14 04:34 - 00024576 _____ C:\windows\system32\config\sam.bak
2013-07-29 10:32 - 2013-07-29 10:32 - 00000000 ____D C:\windows\system32\config\RCCBakup
2013-07-29 10:22 - 2013-07-29 10:22 - 00000000 ____D C:\Users\Pluton_Mainz\Documents\Freemium Driver Utilities
2013-07-29 10:22 - 2013-07-29 10:22 - 00000000 ____D C:\ProgramData\FreeDriverScout
2013-07-29 10:22 - 2013-07-29 10:21 - 00000000 ____D C:\Program Files (x86)\Plus-HD-2.4
2013-07-29 10:19 - 2013-07-29 10:19 - 00444400 _____ C:\Users\Pluton_Mainz\Downloads\DLG_free-driver-scout_chip_de-DE.exe
2013-07-28 18:00 - 2013-07-28 18:00 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\Ubisoft
2013-07-28 18:00 - 2013-07-28 18:00 - 00000000 ____D C:\ProgramData\Ubisoft
2013-07-26 07:13 - 2013-08-15 10:20 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-07-26 07:13 - 2013-08-15 10:20 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-07-26 07:13 - 2013-08-15 10:20 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-07-26 07:12 - 2013-08-15 10:20 - 19239424 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 15405056 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 03958784 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-07-26 05:35 - 2013-08-15 10:20 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-07-26 05:13 - 2013-08-15 10:20 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-07-26 05:13 - 2013-08-15 10:20 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 14329344 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 02877440 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-07-26 05:11 - 2013-08-15 10:20 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-07-26 05:11 - 2013-08-15 10:20 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-07-26 04:49 - 2013-08-15 10:20 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-07-26 04:39 - 2013-08-15 10:20 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-07-26 03:59 - 2013-08-15 10:20 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-25 11:25 - 2013-08-14 08:35 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-07-25 10:57 - 2013-08-14 08:35 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2013-07-23 10:13 - 2012-02-11 15:35 - 01790976 ___SH C:\Users\Pluton_Mainz\Desktop\Thumbs.db
2013-07-23 08:34 - 2009-07-14 07:08 - 00032632 _____ C:\windows\Tasks\SCHEDLGU.TXT
2013-07-20 09:31 - 2011-06-14 12:36 - 00000000 ____D C:\windows\Minidump

Files to move or delete:
====================
C:\Users\Pluton_Mainz\AppData\Roaming\skype.ini

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-14 15:01

==================== End Of Log ============================
         

--- --- ---

--- --- ---


FRST Additions Logfile:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-08-2013
Ran by Pluton_Mainz at 2013-08-19 14:58:45
Running from C:\Users\Pluton_Mainz\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
µTorrent (x32 Version: 3.0.0)
4game (x32 Version: 3.1.0.154)
7-Zip 4.65 (x32)
Acronis*True*Image*Home (x32 Version: 13.0.7046)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Reader 9.5.4 - Deutsch (x32 Version: 9.5.4)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.1.629)
Akamai NetSession Interface (HKCU)
AMD APP SDK Runtime (Version: 2.5.793.1)
AMD Catalyst Install Manager (Version: 3.0.851.0)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Avira Free Antivirus (x32 Version: 13.0.0.3885)
Bandicam (x32 Version: 1.8.9.371)
Bandisoft MPEG-1 Decoder (x32)
Battlefield Play4Free (x32)
Bing Bar (x32 Version: 7.0.822.0)
Bonjour (Version: 3.0.0.10)
Brother MFL-Pro Suite DCP-115C (x32 Version: 1.0.1.0)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2011.1130.158.3381)
Catalyst Control Center InstallProxy (x32 Version: 2010.0302.2233.40412)
Catalyst Control Center InstallProxy (x32 Version: 2011.1130.158.3381)
Catalyst Control Center Localization All (x32 Version: 2011.1130.158.3381)
Catalyst Control Center Profiles Desktop (x32 Version: 2011.1130.158.3381)
CCC Help Chinese Standard (x32 Version: 2011.1130.0157.3381)
CCC Help Chinese Traditional (x32 Version: 2011.1130.0157.3381)
CCC Help Czech (x32 Version: 2011.1130.0157.3381)
CCC Help Danish (x32 Version: 2011.1130.0157.3381)
CCC Help Dutch (x32 Version: 2011.1130.0157.3381)
CCC Help English (x32 Version: 2011.1130.0157.3381)
CCC Help Finnish (x32 Version: 2011.1130.0157.3381)
CCC Help French (x32 Version: 2011.1130.0157.3381)
CCC Help German (x32 Version: 2011.1130.0157.3381)
CCC Help Greek (x32 Version: 2011.1130.0157.3381)
CCC Help Hungarian (x32 Version: 2011.1130.0157.3381)
CCC Help Italian (x32 Version: 2011.1130.0157.3381)
CCC Help Japanese (x32 Version: 2011.1130.0157.3381)
CCC Help Korean (x32 Version: 2011.1130.0157.3381)
CCC Help Norwegian (x32 Version: 2011.1130.0157.3381)
CCC Help Polish (x32 Version: 2011.1130.0157.3381)
CCC Help Portuguese (x32 Version: 2011.1130.0157.3381)
CCC Help Russian (x32 Version: 2011.1130.0157.3381)
CCC Help Spanish (x32 Version: 2011.1130.0157.3381)
CCC Help Swedish (x32 Version: 2011.1130.0157.3381)
CCC Help Thai (x32 Version: 2011.1130.0157.3381)
CCC Help Turkish (x32 Version: 2011.1130.0157.3381)
ccc-utility64 (Version: 2011.1130.158.3381)
Cheat Engine 6.3 (x32)
Contenta Converter PREMIUM (x32)
Craften Terminal 3.3.4897.28268 (x32 Version: 3.3.4897.28268)
CVE-2012-4969
D3DX10 (x32 Version: 15.4.2368.0902)
DivX-Setup (x32 Version: 2.6.1.9)
el(R) Network Connections Drivers (Version: 14.5)
Elsword_DE (x32)
Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287)
Feven (x32 Version: 1.27.153.6)
FoxTab Video Converter (HKCU)
Free PDF to Word Doc Converter v1.1 (x32 Version: 1.1)
Free Windows Tuner (x32)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128)
GMX Softwareaktualisierung (x32 Version: 2.0.4.0)
Google Chrome (x32 Version: 28.0.1500.95)
Google Update Helper (x32 Version: 1.3.21.153)
iCloud (Version: 2.1.2.8)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel(R) Processor ID Utility (x32 Version: 4.32.0000)
Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014)
iTunes (Version: 11.0.4.4)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java(TM) 6 Update 35 (x32 Version: 6.0.350)
Java(TM) 7 Update 5 (64-bit) (Version: 7.0.50)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
League of Legends (x32 Version: 1.3)
Lenovo Healthcare Software (x32 Version: 3.0.0.090928)
Lenovo Power2Go (x32 Version: 6.0.3321a3)
Lenovo Rescue System (Version: 3.0.0827)
Lenovo Rescue System (x32 Version: 3.0.0827)
Lenovo Treiber- und Anwendungsinstallation (x32 Version: 5.1.0.1119)
LineageII (x32 Version: CT2.6 Part 1)
LineageII (x32)
LogMeIn Hamachi (x32 Version: 2.1.0.374)
LVT (x32 Version: 4.1.1.0930)
LXH-JME2207FN Hotkey Driver (x32 Version: 5.1.0804)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
MediaBar (x32 Version: 3.0.0.107547)
Mesh Runtime (x32 Version: 15.4.5722.2)
Messenger Companion (x32 Version: 15.4.3502.0922)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyTomTom 3.2.0.700 (x32 Version: 3.2.0.700)
OpenOffice.org 3.3 (x32 Version: 3.3.9567)
Pando Media Booster (x32 Version: 2.6.0.8)
PDFCreator (x32 Version: 1.4.3)
PdfGrabber 6.0 (Version: 6.0)
PointBlank (x32)
Power Dial (x32 Version: 3.0.1.1010)
PunkBuster Services (x32 Version: 0.990)
QuickTime (x32 Version: 7.74.80.86)
R2Online (x32)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
RealPlayer (x32 Version: 15.0.4)
Realtek Card Reader (x32 Version: 6.2.9200.30150)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5911)
RealUpgrade 1.1 (x32 Version: 1.1.0)
Roxio BackOnTrack (x32 Version: 1.3.1)
Roxio File Backup (x32 Version: 1.3.0)
Roxio Update Manager (x32 Version: 6.0.0)
S4 League_EU (x32 Version: 1.00.0000)
Safari (x32 Version: 5.34.57.2)
Skype Click to Call (x32 Version: 6.3.11079)
Skype™ 6.6 (x32 Version: 6.6.106)
SoftMaker Office 2010 (x32 Version: 10.0.591)
Sony Ericsson Update Engine (x32 Version: 2.12.12.24)
SpeedFan (remove only) (x32)
swMSM (x32 Version: 12.0.0.1)
Synaptics Pointing Device Driver (Version: 16.6.1.3)
TeamSpeak 3 Client (Version: 3.0.10.1)
Tom Clancy's EndWar (x32 Version: 1.00.0000)
Tom Clancy's H.A.W.X (x32 Version: 1.00.00000)
Tom Clancy's Splinter Cell Chaos Theory (x32 Version: 1.05.157)
Total Immersion D'Fusion @Home Web Plug-In (x32)
TuneUp Utilities 2011 (x32 Version: 10.0.2011.48)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.2011.48)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
Visual Studio C++ 10.0 Runtime (x32 Version: 10.0.0)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Family Safety (Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR (x32)
Zipper (x32 Version: 1.0.3)

==================== Restore Points  =========================

15-08-2013 08:11:10 Windows Update
18-08-2013 07:35:00 Entfernt Tom Clancy's H.A.W.X
18-08-2013 17:00:09 Windows-Sicherung
18-08-2013 17:02:20 Acronis*True*Image*Home wird installiert

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {000DE5A8-2509-4D99-AA02-B2A78387031E} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {0244EC06-1830-4231-835C-225C57CF0906} - System32\Tasks\Google Updater and Installer => C:\Users\Pluton_Mainz\AppData\Local\Google\Update\GoogleUpdate.exe No File
Task: {07B4223B-2B2A-4432-9918-61ED8FC6185C} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3627293235-2912429573-1199883092-1001UA => C:\Users\Pluton_Mainz\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.)
Task: {1DDFB2BF-4BC7-46E0-9DE1-2A5635BC3BF0} - System32\Tasks\Feven-enabler => C:\Program Files (x86)\Feven\Feven-enabler.exe [2013-07-31] (Feven)
Task: {1E4AA37C-C5AD-4CE3-9B0C-50163A7AD971} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {242DA382-5513-476F-8431-137FDB69E60E} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03] (Adobe Systems Incorporated)
Task: {2D76111D-591C-4E14-9574-95A4A248B37A} - System32\Tasks\Plus-HD-2.4-enabler => C:\Program Files (x86)\Plus-HD-2.4\Plus-HD-2.4-enabler.exe [2013-07-29] (Plus HD)
Task: {3194C684-60D6-4DAA-8004-7064EEC12F84} - System32\Tasks\DealPlyUpdate => C:\Program No File
Task: {34F96A49-A24F-45A4-A46C-9DA990CFC2EA} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3627293235-2912429573-1199883092-1001Core => C:\Users\Pluton_Mainz\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.)
Task: {3B9102A1-8164-4D68-8260-72B91D550DE0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-29] (Google Inc.)
Task: {3F9064C7-F050-407E-9C88-427DAE0F745E} - System32\Tasks\Plus-HD-2.4-updater => C:\Program Files (x86)\Plus-HD-2.4\Plus-HD-2.4-updater.exe [2013-07-29] (Plus HD)
Task: {475593AF-CB86-42E2-8460-3F543CCC2149} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe No File
Task: {4E99CF8C-03CA-42B7-9138-3269F21B6C75} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-29] (Google Inc.)
Task: {55B346FD-6D73-428B-A41A-670B9848831E} - System32\Tasks\Registration 1und1 Task => C:\Program Files (x86)\1und1Softwareaktualisierung\cdsupdclient.exe [2012-09-20] (1&1 Mail & Media GmbH)
Task: {5776ADFD-6688-4ABA-8F99-EC25161C3EA9} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3627293235-2912429573-1199883092-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.)
Task: {6A3320CC-2817-4045-9C5D-9F5436BF9075} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => c:\program files (x86)\real\realplayer\update\RealOneMessageCenter.exe [2012-06-27] (RealNetworks, Inc.)
Task: {79483C20-D59F-45E3-AACE-5D2DD3FA5DD5} - System32\Tasks\Omiga Plus RunAsStdUser => C:\Program Files (x86)\Omiga Plus\omigaplus.exe No File
Task: {79679930-6EC9-4114-AA95-76D35075861C} - System32\Tasks\Software Updater Ui => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe No File
Task: {7A7F5C3A-0391-4E8A-894F-4BBE6792B1C2} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {8942949B-D6A7-4D98-B483-18E64EE2187D} - System32\Tasks\Feven-updater => C:\Program Files (x86)\Feven\Feven-updater.exe [2013-07-31] (Feven)
Task: {91748427-31AA-4FEC-ACAF-5A62EABFF432} - System32\Tasks\Software Updater => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe No File
Task: {95C549E2-DCDD-466D-88F9-1A192B403AAE} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {9C79A296-8CAA-4387-A2F1-6834AC4A803E} - System32\Tasks\Divx-Online-Aktualisierungsprogramm => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2011-07-29] ()
Task: {9CF8B09D-A878-434F-B0C2-573542D8156F} - System32\Tasks\Feven-chromeinstaller => C:\Program Files (x86)\Feven\Feven-chromeinstaller.exe [2013-07-31] (Feven)
Task: {9D07A149-434B-4710-9F38-96DA5696DEE5} - System32\Tasks\EPUpdater => C:\Users\PLUTON~1\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe No File
Task: {9E4FDC00-B3DD-4AEF-AD61-2C3556F22A24} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3627293235-2912429573-1199883092-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.)
Task: {9FA0F4D4-2ECD-41AB-8043-4482A4A34B6D} - System32\Tasks\Plus-HD-2.4-codedownloader => C:\Program Files (x86)\Plus-HD-2.4\Plus-HD-2.4-codedownloader.exe [2013-07-29] (Plus HD)
Task: {AB3D45B5-9BA4-4E47-8544-B04D4A1091BB} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {AC46FF18-556C-4134-8F83-5FAB0924977D} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2011 => C:\Program Files (x86)\TuneUp Utilities 2011\OneClick.exe [2010-10-26] (TuneUp Software)
Task: {B0561940-F315-4E58-8A41-A51BBD609CF2} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {BBB37719-C6AB-4EC7-A2AC-891021755E1E} - System32\Tasks\DSite => C:\Users\PLUTON~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE [2013-08-18] ()
Task: {CE30EA1B-7870-4FEF-9AA6-6221A0A36B4C} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {CF2404A8-1F74-45EF-A2A0-006C698B95B8} - System32\Tasks\Feven-firefoxinstaller => C:\Program Files (x86)\Feven\Feven-firefoxinstaller.exe [2013-07-31] (Feven)
Task: {D2F6CAA1-DB14-47AF-91BB-EF9437205F39} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-16] (Adobe Systems Incorporated)
Task: {D6F4ACA1-9BFA-43EA-90E8-38A8B88BEF9F} - System32\Tasks\Plus-HD-2.4-chromeinstaller => C:\Program Files (x86)\Plus-HD-2.4\Plus-HD-2.4-chromeinstaller.exe [2013-07-29] (Plus HD)
Task: {E06992B2-8891-4662-9AF6-031EB9699454} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe No File
Task: {E2292795-8A5B-4F30-8D50-0F7863C60F7C} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {E6E28E57-48FE-457E-9E93-9FE64474C30D} - System32\Tasks\Feven-codedownloader => C:\Program Files (x86)\Feven\Feven-codedownloader.exe [2013-07-31] (Feven)
Task: {EBD5F358-2D7A-451D-B4EB-9C46471BC8B9} - System32\Tasks\FreeDriverScout => C:\Program Files\Covus Freemium\Free Driver Scout\1Click.exe No File
Task: {F0D5C7AE-84A9-4526-90B5-3C61EAD8E8D7} - System32\Tasks\Plus-HD-2.4-firefoxinstaller => C:\Program Files (x86)\Plus-HD-2.4\Plus-HD-2.4-firefoxinstaller.exe [2013-07-29] (Plus HD)
Task: {F25A81DD-07B8-4893-98CC-20053DCECB91} - System32\Tasks\QtraxPlayer => C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe [2013-05-13] (Microsoft Corporation)
Task: {FCE7779E-336E-4D37-8034-8E61387C5664} - System32\Tasks\ScanSoft Background Update => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe No File
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\DSite.job => C:\Users\PLUTON~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE
Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3627293235-2912429573-1199883092-1001Core.job => C:\Users\Pluton_Mainz\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3627293235-2912429573-1199883092-1001UA.job => C:\Users\Pluton_Mainz\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\windows\Tasks\Feven-chromeinstaller.job => C:\Program Files (x86)\Feven\Feven-chromeinstaller.exe
Task: C:\windows\Tasks\Feven-codedownloader.job => C:\Program Files (x86)\Feven\Feven-codedownloader.exe
Task: C:\windows\Tasks\Feven-enabler.job => C:\Program Files (x86)\Feven\Feven-enabler.exe
Task: C:\windows\Tasks\Feven-firefoxinstaller.job => C:\Program Files (x86)\Feven\Feven-firefoxinstaller.exe
Task: C:\windows\Tasks\Feven-updater.job => C:\Program Files (x86)\Feven\Feven-updater.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\Plus-HD-2.4-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-2.4\Plus-HD-2.4-chromeinstaller.exe
Task: C:\windows\Tasks\Plus-HD-2.4-codedownloader.job => C:\Program Files (x86)\Plus-HD-2.4\Plus-HD-2.4-codedownloader.exe
Task: C:\windows\Tasks\Plus-HD-2.4-enabler.job => C:\Program Files (x86)\Plus-HD-2.4\Plus-HD-2.4-enabler.exe
Task: C:\windows\Tasks\Plus-HD-2.4-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-2.4\Plus-HD-2.4-firefoxinstaller.exe
Task: C:\windows\Tasks\Plus-HD-2.4-updater.job => C:\Program Files (x86)\Plus-HD-2.4\Plus-HD-2.4-updater.exe

==================== Faulty Device Manager Devices =============

Name: Synaptics PS/2 Port Compatible TouchPad
Description: Synaptics PS/2 Port Compatible TouchPad
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Synaptics
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/18/2013 06:00:39 PM) (Source: Application Hang) (User: )
Description: Programm mbam.exe, Version 1.75.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: a54

Startzeit: 01ce9c2bf2741914

Endzeit: 0

Anwendungspfad: C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

Berichts-ID: 506778ef-081f-11e3-a904-4437e60a381b

Error: (08/18/2013 05:59:40 PM) (Source: Application Hang) (User: )
Description: Programm mbam.exe, Version 1.75.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 548

Startzeit: 01ce9c2be1f7b14e

Endzeit: 0

Anwendungspfad: C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

Berichts-ID: 2d6e54e5-081f-11e3-a904-4437e60a381b

Error: (08/18/2013 00:41:43 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die E/A-Schreibvorgänge können während des Schattenkopie-Erstellungszeitraums auf Volume "C:\" nicht gespeichert werden.
Der Volumeindex im Schattenkopiesatz ist 0. Fehlerdetails: Offen[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Leerung[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Freigabe[0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist.
], Ausführung[0x00000000, Der Vorgang wurde erfolgreich beendet.
].


Vorgang:
   Asynchroner Vorgang wird ausgeführt

Kontext:
   Aktueller Status: DoSnapshotSet

Error: (08/18/2013 00:41:43 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten.
Fehlerkontext: DeviceIoControl(\\?\Volume{1bc6e129-d670-11df-b264-806e6f6e6963} - 0000000000000134,0x0053c010,00000000003DEBE0,0,00000000002A7FD0,4096,[0]).


Vorgang:
   Schattenkopien werden übertragen

Kontext:
   Ausführungskontext: System Provider

Error: (08/18/2013 00:39:51 PM) (Source: Application Hang) (User: )
Description: Programm Skype.exe, Version 6.6.0.106 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 824

Startzeit: 01ce9bfef13733d9

Endzeit: 0

Anwendungspfad: C:\Program Files (x86)\Skype\Phone\Skype.exe

Berichts-ID:

Error: (08/18/2013 09:11:14 AM) (Source: Application Hang) (User: )
Description: Programm Skype.exe, Version 6.6.0.106 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 8e4

Startzeit: 01ce9be1ea893c51

Endzeit: 0

Anwendungspfad: C:\Program Files (x86)\Skype\Phone\Skype.exe

Berichts-ID:

Error: (08/18/2013 08:59:07 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (08/18/2013 08:46:47 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (08/17/2013 07:50:47 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (08/17/2013 07:50:44 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (08/19/2013 01:18:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/19/2013 01:16:56 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows-Bilderfassung (WIA)" ist vom Dienst "Shellhardwareerkennung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/19/2013 01:16:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "4game-service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/19/2013 01:16:52 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst 4game-service erreicht.

Error: (08/19/2013 09:54:14 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/19/2013 09:53:38 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows-Bilderfassung (WIA)" ist vom Dienst "Shellhardwareerkennung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/19/2013 09:53:37 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "4game-service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/19/2013 09:53:37 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst 4game-service erreicht.

Error: (08/18/2013 08:37:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/18/2013 08:36:20 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows-Bilderfassung (WIA)" ist vom Dienst "Shellhardwareerkennung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058


Microsoft Office Sessions:
=========================
Error: (08/18/2013 06:00:39 PM) (Source: Application Hang)(User: )
Description: mbam.exe1.75.0.1a5401ce9c2bf27419140C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe506778ef-081f-11e3-a904-4437e60a381b

Error: (08/18/2013 05:59:40 PM) (Source: Application Hang)(User: )
Description: mbam.exe1.75.0.154801ce9c2be1f7b14e0C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe2d6e54e5-081f-11e3-a904-4437e60a381b

Error: (08/18/2013 00:41:43 PM) (Source: VSS)(User: )
Description: C:\00x00000000, Der Vorgang wurde erfolgreich beendet.
0x00000000, Der Vorgang wurde erfolgreich beendet.
0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist.
0x00000000, Der Vorgang wurde erfolgreich beendet.


Vorgang:
   Asynchroner Vorgang wird ausgeführt

Kontext:
   Aktueller Status: DoSnapshotSet

Error: (08/18/2013 00:41:43 PM) (Source: VSS)(User: )
Description: DeviceIoControl(\\?\Volume{1bc6e129-d670-11df-b264-806e6f6e6963} - 0000000000000134,0x0053c010,00000000003DEBE0,0,00000000002A7FD0,4096,[0])

Vorgang:
   Schattenkopien werden übertragen

Kontext:
   Ausführungskontext: System Provider

Error: (08/18/2013 00:39:51 PM) (Source: Application Hang)(User: )
Description: Skype.exe6.6.0.10682401ce9bfef13733d90C:\Program Files (x86)\Skype\Phone\Skype.exe

Error: (08/18/2013 09:11:14 AM) (Source: Application Hang)(User: )
Description: Skype.exe6.6.0.1068e401ce9be1ea893c510C:\Program Files (x86)\Skype\Phone\Skype.exe

Error: (08/18/2013 08:59:07 AM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (08/18/2013 08:46:47 AM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (08/17/2013 07:50:47 PM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Pluton_Mainz\Downloads\esetsmartinstaller_enu (1).exe

Error: (08/17/2013 07:50:44 PM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Pluton_Mainz\Downloads\esetsmartinstaller_enu (1).exe


CodeIntegrity Errors:
===================================
  Date: 2013-03-09 12:41:56.314
  Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-03-09 12:41:56.204
  Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 43%
Total physical RAM: 6078.52 MB
Available physical RAM: 3445.04 MB
Total Pagefile: 12155.22 MB
Available Pagefile: 9061.13 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:906.34 GB) (Free:711.48 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: CE11614F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=906 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=25 GB) - (Type=12)

==================== End Of Log ============================
         

--- --- ---

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Combofix Logfile:

ComboFix 13-08-20.01 - Pluton_Mainz 21.08.2013  11:24:47.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1251.7.1031.18.6079.4199 [GMT 2:00]
Running from: c:\users\Pluton_Mainz\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\BasicServe
c:\program files (x86)\Uniblue\SpeedUpMyPC
c:\program files (x86)\Uniblue\SpeedUpMyPC\Launcher.exe
c:\programdata\BasicServe
c:\users\Pluton_Mainz\4.0
c:\users\Pluton_Mainz\AppData\Roaming\skype.ini
c:\users\Pluton_Mainz\AppData\Roaming\technic-launcher.jar
c:\users\Public\AlexaNSISPlugin.6372.dll
c:\windows\logboot_29.07.2013.tureg.log
c:\windows\security\Database\tmp.edb
.
.
(((((((((((((((((((((((((   Files Created from 2013-07-21 to 2013-08-21  )))))))))))))))))))))))))))))))
.
.
2013-08-20 07:21 . 2013-07-15 01:34	9460976	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{73DAEF18-194E-4F8C-8029-863E410D11CD}\mpengine.dll
2013-08-19 12:57 . 2013-08-19 12:57	--------	d-----w-	C:\FRST
2013-08-18 17:03 . 2013-08-18 17:03	1477728	----a-w-	c:\windows\system32\drivers\tdrpm258.sys
2013-08-18 17:03 . 2013-08-18 17:03	943712	----a-w-	c:\windows\system32\drivers\timntr.sys
2013-08-18 15:59 . 2013-08-18 15:59	--------	d-----w-	c:\users\Pluton_Mainz\AppData\Roaming\Malwarebytes
2013-08-18 15:59 . 2013-08-18 15:59	--------	d-----w-	c:\programdata\Malwarebytes
2013-08-18 07:25 . 2013-08-18 07:25	--------	d-----w-	c:\users\Pluton_Mainz\AppData\Local\avgchrome
2013-08-18 07:24 . 2013-08-18 07:29	--------	d-----w-	c:\program files (x86)\RegClean Pro
2013-08-18 07:24 . 2013-08-18 07:24	--------	d-----w-	c:\users\Pluton_Mainz\AppData\Roaming\DSite
2013-08-18 07:24 . 2013-08-18 07:24	--------	d-----w-	c:\programdata\Babylon
2013-08-18 07:08 . 2013-08-18 07:08	306	----a-w-	c:\windows\DeleteOnReboot.bat
2013-08-14 06:35 . 2013-07-09 05:46	1472512	----a-w-	c:\windows\system32\crypt32.dll
2013-08-09 16:10 . 2013-08-09 16:10	--------	d-----w-	c:\programdata\Media Center Programs
2013-08-08 15:17 . 2013-08-08 15:18	--------	d-----w-	c:\users\Pluton_Mainz\AppData\Local\Akamai
2013-08-08 15:17 . 2013-08-08 15:17	--------	d-----w-	C:\AeriaGames
2013-08-01 18:01 . 2013-08-01 18:01	96168	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-07-31 16:20 . 2013-07-31 16:20	--------	d-----w-	c:\users\Pluton_Mainz\AppData\Local\Craften_Dev_Team
2013-07-31 16:20 . 2013-07-31 16:20	--------	d-----w-	c:\program files (x86)\Craften Terminal
2013-07-31 09:02 . 2013-07-31 09:02	--------	d-----w-	c:\program files\Synaptics
2013-07-31 09:01 . 2013-05-07 14:41	524016	----a-w-	c:\windows\system32\drivers\SynTP.sys
2013-07-31 09:01 . 2013-05-07 14:41	151280	----a-w-	c:\windows\SysWow64\SynTPCom.dll
2013-07-31 09:01 . 2013-05-07 14:41	264432	----a-w-	c:\windows\system32\SynTPAPI.dll
2013-07-31 09:01 . 2013-05-07 14:41	192240	----a-w-	c:\windows\system32\SynTPCo19.dll
2013-07-31 09:01 . 2013-05-07 14:41	819440	----a-w-	c:\windows\system32\SynCOM.dll
2013-07-31 09:01 . 2013-05-07 14:41	351984	----a-w-	c:\windows\SysWow64\SynCom.dll
2013-07-31 09:01 . 2013-05-07 14:41	33008	----a-w-	c:\windows\system32\drivers\Smb_driver_Intel.sys
2013-07-31 08:56 . 2013-07-31 08:56	--------	d-----w-	c:\windows\SysWow64\sda
2013-07-31 08:56 . 2013-06-14 12:14	9890008	----a-w-	c:\windows\SysWow64\RtsUStoricon.dll
2013-07-31 08:56 . 2013-06-14 12:14	423640	----a-w-	c:\windows\system32\RtsUStor.dll
2013-07-31 08:53 . 2013-07-31 08:53	--------	d-----w-	C:\Intel
2013-07-31 07:49 . 2013-07-31 07:52	--------	d-----w-	c:\program files (x86)\WinZipper
2013-07-31 07:49 . 2013-07-31 07:49	--------	d-----w-	c:\users\Pluton_Mainz\AppData\Roaming\WinZipper
2013-07-31 07:49 . 2013-07-31 07:53	--------	d-----w-	c:\users\Pluton_Mainz\AppData\Roaming\player
2013-07-31 07:46 . 2013-07-31 07:47	--------	d-----w-	c:\program files (x86)\Feven
2013-07-31 07:45 . 2013-07-31 07:45	--------	d-----w-	c:\users\Pluton_Mainz\Qtrax
2013-07-31 07:41 . 2013-07-31 07:41	--------	d-----w-	c:\program files (x86)\Image Converter
2013-07-29 08:32 . 2013-07-29 08:37	1688	----a-w-	c:\windows\system32\ASOROSet.bin
2013-07-29 08:27 . 2013-08-18 07:31	--------	d-----w-	c:\program files (x86)\MyPC Backup
2013-07-29 08:27 . 2013-08-18 07:29	--------	d-----w-	c:\users\Pluton_Mainz\AppData\Roaming\Systweak
2013-07-29 08:27 . 2013-06-19 15:27	20312	----a-w-	c:\windows\system32\roboot64.exe
2013-07-29 08:22 . 2013-07-29 08:22	--------	d-----w-	c:\programdata\FreeDriverScout
2013-07-29 08:21 . 2013-07-29 08:22	--------	d-----w-	c:\program files (x86)\Plus-HD-2.4
2013-07-29 08:21 . 2013-07-31 08:23	--------	d-----w-	c:\users\Pluton_Mainz\AppData\Roaming\Windows Net Data
2013-07-29 08:21 . 2013-06-27 05:14	31816	----a-w-	c:\windows\Launcher.exe
2013-07-28 16:28 . 2008-07-12 06:18	540688	----a-w-	c:\windows\system32\d3dx10_39.dll
2013-07-28 16:28 . 2008-07-12 06:18	1942552	----a-w-	c:\windows\system32\D3DCompiler_39.dll
2013-07-28 16:27 . 2008-07-12 06:18	4992520	----a-w-	c:\windows\system32\D3DX9_39.dll
2013-07-28 16:00 . 2013-07-28 16:00	--------	d-----w-	c:\users\Pluton_Mainz\AppData\Local\Ubisoft
2013-07-28 16:00 . 2013-07-28 16:00	--------	d-----w-	c:\programdata\Ubisoft
2013-07-28 15:55 . 2013-08-09 15:53	--------	d-----w-	c:\program files (x86)\Ubisoft
2013-07-28 15:54 . 2004-07-15 22:20	69715	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\ctor.dll
2013-07-28 15:54 . 2004-07-15 22:19	266240	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iscript.dll
2013-07-28 15:54 . 2004-07-15 22:18	172032	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iuser.dll
2013-07-28 15:54 . 2004-07-15 22:18	5632	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\DotNetInstaller.exe
2013-07-28 15:54 . 2004-07-15 22:20	733184	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iKernel.dll
2013-07-28 15:54 . 2013-07-28 15:54	180356	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iGdi.dll
2013-07-28 15:54 . 2013-07-28 15:54	303236	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\setup.dll
2013-07-23 11:18 . 2013-08-15 08:15	--------	d-----w-	c:\windows\system32\MRT
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-08-20 18:05 . 2012-04-17 11:38	692104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-08-20 18:05 . 2011-06-07 08:27	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-08-18 13:08 . 2012-11-23 13:06	282104	----a-w-	c:\windows\SysWow64\PnkBstrB.xtr
2013-08-18 13:08 . 2012-11-23 13:04	282104	----a-w-	c:\windows\SysWow64\PnkBstrB.exe
2013-08-18 13:08 . 2012-11-23 13:04	234768	----a-w-	c:\windows\SysWow64\PnkBstrB.ex0
2013-08-15 08:13 . 2010-10-29 16:56	78161360	----a-w-	c:\windows\system32\MRT.exe
2013-08-01 18:01 . 2012-05-14 17:08	867240	----a-w-	c:\windows\SysWow64\npdeployJava1.dll
2013-08-01 18:01 . 2010-11-19 19:43	789416	----a-w-	c:\windows\SysWow64\deployJava1.dll
2013-07-09 04:45 . 2013-08-14 06:35	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2013-06-14 12:14 . 2010-10-13 02:27	262872	----a-w-	c:\windows\system32\drivers\RtsUStor.sys
2013-06-05 03:34 . 2013-07-10 10:19	3153920	----a-w-	c:\windows\system32\win32k.sys
2013-06-04 06:00 . 2013-07-10 10:20	624128	----a-w-	c:\windows\system32\qedit.dll
2013-06-04 04:53 . 2013-07-10 10:20	509440	----a-w-	c:\windows\SysWow64\qedit.dll
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2013-04-05 59720]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-06-21 19875432]
"Akamai NetSession Interface"="c:\users\Pluton_Mainz\AppData\Local\Akamai\netsession_win.exe" [2013-06-04 4489472]
"Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2013-01-21 3093624]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-11-30 343168]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"UpdateP2GoShortCut"="c:\program files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"ModeSwitch"="c:\program files\Lenovo\Power Dial\LitModeSwitch.exe" [2009-09-27 163840]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-03-03 284696]
"CLMLServer"="c:\program files (x86)\Lenovo\Power2Go\CLMLSvc.exe" [2009-06-03 103720]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-06-28 2255184]
"QuickTime Plugin Install"="c:\program files (x86)\QuickTime\Plugins\DeleteMe1.exe" [2013-07-07 86016]
.
c:\users\Pluton_Mainz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
net.lnk - c:\users\Pluton_Mainz\AppData\Roaming\Windows Net Data\net.exe [2013-7-29 709120]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
"TkBellExe"="c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
"BrMfcWnd"=c:\program files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN                                                                                                                                                                                                            
"Healthcare"=c:\program files\Lenovo\HealthCare\HealthCare.exe /hide
"QuickTime Plugin Install"=c:\program files (x86)\QuickTime\Plugins\DeleteMe1.exe
"jmekey"=c:\program files (x86)\jmesoft\hotkey.exe
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
"ControlCenter3"=c:\program files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun                                                                                                                                                                                                      
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R2 4game-service;4game-service;c:\program files (x86)\4game\4game-service.exe;c:\program files (x86)\4game\4game-service.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 fwlanusb4;FRITZ!WLAN N/G;c:\windows\system32\DRIVERS\fwlanusb4.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb4.sys [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 LitModeCtrl;LitModeCtrl;c:\program files\Lenovo\Power Dial\LitModeCtrl.exe;c:\program files\Lenovo\Power Dial\LitModeCtrl.exe [x]
R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
R3 LVUVC64;Logitech Webcam 200(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 RTL8023x64;Realtek 10/100 NIC Family NDIS x64 Driver;c:\windows\system32\DRIVERS\Rtnic64.sys;c:\windows\SYSNATIVE\DRIVERS\Rtnic64.sys [x]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys;c:\windows\SYSNATIVE\DRIVERS\Rts516xIR.sys [x]
R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys;c:\windows\SYSNATIVE\DRIVERS\SWDUMon.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
R3 X6va011;X6va011;c:\windows\SysWOW64\Drivers\X6va011;c:\windows\SysWOW64\Drivers\X6va011 [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [x]
S2 CEEBC40A-FDED-4C59-B354-939132350B01;Roxio File Backup Service;c:\program files (x86)\Roxio\BackOnTrack\File Backup\FileBackupSVC.exe;c:\program files (x86)\Roxio\BackOnTrack\File Backup\FileBackupSVC.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 LenovoCOMSvc;LenovoCOMService;c:\program files\Lenovo\Power Dial\LenovoCOMSvc.exe;c:\program files\Lenovo\Power Dial\LenovoCOMSvc.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [x]
S2 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 WinI2C-DDC;WinI2C-DDC Kernel Mode Driver;c:\windows\system32\drivers\DDCDrv.sys;c:\windows\SYSNATIVE\drivers\DDCDrv.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1k62x64.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-07-31 07:35	1173456	----a-w-	c:\program files (x86)\Google\Chrome\Application\28.0.1500.95\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-08-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-17 18:05]
.
2013-08-01 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3627293235-2912429573-1199883092-1001Core.job
- c:\users\Pluton_Mainz\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-03-21 09:37]
.
2013-08-01 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3627293235-2912429573-1199883092-1001UA.job
- c:\users\Pluton_Mainz\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-03-21 09:37]
.
2013-08-21 c:\windows\Tasks\Feven-chromeinstaller.job
- c:\program files (x86)\Feven\Feven-chromeinstaller.exe [2013-07-31 07:46]
.
2013-08-21 c:\windows\Tasks\Feven-codedownloader.job
- c:\program files (x86)\Feven\Feven-codedownloader.exe [2013-07-31 07:46]
.
2013-08-21 c:\windows\Tasks\Feven-enabler.job
- c:\program files (x86)\Feven\Feven-enabler.exe [2013-07-31 07:46]
.
2013-08-21 c:\windows\Tasks\Feven-firefoxinstaller.job
- c:\program files (x86)\Feven\Feven-firefoxinstaller.exe [2013-07-31 07:46]
.
2013-08-21 c:\windows\Tasks\Feven-updater.job
- c:\program files (x86)\Feven\Feven-updater.exe [2013-07-31 07:47]
.
2013-08-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-29 20:46]
.
2013-08-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-29 20:46]
.
2013-08-01 c:\windows\Tasks\Plus-HD-2.4-chromeinstaller.job
- c:\program files (x86)\Plus-HD-2.4\Plus-HD-2.4-chromeinstaller.exe [2013-07-29 08:21]
.
2013-08-01 c:\windows\Tasks\Plus-HD-2.4-codedownloader.job
- c:\program files (x86)\Plus-HD-2.4\Plus-HD-2.4-codedownloader.exe [2013-07-29 08:21]
.
2013-08-01 c:\windows\Tasks\Plus-HD-2.4-enabler.job
- c:\program files (x86)\Plus-HD-2.4\Plus-HD-2.4-enabler.exe [2013-07-29 08:21]
.
2013-08-01 c:\windows\Tasks\Plus-HD-2.4-firefoxinstaller.job
- c:\program files (x86)\Plus-HD-2.4\Plus-HD-2.4-firefoxinstaller.exe [2013-07-29 08:21]
.
2013-08-01 c:\windows\Tasks\Plus-HD-2.4-updater.job
- c:\program files (x86)\Plus-HD-2.4\Plus-HD-2.4-updater.exe [2013-07-29 08:21]
.
.
--------- X64 Entries -----------
.
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com
uLocal Page = c:\windows\system32\blank.htm
uDefault_Search_URL = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
mDefault_Page_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mSearch Page = hxxp://www.google.com
mSearch Bar = hxxp://www.google.com
uInternet Settings,ProxyOverride = *.local;<local>
IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
Trusted Zone: 4game.com
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
WebBrowser-{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - (no file)
WebBrowser-{78E516EF-11DE-47A1-8364-A99B917EC5EE} - (no file)
WebBrowser-{213C8ED6-1D78-4D8F-8729-25006AA86A76} - (no file)
WebBrowser-{5786D022-540E-4699-B350-B4BE0AE94B79} - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-FoxTab Video Converter - c:\program files (x86)\FoxTabVideoConverter\Uninstall\Uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va011]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va011"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\windows\SysWOW64\brsvc01a.exe
c:\windows\SysWOW64\brss01a.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Completion time: 2013-08-21  11:35:47 - machine was rebooted
ComboFix-quarantined-files.txt  2013-08-21 09:35
.
Pre-Run: 13 Verzeichnis(se), 762.734.567.424 Bytes frei
Post-Run: 21 Verzeichnis(se), 762.655.592.448 Bytes frei
.
- - End Of File - - 7D21A426C66375C5C7F7E29D5F5773F4
         

--- --- ---
A36C5E4F47E84449FF07ED3517B43A31

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

und ein frisches FRST log bitte.

Malwarebytes Anti-Malware (Test) 1.75.0.1300
Malwarebytes : Free Anti-Malware download

Datenbank Version: v2013.08.21.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16660
Pluton_Mainz :: PLUTON_MAINZ-PC [Administrator]

Schutz: Deaktiviert

21.08.2013 13:54:46
mbam-log-2013-08-21 (13-54-46).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 227325
Laufzeit: 5 Minute(n), 13 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 5
HKCR\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8} (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B} (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C} (PUP.Optional.OptimzerPro.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 1
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0L1N1H2O1S -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\Pluton_Mainz\Downloads\ImageEditorSetup.exe (PUP.Optional.InstallCore) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

AdwCleaner Logfile:

# AdwCleaner v3.000 - Report created 21/08/2013 at 14:10:57
# Updated 20/08/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Pluton_Mainz - PLUTON_MAINZ-PC
# Running from : C:\Users\Pluton_Mainz\Downloads\adwcleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Program Files (x86)\Mozilla Firefox\searchplugins\portaldosites.xml
File Found : C:\windows\System32\roboot64.exe
File Found : C:\windows\System32\Tasks\DealPlyUpdate
File Found : C:\windows\System32\Tasks\EPUpdater
File Found : C:\windows\System32\Tasks\Omiga Plus RunAsStdUser
Folder Found C:\Program Files (x86)\MyPC Backup
Folder Found C:\Program Files (x86)\RegClean Pro
Folder Found C:\ProgramData\Babylon
Folder Found C:\Users\Pluton_Mainz\AppData\Roaming\DSite
Folder Found C:\Users\Pluton_Mainz\AppData\Roaming\Systweak

***** [ Shortcuts ] *****


***** [ Registry ] *****

Data Found : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\SAFARI.EXE\shell\open\command [(Default)] - "C:\Program Files (x86)\Safari\Safari.exe" hxxp://www.portaldosites.com/?utm_source=b&utm_medium=spfs2&from=spfs2&uid=ST31000528AS_5VP6ES6HXXXX5VP6ES6H&ts=1375975062
Key Found : HKCU\Software\BabSolution
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : [x64] HKCU\Software\BabSolution
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKLM\SOFTWARE\Classes\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\d55d8d9b13ab842
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_device-doctor_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_device-doctor_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_driverscanner_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_driverscanner_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freepdf_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freepdf_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_glary-utilities_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_glary-utilities_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft(1)_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft(1)_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_slimdrivers_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_slimdrivers_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_sweepi_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_sweepi_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Key Found : HKLM\Software\systweak
Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc
Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Key Found : [x64] HKLM\SOFTWARE\DomaIQ
Value Found : HKCU\Software\Mozilla\Firefox\Extensions [{9309FA47-1B48-4768-AFA4-9E0556F5DC81}]

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660


-\\ Mozilla Firefox v

[ File : C:\Users\Pluton_Mainz\AppData\Roaming\Mozilla\Firefox\Profiles\b2luevm7.default\prefs.js ]

Line Found : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.backgroundjs", "\n\n/*****************************************************************************[...]
Line Found : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return app[...]
Line Found : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_119.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Found : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_120.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Found : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_123.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Found : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_138.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Found : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_14.name", "CrossriderUtils");
Line Found : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.a[...]
Line Found : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.que[...]
Line Found : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_con[...]
Line Found : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]
Line Found : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_78.name", "CrossriderInfo");
Line Found : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_87.code", "var CROSSRIDER_PLATFORM=true;var JQ=bbrsJQ=$jquery;if(appAPI.platform==\[...]
Line Found : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_92.code", "if(typeof appAPI.internal.monetization===\"undefined\"){appAPI.internal.[...]
Line Found : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.backgroundjs", "\n\n/*****************************************************************************[...]
Line Found : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.js", "\n\n  /************************************************************************************\[...]
Line Found : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return app[...]
Line Found : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_119.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Found : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_120.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Found : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_123.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Found : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_138.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Found : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_14.name", "CrossriderUtils");
Line Found : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.a[...]
Line Found : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.que[...]
Line Found : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_con[...]
Line Found : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]
Line Found : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_78.name", "CrossriderInfo");
Line Found : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_87.code", "var CROSSRIDER_PLATFORM=true;var JQ=bbrsJQ=$jquery;if(appAPI.platform==\[...]
Line Found : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_92.code", "if(typeof appAPI.internal.monetization===\"undefined\"){appAPI.internal.[...]
Line Found : user_pref("extensions.crossrider.bic", "1402c2c314bf8d366cb9bac78f49735c");
Line Found : user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}\":{\"descriptor\":\"C:\\\\Program Files (x86)\\\\DivX\\\\DivX Plus Web Playe[...]

-\\ Google Chrome v28.0.1500.95

[ File : C:\Users\Pluton_Mainz\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Found : homepage
Found : icon_url
Found : search_url
Found : keyword
Found : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [10628 octets] - [21/08/2013 14:10:57]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [10689 octets] ##########
         

--- --- ---

AdwCleaner Logfile:

# AdwCleaner v3.000 - Report created 21/08/2013 at 14:12:17
# Updated 20/08/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Pluton_Mainz - PLUTON_MAINZ-PC
# Running from : C:\Users\Pluton_Mainz\Downloads\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\Program Files (x86)\MyPC Backup
Folder Deleted : C:\Program Files (x86)\RegClean Pro
Folder Deleted : C:\Users\Pluton_Mainz\AppData\Roaming\DSite
Folder Deleted : C:\Users\Pluton_Mainz\AppData\Roaming\Systweak
File Deleted : C:\windows\System32\roboot64.exe
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\portaldosites.xml
File Deleted : C:\windows\System32\Tasks\DealPlyUpdate
File Deleted : C:\windows\System32\Tasks\EPUpdater
File Deleted : C:\windows\System32\Tasks\Omiga Plus RunAsStdUser

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{9309FA47-1B48-4768-AFA4-9E0556F5DC81}]
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Key Deleted : HKLM\SOFTWARE\d55d8d9b13ab842
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_device-doctor_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_device-doctor_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_driverscanner_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_driverscanner_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freepdf_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freepdf_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_glary-utilities_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_glary-utilities_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft(1)_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft(1)_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_slimdrivers_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_slimdrivers_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_sweepi_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_sweepi_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\systweak
Key Deleted : [x64] HKLM\SOFTWARE\DomaIQ

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660


-\\ Mozilla Firefox v

[ File : C:\Users\Pluton_Mainz\AppData\Roaming\Mozilla\Firefox\Profiles\b2luevm7.default\prefs.js ]

Line Deleted : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.backgroundjs", "\n\n/*****************************************************************************[...]
Line Deleted : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return app[...]
Line Deleted : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_119.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Deleted : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_120.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Deleted : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_123.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Deleted : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_138.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Deleted : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_14.name", "CrossriderUtils");
Line Deleted : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.a[...]
Line Deleted : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.que[...]
Line Deleted : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_con[...]
Line Deleted : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]
Line Deleted : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_78.name", "CrossriderInfo");
Line Deleted : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_87.code", "var CROSSRIDER_PLATFORM=true;var JQ=bbrsJQ=$jquery;if(appAPI.platform==\[...]
Line Deleted : user_pref("extensions.a6be3335bef794b0ba0bab87afbc6f4ad6bbb4d2ee33e4fa59b37934f4fb50182com31554.31554.plugins.plugin_92.code", "if(typeof appAPI.internal.monetization===\"undefined\"){appAPI.internal.[...]
Line Deleted : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.backgroundjs", "\n\n/*****************************************************************************[...]
Line Deleted : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.js", "\n\n  /************************************************************************************\[...]
Line Deleted : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return app[...]
Line Deleted : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_119.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Deleted : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_120.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Deleted : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_123.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Deleted : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_138.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Deleted : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_14.name", "CrossriderUtils");
Line Deleted : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.a[...]
Line Deleted : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.que[...]
Line Deleted : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_con[...]
Line Deleted : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]
Line Deleted : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_78.name", "CrossriderInfo");
Line Deleted : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_87.code", "var CROSSRIDER_PLATFORM=true;var JQ=bbrsJQ=$jquery;if(appAPI.platform==\[...]
Line Deleted : user_pref("extensions.aad80235d5e5a4a1da89151b66a3e70f88f877d806977415fac14b52043838c19com33434.33434.plugins.plugin_92.code", "if(typeof appAPI.internal.monetization===\"undefined\"){appAPI.internal.[...]
Line Deleted : user_pref("extensions.crossrider.bic", "1402c2c314bf8d366cb9bac78f49735c");
Line Deleted : user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}\":{\"descriptor\":\"C:\\\\Program Files (x86)\\\\DivX\\\\DivX Plus Web Playe[...]

-\\ Google Chrome v28.0.1500.95

[ File : C:\Users\Pluton_Mainz\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : homepage
Deleted : icon_url
Deleted : search_url
Deleted : keyword
Deleted : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [10782 octets] - [21/08/2013 14:10:57]
AdwCleaner[S0].txt - [10378 octets] - [21/08/2013 14:12:17]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [10439 octets] ##########
         

--- --- ---

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=97a91464dc367647b017d349513d012f
# engine=14854
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-21 08:00:48
# local_time=2013-08-21 10:00:48 (+0100, Mitteleuropдische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 26188 128745098 0 0
# scanned=240289
# found=3
# cleaned=0
# scan_time=12733
sh=9144BB88DFFC92B339583BDCBD48F10D14830440 ft=1 fh=a67ffaefe897b4d0 vn="a variant of Win32/Adware.SpeedingUpMyPC.C application" ac=I fn="C:\Users\Pluton_Mainz\Downloads\driverupdater(1).exe"
sh=519673E39EBB120CE384CA25FB490B0D8FA92D6E ft=1 fh=d98b0064f1e56740 vn="a variant of Win32/Adware.SpeedingUpMyPC.C application" ac=I fn="C:\Users\Pluton_Mainz\Downloads\driverupdater.exe"
sh=F89752A971F74E9A5FE11F43E75A61BBCA31726A ft=0 fh=0000000000000000 vn="a variant of Win32/Adware.SpeedingUpMyPC.C application" ac=I fn="E:\Wichtig PC\PLUTON_MAINZ-PC1\Backup Set 2012-10-21 190000\Backup Files 2012-10-21 190000\Backup files 5.zip"
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=97a91464dc367647b017d349513d012f
# engine=14857
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-22 08:52:24
# local_time=2013-08-22 10:52:24 (+0100, Mitteleuropдische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 9023 128791394 0 0
# scanned=238623
# found=2
# cleaned=0
# scan_time=8976
sh=9144BB88DFFC92B339583BDCBD48F10D14830440 ft=1 fh=a67ffaefe897b4d0 vn="a variant of Win32/Adware.SpeedingUpMyPC.C application" ac=I fn="C:\Users\Pluton_Mainz\Downloads\driverupdater(1).exe"
sh=519673E39EBB120CE384CA25FB490B0D8FA92D6E ft=1 fh=d98b0064f1e56740 vn="a variant of Win32/Adware.SpeedingUpMyPC.C application" ac=I fn="C:\Users\Pluton_Mainz\Downloads\driverupdater.exe"

Results of screen317's Security Check version 0.99.72
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware Version 1.75.0.1300
TuneUp Utilities 2011
TuneUp Utilities Language Pack (de-DE)
Java(TM) 6 Update 35
Java 7 Update 25
Adobe Flash Player 11.8.800.94
Adobe Reader 9 Adobe Reader out of Date!
Google Chrome 28.0.1500.95
Google Chrome 29.0.1547.57
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````


FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-08-2013
Ran by Pluton_Mainz (administrator) on 22-08-2013 12:13:17
Running from C:\Users\Pluton_Mainz\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\windows\system32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\windows\system32\atieclxx.exe
(brother Industries Ltd) C:\windows\SysWOW64\brsvc01a.exe
(brother Industries Ltd) C:\windows\SysWOW64\brss01a.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Akamai Technologies, Inc.) C:\Users\Pluton_Mainz\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Pluton_Mainz\AppData\Local\Akamai\netsession_win.exe
(Windows Net) C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data\net.exe
(Lenovo) C:\Program Files\Lenovo\Power Dial\LitModeSwitch.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Roxio\BackOnTrack\File Backup\FileBackupSVC.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Lenovo) C:\Program Files\Lenovo\Power Dial\LenovoCOMSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Lenovo) C:\Program Files\Lenovo\Power Dial\LitModeCtrl.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3030256 2013-05-07] (Synaptics Incorporated)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Pluton_Mainz\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-01-21] ()
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-11-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [ModeSwitch] - C:\Program Files\Lenovo\Power Dial\LitModeSwitch.exe [163840 2009-09-27] (Lenovo)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-03] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2255184 2013-06-28] (LogMeIn Inc.)
HKLM-x32\...\Run: [QuickTime Plugin Install] - C:\Program Files (x86)\QuickTime\Plugins\DeleteMe1.exe [86016 2013-07-07] ()
Startup: C:\Users\Pluton_Mainz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data\net.exe (Windows Net)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.7&ts=1375086034716&tguid=46364-3869-1375086034716-DDE916C2F73510833FF8E6502D783EA2&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.7&ts=1375086034716&tguid=46364-3869-1375086034716-DDE916C2F73510833FF8E6502D783EA2&q={searchTerms}
SearchScopes: HKCU - {84802E9B-92DE-4889-9D3C-2AE4B1A98312} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
SearchScopes: HKCU - {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} URL = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ie_de_display?ie=UTF8&tag=bds-p18-serp-de-ie-21&tagbase=bds-p18&tbrId=v1_abb-channel-18_6fa63ba5900744b18b787977b688dc15_18_38_20130131_DE_ie_ds_OC1&query={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - No Name - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} -  No File
Toolbar: HKCU - No Name - {78E516EF-11DE-47A1-8364-A99B917EC5EE} -  No File
Toolbar: HKCU - No Name - {213C8ED6-1D78-4D8F-8729-25006AA86A76} -  No File
Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Pluton_Mainz\AppData\Roaming\Mozilla\Firefox\Profiles\b2luevm7.default
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.5.0 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.5.0 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @4game.com/plugin - C:\Program Files (x86)\4game\npplugin4game.dll (Innova Co S.a r.l.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @real.com/nppl3260;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @t-immersion.com/DFusionHomeWebPlugIn - C:\Program Files (x86)\Total Immersion\DFusionHomeWebPlugIn\NPDFusionWebFirefox.dll (Total Immersion)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Pluton_Mainz\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: No Name - C:\Users\Pluton_Mainz\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com
FF Extension: No Name - C:\Users\Pluton_Mainz\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: No Name - C:\Users\Pluton_Mainz\AppData\Roaming\Mozilla\Firefox\Profiles\b2luevm7.default\Extensions\6be3335b-ef79-4b0b-a0ba-b87afbc6f4ad@6bbb4d2e-e33e-4fa5-9b37-934f4fb50182.com
FF Extension: No Name - C:\Users\Pluton_Mainz\AppData\Roaming\Mozilla\Firefox\Profiles\b2luevm7.default\Extensions\ad80235d-5e5a-4a1d-a891-51b66a3e70f8@8f877d80-6977-415f-ac14-b52043838c19.com
FF Extension: pricealarm - C:\Users\Pluton_Mainz\AppData\Roaming\Mozilla\Firefox\Profiles\b2luevm7.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

Chrome: 
=======
CHR DefaultSearchURL: (Delta Search) - hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=FC604437E60A381B&affID=119357&tsp=4978
CHR DefaultSuggestURL: (Delta Search) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (4game) - C:\Program Files (x86)\4game\npplugin4game.dll (Innova Co S.a r.l.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (D'Fusion @Home Web Plug-In (3.10.17859)) - C:\Program Files (x86)\Total Immersion\DFusionHomeWebPlugIn\NPDFusionWebFirefox.dll (Total Immersion)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Pluton_Mainz\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Shockwave for Director) - C:\windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealJukebox NS Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
CHR Extension: (Google Docs) - C:\Users\PLUTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\PLUTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\PLUTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\PLUTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Feven) - C:\Users\PLUTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fglhnbihmeinbfgalpnaiembmdhfijli\1.23.23_0
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\PLUTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\PLUTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.2_0
CHR Extension: (Google Wallet Service) - C:\Users\PLUTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.9_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\PLUTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0
CHR Extension: (Gmail) - C:\Users\PLUTON~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [aacbndibbcpajfgnkdkaakeiojmmgmnk] - C:\Users\Pluton_Mainz\AppData\Roaming\Media Finder\Extensions\mf_plugin_gc.crx
CHR HKLM-x32\...\Chrome\Extension: [ccbgjfdieajmokelnlapbedknchgenne] - C:\Users\Pluton_Mainz\AppData\Local\CRE\ccbgjfdieajmokelnlapbedknchgenne.crx
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx
CHR HKLM-x32\...\Chrome\Extension: [jpihmmhdcobmllpcnpfbhnipmhamldje] - C:\Users\Pluton_Mainz\AppData\Roaming\Media Finder\Extensions\gencrawler_gc.crx
CHR HKLM-x32\...\Chrome\Extension: [kfkcangbigakljkjeglcofaomihpejif] - C:\Users\Pluton_Mainz\AppData\Local\CRE\kfkcangbigakljkjeglcofaomihpejif.crx
CHR HKLM-x32\...\Chrome\Extension: [mmiopbgcekanlhpjkonogoljpfmhpkhf] - C:\Program Files (x86)\LyricsPal\125.crx
CHR HKLM-x32\...\Chrome\Extension: [ngnjhfpfhadncgafgbneeljaginimmmk] - C:\Users\PLUTON~1\AppData\Local\Temp\tbch.crx
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
CHR HKLM-x32\...\Chrome\Extension: [pnbbffeddnekkhjmokkhdebbfbibbflc] - C:\Program Files (x86)\LyricsPal\128.crx

==================== Services (Whitelisted) =================

S2 4game-service; C:\Program Files (x86)\4game\4game-service.exe [1133056 2013-05-23] (Innova Co S.a r.l.)
R2 Brother XP spl Service; C:\windows\SysWOW64\brsvc01a.exe [57344 2004-06-14] (brother Industries Ltd)
R2 CEEBC40A-FDED-4C59-B354-939132350B01; C:\Program Files (x86)\Roxio\BackOnTrack\File Backup\FileBackupSVC.exe [96752 2009-10-12] ()
R2 LenovoCOMSvc; C:\Program Files\Lenovo\Power Dial\LenovoCOMSvc.exe [49152 2009-09-30] (Lenovo)
R3 LitModeCtrl; C:\Program Files\Lenovo\Power Dial\LitModeCtrl.exe [81920 2009-09-27] (Lenovo)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-11-23] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [1974080 2010-10-26] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
S3 fwlanusb4; C:\Windows\System32\DRIVERS\fwlanusb4.sys [1293824 2010-10-22] (AVM GmbH)
S3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation                           )
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2013-05-07] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2010-11-19] ()
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [15712 2012-08-19] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [11856 2010-10-07] (TuneUp Software)
R2 WinI2C-DDC; C:\windows\system32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.)
U3 a7tq6mcs; C:\Windows\System32\Drivers\a7tq6mcs.sys [0 ] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
U3 DfSdkS; 
S3 EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys [x]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [x]
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP1\WNt500x64\Sandra.sys [x]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [x]
S3 X6va011; \??\C:\windows\SysWOW64\Drivers\X6va011 [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-22 08:22 - 2013-08-22 08:22 - 02347384 _____ (ESET) C:\Users\Pluton_Mainz\Downloads\esetsmartinstaller_enu (3).exe
2013-08-21 18:26 - 2013-08-21 18:26 - 02347384 _____ (ESET) C:\Users\Pluton_Mainz\Downloads\esetsmartinstaller_enu (2).exe
2013-08-21 14:10 - 2013-08-21 14:12 - 00000000 ____D C:\AdwCleaner
2013-08-21 14:10 - 2013-08-21 14:10 - 00975858 _____ C:\Users\Pluton_Mainz\Downloads\adwcleaner (1).exe
2013-08-21 14:09 - 2013-08-21 14:10 - 00975858 _____ C:\Users\Pluton_Mainz\Downloads\adwcleaner.exe
2013-08-21 13:53 - 2013-08-21 13:53 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Pluton_Mainz\Downloads\mbam-setup-1.75.0.1300 (3).exe
2013-08-21 13:53 - 2013-08-21 13:53 - 00001073 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-21 13:53 - 2013-08-21 13:53 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-21 13:53 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-08-21 11:35 - 2013-08-21 11:35 - 00028377 _____ C:\ComboFix.txt
2013-08-21 11:23 - 2013-08-21 11:35 - 00000000 ____D C:\Qoobox
2013-08-21 11:23 - 2011-06-26 08:45 - 00256000 _____ C:\windows\PEV.exe
2013-08-21 11:23 - 2010-11-07 19:20 - 00208896 _____ C:\windows\MBR.exe
2013-08-21 11:23 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2013-08-21 11:23 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2013-08-21 11:23 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2013-08-21 11:23 - 2000-08-31 02:00 - 00098816 _____ C:\windows\sed.exe
2013-08-21 11:23 - 2000-08-31 02:00 - 00080412 _____ C:\windows\grep.exe
2013-08-21 11:23 - 2000-08-31 02:00 - 00068096 _____ C:\windows\zip.exe
2013-08-21 11:22 - 2013-08-21 11:34 - 00000000 ____D C:\windows\erdnt
2013-08-21 11:22 - 2013-08-21 11:22 - 05109244 _____ (Swearware) C:\Users\Pluton_Mainz\Downloads\ComboFix (1).exe
2013-08-21 11:16 - 2013-08-21 11:16 - 05109244 ____R (Swearware) C:\Users\Pluton_Mainz\Downloads\ComboFix.exe
2013-08-19 14:58 - 2013-08-19 14:59 - 00036331 _____ C:\Users\Pluton_Mainz\Downloads\Addition.txt
2013-08-19 14:57 - 2013-08-19 14:57 - 01575812 _____ (Farbar) C:\Users\Pluton_Mainz\Downloads\FRST64.exe
2013-08-19 14:57 - 2013-08-19 14:57 - 00000000 ____D C:\FRST
2013-08-19 13:34 - 2013-08-19 13:34 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Pluton_Mainz\Downloads\mbam-setup-1.75.0.1300 (2).exe
2013-08-18 19:09 - 2013-08-18 19:21 - 3808428032 _____ C:\platt.tib
2013-08-18 19:06 - 2013-08-18 19:06 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Acronis
2013-08-18 19:03 - 2013-08-18 19:03 - 01477728 _____ (Acronis) C:\windows\system32\Drivers\tdrpm258.sys
2013-08-18 19:03 - 2013-08-18 19:03 - 00943712 _____ (Acronis) C:\windows\system32\Drivers\timntr.sys
2013-08-18 17:59 - 2013-08-18 17:59 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Malwarebytes
2013-08-18 17:59 - 2013-08-18 17:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-18 17:57 - 2013-08-18 17:58 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Pluton_Mainz\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-08-18 12:31 - 2013-08-18 12:31 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Pluton_Mainz\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-18 12:25 - 2013-08-18 12:25 - 00000057 _____ C:\Users\Pluton_Mainz\AppData\Roaming\WB.CFG
2013-08-18 12:25 - 2013-08-18 12:25 - 00000005 _____ C:\Users\Pluton_Mainz\AppData\Roaming\WBPU-TTL.DAT
2013-08-18 09:25 - 2013-08-18 09:25 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\avgchrome
2013-08-18 09:23 - 2013-08-18 09:23 - 00714352 _____ C:\Users\Pluton_Mainz\Downloads\ZipOpenerSetup.exe
2013-08-18 09:08 - 2013-08-18 09:08 - 00000306 _____ C:\windows\DeleteOnReboot.bat
2013-08-18 09:07 - 2013-08-18 09:08 - 00057539 _____ C:\AdwCleaner[S1].txt
2013-08-18 09:07 - 2013-08-18 09:07 - 00059284 _____ C:\AdwCleaner[R2].txt
2013-08-18 09:06 - 2013-08-18 09:07 - 00059223 _____ C:\AdwCleaner[R1].txt
2013-08-18 09:06 - 2013-08-18 09:06 - 00666633 _____ C:\Users\Pluton_Mainz\Downloads\adwcleaner2306.exe
2013-08-17 19:49 - 2013-08-17 19:50 - 02347384 _____ (ESET) C:\Users\Pluton_Mainz\Downloads\esetsmartinstaller_enu (1).exe
2013-08-17 19:48 - 2013-08-17 19:48 - 02347384 _____ (ESET) C:\Users\Pluton_Mainz\Downloads\esetsmartinstaller_enu.exe
2013-08-15 10:20 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-08-15 10:20 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-08-15 10:20 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-08-15 10:20 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-08-15 10:20 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-08-15 10:20 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-08-15 10:20 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-08-15 10:20 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-08-15 10:20 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-08-15 10:20 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-08-15 10:20 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-08-15 10:20 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-08-15 10:20 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-08-15 10:20 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 08:35 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-08-14 08:35 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2013-08-14 08:35 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-08-14 08:35 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-08-14 08:35 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-08-14 08:35 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-08-14 08:35 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-08-14 08:35 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2013-08-14 08:35 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2013-08-14 08:35 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-08-14 08:35 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2013-08-14 08:35 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2013-08-14 08:35 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-08-14 08:35 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-08-14 08:35 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-08-14 08:35 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2013-08-14 08:35 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2013-08-14 08:35 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-08-14 08:35 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-08-14 08:35 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2013-08-14 08:35 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
2013-08-14 08:35 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-08-14 08:35 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-08-14 08:35 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-08-14 08:35 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-08-14 08:35 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-08-14 08:35 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2013-08-09 18:24 - 2013-08-09 18:24 - 00000407 _____ C:\Users\Pluton_Mainz\Desktop\CD-Laufwerk - Verknüpfung.lnk
2013-08-09 18:07 - 2013-08-09 18:07 - 00000637 _____ C:\windows\KB942288-v3.log
2013-08-08 17:17 - 2013-08-08 17:18 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\Akamai
2013-08-08 17:17 - 2013-08-08 17:17 - 00558104 _____ (Aeria Games & Entertainment) C:\Users\Pluton_Mainz\Downloads\scarletblade_de_downloader.exe
2013-08-08 17:17 - 2013-08-08 17:17 - 00000000 ____D C:\AeriaGames
2013-08-06 14:06 - 2013-08-06 14:06 - 36965680 _____ (Microsoft Corporation) C:\Users\Pluton_Mainz\Downloads\IE9-Windows7-x64-deu.exe
2013-08-06 14:06 - 2013-08-06 14:06 - 00001102 _____ C:\windows\IE9_main.log
2013-08-06 14:04 - 2013-08-06 14:06 - 00001556 _____ C:\windows\ie8_main.log
2013-08-06 14:04 - 2013-08-06 14:04 - 17010016 _____ (Microsoft Corporation) C:\Users\Pluton_Mainz\Downloads\IE8-WindowsXP-x86-DEU.exe
2013-08-01 20:01 - 2013-08-01 20:01 - 00263592 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-08-01 20:01 - 2013-08-01 20:01 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-01 20:00 - 2013-08-01 20:00 - 00903080 _____ (Oracle Corporation) C:\Users\Pluton_Mainz\Downloads\chromeinstall-7u25.exe
2013-08-01 19:59 - 2013-08-01 19:59 - 00000000 ____D C:\Users\Pluton_Mainz\Downloads\f6flpy-x86
2013-08-01 19:58 - 2013-08-01 19:58 - 00326034 _____ C:\Users\Pluton_Mainz\Downloads\f6flpy-x86.zip
2013-08-01 14:43 - 2013-08-01 14:43 - 02143832 _____ C:\Users\Pluton_Mainz\Downloads\instsf449 (2).exe
2013-08-01 14:33 - 2013-08-01 14:43 - 00000045 _____ C:\windows\SysWOW64\initdebug.nfo
2013-08-01 14:20 - 2013-08-01 14:20 - 02143832 _____ C:\Users\Pluton_Mainz\Downloads\instsf449.exe
2013-08-01 14:20 - 2013-08-01 14:20 - 02143832 _____ C:\Users\Pluton_Mainz\Downloads\instsf449 (1).exe
2013-08-01 12:43 - 2013-08-01 12:43 - 02378752 _____ C:\Users\Pluton_Mainz\Downloads\Adblock_Installer.msi
2013-07-31 18:20 - 2013-07-31 18:20 - 02484499 _____ (Craften Dev Team                                            ) C:\Users\Pluton_Mainz\Downloads\craftenterminal.exe
2013-07-31 18:20 - 2013-07-31 18:20 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\Craften_Dev_Team
2013-07-31 18:20 - 2013-07-31 18:20 - 00000000 ____D C:\Program Files (x86)\Craften Terminal
2013-07-31 11:02 - 2013-07-31 11:02 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-07-31 11:02 - 2013-07-31 11:02 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2013-07-31 11:02 - 2013-07-31 11:02 - 00000000 ____D C:\Program Files\Synaptics
2013-07-31 11:01 - 2013-08-01 12:48 - 00015318 _____ C:\windows\DPINST.LOG
2013-07-31 11:01 - 2013-08-01 12:48 - 00001376 _____ C:\windows\Synaptics.log
2013-07-31 11:01 - 2013-05-07 16:41 - 00819440 _____ (Synaptics Incorporated) C:\windows\system32\SynCOM.dll
2013-07-31 11:01 - 2013-05-07 16:41 - 00524016 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\SynTP.sys
2013-07-31 11:01 - 2013-05-07 16:41 - 00351984 _____ (Synaptics Incorporated) C:\windows\SysWOW64\SynCom.dll
2013-07-31 11:01 - 2013-05-07 16:41 - 00264432 _____ (Synaptics Incorporated) C:\windows\system32\SynTPAPI.dll
2013-07-31 11:01 - 2013-05-07 16:41 - 00192240 _____ (Synaptics Incorporated) C:\windows\system32\SynTPCo19.dll
2013-07-31 11:01 - 2013-05-07 16:41 - 00151280 _____ (Synaptics Incorporated) C:\windows\SysWOW64\SynTPCom.dll
2013-07-31 11:01 - 2013-05-07 16:41 - 00033008 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_Intel.sys
2013-07-31 10:56 - 2013-07-31 10:56 - 00000423 _____ C:\InstallPackage.log
2013-07-31 10:56 - 2013-07-31 10:56 - 00000000 ____D C:\windows\SysWOW64\sda
2013-07-31 10:56 - 2013-06-14 14:14 - 09890008 _____ (Realtek Semiconductor Corp.) C:\windows\SysWOW64\RtsUStoricon.dll
2013-07-31 10:56 - 2013-06-14 14:14 - 00423640 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtsUStor.dll
2013-07-31 10:53 - 2013-07-31 10:53 - 00000000 ____D C:\Intel
2013-07-31 10:22 - 2013-07-31 10:22 - 00444400 _____ C:\Users\Pluton_Mainz\Downloads\DLG_free-driver-scout_chip_de-DE (1).exe
2013-07-31 09:49 - 2013-07-31 09:53 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\player
2013-07-31 09:49 - 2013-07-31 09:52 - 00000000 ____D C:\Program Files (x86)\WinZipper
2013-07-31 09:49 - 2013-07-31 09:49 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\WinZipper
2013-07-31 09:47 - 2013-08-22 09:47 - 00001172 _____ C:\windows\Tasks\Feven-updater.job
2013-07-31 09:47 - 2013-07-31 09:47 - 00004202 _____ C:\windows\System32\Tasks\Feven-updater
2013-07-31 09:46 - 2013-08-22 09:47 - 00001076 _____ C:\windows\Tasks\Feven-enabler.job
2013-07-31 09:46 - 2013-08-22 09:46 - 00001872 _____ C:\windows\Tasks\Feven-chromeinstaller.job
2013-07-31 09:46 - 2013-08-22 09:46 - 00001796 _____ C:\windows\Tasks\Feven-firefoxinstaller.job
2013-07-31 09:46 - 2013-08-22 09:46 - 00001176 _____ C:\windows\Tasks\Feven-codedownloader.job
2013-07-31 09:46 - 2013-07-31 09:47 - 00004106 _____ C:\windows\System32\Tasks\Feven-enabler
2013-07-31 09:46 - 2013-07-31 09:47 - 00000000 ____D C:\Program Files (x86)\Feven
2013-07-31 09:46 - 2013-07-31 09:46 - 00004206 _____ C:\windows\System32\Tasks\Feven-codedownloader
2013-07-31 09:46 - 2013-07-31 09:46 - 00000552 _____ C:\windows\KB893803v2.log
2013-07-31 09:45 - 2013-07-31 09:45 - 00000000 ____D C:\Users\Pluton_Mainz\Qtrax
2013-07-31 09:41 - 2013-07-31 09:41 - 00003848 _____ C:\windows\System32\Tasks\QtraxPlayer
2013-07-31 09:41 - 2013-07-31 09:41 - 00000000 ____D C:\Program Files (x86)\Image Converter
2013-07-31 09:39 - 2013-07-31 09:39 - 02003240 _____ C:\Users\Pluton_Mainz\Downloads\Horses.tls
2013-07-31 09:33 - 2013-07-31 09:33 - 00013553 _____ C:\Users\Pluton_Mainz\Downloads\Dik.xlsx
2013-07-29 22:47 - 2013-08-22 06:19 - 00002143 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-07-29 22:46 - 2013-08-22 11:51 - 00001122 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-29 22:46 - 2013-08-22 08:20 - 00001118 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-29 22:46 - 2013-08-20 22:55 - 00004128 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-29 22:46 - 2013-08-20 22:55 - 00003876 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-29 22:46 - 2013-07-29 22:46 - 00784888 _____ (Google Inc.) C:\Users\Pluton_Mainz\Downloads\ChromeSetup.exe
2013-07-29 22:43 - 2013-07-29 22:43 - 00280368 _____ (Mozilla) C:\Users\Pluton_Mainz\Downloads\Firefox Setup Stub 22.0.exe
2013-07-29 14:36 - 2013-07-29 14:36 - 00000000 _____ C:\windows\system32\config\COMPONENTS_tureg_new
2013-07-29 10:32 - 2013-07-29 10:37 - 00001688 _____ C:\windows\system32\ASOROSet.bin
2013-07-29 10:32 - 2013-07-29 10:32 - 00000000 ____D C:\windows\system32\config\RCCBakup
2013-07-29 10:22 - 2013-08-01 12:37 - 00004224 _____ C:\windows\System32\Tasks\FreeDriverScout
2013-07-29 10:22 - 2013-07-29 10:22 - 00000000 ____D C:\Users\Pluton_Mainz\Documents\Freemium Driver Utilities
2013-07-29 10:22 - 2013-07-29 10:22 - 00000000 ____D C:\ProgramData\FreeDriverScout
2013-07-29 10:21 - 2013-08-01 17:03 - 00001922 _____ C:\windows\Tasks\Plus-HD-2.4-chromeinstaller.job
2013-07-29 10:21 - 2013-08-01 17:03 - 00001846 _____ C:\windows\Tasks\Plus-HD-2.4-firefoxinstaller.job
2013-07-29 10:21 - 2013-08-01 17:03 - 00001302 _____ C:\windows\Tasks\Plus-HD-2.4-updater.job
2013-07-29 10:21 - 2013-08-01 17:03 - 00001214 _____ C:\windows\Tasks\Plus-HD-2.4-codedownloader.job
2013-07-29 10:21 - 2013-08-01 17:03 - 00001112 _____ C:\windows\Tasks\Plus-HD-2.4-enabler.job
2013-07-29 10:21 - 2013-08-01 14:15 - 00004344 _____ C:\windows\System32\Tasks\Plus-HD-2.4-updater
2013-07-29 10:21 - 2013-08-01 14:15 - 00004256 _____ C:\windows\System32\Tasks\Plus-HD-2.4-codedownloader
2013-07-29 10:21 - 2013-08-01 14:15 - 00004154 _____ C:\windows\System32\Tasks\Plus-HD-2.4-enabler
2013-07-29 10:21 - 2013-07-31 10:23 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data
2013-07-29 10:21 - 2013-07-29 10:22 - 00000000 ____D C:\Program Files (x86)\Plus-HD-2.4
2013-07-29 10:21 - 2013-06-27 07:14 - 00031816 _____ C:\windows\Launcher.exe
2013-07-29 10:20 - 2013-08-17 19:17 - 00004232 _____ C:\windows\System32\Tasks\Software Updater Ui
2013-07-29 10:20 - 2013-08-17 19:17 - 00004196 _____ C:\windows\System32\Tasks\Software Updater
2013-07-29 10:19 - 2013-07-29 10:19 - 00444400 _____ C:\Users\Pluton_Mainz\Downloads\DLG_free-driver-scout_chip_de-DE.exe
2013-07-28 18:28 - 2008-07-12 08:18 - 01942552 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_39.dll
2013-07-28 18:28 - 2008-07-12 08:18 - 00540688 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_39.dll
2013-07-28 18:27 - 2013-08-09 18:09 - 00037174 _____ C:\windows\DirectX.log
2013-07-28 18:27 - 2008-07-12 08:18 - 04992520 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_39.dll
2013-07-28 18:00 - 2013-07-28 18:00 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\Ubisoft
2013-07-28 18:00 - 2013-07-28 18:00 - 00000000 ____D C:\ProgramData\Ubisoft
2013-07-28 17:55 - 2013-08-09 17:53 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-07-23 13:18 - 2013-08-15 10:15 - 00000000 ____D C:\windows\system32\MRT

==================== One Month Modified Files and Folders =======

2013-08-22 12:07 - 2013-08-22 12:07 - 00891115 _____ C:\Users\Pluton_Mainz\Downloads\SecurityCheck.exe
2013-08-22 12:05 - 2012-04-17 13:38 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-08-22 11:51 - 2013-07-29 22:46 - 00001122 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-22 09:47 - 2013-07-31 09:47 - 00001172 _____ C:\windows\Tasks\Feven-updater.job
2013-08-22 09:47 - 2013-07-31 09:46 - 00001076 _____ C:\windows\Tasks\Feven-enabler.job
2013-08-22 09:46 - 2013-07-31 09:46 - 00001872 _____ C:\windows\Tasks\Feven-chromeinstaller.job
2013-08-22 09:46 - 2013-07-31 09:46 - 00001796 _____ C:\windows\Tasks\Feven-firefoxinstaller.job
2013-08-22 09:46 - 2013-07-31 09:46 - 00001176 _____ C:\windows\Tasks\Feven-codedownloader.job
2013-08-22 08:50 - 2013-01-21 14:05 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\PMB Files
2013-08-22 08:27 - 2009-07-14 06:45 - 00017136 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-22 08:27 - 2009-07-14 06:45 - 00017136 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-22 08:23 - 2011-04-24 09:49 - 01868964 _____ C:\windows\WindowsUpdate.log
2013-08-22 08:22 - 2013-08-22 08:22 - 02347384 _____ (ESET) C:\Users\Pluton_Mainz\Downloads\esetsmartinstaller_enu (3).exe
2013-08-22 08:20 - 2013-07-29 22:46 - 00001118 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-22 08:20 - 2013-07-20 09:54 - 00030414 _____ C:\windows\setupact.log
2013-08-22 08:20 - 2012-11-25 22:00 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\LogMeIn Hamachi
2013-08-22 08:20 - 2011-08-10 20:49 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Skype
2013-08-22 08:20 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-08-22 06:19 - 2013-07-29 22:47 - 00002143 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-21 21:08 - 2013-01-21 14:05 - 00000000 ____D C:\ProgramData\PMB Files
2013-08-21 18:26 - 2013-08-21 18:26 - 02347384 _____ (ESET) C:\Users\Pluton_Mainz\Downloads\esetsmartinstaller_enu (2).exe
2013-08-21 14:12 - 2013-08-21 14:10 - 00000000 ____D C:\AdwCleaner
2013-08-21 14:10 - 2013-08-21 14:10 - 00975858 _____ C:\Users\Pluton_Mainz\Downloads\adwcleaner (1).exe
2013-08-21 14:10 - 2013-08-21 14:09 - 00975858 _____ C:\Users\Pluton_Mainz\Downloads\adwcleaner.exe
2013-08-21 14:07 - 2013-07-20 16:47 - 00089220 _____ C:\windows\PFRO.log
2013-08-21 13:53 - 2013-08-21 13:53 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Pluton_Mainz\Downloads\mbam-setup-1.75.0.1300 (3).exe
2013-08-21 13:53 - 2013-08-21 13:53 - 00001073 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-21 13:53 - 2013-08-21 13:53 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-21 11:35 - 2013-08-21 11:35 - 00028377 _____ C:\ComboFix.txt
2013-08-21 11:35 - 2013-08-21 11:23 - 00000000 ____D C:\Qoobox
2013-08-21 11:35 - 2009-07-14 05:20 - 00000000 ___HD C:\Users\Default
2013-08-21 11:34 - 2013-08-21 11:22 - 00000000 ____D C:\windows\erdnt
2013-08-21 11:31 - 2009-07-14 04:34 - 00000215 _____ C:\windows\system.ini
2013-08-21 11:29 - 2013-01-26 13:55 - 00000000 ____D C:\Program Files (x86)\Uniblue
2013-08-21 11:29 - 2010-10-29 14:25 - 00000000 ____D C:\Users\Pluton_Mainz
2013-08-21 11:22 - 2013-08-21 11:22 - 05109244 _____ (Swearware) C:\Users\Pluton_Mainz\Downloads\ComboFix (1).exe
2013-08-21 11:20 - 2012-01-06 17:31 - 00000000 ____D C:\ProgramData\Avira
2013-08-21 11:16 - 2013-08-21 11:16 - 05109244 ____R (Swearware) C:\Users\Pluton_Mainz\Downloads\ComboFix.exe
2013-08-20 22:55 - 2013-07-29 22:46 - 00004128 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-08-20 22:55 - 2013-07-29 22:46 - 00003876 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-20 20:05 - 2012-04-17 13:38 - 00692104 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-08-20 20:05 - 2012-04-17 13:38 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-08-20 20:05 - 2011-06-07 10:27 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-20 19:02 - 2012-05-13 15:07 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\.minecraft
2013-08-19 14:59 - 2013-08-19 14:58 - 00036331 _____ C:\Users\Pluton_Mainz\Downloads\Addition.txt
2013-08-19 14:57 - 2013-08-19 14:57 - 01575812 _____ (Farbar) C:\Users\Pluton_Mainz\Downloads\FRST64.exe
2013-08-19 14:57 - 2013-08-19 14:57 - 00000000 ____D C:\FRST
2013-08-19 13:34 - 2013-08-19 13:34 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Pluton_Mainz\Downloads\mbam-setup-1.75.0.1300 (2).exe
2013-08-18 19:21 - 2013-08-18 19:09 - 3808428032 _____ C:\platt.tib
2013-08-18 19:06 - 2013-08-18 19:06 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Acronis
2013-08-18 19:03 - 2013-08-18 19:03 - 01477728 _____ (Acronis) C:\windows\system32\Drivers\tdrpm258.sys
2013-08-18 19:03 - 2013-08-18 19:03 - 00943712 _____ (Acronis) C:\windows\system32\Drivers\timntr.sys
2013-08-18 18:58 - 2011-09-03 19:32 - 00000000 ____D C:\Users\Pluton_Mainz\Desktop\Musik
2013-08-18 18:53 - 2012-02-11 15:35 - 01104384 ___SH C:\Users\Pluton_Mainz\Downloads\Thumbs.db
2013-08-18 18:52 - 2012-11-03 18:08 - 00000000 ____D C:\Users\Pluton_Mainz\Desktop\Lukas Ordner
2013-08-18 18:50 - 2012-07-09 13:11 - 00000000 ____D C:\Users\Pluton_Mainz\Desktop\Destop
2013-08-18 18:36 - 2009-09-14 08:03 - 00642158 _____ C:\windows\system32\perfh007.dat
2013-08-18 18:36 - 2009-09-14 08:03 - 00128772 _____ C:\windows\system32\perfc007.dat
2013-08-18 18:36 - 2009-07-14 07:13 - 01493976 _____ C:\windows\system32\PerfStringBackup.INI
2013-08-18 17:59 - 2013-08-18 17:59 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Malwarebytes
2013-08-18 17:59 - 2013-08-18 17:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-18 17:58 - 2013-08-18 17:57 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Pluton_Mainz\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-08-18 15:08 - 2012-11-23 15:06 - 00282104 _____ C:\windows\SysWOW64\PnkBstrB.xtr
2013-08-18 15:08 - 2012-11-23 15:04 - 00282104 _____ C:\windows\SysWOW64\PnkBstrB.exe
2013-08-18 15:08 - 2012-11-23 15:04 - 00234768 _____ C:\windows\SysWOW64\PnkBstrB.ex0
2013-08-18 12:31 - 2013-08-18 12:31 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Pluton_Mainz\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-18 12:25 - 2013-08-18 12:25 - 00000057 _____ C:\Users\Pluton_Mainz\AppData\Roaming\WB.CFG
2013-08-18 12:25 - 2013-08-18 12:25 - 00000005 _____ C:\Users\Pluton_Mainz\AppData\Roaming\WBPU-TTL.DAT
2013-08-18 09:31 - 2010-10-29 14:25 - 00000000 ___RD C:\Users\Pluton_Mainz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-18 09:25 - 2013-08-18 09:25 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\avgchrome
2013-08-18 09:23 - 2013-08-18 09:23 - 00714352 _____ C:\Users\Pluton_Mainz\Downloads\ZipOpenerSetup.exe
2013-08-18 09:08 - 2013-08-18 09:08 - 00000306 _____ C:\windows\DeleteOnReboot.bat
2013-08-18 09:08 - 2013-08-18 09:07 - 00057539 _____ C:\AdwCleaner[S1].txt
2013-08-18 09:08 - 2012-08-24 11:44 - 00000969 _____ C:\Users\Pluton_Mainz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-18 09:07 - 2013-08-18 09:07 - 00059284 _____ C:\AdwCleaner[R2].txt
2013-08-18 09:07 - 2013-08-18 09:06 - 00059223 _____ C:\AdwCleaner[R1].txt
2013-08-18 09:06 - 2013-08-18 09:06 - 00666633 _____ C:\Users\Pluton_Mainz\Downloads\adwcleaner2306.exe
2013-08-17 19:50 - 2013-08-17 19:49 - 02347384 _____ (ESET) C:\Users\Pluton_Mainz\Downloads\esetsmartinstaller_enu (1).exe
2013-08-17 19:48 - 2013-08-17 19:48 - 02347384 _____ (ESET) C:\Users\Pluton_Mainz\Downloads\esetsmartinstaller_enu.exe
2013-08-17 19:41 - 2012-12-29 21:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 19:17 - 2013-07-29 10:20 - 00004232 _____ C:\windows\System32\Tasks\Software Updater Ui
2013-08-17 19:17 - 2013-07-29 10:20 - 00004196 _____ C:\windows\System32\Tasks\Software Updater
2013-08-15 15:12 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache
2013-08-15 10:15 - 2013-07-23 13:18 - 00000000 ____D C:\windows\system32\MRT
2013-08-15 10:13 - 2010-10-29 18:56 - 78161360 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-08-09 18:24 - 2013-08-09 18:24 - 00000407 _____ C:\Users\Pluton_Mainz\Desktop\CD-Laufwerk - Verknüpfung.lnk
2013-08-09 18:09 - 2013-07-28 18:27 - 00037174 _____ C:\windows\DirectX.log
2013-08-09 18:07 - 2013-08-09 18:07 - 00000637 _____ C:\windows\KB942288-v3.log
2013-08-09 17:53 - 2013-07-28 17:55 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-08-09 17:53 - 2010-10-13 04:22 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-09 13:18 - 2012-12-21 23:45 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Minecraft Version Changer
2013-08-08 17:18 - 2013-08-08 17:17 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\Akamai
2013-08-08 17:17 - 2013-08-08 17:17 - 00558104 _____ (Aeria Games & Entertainment) C:\Users\Pluton_Mainz\Downloads\scarletblade_de_downloader.exe
2013-08-08 17:17 - 2013-08-08 17:17 - 00000000 ____D C:\AeriaGames
2013-08-06 14:06 - 2013-08-06 14:06 - 36965680 _____ (Microsoft Corporation) C:\Users\Pluton_Mainz\Downloads\IE9-Windows7-x64-deu.exe
2013-08-06 14:06 - 2013-08-06 14:06 - 00001102 _____ C:\windows\IE9_main.log
2013-08-06 14:06 - 2013-08-06 14:04 - 00001556 _____ C:\windows\ie8_main.log
2013-08-06 14:04 - 2013-08-06 14:04 - 17010016 _____ (Microsoft Corporation) C:\Users\Pluton_Mainz\Downloads\IE8-WindowsXP-x86-DEU.exe
2013-08-06 10:53 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF
2013-08-03 07:53 - 2010-11-14 21:07 - 00000000 ____D C:\Program Files (x86)\4game
2013-08-01 20:13 - 2010-11-20 16:44 - 00003826 _____ C:\windows\System32\Tasks\Java Update Scheduler
2013-08-01 20:01 - 2013-08-01 20:01 - 00263592 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-08-01 20:01 - 2013-08-01 20:01 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-01 20:01 - 2012-09-17 10:14 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-08-01 20:01 - 2012-09-17 10:14 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-08-01 20:01 - 2012-05-14 19:08 - 00867240 _____ (Oracle Corporation) C:\windows\SysWOW64\npdeployJava1.dll
2013-08-01 20:01 - 2012-05-14 19:08 - 00000000 ____D C:\Program Files (x86)\Java
2013-08-01 20:01 - 2010-11-19 21:43 - 00789416 _____ (Oracle Corporation) C:\windows\SysWOW64\deployJava1.dll
2013-08-01 20:00 - 2013-08-01 20:00 - 00903080 _____ (Oracle Corporation) C:\Users\Pluton_Mainz\Downloads\chromeinstall-7u25.exe
2013-08-01 19:59 - 2013-08-01 19:59 - 00000000 ____D C:\Users\Pluton_Mainz\Downloads\f6flpy-x86
2013-08-01 19:58 - 2013-08-01 19:58 - 00326034 _____ C:\Users\Pluton_Mainz\Downloads\f6flpy-x86.zip
2013-08-01 17:03 - 2013-07-29 10:21 - 00001922 _____ C:\windows\Tasks\Plus-HD-2.4-chromeinstaller.job
2013-08-01 17:03 - 2013-07-29 10:21 - 00001846 _____ C:\windows\Tasks\Plus-HD-2.4-firefoxinstaller.job
2013-08-01 17:03 - 2013-07-29 10:21 - 00001302 _____ C:\windows\Tasks\Plus-HD-2.4-updater.job
2013-08-01 17:03 - 2013-07-29 10:21 - 00001214 _____ C:\windows\Tasks\Plus-HD-2.4-codedownloader.job
2013-08-01 17:03 - 2013-07-29 10:21 - 00001112 _____ C:\windows\Tasks\Plus-HD-2.4-enabler.job
2013-08-01 17:03 - 2012-03-21 15:32 - 00001166 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3627293235-2912429573-1199883092-1001UA.job
2013-08-01 17:03 - 2012-03-21 15:32 - 00001144 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3627293235-2912429573-1199883092-1001Core.job
2013-08-01 14:43 - 2013-08-01 14:43 - 02143832 _____ C:\Users\Pluton_Mainz\Downloads\instsf449 (2).exe
2013-08-01 14:43 - 2013-08-01 14:33 - 00000045 _____ C:\windows\SysWOW64\initdebug.nfo
2013-08-01 14:20 - 2013-08-01 14:20 - 02143832 _____ C:\Users\Pluton_Mainz\Downloads\instsf449.exe
2013-08-01 14:20 - 2013-08-01 14:20 - 02143832 _____ C:\Users\Pluton_Mainz\Downloads\instsf449 (1).exe
2013-08-01 14:15 - 2013-07-29 10:21 - 00004344 _____ C:\windows\System32\Tasks\Plus-HD-2.4-updater
2013-08-01 14:15 - 2013-07-29 10:21 - 00004256 _____ C:\windows\System32\Tasks\Plus-HD-2.4-codedownloader
2013-08-01 14:15 - 2013-07-29 10:21 - 00004154 _____ C:\windows\System32\Tasks\Plus-HD-2.4-enabler
2013-08-01 14:14 - 2012-03-21 15:32 - 00004168 _____ C:\windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3627293235-2912429573-1199883092-1001UA
2013-08-01 14:14 - 2012-03-21 15:32 - 00003800 _____ C:\windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3627293235-2912429573-1199883092-1001Core
2013-08-01 12:48 - 2013-07-31 11:01 - 00015318 _____ C:\windows\DPINST.LOG
2013-08-01 12:48 - 2013-07-31 11:01 - 00001376 _____ C:\windows\Synaptics.log
2013-08-01 12:43 - 2013-08-01 12:43 - 02378752 _____ C:\Users\Pluton_Mainz\Downloads\Adblock_Installer.msi
2013-08-01 12:37 - 2013-07-29 10:22 - 00004224 _____ C:\windows\System32\Tasks\FreeDriverScout
2013-07-31 21:02 - 2013-07-07 08:54 - 00000000 ____D C:\Users\Pluton_Mainz\Documents\Bandicam
2013-07-31 18:20 - 2013-07-31 18:20 - 02484499 _____ (Craften Dev Team                                            ) C:\Users\Pluton_Mainz\Downloads\craftenterminal.exe
2013-07-31 18:20 - 2013-07-31 18:20 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\Craften_Dev_Team
2013-07-31 18:20 - 2013-07-31 18:20 - 00000000 ____D C:\Program Files (x86)\Craften Terminal
2013-07-31 18:19 - 2013-02-23 15:04 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\http___mvc.craften.de
2013-07-31 11:52 - 2012-11-09 07:26 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\.techniclauncher
2013-07-31 11:02 - 2013-07-31 11:02 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-07-31 11:02 - 2013-07-31 11:02 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2013-07-31 11:02 - 2013-07-31 11:02 - 00000000 ____D C:\Program Files\Synaptics
2013-07-31 10:58 - 2012-08-18 22:06 - 00000648 _____ C:\SetupCD.txt
2013-07-31 10:56 - 2013-07-31 10:56 - 00000423 _____ C:\InstallPackage.log
2013-07-31 10:56 - 2013-07-31 10:56 - 00000000 ____D C:\windows\SysWOW64\sda
2013-07-31 10:56 - 2010-10-13 04:26 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-07-31 10:53 - 2013-07-31 10:53 - 00000000 ____D C:\Intel
2013-07-31 10:23 - 2013-07-29 10:21 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data
2013-07-31 10:22 - 2013-07-31 10:22 - 00444400 _____ C:\Users\Pluton_Mainz\Downloads\DLG_free-driver-scout_chip_de-DE (1).exe
2013-07-31 09:53 - 2013-07-31 09:49 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\player
2013-07-31 09:53 - 2012-11-09 07:25 - 00000000 ____D C:\Program Files (x86)\Tuguu SL
2013-07-31 09:52 - 2013-07-31 09:49 - 00000000 ____D C:\Program Files (x86)\WinZipper
2013-07-31 09:49 - 2013-07-31 09:49 - 00000000 ____D C:\Users\Pluton_Mainz\AppData\Roaming\WinZipper
2013-07-31 09:48 - 2010-11-15 22:28 - 01581174 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2013-07-31 09:47 - 2013-07-31 09:47 - 00004202 _____ C:\windows\System32\Tasks\Feven-updater
2013-07-31 09:47 - 2013-07-31 09:46 - 00004106 _____ C:\windows\System32\Tasks\Feven-enabler
2013-07-31 09:47 - 2013-07-31 09:46 - 00000000 ____D C:\Program Files (x86)\Feven
2013-07-31 09:46 - 2013-07-31 09:46 - 00004206 _____ C:\windows\System32\Tasks\Feven-codedownloader
2013-07-31 09:46 - 2013-07-31 09:46 - 00000552 _____ C:\windows\KB893803v2.log
2013-07-31 09:45 - 2013-07-31 09:45 - 00000000 ____D C:\Users\Pluton_Mainz\Qtrax
2013-07-31 09:41 - 2013-07-31 09:41 - 00003848 _____ C:\windows\System32\Tasks\QtraxPlayer
2013-07-31 09:41 - 2013-07-31 09:41 - 00000000 ____D C:\Program Files (x86)\Image Converter
2013-07-31 09:39 - 2013-07-31 09:39 - 02003240 _____ C:\Users\Pluton_Mainz\Downloads\Horses.tls
2013-07-31 09:33 - 2013-07-31 09:33 - 00013553 _____ C:\Users\Pluton_Mainz\Downloads\Dik.xlsx
2013-07-29 22:46 - 2013-07-29 22:46 - 00784888 _____ (Google Inc.) C:\Users\Pluton_Mainz\Downloads\ChromeSetup.exe
2013-07-29 22:46 - 2012-05-21 13:24 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-29 22:43 - 2013-07-29 22:43 - 00280368 _____ (Mozilla) C:\Users\Pluton_Mainz\Downloads\Firefox Setup Stub 22.0.exe
2013-07-29 14:44 - 2012-01-12 16:53 - 00000000 ____D C:\Program Files\Easeware
2013-07-29 14:36 - 2013-07-29 14:36 - 00000000 _____ C:\windows\system32\config\COMPONENTS_tureg_new
2013-07-29 10:37 - 2013-07-29 10:32 - 00001688 _____ C:\windows\system32\ASOROSet.bin
2013-07-29 10:37 - 2009-07-14 04:34 - 74186752 _____ C:\windows\system32\config\software.bak
2013-07-29 10:37 - 2009-07-14 04:34 - 22020096 _____ C:\windows\system32\config\system.bak
2013-07-29 10:37 - 2009-07-14 04:34 - 00024576 _____ C:\windows\system32\config\security.bak
2013-07-29 10:33 - 2009-07-14 04:34 - 00024576 _____ C:\windows\system32\config\sam.bak
2013-07-29 10:32 - 2013-07-29 10:32 - 00000000 ____D C:\windows\system32\config\RCCBakup
2013-07-29 10:22 - 2013-07-29 10:22 - 00000000 ____D C:\Users\Pluton_Mainz\Documents\Freemium Driver Utilities
2013-07-29 10:22 - 2013-07-29 10:22 - 00000000 ____D C:\ProgramData\FreeDriverScout
2013-07-29 10:22 - 2013-07-29 10:21 - 00000000 ____D C:\Program Files (x86)\Plus-HD-2.4
2013-07-29 10:19 - 2013-07-29 10:19 - 00444400 _____ C:\Users\Pluton_Mainz\Downloads\DLG_free-driver-scout_chip_de-DE.exe
2013-07-28 18:00 - 2013-07-28 18:00 - 00000000 ____D C:\Users\PLUTON~1\AppData\Local\Ubisoft
2013-07-28 18:00 - 2013-07-28 18:00 - 00000000 ____D C:\ProgramData\Ubisoft
2013-07-26 07:13 - 2013-08-15 10:20 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-07-26 07:13 - 2013-08-15 10:20 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-07-26 07:13 - 2013-08-15 10:20 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-07-26 07:12 - 2013-08-15 10:20 - 19239424 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 15405056 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 03958784 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-07-26 07:12 - 2013-08-15 10:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-07-26 05:35 - 2013-08-15 10:20 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-07-26 05:13 - 2013-08-15 10:20 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-07-26 05:13 - 2013-08-15 10:20 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 14329344 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 02877440 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-07-26 05:12 - 2013-08-15 10:20 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-07-26 05:11 - 2013-08-15 10:20 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-07-26 05:11 - 2013-08-15 10:20 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-07-26 04:49 - 2013-08-15 10:20 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-07-26 04:39 - 2013-08-15 10:20 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-07-26 03:59 - 2013-08-15 10:20 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-25 11:25 - 2013-08-14 08:35 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-07-25 10:57 - 2013-08-14 08:35 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2013-07-23 10:13 - 2012-02-11 15:35 - 01790976 ___SH C:\Users\Pluton_Mainz\Desktop\Thumbs.db
2013-07-23 08:34 - 2009-07-14 07:08 - 00032632 _____ C:\windows\Tasks\SCHEDLGU.TXT

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-22 11:17

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

Hallo, ja leider hängt der Pc immer noch. Und die IE geht immer noch auf.

Grüße

Hallo, ja leider hängt der Pc immer noch. Und die IE geht immer noch auf.

wann hängt er, wie lang, kannste noch maus bewegen oder tippen oder geht gar nix mehr? wann geht der ie auf, mit was? wie oft?

hallo, IE geht bei neustart mit der Seite hxxp://www_getwindowinfo/ auf. Er hängt bei Arbeiten wenn mehrere Seiten Auf sind zB IE und Chrome. Es geht nur über Tasknanager.

Grüße

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Startup: C:\Users\Pluton_Mainz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.7&ts=1375086034716&tguid=46364-3869-1375086034716-DDE916C2F73510833FF8E6502D783EA2&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.7&ts=1375086034716&tguid=46364-3869-1375086034716-DDE916C2F73510833FF8E6502D783EA2&q={searchTerms}
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - No Name - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} -  No File
Toolbar: HKCU - No Name - {78E516EF-11DE-47A1-8364-A99B917EC5EE} -  No File
Toolbar: HKCU - No Name - {213C8ED6-1D78-4D8F-8729-25006AA86A76} -  No File
Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File
CHR DefaultSearchURL: (Delta Search) - hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=FC604437E60A381B&affID=119357&tsp=4978
CHR DefaultSuggestURL: (Delta Search) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
S3 X6va011; \??\C:\windows\SysWOW64\Drivers\X6va011 [x]
2013-08-18 09:23 - 2013-08-18 09:23 - 00714352 _____ C:\Users\Pluton_Mainz\Downloads\ZipOpenerSetup.exe
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 19-08-2013
Ran by Pluton_Mainz at 2013-08-22 18:41:27 Run:1
Running from C:\Users\Pluton_Mainz\desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Startup: C:\Users\Pluton_Mainz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.7&ts=1375086034716&tguid=46364-3869-1375086034716-DDE916C2F73510833FF8E6502D783EA2&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.7&ts=1375086034716&tguid=46364-3869-1375086034716-DDE916C2F73510833FF8E6502D783EA2&q={searchTerms}
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKCU - No Name - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - No File
Toolbar: HKCU - No Name - {78E516EF-11DE-47A1-8364-A99B917EC5EE} - No File
Toolbar: HKCU - No Name - {213C8ED6-1D78-4D8F-8729-25006AA86A76} - No File
Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} - No File
CHR DefaultSearchURL: (Delta Search) - hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=FC604437E60A381B&affID=119357&tsp=4978
CHR DefaultSuggestURL: (Delta Search) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={goo gle:suggestAPIKeyParameter}
S3 X6va011; \??\C:\windows\SysWOW64\Drivers\X6va011 [x]
2013-08-18 09:23 - 2013-08-18 09:23 - 00714352 _____ C:\Users\Pluton_Mainz\Downloads\ZipOpenerSetup.exe

*****************

C:\Users\Pluton_Mainz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk => Moved successfully.
C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data\net.exe => Moved successfully.

"C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data" directory move:

C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data\id.dat => Moved successfully.
C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data\uninstaller.exe => Moved successfully.
Could not move "C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data" directory. => Scheduled to move on reboot.

HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully.
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} => Value deleted successfully.
HKCR\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} => Value deleted successfully.
HKCR\CLSID\{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{78E516EF-11DE-47A1-8364-A99B917EC5EE} => Value deleted successfully.
HKCR\CLSID\{78E516EF-11DE-47A1-8364-A99B917EC5EE} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{213C8ED6-1D78-4D8F-8729-25006AA86A76} => Value deleted successfully.
HKCR\CLSID\{213C8ED6-1D78-4D8F-8729-25006AA86A76} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{5786D022-540E-4699-B350-B4BE0AE94B79} => Value deleted successfully.
HKCR\CLSID\{5786D022-540E-4699-B350-B4BE0AE94B79} => Key not found.
CHR DefaultSearchURL: (Delta Search) - hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=FC604437E60A381B&affID=119357&tsp=4978 ==> The Chrome "Settings" can be used to fix the entry.
CHR DefaultSuggestURL: (Delta Search) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={goo gle:suggestAPIKeyParameter} ==> The Chrome "Settings" can be used to fix the entry.
X6va011 => Service deleted successfully.
C:\Users\Pluton_Mainz\Downloads\ZipOpenerSetup.exe => Moved successfully.

=========== Result of Scheduled Files to move ===========

C:\Users\Pluton_Mainz\AppData\Roaming\Windows Net Data => Moved successfully.

==== End of Fixlog ====

Noch Probleme?

Hallo, super

DANKE!!!!!!!!!!!!!!