Hallo liebes Trojaner-Board-Team,

seit einigen Tagen geistert dieser fbdownloader auf meinem PC rum. Ihn einfach zu deinstallieren funktioniert nicht, so habe ich mich jetzt an euch gewendet.

Bereits in anderen Einträgen habe ich gesehen, das man sich zuerst FRST runterladen sollte.
Ich habe mir die 64-Bit Variante gedownloaded, im folgenden findet ihr die entstandene FRST-Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-09-2013 01
Ran by Nils (administrator) on NILS-PC on 10-09-2013 11:17:29
Running from C:\Users\Nils\Downloads
Windows Vista (TM) Home Premium Service Pack 2 (X64) OS Language: German Standard
Internet Explorer Version 7
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
() C:\Program Files\Acer\Empowering Technology\SysMonitor.exe
() C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe
(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
(Realtek Semiconductor) C:\Windows\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
() C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(NewTech InfoSystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
() C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe
() C:\Program Files (x86)\SiteAdvisor\6172\SAService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
(BitDefender) C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe
() C:\Program Files\bin32\nSvcAppFlt.exe
(BitDefender SRL) C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
() C:\Program Files\bin32\nSvcIp.exe
(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
(Akamai Technologies, Inc.) C:\Users\Nils\AppData\Local\Akamai\netsession_win.exe
(Dropbox, Inc.) C:\Users\Nils\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Akamai Technologies, Inc.) C:\Users\Nils\AppData\Local\Akamai\netsession_win.exe
() C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
() C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
(Advanced Micro Devices Inc.) c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Computer, Inc.) C:\Program Files (x86)\QuickTime\qttask.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Logitech, Inc.) C:\Program Files (x86)\Logitech\LWS\LU\LULnchr.exe
(Logitech, Inc.) C:\Program Files (x86)\Logitech\LWS\LU\LogitechUpdate.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\system32\sdclt.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.233.0\SeaPort.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [Acer Empowering Technology Monitor] - C:\Program Files\Acer\Empowering Technology\SysMonitor.exe [319488 2008-04-25] ()
HKLM\...\Run: [EmpoweringTechnology] - C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe [319488 2008-04-25] ()
HKLM\...\Run: [BitDefender Antiphishing Helper] - C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe [67072 2007-10-09] (BitDefender)
HKLM\...\Run: [BDAgent] - C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe [468480 2010-02-16] (BitDefender S.R.L.)
HKLM\...\Run: [Ocs_SM] - C:\Users\Nils\AppData\Roaming\OCS\SM\SearchAnonymizer.exe [106496 2010-08-11] (OCS)
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RAVCpl64.exe [6150656 2008-03-26] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] - C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Autodesk Sync] - C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [415680 2012-02-06] (Autodesk, Inc.)
HKLM-x32\...\Runonce: [Del1247259] - cmd.exe /Q /D /c del "C:\Users\Nils\AppData\Local\Temp\0.del" [x]
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [138240 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856 2009-12-28] (Google Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [17418928 2012-07-13] (Skype Technologies S.A.)
HKCU\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3549528 2013-08-27] (Electronic Arts)
HKCU\...\Run: [Logitech Vid] - C:\Program Files (x86)\Logitech\Vid HD\Vid.exe [6129496 2011-01-13] (Logitech Inc.)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Nils\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [Google Update] - C:\Users\Nils\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-23] (Google Inc.)
HKCU\...\Run: [SSync] - C:\Users\Nils\AppData\Roaming\SSync\SSync.exe [36864 2013-04-10] ()
HKCU\...\Run: [DataMgr] - C:\Users\Nils\AppData\Roaming\DataMgr\DataMgr.exe [168824 2013-07-21] (HTTO Group, Ltd.)
HKCU\...\Run: [SCheck] - C:\Users\Nils\AppData\Roaming\SCheck\SCheck.exe [36864 2013-04-10] ()
HKCU\...\Run: [Snoozer] - C:\Users\Nils\AppData\Roaming\Snz\Snz.exe [1137764 2013-08-28] ()
HKCU\...\Run: [Intermediate] - C:\Users\Nils\AppData\Roaming\Intermediate\Intermediate.exe [36864 2013-04-10] ()
HKCU\...\Run: [OMESupervisor] - C:\Users\Nils\AppData\Local\omesuperv.exe [2218359 2013-08-28] ()
HKCU\...\Runonce: [Del1247149] - cmd.exe /Q /D /c del "C:\Users\Nils\AppData\Local\Temp\0.del"
HKCU\...\Policies\Explorer: [] 
HKLM-x32\...\Run: [SiteAdvisor] - C:\Program Files (x86)\SiteAdvisor\6172\SiteAdv.exe [36640 2007-08-24] ()
HKLM-x32\...\Run: [PCMMediaSharing] - C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe [204908 2008-01-25] ()
HKLM-x32\...\Run: [BkupTray] - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe [28672 2008-04-25] ()
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe [40048 2007-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-08-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Trigger New Acer AlaunchX] - c:\Acer\Preload\Command\AlaunchX\AppInRun.exe [172032 2008-08-13] (Acer Inc.)
HKLM-x32\...\Run: [WarReg_PopUp] - C:\Program Files (x86)\Acer\WR_PopUp\WarReg_PopUp.exe [303104 2008-01-29] (Acer Incorporated)
HKLM-x32\...\Run: [TrojanScanner] - C:\Program Files (x86)\Trojan Remover\Trjscan.exe [1068424 2009-08-04] (Simply Super Software)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\qttask.exe [282624 2010-09-08] (Apple Computer, Inc.)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [190808 2011-03-02] (Logitech Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default\...\RunOnce: [RUN] - C:\Windows\Acer_Normal\run_DT.exe [31528 2007-04-19] ()
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\RunOnce: [RUN] - C:\Windows\Acer_Normal\run_DT.exe [31528 2007-04-19] ()
Startup: C:\Users\Nils\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Nils\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.diablos-leutzsch.net/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp64&d=1006&m=aspire_x3200
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
URLSearchHook: (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} -  No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=B8BF001D72B78B03&affID=121564&tsp=4975
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://search.fbdownloader.com/search.php?channel=sfde203fbdgy21&q={searchTerms}
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg64.dll (Google Inc.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: PiccShare BHO - {553318DA-D010-469E-84B1-496563CAE1C0} - C:\Users\Nils\AppData\Local\ext_piccshare\ext_piccshare.dll (HTTO Group, Ltd)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll (Google Inc.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.233.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll (Bitdefender)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\Antispam32\IEToolbar.dll (Bitdefender)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.233.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files (x86)\SiteAdvisor\6172\SiteAd64.dll ()
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files (x86)\SiteAdvisor\6172\SiteAdv.dll ()
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default
FF user.js: detected! => C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Nils\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Nils\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Nils\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Nils\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: @yahoo.com/BrowserPlus,version=2.9.8 - C:\Users\Nils\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll (Yahoo! Inc.)
FF Plugin HKCU: electronicarts.com/GameFacePlugin - C:\Users\Nils\AppData\Roaming\Electronic Arts\Game Face\1.0.0.18\npGameFacePlugin.dll (Electronic Arts)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\search_the_web.xml
FF SearchPlugin: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\{2F060849-F324-4549-99A5-34B2C483B4B6}.xml
FF SearchPlugin: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\{B90EEDAF-5392-4D5F-AFF8-842B3A4F4FA9}.xml
FF SearchPlugin: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\{C644B2D6-694E-49AA-A681-B3FC838377DF}.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Search the web.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\toolbar@ask.com
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: Yahoo! Toolbar - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}(231)
FF Extension: fdm_ffext - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\fdm_ffext@freedownloadmanager.org
FF Extension: ff_v0.6 - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\ff_v0.6@piccshare.com.xpi
FF Extension: om - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\om@offermosquito.com.xpi
FF Extension: toolbar_SGT-SAT - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\toolbar_SGT-SAT@apn.ask.com.xpi
FF Extension: No Name - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
FF Extension: No Name - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: Skype extension - C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\IB Updater\Firefox
FF Extension: IB Updater - C:\Program Files\IB Updater\Firefox
FF HKLM\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] C:\Program Files\IB Updater\Firefox
FF Extension: IB Updater - C:\Program Files\IB Updater\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{B7082FAA-CB62-4872-9106-E42DD88EDE45}] C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] C:\Program Files\BitDefender\BitDefender 2008\tbextension
FF Extension: No Name - C:\Program Files\BitDefender\BitDefender 2008\tbextension

Chrome: 
=======
CHR HomePage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=B8BF001D72B78B03&affID=121564&tsp=4975
CHR RestoreOnStartup: "hxxp://diablos-leutzsch.net/"
CHR DefaultSearchURL: (Search) - hxxp://search.fbdownloader.com/search.php?channel=sfde203fbdgy21&q={searchTerms}
CHR DefaultSuggestURL: (Search) -       "suggest_url": ""
CHR Plugin: (Shockwave Flash) - C:\Users\Nils\AppData\Local\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_278.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Nils\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Nils\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Babylon Chrome Plugin) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.4_0\BabylonChromePI.dll No File
CHR Plugin: (McAfee SiteAdvisor) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.50.146.2_0\McChPlg.dll No File
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Computer, Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (PDF-XChange Viewer) - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
CHR Plugin: (Unity Player) - C:\Users\Nils\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Nils\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (BrowserPlus (from Yahoo!) v2.9.8) - C:\Users\Nils\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll (Yahoo! Inc.)
CHR Plugin: (Game Face Plugin) - C:\Users\Nils\AppData\Roaming\Electronic Arts\Game Face\1.0.0.18\npGameFacePlugin.dll (Electronic Arts)
CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File
CHR Extension: (PiccShare) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\docfnddcclkgokdfpnmngpiliiachclb\2.0_0
CHR Extension: (SiteAdvisor) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.2.1341_1
CHR Extension: (OfferMosquito) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\0.6.6_0
CHR Extension: (avast! Online Security) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0
CHR HKLM-x32\...\Chrome\Extension: [aaaaojmikegpiepcfdkkjaplodkpfmlo] - C:\Users\Nils\AppData\Local\APN\GoogleCRXs\apnorjtoolbar.crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [niogeckbkdcabhnapjbkeiklablhjoca] - C:\Program Files (x86)\Perion\ChromeInfoBar\ChromeInfoBar.crx
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
CHR StartMenuInternet: Google Chrome - C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

S2 0064181378803396mcinstcleanup; C:\Windows\TEMP\006418~1.EXE [315776 2009-12-08] (McAfee, Inc.)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [137960 2013-05-09] (AVAST Software)
R2 BUNAgentSvc; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [16384 2008-03-03] (NewTech Infosystems, Inc.)
R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576 2008-04-25] ()
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-11-17] (MAGIX®)
R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\bin32\nSvcAppFlt.exe [920064 2008-01-29] ()
R2 LIVESRV; C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe [1675264 2010-03-23] (BitDefender SRL)
R2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [110312 2009-12-08] (McAfee, Inc.)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [3969336 2012-04-05] (INCA Internet Co., Ltd.)
R2 nSvcIp; C:\Program Files\bin32\nSvcIp.exe [193024 2008-01-29] ()
R2 NTISchedulerSvc; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072 2008-04-25] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2013-03-10] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe [262247 2006-07-19] ()
R3 scan; C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\scan.dll [236032 2010-02-16] (S.C. BitDefender S.R.L)
R2 SiteAdvisor Service; C:\Program Files (x86)\SiteAdvisor\6172\SAService.exe [341280 2008-09-17] ()
S3 Sony Ericsson PCCompanion; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [155344 2011-06-29] (Avanquest Software)
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2143552 2012-04-05] (TuneUp Software)
R2 VSSERV; C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe [1968640 2010-02-16] (BitDefender S.R.L.)
R2 XCOMM; C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe [99840 2007-11-27] (BitDefender)
S2 APNMCP; "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe" [x]

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R1 aswFW; C:\Windows\System32\Drivers\aswFW.sys [131232 2013-05-09] (AVAST Software)
R0 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R0 aswNdis; C:\Windows\System32\DRIVERS\aswNdis.sys [12368 2012-09-21] (ALWIL Software)
R0 aswNdis2; C:\Windows\System32\Drivers\aswNdis2.sys [270824 2013-05-09] (AVAST Software)
R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [59144 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
R3 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [234000 2008-01-07] (BitDefender S.R.L. Bucharest, ROMANIA)
R1 bdftdif; C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdftdif.sys [169488 2008-01-25] (BitDefender SRL)
R2 int15; C:\Windows\SysWOW64\drivers\int15_64.sys [17952 2008-04-25] (Acer, Inc.)
R2 int15; C:\Windows\SysWOW64\drivers\int15_64.sys [17952 2008-04-25] (Acer, Inc.)
R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2012-01-07] (Sony Ericsson Mobile Communications)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2012-03-29] (TuneUp Software)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27648 2008-01-21] (Microsoft Corporation)
S3 AVFSFilter; system32\DRIVERS\avfsfilter.sys [x]
S3 BDSelfPr; \??\C:\Program Files\BitDefender\BitDefender 2008\bdselfpr.sys [x]
S1 Beep; No ImagePath
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-10 11:16 - 2013-09-10 11:16 - 01949196 _____ (Farbar) C:\Users\Nils\Downloads\FRST64.exe
2013-09-10 11:14 - 2013-09-10 11:14 - 01082349 _____ (Farbar) C:\Users\Nils\Downloads\FRST.exe
2013-09-10 11:12 - 2013-09-10 11:12 - 00000000 ____D C:\Users\Nils\AppData\Roaming\DSite
2013-09-10 11:12 - 2013-09-10 11:12 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-09-10 11:10 - 2013-09-10 11:10 - 00745328 _____ C:\Users\Nils\Downloads\ZipOpenerSetup.exe
2013-09-09 23:12 - 2013-09-09 23:12 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Fighters
2013-09-09 23:12 - 2013-09-09 23:12 - 00000000 ____D C:\Users\Nils\AppData\Local\PackageAware
2013-09-07 00:34 - 2013-09-07 00:34 - 00958312 _____ (                                                            ) C:\Users\Nils\Downloads\VLC_Media_Player.exe
2013-08-30 15:08 - 2013-08-30 15:08 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Snz
2013-08-28 20:47 - 2013-08-28 20:47 - 02218359 _____ C:\Users\Nils\AppData\Local\omesuperv.exe
2013-08-28 15:16 - 2013-08-02 16:06 - 01706496 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-28 15:16 - 2013-08-02 06:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-25 15:55 - 2013-08-25 15:55 - 01385792 _____ (                                                            ) C:\Users\Nils\Downloads\video_downloader.exe
2013-08-16 00:52 - 2013-08-16 00:52 - 00000000 ____D C:\Users\Nils\AppData\Local\avgchrome
2013-08-16 00:13 - 2013-08-16 00:13 - 00001141 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk
2013-08-16 00:12 - 2013-08-16 00:13 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-08-16 00:12 - 2013-08-16 00:12 - 00000000 ____D C:\Users\Nils\AppData\Roaming\OpenCandy
2013-08-16 00:12 - 2013-08-16 00:12 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Babylon
2013-08-16 00:12 - 2013-08-16 00:12 - 00000000 ____D C:\ProgramData\Babylon
2013-08-16 00:02 - 2013-08-16 00:03 - 28321104 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Nils\Downloads\FreeYouTubeDownload (1).exe
2013-08-15 00:17 - 2013-07-30 06:30 - 01176576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-15 00:17 - 2013-07-30 06:30 - 00834048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-15 00:17 - 2013-07-30 06:30 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 06118912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 03625472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00671232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstime.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00479744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00180736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-15 00:17 - 2013-07-30 02:31 - 01428992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-15 00:17 - 2013-07-30 02:31 - 01032192 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-15 00:17 - 2013-07-30 02:31 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-08-15 00:17 - 2013-07-30 02:30 - 05730304 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-15 00:17 - 2013-07-30 02:30 - 01129984 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2013-08-15 00:17 - 2013-07-30 02:30 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-08-15 00:17 - 2013-07-30 02:30 - 00623104 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 07051264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 00375808 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-15 00:17 - 2013-07-30 01:22 - 00485376 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-08-15 00:17 - 2013-07-30 00:56 - 01383424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-15 00:17 - 2013-07-30 00:27 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-08-15 00:17 - 2013-07-30 00:12 - 01383424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-15 00:17 - 2013-07-09 14:04 - 01585256 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-15 00:17 - 2013-07-09 14:04 - 01168088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-15 00:17 - 2013-07-08 06:51 - 04691904 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-15 00:17 - 2013-07-08 06:20 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-15 00:17 - 2013-07-08 06:18 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-15 00:17 - 2013-07-08 06:15 - 00234496 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-15 00:17 - 2013-07-08 06:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-08-15 00:17 - 2013-07-08 03:39 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-15 00:17 - 2013-07-08 03:39 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-15 00:17 - 2013-07-08 03:39 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-15 00:17 - 2013-06-15 15:27 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2013-08-15 00:17 - 2013-06-15 13:38 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-15 00:16 - 2013-07-30 06:29 - 00380928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-08-15 00:16 - 2013-07-17 22:01 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-15 00:16 - 2013-07-17 21:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-15 00:16 - 2013-07-10 11:47 - 00677888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-15 00:16 - 2013-07-10 11:42 - 01303552 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-15 00:16 - 2013-07-08 06:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-15 00:16 - 2013-07-08 06:16 - 00992768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-15 00:16 - 2013-07-08 06:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-15 00:16 - 2013-07-08 06:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-15 00:16 - 2013-07-08 06:15 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-15 00:16 - 2013-07-08 06:12 - 01276416 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-15 00:16 - 2013-07-08 06:12 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-15 00:16 - 2013-07-08 06:12 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-15 00:16 - 2013-07-05 06:45 - 01423808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 14:40 - 2013-08-14 14:40 - 00000188 _____ C:\Users\Nils\Desktop\Stollenlinks.txt

==================== One Month Modified Files and Folders =======

2013-09-10 11:19 - 2010-01-16 19:30 - 00081984 _____ C:\Windows\system32\bdod.bin
2013-09-10 11:17 - 2013-09-10 11:17 - 00000000 ____D C:\FRST
2013-09-10 11:16 - 2013-09-10 11:16 - 01949196 _____ (Farbar) C:\Users\Nils\Downloads\FRST64.exe
2013-09-10 11:14 - 2013-09-10 11:14 - 01082349 _____ (Farbar) C:\Users\Nils\Downloads\FRST.exe
2013-09-10 11:12 - 2013-09-10 11:12 - 00000000 ____D C:\Users\Nils\AppData\Roaming\DSite
2013-09-10 11:12 - 2013-09-10 11:12 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-09-10 11:12 - 2006-10-11 00:07 - 01094563 _____ C:\Windows\WindowsUpdate.log
2013-09-10 11:10 - 2013-09-10 11:10 - 00745328 _____ C:\Users\Nils\Downloads\ZipOpenerSetup.exe
2013-09-10 11:07 - 2011-01-22 01:04 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Skype
2013-09-10 11:06 - 2012-03-29 14:42 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-10 11:03 - 2012-09-29 11:36 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000UA.job
2013-09-10 11:03 - 2012-09-29 11:36 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000Core.job
2013-09-10 10:56 - 2013-06-23 15:04 - 00001537 _____ C:\Windows\wininit.ini
2013-09-10 10:56 - 2013-04-10 23:38 - 00000000 ___RD C:\Users\Nils\Dropbox
2013-09-10 10:56 - 2013-04-10 23:04 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Dropbox
2013-09-10 10:56 - 2012-09-27 17:54 - 00000000 ____D C:\Program Files (x86)\Origin
2013-09-10 10:55 - 2012-12-02 13:18 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-10 10:53 - 2010-12-12 19:29 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2013-09-10 10:53 - 2010-04-28 13:33 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-10 10:53 - 2008-09-17 20:50 - 00000147 _____ C:\Windows\SysWOW64\agent.log
2013-09-10 10:53 - 2006-10-11 00:18 - 00000000 _____ C:\Windows\system32\LogConfigTemp.xml
2013-09-10 10:52 - 2008-01-21 05:26 - 24301972 _____ C:\Windows\PFRO.log
2013-09-10 10:52 - 2006-11-02 17:42 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-10 10:52 - 2006-11-02 17:22 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-10 10:52 - 2006-11-02 17:22 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-09 23:39 - 2010-01-16 22:41 - 00000121 _____ C:\Windows\bdagent.INI
2013-09-09 23:39 - 2006-11-02 17:42 - 00032532 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-09 23:27 - 2011-07-07 23:07 - 00001134 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000UA.job
2013-09-09 23:27 - 2010-04-28 13:33 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-09 23:12 - 2013-09-09 23:12 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Fighters
2013-09-09 23:12 - 2013-09-09 23:12 - 00000000 ____D C:\Users\Nils\AppData\Local\PackageAware
2013-09-09 21:15 - 2006-11-02 15:34 - 00000000 ____D C:\Windows\tracing
2013-09-09 20:38 - 2012-09-11 11:40 - 00000000 ____D C:\Users\Nils\Documents\FIFA 13
2013-09-09 15:09 - 2011-07-07 23:07 - 00001112 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000Core.job
2013-09-07 00:34 - 2013-09-07 00:34 - 00958312 _____ (                                                            ) C:\Users\Nils\Downloads\VLC_Media_Player.exe
2013-09-04 13:09 - 2011-02-16 11:11 - 00002041 _____ C:\Users\Nils\Desktop\Google Chrome.lnk
2013-09-02 13:18 - 2012-12-25 21:59 - 00000000 ____D C:\Program Files\McAfee
2013-08-30 15:09 - 2013-08-06 11:37 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Intermediate
2013-08-30 15:08 - 2013-08-30 15:08 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Snz
2013-08-29 22:29 - 2008-01-21 13:10 - 01567888 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-29 22:29 - 2008-01-21 13:09 - 00674722 _____ C:\Windows\system32\perfh007.dat
2013-08-29 22:29 - 2008-01-21 13:09 - 00145390 _____ C:\Windows\system32\perfc007.dat
2013-08-28 20:47 - 2013-08-28 20:47 - 02218359 _____ C:\Users\Nils\AppData\Local\omesuperv.exe
2013-08-25 15:55 - 2013-08-25 15:55 - 01385792 _____ (                                                            ) C:\Users\Nils\Downloads\video_downloader.exe
2013-08-25 14:06 - 2013-03-08 12:01 - 00010744 _____ C:\Users\Nils\Documents\Finanzen.xlsx
2013-08-24 02:35 - 2013-04-13 01:21 - 00006836 _____ C:\Users\Nils\AppData\Local\d3d9caps.dat
2013-08-23 17:07 - 2012-03-29 14:42 - 00003736 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-23 17:06 - 2012-03-29 14:42 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-23 17:06 - 2011-07-14 11:09 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-16 00:52 - 2013-08-16 00:52 - 00000000 ____D C:\Users\Nils\AppData\Local\avgchrome
2013-08-16 00:29 - 2012-09-15 12:24 - 00000000 ____D C:\Output
2013-08-16 00:13 - 2013-08-16 00:13 - 00001141 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk
2013-08-16 00:13 - 2013-08-16 00:12 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-08-16 00:12 - 2013-08-16 00:12 - 00000000 ____D C:\Users\Nils\AppData\Roaming\OpenCandy
2013-08-16 00:12 - 2013-08-16 00:12 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Babylon
2013-08-16 00:12 - 2013-08-16 00:12 - 00000000 ____D C:\ProgramData\Babylon
2013-08-16 00:12 - 2011-07-26 00:30 - 00000000 ____D C:\Users\Nils\AppData\Roaming\DVDVideoSoft
2013-08-16 00:05 - 2006-11-02 15:33 - 00000000 ____D C:\Windows\rescache
2013-08-16 00:03 - 2013-08-16 00:02 - 28321104 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Nils\Downloads\FreeYouTubeDownload (1).exe
2013-08-15 03:23 - 2008-09-17 21:04 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-15 03:13 - 2013-07-11 22:15 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 03:07 - 2006-11-02 14:35 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-08-14 14:40 - 2013-08-14 14:40 - 00000188 _____ C:\Users\Nils\Desktop\Stollenlinks.txt

Files to move or delete:
====================
C:\Users\Nils\AppData\Local\Temp\APNStub.exe
C:\Users\Nils\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Nils\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Nils\AppData\Local\Temp\uninst1.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-10 11:00

==================== End Of Log ============================
         

Und dann hier noch die Addition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-09-2013 01
Ran by Nils at 2013-09-10 11:20:46
Running from C:\Users\Nils\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
 Update for Microsoft Office 2007 (KB2508958) (x32)
7-Zip 9.20 (x32)
Acer Arcade Live Main Page (x32 Version: 1.1.1331)
Acer DV Magician (x32 Version: 1.5.0920)
Acer DVDivine (x32 Version: 3.2.1705)
Acer Empowering Technology (x32 Version: 3.0.3008)
Acer eRecovery Management (x32 Version: 3.0.3014)
Acer GameZone Console DTV 2.0.1.1 (x32)
Acer HomeMedia (x32 Version: 1.4.1331)
Acer HomeMedia Connect (x32 Version: 1.4.4931)
Acer HomeMedia Trial Creator (x32 Version: 1.4.1331)
Acer ScreenSaver (x32 Version: 4.01.0422)
Acer SlideShow DVD (x32 Version: 1.5.1109)
Acer VideoMagician (x32 Version: 1.4.1017)
Activation Assistant for the 2007 Microsoft Office suites (x32 Version: 1.0)
Activation Assistant for the 2007 Microsoft Office suites (x32)
Adobe AIR (x32 Version: 3.6.0.6090)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader 8.1.0 - Deutsch (x32 Version: 8.1.0)
Agatha Christie Death on the Nile (x32)
Akamai NetSession Interface (HKCU)
Android SDK Tools (x32 Version: 1.16)
Ask Shopping Toolbar (x32 Version: 11.7.1.1168)
Ask Toolbar (x32 Version: 1.15.23.0)
Assassin's Creed (x32 Version: 1.02)
AssaultCube v1.1.0.4 (x32 Version: v1.1.0.4)
ATI Catalyst Install Manager (Version: 3.0.715.0)
AutoCAD 2013 Language Pack - Deutsch (German) (Version: 19.0.55.0)
Autodesk Content Service (x32 Version: 3.0.84.0)
Autodesk Content Service Language Pack (x32 Version: 3.0.84.0)
Autodesk Inventor Fusion 2013 (Version: 2.0.0.206)
Autodesk Inventor Fusion Plugin for AutoCAD 2013 (Version: 0.2.0.230)
Autodesk Inventor Fusion plug-in for AutoCAD 2013 (Version: 0.2.0.230)
Autodesk Inventor Fusion Plugin Language Pack for AutoCAD 2013 (Version: 0.2.0.230)
Autodesk Material Library 2013 (x32 Version: 3.0.13)
Autodesk Material Library Base Resolution Image Library 2013 (x32 Version: 3.0.13)
Autodesk Sync (Version: 3.5.24.0)
AV Input Selection (x32 Version: 1.02.0047)
avast! Internet Security (x32 Version: 8.0.1489.0)
Azada (x32)
Big Kahuna Reef (x32)
Bing Bar (x32 Version: 7.2.233.0)
BitDefender GameSafe (Version: 11.0.16)
Bricks of Egypt (x32)
Cake Mania (x32)
CameraHelperMsi (x32 Version: 13.20.1182.0)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2008.1112.2132.38643)
Catalyst Control Center Graphics Full Existing (x32 Version: 2008.1112.2132.38643)
Catalyst Control Center Graphics Full New (x32 Version: 2008.1112.2132.38643)
Catalyst Control Center Graphics Light (x32 Version: 2008.1112.2132.38643)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2008.1112.2132.38643)
Catalyst Control Center InstallProxy (x32 Version: 2008.1112.2132.38643)
Catalyst Control Center Localization Danish (x32 Version: 2008.1112.2132.38643)
Catalyst Control Center Localization Dutch (x32 Version: 2008.1112.2132.38643)
Catalyst Control Center Localization Finnish (x32 Version: 2008.1112.2132.38643)
Catalyst Control Center Localization French (x32 Version: 2008.1112.2132.38643)
Catalyst Control Center Localization German (x32 Version: 2008.1112.2132.38643)
Catalyst Control Center Localization Italian (x32 Version: 2008.1112.2132.38643)
Catalyst Control Center Localization Japanese (x32 Version: 2008.1112.2132.38643)
Catalyst Control Center Localization Norwegian (x32 Version: 2008.1112.2132.38643)
Catalyst Control Center Localization Spanish (x32 Version: 2008.1112.2132.38643)
Catalyst Control Center Localization Swedish (x32 Version: 2008.1112.2132.38643)
CCC Help Danish (x32 Version: 2008.1112.2131.38643)
CCC Help Dutch (x32 Version: 2008.1112.2131.38643)
CCC Help English (x32 Version: 2008.1112.2131.38643)
CCC Help Finnish (x32 Version: 2008.1112.2131.38643)
CCC Help French (x32 Version: 2008.1112.2131.38643)
CCC Help German (x32 Version: 2008.1112.2131.38643)
CCC Help Italian (x32 Version: 2008.1112.2131.38643)
CCC Help Japanese (x32 Version: 2008.1112.2131.38643)
CCC Help Norwegian (x32 Version: 2008.1112.2131.38643)
CCC Help Spanish (x32 Version: 2008.1112.2131.38643)
CCC Help Swedish (x32 Version: 2008.1112.2131.38643)
ccc-core-static (x32 Version: 2008.1112.2132.38643)
ccc-utility64 (Version: 2008.1112.2132.38643)
Chicken Invaders 3 (x32)
Chuzzle (x32)
Clickster (x32 Version: 1.5.0.0)
Dropbox (HKCU Version: 2.0.22)
EA SPORTS Game Face Browser Plugin 1.0.0.18 (HKCU Version: 1.0.0.18)
erLT (x32 Version: 1.20.138.34)
eSobi v2 (x32 Version: 2.0.3.000189)
Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287)
FARO LS 1.1.406.58 (x32 Version: 4.6.58.2)
FIFA 10 (x32 Version: 1.0.0.0)
FIFA 12 DEMO (x32 Version: 1.0.0.0)
FIFA 13 (x32 Version: 1.1.0.0)
Firebird SQL Server - MAGIX Edition (x32 Version: 2.0.1.13)
Free Audio CD Burner version 1.4 (x32)
Free Download Manager 3.0 (x32)
Free Music Zilla (x32)
Free YouTube Download version 3.2.11.812 (x32 Version: 3.2.11.812)
Free YouTube to MP3 Converter version 3.11.26.706 (x32 Version: 3.11.26.706)
FUSSBALL MANAGER 10 (x32)
FUSSBALL MANAGER 13 Demo (x32 Version: 1.0.0.0)
Game Alarm (HKCU)
GameSpy Arcade (x32)
GIMP 2.6.8 (x32)
Google Chrome (HKCU Version: 29.0.1547.66)
Google Drive (x32 Version: 1.11.4865.2530)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4413.1752)
Google Update Helper (x32 Version: 1.3.21.153)
GTAIII (x32)
ImagXpress (x32 Version: 7.0.74.0)
Impulse Physik Oberstufe (x32 Version: 1.00.0000)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java(TM) 6 Update 24 (x32 Version: 6.0.240)
Junk Mail filter update (x32 Version: 14.0.8117.416)
LightScribe  1.4.142.1 (x32 Version: 1.4.142.1)
Logitech Vid HD (x32 Version: 7.2 (7248))
Logitech Webcam Software (x32 Version: 2.0)
LWS Facebook (x32 Version: 13.20.1166.0)
LWS Gallery (x32 Version: 13.20.1166.0)
LWS Help_main (x32 Version: 13.20.1182.0)
LWS Launcher (x32 Version: 13.20.1166.0)
LWS Motion Detection (x32 Version: 13.20.1176.0)
LWS Pictures And Video (x32 Version: 13.20.1182.0)
LWS Twitter (x32 Version: 13.20.1166.0)
LWS Video Mask Maker (x32 Version: 13.10.1216.0)
LWS VideoEffects (Version: 13.20.1182.0)
LWS Webcam Software (x32 Version: 13.20.1168.0)
LWS WLM Plugin (x32 Version: 1.20.1166.0)
LWS YouTube Plugin (x32 Version: 13.20.1166.0)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
McAfee SiteAdvisor (x32 Version: 3.0.163)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 2.0.672.0)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Excel 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Outlook 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Outlook Connector (x32 Version: 12.0.6423.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (x32 Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Works (x32 Version: 08.05.0822)
Motorola Mobile Drivers Installation 5.9.0 (Version: 5.9.0)
Mozilla Firefox 5.0.1 (x86 de) (x32 Version: 5.0.1)
MP4 To MP3 Converter V3.0 (x32)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Mystery Case Files - Huntsville (x32)
Mystery Solitaire - Secret Island (x32)
Need for Speed Underground 2 (x32)
Need For Speed™ World (x32 Version: 1.0.0.0)
neroxml (x32 Version: 1.0.0)
NTI Backup Now 5 (x32 Version: 5.1.2.606)
NTI Backup Now Standard (x32 Version: 5.1.2.606)
NTI Media Maker 8 (x32 Version: 8.0.2.6329)
NVIDIA Drivers
NVIDIA ForceWare Network Access Manager (Version: 1.00.6776)
NVIDIA ForceWare Network Access Manager (x32)
NVIDIA PhysX v8.10.13 (x32 Version: 8.10.13)
oCAD 2013 - Deutsch (German) (Version: 19.0.55.0)
OpenAL (x32)
Origin (x32 Version: 9.0.11.77)
Paintball2 Alpha build 32 (x32 Version: Alpha build 32)
Pando Media Booster (x32 Version: 2.6.0.8)
PDF-XChange Lite 4 (Version: 4.0.201.0)
PhotoScape (x32)
PiccShare (HKCU Version: 2.0)
PokerStars (x32)
Pro Evolution Soccer 2013 DEMO (x32 Version: 1.00.0000)
PunkBuster Services (x32 Version: 0.986)
QuickTime (x32 Version: 7.1)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5591)
RollerCoaster Tycoon 3 (x32 Version: 1.00.000)
Shockwave (x32)
ShotOnline (x32 Version: 1.0)
Skins (x32 Version: 2008.1112.2132.38643)
Skype™ 5.10 (x32 Version: 5.10.116)
Software Informer 1.0 BETA (x32)
Sony Ericsson PC Companion 2.01.231 (x32 Version: 2.01.231)
TeamSpeak 2 RC2 (x32 Version: 2.0.32.60)
TeamSpeak 3 Client (x32)
TeamViewer 6 (x32 Version: 6.0.10176)
Tom Clancy's Rainbow Six 3: Raven Shield (x32 Version: 1.00.000)
Trillian (x32)
Trojan Remover 6.8.1 (x32 Version: 6.8.1)
TubeBox! (x32 Version: 3.4.4)
TuneUp Utilities 2012 (x32 Version: 12.0.3500.13)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3500.13)
UK Truck Simulator 1.06 (x32 Version: 1.06)
Uniblue DriverScanner (x32 Version: 4.0.3.5)
Uninstall 1.0.0.1 (x32)
Unity Web Player (HKCU Version: )
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2768023) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817642) 32-Bit Edition (x32)
Update for Zip Opener (HKCU)
Update Service (x32 Version: 2.10.7.15)
UseNeXT (x32)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
Vegas Pro 9.0 (x32 Version: 9.0.1147)
VLC media player 1.1.0 (x32 Version: 1.1.0)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5)
Windows Live Call (x32 Version: 14.0.8117.0416)
Windows Live Communications Platform (x32 Version: 14.0.8117.416)
Windows Live Essentials (x32 Version: 14.0.8117.0416)
Windows Live Essentials (x32 Version: 14.0.8117.416)
Windows Live Family Safety (Version: 14.0.8118.427)
Windows Live Fotogalerie (x32 Version: 14.0.8117.416)
Windows Live Mail (x32 Version: 14.0.8117.0416)
Windows Live Messenger (x32 Version: 14.0.8117.0416)
Windows Live Movie Maker (x32 Version: 14.0.8117.0416)
Windows Live Sync (x32 Version: 14.0.8117.416)
Windows Live Writer (x32 Version: 14.0.8117.0416)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
Wondershare PDF to Word (Build 3.6.0) (x32 Version: 3.6.0)
World Series Of Poker  (x32)
World Series of Poker: TOC (x32)
Yahoo! BrowserPlus 2.9.8 (HKCU)
Yahoo! Messenger (x32)
YouRipper (x32 Version: 1.3.0.0)
YTD Video Downloader 3.9.6 (x32 Version: 3.9.6)
Zuma Deluxe (x32)

==================== Restore Points  =========================

27-07-2013 08:58:52 Geplanter Prüfpunkt
29-07-2013 16:08:04 Geplanter Prüfpunkt
30-07-2013 09:46:19 Windows Update
31-07-2013 13:53:15 Geplanter Prüfpunkt
02-08-2013 18:01:23 Geplanter Prüfpunkt
02-08-2013 18:25:55 Windows Update
04-08-2013 11:58:12 Geplanter Prüfpunkt
05-08-2013 18:13:49 Geplanter Prüfpunkt
06-08-2013 14:17:54 Windows Update
07-08-2013 14:55:57 Geplanter Prüfpunkt
08-08-2013 12:52:25 Geplanter Prüfpunkt
11-08-2013 14:54:55 Geplanter Prüfpunkt
13-08-2013 09:22:41 Windows Update
15-08-2013 01:01:54 Windows Update
23-08-2013 13:48:11 Windows Update
25-08-2013 12:04:22 Geplanter Prüfpunkt
27-08-2013 08:41:35 Windows Update
29-08-2013 01:01:02 Windows Update
30-08-2013 16:07:20 Geplanter Prüfpunkt
03-09-2013 09:33:25 Windows Update
06-09-2013 12:20:39 Windows Update
09-09-2013 21:13:07 Removed SPYWAREfighter
10-09-2013 09:02:52 Windows Update

==================== Hosts content: ==========================

2006-11-02 14:34 - 2013-06-02 12:15 - 00000098 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {022C82F1-E6BA-4D3D-A6DA-C90E9594F657} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000Core => C:\Users\Nils\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-23] (Google Inc.)
Task: {0AEAFAF6-F116-4A60-AFB4-C8B755A6E975} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {192DDA2D-5815-47B8-983F-65744FEEC03A} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {1BE3C338-6661-47FD-A0DB-54331AE968EC} - System32\Tasks\Microsoft\Windows\WindowsBackup\CheckFull => C:\Windows\System32\sdclt.exe [2010-12-14] (Microsoft Corporation)
Task: {1C374DE2-3BD6-4103-92A4-E33733E49A69} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe
Task: {254095AE-FB97-48EA-94A5-D8BF2AB79714} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {25E25AAE-A70A-4E45-B679-8F11A575C992} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000UA => C:\Users\Nils\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-23] (Google Inc.)
Task: {2D5A0DF5-AC36-4C00-B1D1-54446F59B5D3} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000UA => C:\Users\Nils\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {306BCBFE-FCE6-4079-B3C2-DADCE4E3DAB1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-23] (Adobe Systems Incorporated)
Task: {4670783A-2648-419A-80E9-88C8EBCACE4A} - System32\Tasks\{0FE077BC-CCA9-43B9-8487-B8D8DCE41C50} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.)
Task: {751E17FC-F037-4120-AF45-D0040D73E02B} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-21] (Microsoft Corporation)
Task: {77CD99B2-0192-4A1E-9CBF-D3CD75FF0C94} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2008-01-21] (Microsoft Corporation)
Task: {79629A42-5B9C-477A-B88E-F92DB64BD17C} - System32\Tasks\{2C30CBA3-4285-49D9-9168-A2A20949E8D3} => Chrome.exe hxxp://ui.skype.com/ui/0/6.1.0.129.272/de/abandoninstall?page=tsProgressBar
Task: {7BDA3502-4296-4CEA-AA86-4BAC396DA644} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {7C638E5B-ECE5-4424-A7E5-2C913CA682E9} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {8E3C5B3E-506E-4F3E-9A3C-64CEAEC7D982} - System32\Tasks\RunAsStdUser Task => C:\Program Files (x86)\HBLite\bin\11.0.384.0\HBLiteSA.exe
Task: {94952C14-EE84-4773-BDC3-459163F43E04} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000Core => C:\Users\Nils\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {9A87826D-FEB8-45C2-B115-41EA52D254E4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-04-28] (Google Inc.)
Task: {9AEC557C-1C52-4BD5-9D2F-61361CCEB73F} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\System32\sdclt.exe [2010-12-14] (Microsoft Corporation)
Task: {A9683382-0125-42BE-A29E-E39819CD3AF7} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-21] (Microsoft Corporation)
Task: {B2451A40-1C7C-456E-803C-53FD1E466342} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {C2E9A430-7CCB-49A2-BE9F-9379AA497E84} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => C:\Program Files (x86)\TuneUp Utilities 2012\OneClick.exe [2012-04-05] (TuneUp Software)
Task: {CEA35565-7464-460F-B55B-02F1074A1E2D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-04-28] (Google Inc.)
Task: {E91D6474-70CC-42BE-80FF-8BED8AF557ED} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000Core.job => C:\Users\Nils\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000UA.job => C:\Users\Nils\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000Core.job => C:\Users\Nils\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000UA.job => C:\Users\Nils\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-02-07 05:38 - 2012-02-07 05:38 - 00047016 _____ (Autodesk, Inc.) C:\Windows\system32\AcSignIcon.dll
2012-01-31 11:39 - 2012-01-31 11:39 - 00581544 _____ (Autodesk, Inc.) C:\Program Files\Autodesk\Inventor Fusion 2013\AcSignCore16.dll
2009-03-14 21:22 - 2008-11-12 16:21 - 00118272 _____ () C:\Windows\system32\atitmm64.dll
2008-09-17 20:37 - 2008-04-25 13:29 - 01822720 _____ () C:\Program Files\Acer\Empowering Technology\Framework.AppBar.dll
2008-09-17 20:37 - 2008-09-17 20:37 - 00061440 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Library\3.0.3008.0__3036420f80dd6947\Framework.Library.dll
2008-09-17 20:37 - 2008-09-17 20:37 - 00573440 _____ (Acer PVL) C:\Windows\assembly\GAC_MSIL\Framework.UIComponent\3.0.3008.0__739b31b1908c49e5\Framework.UIComponent.dll
2008-09-17 20:37 - 2008-04-25 13:30 - 00011264 _____ () C:\Program Files\Acer\Empowering Technology\Framework.Presenter.dll
2008-09-17 20:37 - 2008-09-17 20:37 - 00036864 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Utility\3.0.3008.0__4df5dcab8860d239\Framework.Utility.dll
2008-09-17 20:37 - 2008-09-17 20:37 - 00006144 _____ () C:\Windows\assembly\GAC_MSIL\Framework.PluginInterface\3.0.3008.0__9ecdf03bb2054f94\Framework.PluginInterface.dll
2008-09-17 20:37 - 2008-04-25 13:29 - 00005120 _____ () C:\Program Files\Acer\Empowering Technology\de\Framework.AppBar.resources.dll
2008-09-17 20:37 - 2008-09-17 20:37 - 00015360 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Host\3.0.3008.0__672b450de5a7e94a\Framework.Host.dll
2006-10-11 00:18 - 2008-07-31 20:34 - 00032768 _____ (Acer Incorporated) C:\Program Files\Acer\Empowering Technology\eRecovery\eRecoveryMenuPlugin.dll
2007-11-07 13:59 - 2010-02-16 16:00 - 00046080 _____ (BitDefender SRL) C:\Program Files\BitDefender\BitDefender 2008\npcomm.dll
2007-11-27 18:46 - 2007-11-27 18:46 - 00079360 _____ (BitDefender) C:\Program Files\BitDefender\BitDefender 2008\XCOMM.dll
2008-02-25 18:04 - 2008-02-25 18:04 - 00826368 _____ (BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2008\bdguictl.dll
2007-11-23 15:26 - 2007-11-23 15:26 - 00090112 _____ (SOFTWIN S.R.L.) C:\Program Files\BitDefender\BitDefender 2008\bdutils.dll
2007-04-04 18:30 - 2007-04-04 18:30 - 00111616 _____ (SOFTWIN S.R.L.) C:\Program Files\BitDefender\BitDefender 2008\txmlx.dll
2007-10-22 15:32 - 2010-02-16 16:00 - 00833536 _____ (BitDefender S.R.L. hxxp://www.bitdefender.com) C:\Program Files\BitDefender\BitDefender 2008\WSLib.dll
2010-02-16 16:00 - 2010-02-16 16:00 - 00102400 _____ (BitDefender S.R.L. hxxp://www.bitdefender.com) C:\Program Files\BitDefender\BitDefender 2008\WSPack.dll
2007-12-13 17:38 - 2007-12-13 17:38 - 00047104 _____ (BITDEFENDER S.R.L.) C:\Program Files\BitDefender\BitDefender 2008\NAG.dll
2007-10-25 17:58 - 2010-02-16 16:00 - 00021504 _____ (BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2008\bdch.dll
2008-05-29 13:36 - 2010-02-16 16:00 - 00393728 _____ (BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2008\popup.dll
2007-04-26 17:56 - 2007-04-26 17:56 - 00250368 _____ () C:\Program Files\BitDefender\BitDefender 2008\libexpatw.dll
2008-01-21 04:51 - 2008-01-21 04:51 - 00382464 _____ (Microsoft Corporation) C:\Windows\eHome\ehProxy.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00106496 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\MOM.Implementation\2.0.3238.38717__90ba9c70f846762e\MOM.Implementation.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation\2.0.3218.28664__90ba9c70f846762e\LOG.Foundation.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3218.28672__90ba9c70f846762e\LOG.Foundation.Private.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00061440 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3238.38716__90ba9c70f846762e\LOG.Foundation.Implementation.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\MOM.Foundation\2.0.3218.28686__90ba9c70f846762e\MOM.Foundation.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3218.28686__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3238.38717__90ba9c70f846762e\CCC.Implementation.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3218.28665__90ba9c70f846762e\NEWAEM.Foundation.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Foundation\2.0.3218.28666__90ba9c70f846762e\CLI.Foundation.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00057344 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3238.38631__90ba9c70f846762e\CLI.Component.SkinFactory.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3218.28727__90ba9c70f846762e\CLI.Foundation.XManifest.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\LOCALIZATION.Foundation.Private\2.0.3218.28670__90ba9c70f846762e\LOCALIZATION.Foundation.Private.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00069632 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3238.38630__90ba9c70f846762e\CLI.Component.Runtime.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00014848 _____ () C:\Windows\assembly\GAC_MSIL\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3218.28682__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3218.28670__90ba9c70f846762e\CLI.Foundation.Private.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3218.28676__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Server\2.0.3238.38629__90ba9c70f846762e\AEM.Server.dll
2008-09-18 10:30 - 2008-09-18 10:30 - 01186816 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Implementation\64\wbocx.ocx
2006-10-11 00:10 - 2006-10-11 00:10 - 00013312 _____ ( ) C:\Windows\assembly\GAC\Interop.WBOCXLib\1.0.0.0__90ba9c70f846762e\Interop.WBOCXLib.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00011264 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\LOCALIZATION.Foundation.Implementation\2.0.3238.38739__90ba9c70f846762e\LOCALIZATION.Foundation.Implementation.dll
2006-08-12 16:05 - 2006-08-12 16:05 - 00126976 _____ (Stardock Corporation) c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Implementation\64\dshelp64.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3218.28678__90ba9c70f846762e\AEM.Server.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3238.38731__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3218.28705__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3218.28677__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3218.28683__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00045056 _____ (ATI Technologies Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00016384 _____ (ATI Technologies Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Graphics\2.0.3218.28688__90ba9c70f846762e\DEM.Graphics.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00278528 _____ (Advanced Mirco Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3238.38632__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00061440 _____ (Advanced Mirco Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3218.28678__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00024576 _____ (ATI Technologies Inc.) C:\Windows\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\DEM.OS\2.0.3218.28687__90ba9c70f846762e\DEM.OS.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\DEM.OS.I0602\2.0.3218.28687__90ba9c70f846762e\DEM.OS.I0602.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00073728 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\ATIDEMOS\2.0.3238.38630__90ba9c70f846762e\ATIDEMOS.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3218.28705__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3218.28672__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3238.38639__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3218.28689__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00069632 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3238.38684__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3218.28695__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3218.28694__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3218.28686__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00036864 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3238.38670__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3218.28685__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00077824 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3238.38703__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3218.28694__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3238.38651__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3218.28690__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00036864 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3238.38681__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3218.28693__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3238.38671__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3218.28692__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00032768 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3238.38682__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3218.28688__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00061440 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3238.38670__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3218.28692__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00077824 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Runtime\2.0.3238.38736__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Runtime.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0703\2.0.2651.18802__90ba9c70f846762e\DEM.Graphics.I0703.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00061440 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Shared\2.0.3218.28705__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00057344 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3238.38689__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3218.28694__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00081920 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3238.38672__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3218.28693__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.3238.38721__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.3218.28701__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00061440 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\APM.Server\2.0.3238.38628__90ba9c70f846762e\APM.Server.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\APM.Foundation\2.0.3218.28685__90ba9c70f846762e\APM.Foundation.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00007168 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3238.38630__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3218.28685__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00393216 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3238.38643__90ba9c70f846762e\CLI.Component.Wizard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00040960 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3218.28675__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3218.28672__90ba9c70f846762e\CLI.Component.Client.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3218.28681__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3218.28681__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3238.38643__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3218.28690__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00466944 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3238.38722__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00094208 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3238.38690__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 01691648 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3238.38646__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00204800 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3238.38648__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3218.28702__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00006656 _____ ( ) C:\Windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00405504 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3238.38698__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 01073152 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3238.38636__90ba9c70f846762e\CLI.Component.Dashboard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3218.28678__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3218.28682__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3238.38638__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3218.28688__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00135168 _____ (Advanced Mirco Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3238.38723__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00225280 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3238.38648__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00716800 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.3238.38640__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00122880 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3238.38681__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00438272 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3238.38671__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00450560 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3238.38666__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00344064 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3238.38689__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00589824 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3238.38649__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00811008 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3238.38673__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
2006-10-11 00:10 - 2006-10-11 00:10 - 00671744 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Dashboard\2.0.3238.38736__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Dashboard.dll
2013-04-10 07:37 - 2013-04-10 07:37 - 00130736 _____ (Dropbox, Inc.) C:\Users\Nils\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
2008-01-21 04:49 - 2008-01-21 04:49 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2006-11-02 11:43 - 2006-11-02 13:15 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\vidcap.ax
2010-02-20 19:57 - 2009-04-11 09:09 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\kswdmcap.ax
2013-08-23 16:06 - 2013-08-23 16:07 - 16230792 ____R (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_8_800_94.ocx
2012-09-27 17:56 - 2013-08-27 11:21 - 38859616 _____ (Electronic Arts) C:\Program Files (x86)\Origin\OriginClient.dll
2012-09-27 17:56 - 2013-08-27 11:21 - 00412160 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Program Files (x86)\Origin\QtXml4.dll
2012-09-27 17:56 - 2013-08-27 11:21 - 02966528 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Program Files (x86)\Origin\QtCore4.dll
2012-09-27 17:56 - 2013-08-27 11:21 - 09679872 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Program Files (x86)\Origin\QtGui4.dll
2012-09-27 17:56 - 2013-08-27 11:21 - 01232896 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Program Files (x86)\Origin\QtNetwork4.dll
2012-09-27 17:56 - 2013-08-27 11:21 - 18662400 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Program Files (x86)\Origin\QtWebKit4.dll
2012-09-27 17:56 - 2013-08-27 11:21 - 03514368 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Program Files (x86)\Origin\QtXmlPatterns4.dll
2012-11-30 14:13 - 2013-08-27 11:21 - 00062976 _____ () C:\Program Files (x86)\Origin\tufao.dll
2012-09-27 17:56 - 2013-08-27 11:20 - 00028672 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Program Files (x86)\Origin\imageformats\qgif4.dll
2012-09-27 17:56 - 2013-08-27 11:20 - 00032256 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Program Files (x86)\Origin\imageformats\qico4.dll
2012-09-27 17:56 - 2013-08-27 11:20 - 00211968 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Program Files (x86)\Origin\imageformats\qjpeg4.dll
2012-09-27 17:56 - 2013-08-27 11:20 - 00264192 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Program Files (x86)\Origin\imageformats\qmng4.dll
2012-09-27 17:56 - 2013-08-27 11:20 - 00022528 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Program Files (x86)\Origin\imageformats\qtga4.dll
2012-09-27 17:56 - 2013-08-27 11:20 - 00312320 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Program Files (x86)\Origin\imageformats\qtiff4.dll
2012-09-27 17:56 - 2013-08-27 11:21 - 00565080 _____ (Electronic Arts) C:\Program Files (x86)\Origin\igo32.dll
2009-04-10 01:04 - 2009-04-10 01:04 - 02141008 _____ () C:\Program Files (x86)\Logitech\Vid HD\QtCore4.dll
2009-03-04 00:17 - 2009-03-04 00:17 - 07704400 _____ () C:\Program Files (x86)\Logitech\Vid HD\QtGui4.dll
2009-04-22 23:53 - 2009-04-22 23:53 - 00969040 _____ () C:\Program Files (x86)\Logitech\Vid HD\QtNetwork4.dll
2009-03-04 00:17 - 2009-03-04 00:17 - 00475472 _____ () C:\Program Files (x86)\Logitech\Vid HD\QtOpenGL4.dll
2009-03-04 00:17 - 2009-03-04 00:17 - 00363856 _____ () C:\Program Files (x86)\Logitech\Vid HD\QtXml4.dll
2009-03-04 00:17 - 2009-03-04 00:17 - 00200016 _____ () C:\Program Files (x86)\Logitech\Vid HD\QtSql4.dll
2011-01-13 03:55 - 2011-01-13 03:55 - 00027472 _____ () C:\Program Files (x86)\Logitech\Vid HD\SDL.dll
2009-03-04 00:17 - 2009-03-04 00:17 - 11311952 _____ () C:\Program Files (x86)\Logitech\Vid HD\QtWebKit4.dll
2009-03-04 00:17 - 2009-03-04 00:17 - 00291664 _____ () C:\Program Files (x86)\Logitech\Vid HD\phonon4.dll
2011-01-13 03:55 - 2011-01-13 03:55 - 00124320 _____ (FFMPEG.org) C:\Program Files (x86)\Logitech\Vid HD\avutil-49.dll
2011-01-13 03:55 - 2011-01-13 03:55 - 03740560 _____ (FFMPEG.org) C:\Program Files (x86)\Logitech\Vid HD\avcodec-52.dll
2011-01-13 03:55 - 2011-01-13 03:55 - 00366768 _____ (FFMPEG.org) C:\Program Files (x86)\Logitech\Vid HD\avformat-52.dll
2011-01-13 03:55 - 2011-01-13 03:55 - 01029464 _____ (dicas digital image coding GmbH) C:\Program Files (x86)\Logitech\Vid HD\H264VidEncodeAPI.dll
2011-01-13 03:55 - 2011-01-13 03:55 - 00079192 _____ (dicas digital image coding GmbH) C:\Program Files (x86)\Logitech\Vid HD\StreamIO2.dll
2011-01-13 03:55 - 2011-01-13 03:55 - 00103768 _____ (dicas digital image coding GmbH) C:\Program Files (x86)\Logitech\Vid HD\H264NvidiaVidDecodeAPI.dll
2011-01-13 03:55 - 2011-01-13 03:55 - 00427352 _____ (dicas digital image coding GmbH) C:\Program Files (x86)\Logitech\Vid HD\H264VidDecodeAPI.dll
2011-01-13 03:55 - 2011-01-13 03:55 - 00268048 _____ (LuraTech Imaging GmbH) C:\Program Files (x86)\Logitech\Vid HD\lwf_jp2.dll
2011-01-13 03:57 - 2011-01-13 03:57 - 00751616 _____ () C:\Program Files (x86)\Logitech\Vid HD\vpxmd.dll
2009-03-04 00:18 - 2009-03-04 00:18 - 00029008 _____ () C:\Program Files (x86)\Logitech\Vid HD\plugins\imageformats\qgif4.dll
2009-03-04 00:18 - 2009-03-04 00:18 - 00035152 _____ () C:\Program Files (x86)\Logitech\Vid HD\plugins\imageformats\qico4.dll
2009-03-04 00:18 - 2009-03-04 00:18 - 00138064 _____ () C:\Program Files (x86)\Logitech\Vid HD\plugins\imageformats\qjpeg4.dll
2011-03-04 03:26 - 2011-03-04 03:26 - 00181592 _____ () C:\Program Files (x86)\Common Files\logishrd\SharedBin\LVAPI11.dll
2012-11-14 01:32 - 2012-11-14 01:32 - 03558400 _____ (wxWidgets development team) C:\Users\Nils\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 24978944 _____ () C:\Users\Nils\AppData\Roaming\Dropbox\bin\libcef.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 09956864 _____ (The ICU Project) C:\Users\Nils\AppData\Roaming\Dropbox\bin\icudt.dll
2008-04-28 09:49 - 2008-04-28 09:49 - 00003072 _____ () C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BkupTrayLOC.dll
2011-07-29 01:09 - 2011-07-29 01:09 - 00096112 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2010-04-16 15:25 - 2010-01-21 17:05 - 00062464 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\SysWOW64\l3codeca.acm
2011-03-02 00:14 - 2011-03-02 00:14 - 02143576 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2011-03-02 00:14 - 2011-03-02 00:14 - 07954776 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2011-03-02 00:15 - 2011-03-02 00:15 - 00340824 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2011-03-02 00:15 - 2011-03-02 00:15 - 00027480 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2011-03-02 00:15 - 2011-03-02 00:15 - 00126808 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2013-09-04 13:08 - 2013-09-02 22:34 - 47074256 _____ (Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\29.0.1547.66\chrome.dll
2013-09-04 13:08 - 2013-09-02 22:35 - 09962960 _____ (The ICU Project) C:\Users\Nils\AppData\Local\Google\Chrome\Application\29.0.1547.66\icudt.dll
2013-09-04 13:08 - 2013-09-02 22:35 - 04053456 _____ () C:\Users\Nils\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll
2013-09-04 13:08 - 2013-09-02 22:35 - 00410576 _____ () C:\Users\Nils\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll
2013-09-04 13:08 - 2013-09-02 22:35 - 02110928 _____ (Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\29.0.1547.66\libpeerconnection.dll
2013-09-04 13:08 - 2013-09-02 22:35 - 01604560 _____ () C:\Users\Nils\AppData\Local\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll
2013-09-04 12:13 - 2013-09-04 12:13 - 00141752 _____ (McAfee, Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.2.1341_1\McChPlg.dll
2010-10-06 13:04 - 2010-10-06 13:04 - 00471512 _____ (Unity Technologies ApS) C:\Users\Nils\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll

==================== Alternate Data Streams (whitelisted) ==========

AlternateDataStreams: C:\Users\Nils\Downloads\pjam_divx_43.avi:TOC.WMV


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/10/2013 11:06:23 AM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung Origin.exe, Version 9.3.2.2730, Zeitstempel 0x52154879, fehlerhaftes Modul netprofm.dll, Version 6.0.6001.18000, Zeitstempel 0x4791a73e, Ausnahmecode 0xc0000005, Fehleroffset 0x0000cbd4,
Prozess-ID 0x10f0, Anwendungsstartzeit Origin.exe0.

Error: (09/10/2013 10:55:52 AM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung TuneUpUtilitiesService64.exe, Version 12.0.3500.13, Zeitstempel 0x4f7d728b, fehlerhaftes Modul RPCRT4.dll, Version 6.0.6002.18882, Zeitstempel 0x51dd2ca7, Ausnahmecode 0xc0000005, Fehleroffset 0x0000000000057d50,
Prozess-ID 0xc48, Anwendungsstartzeit TuneUpUtilitiesService64.exe0.

Error: (09/10/2013 10:54:12 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/09/2013 11:16:28 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung TuneUpUtilitiesService64.exe, Version 12.0.3500.13, Zeitstempel 0x4f7d728b, fehlerhaftes Modul RPCRT4.dll, Version 6.0.6002.18882, Zeitstempel 0x51dd2ca7, Ausnahmecode 0xc0000005, Fehleroffset 0x0000000000057d50,
Prozess-ID 0x1c28, Anwendungsstartzeit TuneUpUtilitiesService64.exe0.

Error: (09/09/2013 03:28:01 PM) (Source: Windows Backup) (User: )
Description: Die Dateisicherung ist aufgrund eines Fehlers beim Schreiben in das Sicherungsziel G:\ fehlgeschlagen. Fehler: Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und die Hardwarekonfiguration. (0x81000006)

Error: (09/09/2013 03:25:29 PM) (Source: Windows Backup) (User: )
Description: Die Dateisicherung ist aufgrund eines Fehlers beim Schreiben in das Sicherungsziel G:\ fehlgeschlagen. Fehler: Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und die Hardwarekonfiguration. (0x81000006)

Error: (09/09/2013 03:22:58 PM) (Source: Windows Backup) (User: )
Description: Die Dateisicherung ist aufgrund eines Fehlers beim Schreiben in das Sicherungsziel G:\ fehlgeschlagen. Fehler: Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und die Hardwarekonfiguration. (0x81000006)

Error: (09/09/2013 10:45:32 AM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung TuneUpUtilitiesService64.exe, Version 12.0.3500.13, Zeitstempel 0x4f7d728b, fehlerhaftes Modul RPCRT4.dll, Version 6.0.6002.18882, Zeitstempel 0x51dd2ca7, Ausnahmecode 0xc0000005, Fehleroffset 0x0000000000057d50,
Prozess-ID 0x848, Anwendungsstartzeit TuneUpUtilitiesService64.exe0.

Error: (09/09/2013 10:44:04 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (09/09/2013 10:44:04 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.


System errors:
=============
Error: (09/10/2013 10:56:19 AM) (Source: Service Control Manager) (User: )
Description: TuneUp Utilities Service1

Error: (09/10/2013 10:55:27 AM) (Source: Service Control Manager) (User: )
Description: BDSelfPr%%2

Error: (09/10/2013 10:54:12 AM) (Source: Service Control Manager) (User: )
Description: BDSelfPr%%2

Error: (09/10/2013 10:54:12 AM) (Source: Service Control Manager) (User: )
Description: Beep

Error: (09/10/2013 10:54:12 AM) (Source: Service Control Manager) (User: )
Description: NVIDIA Display Driver Servicenvlddmkm%%1058

Error: (09/10/2013 10:52:33 AM) (Source: netbt) (User: )
Description: Es ist ein Initialisierungsfehler aufgetreten, da der Treiber nicht erstellt werden konnte.
Verwenden Sie die Zeichenfolge "001D72B78B03", um die Schnittstelle zu identifizieren, die nicht initialisiert werden
konnte. Sie stellt die MAC-Adresse der Schnittstelle mit dem Initialisierungsfehler oder die 
GUID (Globally Unique Interface Identifier) dar, wenn NetBT keine Zuordnung 
von der GUID zur MAC-Adresse herstellen konnte. Wenn weder die MAC-Adresse noch die GUID verfügbar 
waren, dann stellt die Zeichenfolge einen Clustergerätenamen dar.

Error: (09/10/2013 10:52:33 AM) (Source: netbt) (User: )
Description: Es ist ein Initialisierungsfehler aufgetreten, da der Treiber nicht erstellt werden konnte.
Verwenden Sie die Zeichenfolge "001D72B78B03", um die Schnittstelle zu identifizieren, die nicht initialisiert werden
konnte. Sie stellt die MAC-Adresse der Schnittstelle mit dem Initialisierungsfehler oder die 
GUID (Globally Unique Interface Identifier) dar, wenn NetBT keine Zuordnung 
von der GUID zur MAC-Adresse herstellen konnte. Wenn weder die MAC-Adresse noch die GUID verfügbar 
waren, dann stellt die Zeichenfolge einen Clustergerätenamen dar.

Error: (09/09/2013 11:38:14 PM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (09/09/2013 11:16:32 PM) (Source: Service Control Manager) (User: )
Description: TuneUp Utilities Service2

Error: (09/09/2013 11:10:18 PM) (Source: Service Control Manager) (User: )
Description: BDSelfPr%%2


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-09-10 11:19:55.620
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\bdfsfltr.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-10 11:19:55.168
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\bdfsfltr.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-10 11:19:54.701
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\bdfsfltr.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-10 11:19:54.412
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\bdfsfltr.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-24 22:43:00.444
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\bdfsfltr.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-24 22:43:00.210
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\bdfsfltr.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-24 22:42:59.992
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\bdfsfltr.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-24 22:42:59.742
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\bdfsfltr.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-24 22:30:38.092
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\bdfsfltr.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-24 22:30:37.780
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\bdfsfltr.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 62%
Total physical RAM: 4093.62 MB
Available physical RAM: 1553.14 MB
Total Pagefile: 8383.75 MB
Available Pagefile: 4738.04 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:455.39 GB) (Free:216.57 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:456.12 GB) (Free:447.24 GB) NTFS
Drive h: (GTA3_audio) (CDROM) (Total:0.54 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 932EB6E6)
Partition 1: (Not Active) - (Size=20 GB) - (Type=27)
Partition 2: (Active) - (Size=455 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=456 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Ich danke schon mal für die Hilfe!

hi,

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hier die Combofix:

ComboFix 13-09-10.01 - Nils 10.09.2013  12:11:39.1.4 - x64
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.4094.1390 [GMT 2:00]
ausgeführt von:: c:\users\Nils\Downloads\ComboFix.exe
AV: avast! Internet Security *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
FW: avast! Internet Security *Disabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
SP: avast! Internet Security *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Nils\AppData\Local\ext_piccshare_uninst.exe
c:\users\Nils\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Nils\AppData\Local\omesuperv.exe
c:\windows\SysWow64\bin
c:\windows\SysWow64\bin\CSharpFramework.dll
c:\windows\SysWow64\bin\D3DX9_43.dll
c:\windows\SysWow64\bin\DockPanel.dll
c:\windows\SysWow64\bin\DockPanel35.dll
c:\windows\SysWow64\bin\ExtendedManaged.dll
c:\windows\SysWow64\bin\Game.vPlugin
c:\windows\SysWow64\bin\IEControl.dll
c:\windows\SysWow64\bin\Interop.SHDocVw.dll
c:\windows\SysWow64\bin\Launcher.exe
c:\windows\SysWow64\bin\libeay32.dll
c:\windows\SysWow64\bin\lua90.dll
c:\windows\SysWow64\bin\ManagedBase.dll
c:\windows\SysWow64\bin\ManagedFramework.dll
c:\windows\SysWow64\bin\MesaGL.dll
c:\windows\SysWow64\bin\nd.dll
c:\windows\SysWow64\bin\NodeSystem.dll
c:\windows\SysWow64\bin\nunit.core.dll
c:\windows\SysWow64\bin\nunit.framework.dll
c:\windows\SysWow64\bin\nunit.util.dll
c:\windows\SysWow64\bin\nvtt.dll
c:\windows\SysWow64\bin\NxCharacter.dll
c:\windows\SysWow64\bin\osmesa.dll
c:\windows\SysWow64\bin\ParticleManaged.dll
c:\windows\SysWow64\bin\PhysXCooking.dll
c:\windows\SysWow64\bin\PhysXCore.dll
c:\windows\SysWow64\bin\physxcudart_20.dll
c:\windows\SysWow64\bin\PhysXDevice.dll
c:\windows\SysWow64\bin\PhysXLoader.dll
c:\windows\SysWow64\bin\PhysXManaged.dll
c:\windows\SysWow64\bin\RCHostManaged.dll
c:\windows\SysWow64\bin\SlimDX.dll
c:\windows\SysWow64\bin\SoundEnginePlugin.vPlugin
c:\windows\SysWow64\bin\SoundManaged.dll
c:\windows\SysWow64\bin\SyntaxBox.dll
c:\windows\SysWow64\bin\TerrainBase.dll
c:\windows\SysWow64\bin\Thumbs.db
c:\windows\SysWow64\bin\vBase90.dll
c:\windows\SysWow64\bin\VBaseUI90.dll
c:\windows\SysWow64\bin\VBTablet.dll
c:\windows\SysWow64\bin\vGeom290.dll
c:\windows\SysWow64\bin\vGeom90.dll
c:\windows\SysWow64\bin\Vision90.dll
c:\windows\SysWow64\bin\VisionEnginePlugin.vPlugin
c:\windows\SysWow64\bin\VisionManaged.dll
c:\windows\SysWow64\bin\vP4api90.dll
c:\windows\SysWow64\bin\vPhysX.vplugin
c:\windows\SysWow64\bin\vPlatformHandlerDX1190.dll
c:\windows\SysWow64\bin\vPlatformHandlerDX990.dll
c:\windows\SysWow64\bin\vResourceViewerBase.dll
c:\windows\SysWow64\bin\X3DAudio1_7.dll
c:\windows\SysWow64\bin\xactengine3_7.dll
c:\windows\SysWow64\bin\XAPOFX1_5.dll
c:\windows\SysWow64\bin\XAudio2_7.dll
c:\windows\wininit.ini
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-08-10 bis 2013-09-10  ))))))))))))))))))))))))))))))
.
.
2013-09-10 10:27 . 2013-09-10 10:27	--------	d-----w-	c:\users\TEMP\AppData\Local\temp
2013-09-10 10:27 . 2013-09-10 10:27	--------	d-----w-	c:\users\TEMP.Nils-PC\AppData\Local\temp
2013-09-10 10:27 . 2013-09-10 10:27	--------	d-----w-	c:\users\Public\AppData\Local\temp
2013-09-10 10:27 . 2013-09-10 10:27	--------	d-----w-	c:\users\Nils\AppData\Local\temp
2013-09-10 10:27 . 2013-09-10 10:27	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-09-10 10:27 . 2013-09-10 10:27	--------	d-----w-	c:\users\AppData\AppData\Local\temp
2013-09-10 09:46 . 2013-09-10 09:46	76232	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{9F961974-CBE8-461F-AE45-53B3EFC17929}\offreg.dll
2013-09-10 09:17 . 2013-09-10 09:17	--------	d-----w-	C:\FRST
2013-09-10 09:12 . 2013-09-10 09:12	--------	d-----w-	c:\users\Nils\AppData\Roaming\DSite
2013-09-10 09:12 . 2013-09-10 09:12	--------	d-----w-	c:\program files (x86)\OpenIt
2013-09-10 09:10 . 2013-08-06 08:58	9515512	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{9F961974-CBE8-461F-AE45-53B3EFC17929}\mpengine.dll
2013-09-09 21:12 . 2013-09-09 21:12	--------	d-----w-	c:\users\Nils\AppData\Roaming\Fighters
2013-09-09 21:12 . 2013-09-09 21:12	--------	d-----w-	c:\users\Nils\AppData\Local\PackageAware
2013-08-30 13:08 . 2013-08-30 13:08	--------	d-----w-	c:\users\Nils\AppData\Roaming\Snz
2013-08-28 13:16 . 2013-08-02 14:06	1706496	----a-w-	c:\windows\system32\WMVDECOD.DLL
2013-08-28 13:16 . 2013-08-02 04:09	1548288	----a-w-	c:\windows\SysWow64\WMVDECOD.DLL
2013-08-15 22:52 . 2013-08-15 22:52	--------	d-----w-	c:\users\Nils\AppData\Local\avgchrome
2013-08-15 22:12 . 2013-08-15 22:12	--------	d-----w-	c:\programdata\Babylon
2013-08-15 22:12 . 2013-08-15 22:12	--------	d-----w-	c:\users\Nils\AppData\Roaming\Babylon
2013-08-15 22:12 . 2013-08-15 22:13	--------	d-----w-	c:\program files (x86)\DVDVideoSoft
2013-08-15 22:12 . 2013-08-15 22:12	--------	d-----w-	c:\program files (x86)\Common Files\DVDVideoSoft
2013-08-15 22:12 . 2013-08-15 22:12	--------	d-----w-	c:\users\Nils\AppData\Roaming\OpenCandy
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-10 10:25 . 2010-01-16 17:30	81984	----a-w-	c:\windows\system32\bdod.bin
2013-08-23 15:06 . 2012-03-29 12:42	692104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-08-23 15:06 . 2011-07-14 09:09	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-08-15 01:07 . 2006-11-02 12:35	78161360	----a-w-	c:\windows\system32\mrt.exe
2013-07-30 04:29 . 2013-08-14 22:17	53760	----a-w-	c:\windows\apppatch\iebrshim.dll
2013-07-30 00:29 . 2013-08-14 22:17	146944	----a-w-	c:\windows\apppatch\AppPatch64\iebrshim.dll
2013-07-08 04:16 . 2013-08-14 22:17	43008	----a-w-	c:\windows\apppatch\acwow64.dll
2013-06-27 19:07 . 2013-03-15 18:19	189936	----a-w-	c:\windows\system32\drivers\aswVmm.sys
2013-06-27 19:07 . 2012-12-02 11:20	378944	----a-w-	c:\windows\system32\drivers\aswSP.sys
2013-06-27 19:07 . 2012-12-02 11:18	1030952	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2013-06-12 19:48 . 2012-10-01 13:20	867240	----a-w-	c:\windows\SysWow64\npDeployJava1.dll
2013-06-12 19:48 . 2011-03-17 08:26	789416	----a-w-	c:\windows\SysWow64\deployJava1.dll
2013-06-12 19:47 . 2013-06-19 16:30	96168	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2003-09-11 12:32 . 2010-03-18 21:29	958464	----a-w-	c:\program files\Steam.exe
2003-08-21 11:41 . 2010-03-18 21:28	245760	----a-w-	c:\program files\WriteMiniDump.exe
2003-08-21 11:41 . 2010-03-18 21:28	489984	----a-w-	c:\program files\dbghelp.dll
2001-11-05 08:30 . 2010-03-18 21:29	165376	------w-	c:\program files\UNWISE.EXE
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{553318DA-D010-469E-84B1-496563CAE1C0}]
2013-07-21 13:24	119160	----a-w-	c:\users\Nils\AppData\Local\ext_piccshare\ext_piccshare.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-10 05:37	130736	----a-w-	c:\users\Nils\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-10 05:37	130736	----a-w-	c:\users\Nils\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-10 05:37	130736	----a-w-	c:\users\Nils\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-12-28 68856]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-07-13 17418928]
"EADM"="c:\program files (x86)\Origin\Origin.exe" [2013-08-27 3549528]
"Logitech Vid"="c:\program files (x86)\Logitech\Vid HD\Vid.exe" [2011-01-13 6129496]
"Akamai NetSession Interface"="c:\users\Nils\AppData\Local\Akamai\netsession_win.exe" [2013-06-04 4489472]
"SSync"="c:\users\Nils\AppData\Roaming\SSync\SSync.exe" [2013-04-09 36864]
"DataMgr"="c:\users\Nils\AppData\Roaming\DataMgr\DataMgr.exe" [2013-07-21 168824]
"SCheck"="c:\users\Nils\AppData\Roaming\SCheck\SCheck.exe" [2013-04-09 36864]
"Snoozer"="c:\users\Nils\AppData\Roaming\Snz\Snz.exe" [2013-08-28 1137764]
"Intermediate"="c:\users\Nils\AppData\Roaming\Intermediate\Intermediate.exe" [2013-04-09 36864]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SiteAdvisor"="c:\program files (x86)\SiteAdvisor\6172\SiteAdv.exe" [2007-08-24 36640]
"PCMMediaSharing"="c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" [2008-01-25 204908]
"BkupTray"="c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" [2008-04-25 28672]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-29 61440]
"Trigger New Acer AlaunchX"="c:\acer\Preload\Command\AlaunchX\AppInRun.exe" [2008-08-13 172032]
"WarReg_PopUp"="c:\program files (x86)\Acer\WR_PopUp\WarReg_PopUp.exe" [2008-01-29 303104]
"TrojanScanner"="c:\program files (x86)\Trojan Remover\Trjscan.exe" [2009-08-04 1068424]
"QuickTime Task"="c:\program files (x86)\QuickTime\qttask.exe" [2010-09-08 282624]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"LWS"="c:\program files (x86)\Logitech\LWS\Webcam Software\LWS.exe" [2011-03-01 190808]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"Del1247259"="del" [X]
.
c:\users\Nils\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Nils\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-5-25 27776968]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
Themes
.
Inhalt des "geplante Tasks" Ordners
.
2013-09-10 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-29 15:06]
.
2013-09-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-04-28 11:32]
.
2013-09-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-04-28 11:32]
.
2013-09-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000Core.job
- c:\users\Nils\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-29 11:07]
.
2013-09-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000UA.job
- c:\users\Nils\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-29 11:07]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58	133840	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-06-27 14:11	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-06-27 14:11	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-06-27 14:11	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-06-27 14:11	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-06-27 14:11	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-06-27 14:11	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-04-22 15844384]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-04-22 82464]
"Acer Empowering Technology Monitor"="c:\program files\Acer\Empowering Technology\SysMonitor.exe" [2008-04-25 319488]
"EmpoweringTechnology"="c:\program files\Acer\Empowering Technology\Framework.Launcher.exe" [2008-04-25 319488]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2008\IEShow.exe" [2007-10-09 67072]
"BDAgent"="c:\program files\BitDefender\BitDefender 2008\bdagent.exe" [2010-02-16 468480]
"Ocs_SM"="c:\users\Nils\AppData\Roaming\OCS\SM\SearchAnonymizer.exe" [2010-08-11 106496]
"RtHDVCpl"="RAVCpl64.exe" [2008-03-26 6150656]
"Skytel"="Skytel.exe" [2007-11-20 1826816]
"Autodesk Sync"="c:\program files\Autodesk\Autodesk Sync\AdSync.exe" [2012-02-05 415680]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.diablos-leutzsch.net/
uLocal Page = c:\windows\system32\blank.htm
mStart Page = about:blank
mLocal Page = %SystemRoot%\system32\blank.htm
uInternet Settings,ProxyOverride = <local>
uSearchURL,(Default) = hxxp://de.search.yahoo.com/search?fr=mcafee&p=%s%s
mSearchAssistant = ${SEARCH_URL_IE7}
IE: Alles mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dlall.htm
IE: Auswahl mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dlselected.htm
IE: Datei mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dllink.htm
IE: Free YouTube Download - c:\users\Nils\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
IE: Free YouTube to MP3 Converter - c:\users\Nils\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Videos mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dlfvideo.htm
IE: {{0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - {E601996F-E400-41CA-804B-CD6373A7EEE2} -
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.fbdownloader.com/search.php?channel=sfde203fbdgy21&q=
FF - ExtSQL: 2013-07-21 15:24; ff_v0.6@piccshare.com; c:\users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\extensions\ff_v0.6@piccshare.com.xpi
FF - ExtSQL: 2013-08-22 15:15; om@offermosquito.com; c:\users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\extensions\om@offermosquito.com.xpi
FF - ExtSQL: !HIDDEN! 2010-02-19 10:41; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - user.js: extensions.delta.tlbrSrchUrl - 
FF - user.js: extensions.delta.id - b8bf317b000000000000001d72b78b03
FF - user.js: extensions.delta.appId - {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
FF - user.js: extensions.delta.instlDay - 15932
FF - user.js: extensions.delta.vrsn - 1.8.24.5
FF - user.js: extensions.delta.vrsni - 1.8.24.5
FF - user.js: extensions.delta.vrsnTs - 1.8.24.50:13
FF - user.js: extensions.delta.prtnrId - delta
FF - user.js: extensions.delta.prdct - delta
FF - user.js: extensions.delta.aflt - babsst
FF - user.js: extensions.delta.smplGrp - none
FF - user.js: extensions.delta.tlbrId - base
FF - user.js: extensions.delta.instlRef - sst
FF - user.js: extensions.delta.dfltLng - de
FF - user.js: extensions.delta.excTlbr - false
FF - user.js: extensions.delta.ffxUnstlRst - true
FF - user.js: extensions.delta.admin - false
FF - user.js: extensions.delta_i.babTrack - affID=121564&tsp=4975
FF - user.js: extensions.delta_i.babExt - 
FF - user.js: extensions.delta_i.srcExt - ss
FF - user.js: extensions.delta.autoRvrt - false
FF - user.js: extensions.delta.rvrt - false
FF - user.js: extensions.delta.newTab - false
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{D8278076-BC68-4484-9233-6E7F1628B56C} - c:\program files (x86)\AskPartnerNetwork\Toolbar\searchhook.dll
Wow6432Node-HKCU-Run-OMESupervisor - c:\users\Nils\AppData\Local\omesuperv.exe
AddRemove-Free Audio CD Burner_is1 - c:\program files (x86)\DVDVideoSoft\Free Audio CD Burner\unins000.exe
AddRemove-Free YouTube to MP3 Converter_is1 - c:\program files (x86)\Common Files\DVDVideoSoft\Uninstall.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-Shockwave - c:\windows\System32\Macromed\SHOCKW~1\UNWISE.EXE
AddRemove-Software Informer_is1 - c:\program files (x86)\Software Informer\unins000.exe
AddRemove-Uninstall_is1 - c:\program files (x86)\Common Files\DVDVideoSoft\unins000.exe
AddRemove-{DE718DF0-3874-4873-9BC3-3A94944C916E}_is1 - c:\program files (x86)\Wondershare\PDFtoWord\unins000.exe
AddRemove-PiccShare - c:\users\Nils\AppData\Local\ext_piccshare_uninst.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-4046807941-2027364974-1543117049-1000\Software\SecuROM\License information*]
"datasecu"=hex:f6,19,96,69,15,07,71,98,07,65,23,ef,b6,2f,30,56,ad,9e,c0,e1,62,
   0c,17,13,6e,63,7e,eb,b0,46,13,54,b2,3a,82,b8,12,f0,2f,4b,4c,dd,12,fd,08,0f,\
"rkeysecu"=hex:06,e8,04,18,97,15,1c,32,59,db,e0,e3,99,68,9b,cf
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@DACL=(02 0011)
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
@DACL=(02 0011)
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@DACL=(02 0011)
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@DACL=(02 0011)
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
@Denied: (A 2) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
@="Shockwave Flash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
@Denied: (A 2) (Everyone)
@=""
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
@="FlashBroker"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Classes]
"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
Zeit der Fertigstellung: 2013-09-10  12:32:38
ComboFix-quarantined-files.txt  2013-09-10 10:32
.
Vor Suchlauf: 27 Verzeichnis(se), 230.477.484.032 Bytes frei
Nach Suchlauf: 28 Verzeichnis(se), 233.477.271.552 Bytes frei
.
- - End Of File - - 471820A62FEFE7661E7D22E1DBB08376
EF932EAA6EF4C94E66A7F6CEEC7EB422
         

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Soo, das war ein ziemlicher Packen, deswegen hat es etwas länger gedauert.
Gehen wir der Reihe nach:

Zuerst die mbam-Logdatei:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.09.10.06

Windows Vista Service Pack 2 x64 NTFS
Internet Explorer 7.0.6002.18005
Nils :: NILS-PC [Administrator]

10.09.2013 14:59:32
mbam-log-2013-09-10 (14-59-32).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|H:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 613252
Laufzeit: 1 Stunde(n), 55 Minute(n), 3 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 2
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 1
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs|bProtectTabs (PUP.Optional.BrowserProtect.A) -> Daten: hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=B8BF001D72B78B03&affID=121564&tsp=4975 -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 3
C:\Users\Nils\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\AppData\Roaming\OpenCandy\A8561631AB2942D8BC8FA9557E8E9563 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 19
C:\Program Files\IB Updater\ExtensionUpdaterService.exe (PUP.Optional.SweetPacks.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Qoobox\Quarantine\C\Users\Nils\AppData\Local\omesuperv.exe.vir (PUP.Optional.OfferMosquito.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\AppData\Roaming\OpenCandy\A8561631AB2942D8BC8FA9557E8E9563\DeltaTB.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\Downloads\Babylon9_setup.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\Downloads\FreeYouTubeDownload (1).exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\Downloads\iLividSetup (1).exe (PUP.Optional.Bandoo) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\Downloads\iLividSetup.exe (PUP.Optional.Bandoo) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\Downloads\iLividSetupV1 (2).exe (PUP.Optional.Bandoo) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\Downloads\iLividSetupV1 (3).exe (PUP.Optional.Bandoo) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\Downloads\iLividSetupV1 (4).exe (PUP.Optional.Bandoo) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\Downloads\SoftonicDownloader_fuer_bus-simulator-2012 (1).exe (PUP.Optional.Softonic) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\Downloads\SoftonicDownloader_fuer_bus-simulator-2012 (2).exe (PUP.Optional.Softonic) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\Downloads\SoftonicDownloader_fuer_bus-simulator-2012.exe (PUP.Optional.Softonic) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\Downloads\VeohWebPlayer.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\Downloads\video_downloader.exe (PUP.Optional.Bundlore) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\System32\WNLT\CU\ChromeUpdater.exe (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\System32\WNLT\Installation\WSSetup.exe (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nils\AppData\Roaming\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433} (PUP.Optional.Searchqu.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

Dann die Logdatei vom adwcleaner:

# AdwCleaner v3.003 - Bericht erstellt am 10/09/2013 um 22:09:22
# Updated 07/09/2013 von Xplode
# Betriebssystem : Windows (TM) Vista Home Premium Service Pack 2 (64 bits)
# Benutzername : Nils - NILS-PC
# Gestartet von : C:\Users\Nils\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : APNMCP

***** [ Dateien / Ordner ] *****

[!] Ordner Gelöscht : C:\ProgramData\Ask
[!] Ordner Gelöscht : C:\ProgramData\Babylon
[!] Ordner Gelöscht : C:\ProgramData\Trymedia
[!] Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong
[!] Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue\DriverScanner
[!] Ordner Gelöscht : C:\Program Files (x86)\openit
[!] Ordner Gelöscht : C:\Program Files (x86)\Uniblue\DriverScanner
[!] Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong
[!] Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue\DriverScanner
[!] Ordner Gelöscht : C:\Windows\SysWOW64\BrowserProtect
[!] Ordner Gelöscht : C:\Windows\SysWOW64\WNLT
[!] Ordner Gelöscht : C:\Program Files\Babylon
[!] Ordner Gelöscht : C:\Program Files\IB Updater
[!] Ordner Gelöscht : C:\Windows\System32\ARFC
[!] Ordner Gelöscht : C:\Users\Nils\AppData\Local\ext_piccshare
[!] Ordner Gelöscht : C:\Users\Nils\AppData\Local\PackageAware
[!] Ordner Gelöscht : C:\Users\Nils\AppData\LocalLow\AskToolbar
[!] Ordner Gelöscht : C:\Users\Nils\AppData\Roaming\Common\LuaRT
[!] Ordner Gelöscht : C:\Users\Nils\AppData\Roaming\DataMgr
[!] Ordner Gelöscht : C:\Users\Nils\AppData\Roaming\DSite
[!] Ordner Gelöscht : C:\Users\Nils\AppData\Roaming\Intermediate
[!] Ordner Gelöscht : C:\Users\Nils\AppData\Roaming\OCS
[!] Ordner Gelöscht : C:\Users\Nils\AppData\Roaming\SCheck
[!] Ordner Gelöscht : C:\Users\Nils\AppData\Roaming\SSync
[!] Ordner Gelöscht : C:\Users\Nils\AppData\Roaming\Uniblue\DriverScanner
[!] Ordner Gelöscht : C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\toolbar@ask.com
[!] Ordner Gelöscht : C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\docfnddcclkgokdfpnmngpiliiachclb
Datei Gelöscht : C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
Datei Gelöscht : C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\om@offermosquito.com.xpi
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\.autoreg
Datei Gelöscht : C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\\invalidprefs.js
Datei Gelöscht : C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\bProtector_extensions.rdf
Datei Gelöscht : C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\Askcom.xml
Datei Gelöscht : C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\user.js
Datei Gelöscht : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403A-B9D2-65C292C39087}]
Wert Gelöscht : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\docfnddcclkgokdfpnmngpiliiachclb
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DataMgr]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Intermediate]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [scheck]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ssync]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\driverscanner
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\9e8c8fb73deb13
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{553318DA-D010-469E-84B1-496563CAE1C0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{553318DA-D010-469E-84B1-496563CAE1C0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{553318DA-D010-469E-84B1-496563CAE1C0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\AskPartnerNetwork
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKCU\Software\httogroup
Schlüssel Gelöscht : HKCU\Software\ICQ\ICQToolbar
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\piccshare
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKLM\Software\AskPartnerNetwork
Schlüssel Gelöscht : HKLM\Software\AskToolbar
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Delta
Schlüssel Gelöscht : HKLM\Software\ICQ\ICQToolbar
Schlüssel Gelöscht : HKLM\Software\Uniblue\DriverScanner
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{069B290F-5398-4629-A009-85B4BCB4B1B9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{1AE46C09-2AB8-4EE5-88FB-08CD0FF7F2DF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\piccshare
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\IB Updater
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\WNLT

***** [ Browser ] *****

-\\ Internet Explorer v7.0.6002.18005


-\\ Mozilla Firefox v5.0.1 (de)

[ Datei : C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\prefs.js ]

Zeile gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.fbdownloader.com/search.php?channel=sfde203fbdgy21&q=");
Zeile gelöscht : user_pref("extensions.SGT-SAT.hpr", "\"hxxp://de.ask.com/?l=dis&o=APN10375&gct=hp&apn_ptnrs=^AHP&apn_dtid=^YYYYYY^YY^DE&p2=^AHP^YYYYYY^YY^DE&tpid=SGT-SAT&apn_dbr=cr_23.0.1271.95\"");
Zeile gelöscht : user_pref("extensions.asktb.cbid", "^U3");
Zeile gelöscht : user_pref("extensions.asktb.config-updated", false);
Zeile gelöscht : user_pref("extensions.asktb.crumb", "2013.06.23+02.16.38-toolbar003iad-DE-TGVpcHppZyxHZXJtYW55");
Zeile gelöscht : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://de.ask.com/web?q={query}&qsrc={qsrc}&o={o}&l={l}");
Zeile gelöscht : user_pref("extensions.asktb.dtid", "^YYYYYY^YY^DE");
Zeile gelöscht : user_pref("extensions.asktb.first-launch", true);
Zeile gelöscht : user_pref("extensions.asktb.first-restart-after-config-update", true);
Zeile gelöscht : user_pref("extensions.asktb.fresh-install", false);
Zeile gelöscht : user_pref("extensions.asktb.hxxp-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com\", \"www.facebook.com\", \"www.playsushi.com\", \"WWW.google.com\", \"hxxps://websearch.ask.com\", [...]
Zeile gelöscht : user_pref("extensions.asktb.l", "dis");
Zeile gelöscht : user_pref("extensions.asktb.last-config-req", "1371979008625");
Zeile gelöscht : user_pref("extensions.asktb.locale", "de_DE");
Zeile gelöscht : user_pref("extensions.asktb.location", "Leipzig,Germany");
Zeile gelöscht : user_pref("extensions.asktb.o", "100000027");
Zeile gelöscht : user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
Zeile gelöscht : user_pref("extensions.asktb.qsrc", "2871");
Zeile gelöscht : user_pref("extensions.asktb.r", "20");
Zeile gelöscht : user_pref("extensions.asktb.sa-enabled", "false");
Zeile gelöscht : user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", false);
Zeile gelöscht : user_pref("extensions.asktb.slwo", "1");
Zeile gelöscht : user_pref("extensions.asktb.to", "");
Zeile gelöscht : user_pref("extensions.asktb.v", "3.15.23.100013");
Zeile gelöscht : user_pref("extensions.delta.admin", false);
Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de");
Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);
Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Zeile gelöscht : user_pref("extensions.delta.id", "b8bf317b000000000000001d72b78b03");
Zeile gelöscht : user_pref("extensions.delta.instlDay", "15932");
Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.delta.newTab", false);
Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");
Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.24.5");
Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.24.50:13:02");
Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.24.5");
Zeile gelöscht : user_pref("extensions.delta_i.babExt", "");
Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=121564&tsp=4975");
Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss");
Zeile gelöscht : user_pref("extensions.enabledAddons", "{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24,{23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.2.145,{ACAA314B-EEBA-48e4-AD47-84E31C44796C}:4.2.1.10,toolbar_SGT-SAT@ap[...]

-\\ Google Chrome v

[ Datei : C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht : icon_url
Gelöscht : search_url

*************************

AdwCleaner[R0].txt - [13054 octets] - [10/09/2013 22:08:19]
AdwCleaner[S0].txt - [12092 octets] - [10/09/2013 22:09:22]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [12153 octets] ##########
         

Dann die JRT-Logdatei:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.9 (09.07.2013:1)
OS: Windows (TM) Vista Home Premium x64
Ran by Nils on 10.09.2013 at 22:18:08,57
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-4046807941-2027364974-1543117049-1000\Software\IB Updater
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-4046807941-2027364974-1543117049-1000\Software\SweetIM
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\clsid\{44cbc005-6243-4502-8a02-3a096a282664}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\clsid\{80703783-e415-4ee3-ab60-d36981c5a6f1}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\clsid\{d8278076-bc68-4484-9233-6e7f1628b56c}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\clsid\{f297534d-7b06-459d-bc19-2dd8ef69297b}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\typelib\{9945959c-aad8-4312-8b57-2de11927e770}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\microsoft\internet explorer\low rights\elevationpolicy\{6978f29a-3493-40b2-8cdc-9c13a02f85a4}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\microsoft\internet explorer\low rights\elevationpolicy\{d7949a66-d936-4028-9552-14f7dc50f38d}"



~~~ Files

Failed to delete: [File] "C:\Users\Nils\appdata\local\google\chrome\user data\default\ext_piccshare"
Successfully deleted: [File] "C:\Users\Nils\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\driverscanner.lnk"



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Nils\AppData\Roaming\fighters"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"
Successfully deleted: [Folder] "C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}"



~~~ FireFox

Successfully deleted: [File] C:\Users\Nils\AppData\Roaming\mozilla\firefox\profiles\aave9duk.default\extensions\ff_v0.6@piccshare.com.xpi



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\niogeckbkdcabhnapjbkeiklablhjoca



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 10.09.2013 at 22:30:18,91
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Und zu guter letzt nochmal die frische FRST:


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-09-2013 01
Ran by Nils (administrator) on NILS-PC on 10-09-2013 22:33:05
Running from C:\Users\Nils\Downloads
Windows Vista (TM) Home Premium Service Pack 2 (X64) OS Language: German Standard
Internet Explorer Version 7
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
() C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
() C:\Program Files\Acer\Empowering Technology\SysMonitor.exe
() C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe
(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
(Realtek Semiconductor) C:\Windows\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
(Akamai Technologies, Inc.) C:\Users\Nils\AppData\Local\Akamai\netsession_win.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Dropbox, Inc.) C:\Users\Nils\AppData\Roaming\Dropbox\bin\Dropbox.exe
(NewTech InfoSystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
() C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe
() C:\Program Files (x86)\SiteAdvisor\6172\SAService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
(BitDefender) C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe
() C:\Program Files\bin32\nSvcAppFlt.exe
() C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
() C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
(Advanced Micro Devices Inc.) c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Computer, Inc.) C:\Program Files (x86)\QuickTime\qttask.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe
(BitDefender SRL) C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
() C:\Program Files\bin32\nSvcIp.exe
(Akamai Technologies, Inc.) C:\Users\Nils\AppData\Local\Akamai\netsession_win.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Logitech, Inc.) C:\Program Files (x86)\Logitech\LWS\LU\LULnchr.exe
(Logitech, Inc.) C:\Program Files (x86)\Logitech\LWS\LU\LogitechUpdate.exe
(Microsoft Corporation) C:\Windows\system32\sdclt.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoUpdateCheck.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.233.0\SeaPort.exe
() C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [Acer Empowering Technology Monitor] - C:\Program Files\Acer\Empowering Technology\SysMonitor.exe [319488 2008-04-25] ()
HKLM\...\Run: [EmpoweringTechnology] - C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe [319488 2008-04-25] ()
HKLM\...\Run: [BitDefender Antiphishing Helper] - C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe [67072 2007-10-09] (BitDefender)
HKLM\...\Run: [BDAgent] - C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe [468480 2010-02-16] (BitDefender S.R.L.)
HKLM\...\Run: [Ocs_SM] - C:\Users\Nils\AppData\Roaming\OCS\SM\SearchAnonymizer.exe
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RAVCpl64.exe [6150656 2008-03-26] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] - C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Autodesk Sync] - C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [415680 2012-02-06] (Autodesk, Inc.)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [138240 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856 2009-12-28] (Google Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [17418928 2012-07-13] (Skype Technologies S.A.)
HKCU\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3549528 2013-08-27] (Electronic Arts)
HKCU\...\Run: [Logitech Vid] - C:\Program Files (x86)\Logitech\Vid HD\Vid.exe [6129496 2011-01-13] (Logitech Inc.)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Nils\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [Snoozer] - C:\Users\Nils\AppData\Roaming\Snz\Snz.exe [1137764 2013-08-28] ()
HKCU\...\Policies\Explorer: [] 
HKLM-x32\...\Run: [SiteAdvisor] - C:\Program Files (x86)\SiteAdvisor\6172\SiteAdv.exe [36640 2007-08-24] ()
HKLM-x32\...\Run: [PCMMediaSharing] - C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe [204908 2008-01-25] ()
HKLM-x32\...\Run: [BkupTray] - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe [28672 2008-04-25] ()
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe [40048 2007-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-08-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Trigger New Acer AlaunchX] - c:\Acer\Preload\Command\AlaunchX\AppInRun.exe [172032 2008-08-13] (Acer Inc.)
HKLM-x32\...\Run: [WarReg_PopUp] - C:\Program Files (x86)\Acer\WR_PopUp\WarReg_PopUp.exe [303104 2008-01-29] (Acer Incorporated)
HKLM-x32\...\Run: [TrojanScanner] - C:\Program Files (x86)\Trojan Remover\Trjscan.exe [1068424 2009-08-04] (Simply Super Software)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\qttask.exe [282624 2010-09-08] (Apple Computer, Inc.)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [190808 2011-03-02] (Logitech Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default\...\RunOnce: [RUN] - C:\Windows\Acer_Normal\run_DT.exe [31528 2007-04-19] ()
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\RunOnce: [RUN] - C:\Windows\Acer_Normal\run_DT.exe [31528 2007-04-19] ()
Startup: C:\Users\Nils\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Nils\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.diablos-leutzsch.net/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp64&d=1006&m=aspire_x3200
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg64.dll (Google Inc.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll (Google Inc.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.233.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll (Bitdefender)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\Antispam32\IEToolbar.dll (Bitdefender)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.233.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files (x86)\SiteAdvisor\6172\SiteAd64.dll ()
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files (x86)\SiteAdvisor\6172\SiteAdv.dll ()
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Nils\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Nils\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Nils\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Nils\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: @yahoo.com/BrowserPlus,version=2.9.8 - C:\Users\Nils\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll (Yahoo! Inc.)
FF Plugin HKCU: electronicarts.com/GameFacePlugin - C:\Users\Nils\AppData\Roaming\Electronic Arts\Game Face\1.0.0.18\npGameFacePlugin.dll (Electronic Arts)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\search_the_web.xml
FF SearchPlugin: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\{2F060849-F324-4549-99A5-34B2C483B4B6}.xml
FF SearchPlugin: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\{B90EEDAF-5392-4D5F-AFF8-842B3A4F4FA9}.xml
FF SearchPlugin: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\{C644B2D6-694E-49AA-A681-B3FC838377DF}.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Search the web.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: Yahoo! Toolbar - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}(231)
FF Extension: fdm_ffext - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\fdm_ffext@freedownloadmanager.org
FF Extension: toolbar_SGT-SAT - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\toolbar_SGT-SAT@apn.ask.com.xpi
FF Extension: No Name - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: Skype extension - C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] C:\Program Files\BitDefender\BitDefender 2008\tbextension
FF Extension: No Name - C:\Program Files\BitDefender\BitDefender 2008\tbextension

Chrome: 
=======
CHR DefaultSearchURL: (Search) - hxxp://search.fbdownloader.com/search.php?channel=sfde203fbdgy21&q={searchTerms}
CHR DefaultSuggestURL: (Search) -       "suggest_url": ""
CHR Plugin: (Shockwave Flash) - C:\Users\Nils\AppData\Local\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Nils\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Nils\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Computer, Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (PDF-XChange Viewer) - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
CHR Plugin: (Unity Player) - C:\Users\Nils\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Nils\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Google Update) - C:\Users\Nils\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (BrowserPlus (from Yahoo!) v2.9.8) - C:\Users\Nils\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll (Yahoo! Inc.)
CHR Plugin: (Game Face Plugin) - C:\Users\Nils\AppData\Roaming\Electronic Arts\Game Face\1.0.0.18\npGameFacePlugin.dll (Electronic Arts)
CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.250.16) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Google Docs) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (SiteAdvisor) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.50.146.2_0
CHR Extension: (OfferMosquito) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\0.6.6_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_1
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_1
CHR Extension: (Gmail) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
CHR StartMenuInternet: Google Chrome - C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [137960 2013-05-09] (AVAST Software)
R2 BUNAgentSvc; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [16384 2008-03-03] (NewTech Infosystems, Inc.)
R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576 2008-04-25] ()
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-11-17] (MAGIX®)
R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\bin32\nSvcAppFlt.exe [920064 2008-01-29] ()
R2 LIVESRV; C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe [1675264 2010-03-23] (BitDefender SRL)
R2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [103472 2012-06-15] (McAfee, Inc.)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [3969336 2012-04-05] (INCA Internet Co., Ltd.)
R2 nSvcIp; C:\Program Files\bin32\nSvcIp.exe [193024 2008-01-29] ()
R2 NTISchedulerSvc; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072 2008-04-25] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2013-03-10] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe [262247 2006-07-19] ()
S3 scan; C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\scan.dll [236032 2010-02-16] (S.C. BitDefender S.R.L)
R2 SiteAdvisor Service; C:\Program Files (x86)\SiteAdvisor\6172\SAService.exe [341280 2008-09-17] ()
S3 Sony Ericsson PCCompanion; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [155344 2011-06-29] (Avanquest Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2143552 2012-04-05] (TuneUp Software)
S2 VSSERV; C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe [1968640 2010-02-16] (BitDefender S.R.L.)
R2 XCOMM; C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe [99840 2007-11-27] (BitDefender)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R1 aswFW; C:\Windows\System32\Drivers\aswFW.sys [131232 2013-05-09] (AVAST Software)
R0 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R0 aswNdis; C:\Windows\System32\DRIVERS\aswNdis.sys [12368 2012-09-21] (ALWIL Software)
R0 aswNdis2; C:\Windows\System32\Drivers\aswNdis2.sys [270824 2013-05-09] (AVAST Software)
R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [59144 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
S3 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [234000 2008-01-07] (BitDefender S.R.L. Bucharest, ROMANIA)
R1 bdftdif; C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdftdif.sys [169488 2008-01-25] (BitDefender SRL)
R2 int15; C:\Windows\SysWOW64\drivers\int15_64.sys [17952 2008-04-25] (Acer, Inc.)
R2 int15; C:\Windows\SysWOW64\drivers\int15_64.sys [17952 2008-04-25] (Acer, Inc.)
R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2012-01-07] (Sony Ericsson Mobile Communications)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2012-03-29] (TuneUp Software)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27648 2008-01-21] (Microsoft Corporation)
S3 AVFSFilter; system32\DRIVERS\avfsfilter.sys [x]
S3 BDSelfPr; \??\C:\Program Files\BitDefender\BitDefender 2008\bdselfpr.sys [x]
S1 Beep; No ImagePath
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-10 22:16 - 2013-09-10 22:16 - 01029490 _____ (Thisisu) C:\Users\Nils\Downloads\JRT (2).exe
2013-09-10 22:07 - 2013-09-10 22:09 - 00000000 ____D C:\AdwCleaner
2013-09-10 22:06 - 2013-09-10 22:07 - 01037278 _____ C:\Users\Nils\Downloads\adwcleaner.exe
2013-09-10 22:01 - 2013-09-10 22:13 - 00000112 _____ C:\Windows\wininit.ini
2013-09-10 12:32 - 2013-09-10 12:32 - 00026441 _____ C:\ComboFix.txt
2013-09-10 12:08 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-10 12:08 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-10 12:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-10 12:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-10 12:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-10 12:08 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-10 12:08 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-10 12:08 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-10 11:20 - 2013-09-10 11:24 - 00064170 _____ C:\Users\Nils\Downloads\Addition.txt
2013-09-10 11:17 - 2013-09-10 11:17 - 00000000 ____D C:\FRST
2013-09-10 11:16 - 2013-09-10 11:16 - 01949196 _____ (Farbar) C:\Users\Nils\Downloads\FRST64.exe
2013-09-10 11:14 - 2013-09-10 11:14 - 01082349 _____ (Farbar) C:\Users\Nils\Downloads\FRST.exe
2013-09-10 11:10 - 2013-09-10 11:10 - 00745328 _____ C:\Users\Nils\Downloads\ZipOpenerSetup.exe
2013-09-07 00:34 - 2013-09-07 00:34 - 00958312 _____ (                                                            ) C:\Users\Nils\Downloads\VLC_Media_Player.exe
2013-08-30 15:08 - 2013-08-30 15:08 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Snz
2013-08-28 15:16 - 2013-08-02 16:06 - 01706496 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-28 15:16 - 2013-08-02 06:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-16 00:52 - 2013-08-16 00:52 - 00000000 ____D C:\Users\Nils\AppData\Local\avgchrome
2013-08-16 00:13 - 2013-08-16 00:13 - 00001141 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk
2013-08-16 00:12 - 2013-08-16 00:13 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-08-15 00:17 - 2013-07-30 06:30 - 01176576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-15 00:17 - 2013-07-30 06:30 - 00834048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-15 00:17 - 2013-07-30 06:30 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 06118912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 03625472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00671232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstime.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00479744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00180736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-15 00:17 - 2013-07-30 02:31 - 01428992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-15 00:17 - 2013-07-30 02:31 - 01032192 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-15 00:17 - 2013-07-30 02:31 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-08-15 00:17 - 2013-07-30 02:30 - 05730304 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-15 00:17 - 2013-07-30 02:30 - 01129984 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2013-08-15 00:17 - 2013-07-30 02:30 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-08-15 00:17 - 2013-07-30 02:30 - 00623104 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 07051264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 00375808 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-15 00:17 - 2013-07-30 01:22 - 00485376 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-08-15 00:17 - 2013-07-30 00:56 - 01383424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-15 00:17 - 2013-07-30 00:27 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-08-15 00:17 - 2013-07-30 00:12 - 01383424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-15 00:17 - 2013-07-09 14:04 - 01585256 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-15 00:17 - 2013-07-09 14:04 - 01168088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-15 00:17 - 2013-07-08 06:51 - 04691904 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-15 00:17 - 2013-07-08 06:20 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-15 00:17 - 2013-07-08 06:18 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-15 00:17 - 2013-07-08 06:15 - 00234496 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-15 00:17 - 2013-07-08 06:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-08-15 00:17 - 2013-07-08 03:39 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-15 00:17 - 2013-07-08 03:39 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-15 00:17 - 2013-07-08 03:39 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-15 00:17 - 2013-06-15 15:27 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2013-08-15 00:17 - 2013-06-15 13:38 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-15 00:16 - 2013-07-30 06:29 - 00380928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-08-15 00:16 - 2013-07-17 22:01 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-15 00:16 - 2013-07-17 21:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-15 00:16 - 2013-07-10 11:47 - 00677888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-15 00:16 - 2013-07-10 11:42 - 01303552 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-15 00:16 - 2013-07-08 06:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-15 00:16 - 2013-07-08 06:16 - 00992768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-15 00:16 - 2013-07-08 06:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-15 00:16 - 2013-07-08 06:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-15 00:16 - 2013-07-08 06:15 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-15 00:16 - 2013-07-08 06:12 - 01276416 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-15 00:16 - 2013-07-08 06:12 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-15 00:16 - 2013-07-08 06:12 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-15 00:16 - 2013-07-05 06:45 - 01423808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

==================== One Month Modified Files and Folders =======

2013-09-10 22:30 - 2013-09-10 22:30 - 00002843 _____ C:\Users\Nils\Desktop\JRT.txt
2013-09-10 22:27 - 2011-01-22 01:04 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Skype
2013-09-10 22:27 - 2010-04-28 13:33 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-10 22:19 - 2006-10-11 00:07 - 01120017 _____ C:\Windows\WindowsUpdate.log
2013-09-10 22:16 - 2013-09-10 22:16 - 01029490 _____ (Thisisu) C:\Users\Nils\Downloads\JRT (2).exe
2013-09-10 22:13 - 2013-09-10 22:01 - 00000112 _____ C:\Windows\wininit.ini
2013-09-10 22:13 - 2013-04-10 23:38 - 00000000 ___RD C:\Users\Nils\Dropbox
2013-09-10 22:13 - 2013-04-10 23:04 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Dropbox
2013-09-10 22:13 - 2012-09-27 17:54 - 00000000 ____D C:\Program Files (x86)\Origin
2013-09-10 22:13 - 2010-04-28 13:33 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-10 22:12 - 2012-12-02 13:18 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-10 22:12 - 2010-01-16 19:30 - 00081984 _____ C:\Windows\system32\bdod.bin
2013-09-10 22:11 - 2010-12-12 19:29 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2013-09-10 22:11 - 2008-09-17 20:50 - 00000147 _____ C:\Windows\SysWOW64\agent.log
2013-09-10 22:11 - 2006-11-02 17:42 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-10 22:11 - 2006-11-02 17:22 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-10 22:11 - 2006-11-02 17:22 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-10 22:11 - 2006-10-11 00:18 - 00000000 _____ C:\Windows\system32\LogConfigTemp.xml
2013-09-10 22:10 - 2008-01-21 05:26 - 24309824 _____ C:\Windows\PFRO.log
2013-09-10 22:09 - 2013-09-10 22:07 - 00000000 ____D C:\AdwCleaner
2013-09-10 22:09 - 2006-11-02 17:42 - 00032532 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-10 22:07 - 2013-09-10 22:06 - 01037278 _____ C:\Users\Nils\Downloads\adwcleaner.exe
2013-09-10 22:06 - 2012-03-29 14:42 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-10 22:03 - 2012-09-29 11:36 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000UA.job
2013-09-10 21:57 - 2010-01-16 22:41 - 00000121 _____ C:\Windows\bdagent.INI
2013-09-10 16:02 - 2006-11-02 15:34 - 00000000 ____D C:\Windows\tracing
2013-09-10 14:55 - 2012-09-11 11:40 - 00000000 ____D C:\Users\Nils\Documents\FIFA 13
2013-09-10 12:32 - 2013-09-10 12:32 - 00026441 _____ C:\ComboFix.txt
2013-09-10 12:32 - 2013-06-03 23:01 - 00000000 ____D C:\Qoobox
2013-09-10 12:28 - 2006-11-02 14:34 - 00000215 _____ C:\Windows\system.ini
2013-09-10 12:07 - 2013-05-19 12:53 - 05125565 ____R (Swearware) C:\Users\Nils\Downloads\ComboFix.exe
2013-09-10 11:24 - 2013-09-10 11:20 - 00064170 _____ C:\Users\Nils\Downloads\Addition.txt
2013-09-10 11:17 - 2013-09-10 11:17 - 00000000 ____D C:\FRST
2013-09-10 11:16 - 2013-09-10 11:16 - 01949196 _____ (Farbar) C:\Users\Nils\Downloads\FRST64.exe
2013-09-10 11:14 - 2013-09-10 11:14 - 01082349 _____ (Farbar) C:\Users\Nils\Downloads\FRST.exe
2013-09-10 11:10 - 2013-09-10 11:10 - 00745328 _____ C:\Users\Nils\Downloads\ZipOpenerSetup.exe
2013-09-10 11:03 - 2012-09-29 11:36 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000Core.job
2013-09-07 00:34 - 2013-09-07 00:34 - 00958312 _____ (                                                            ) C:\Users\Nils\Downloads\VLC_Media_Player.exe
2013-09-04 13:09 - 2011-02-16 11:11 - 00002041 _____ C:\Users\Nils\Desktop\Google Chrome.lnk
2013-09-02 13:18 - 2012-12-25 21:59 - 00000000 ____D C:\Program Files\McAfee
2013-08-30 15:08 - 2013-08-30 15:08 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Snz
2013-08-29 22:29 - 2008-01-21 13:10 - 01567888 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-29 22:29 - 2008-01-21 13:09 - 00674722 _____ C:\Windows\system32\perfh007.dat
2013-08-29 22:29 - 2008-01-21 13:09 - 00145390 _____ C:\Windows\system32\perfc007.dat
2013-08-25 14:06 - 2013-03-08 12:01 - 00010744 _____ C:\Users\Nils\Documents\Finanzen.xlsx
2013-08-24 02:35 - 2013-04-13 01:21 - 00006836 _____ C:\Users\Nils\AppData\Local\d3d9caps.dat
2013-08-23 17:07 - 2012-03-29 14:42 - 00003736 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-23 17:06 - 2012-03-29 14:42 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-23 17:06 - 2011-07-14 11:09 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-16 00:52 - 2013-08-16 00:52 - 00000000 ____D C:\Users\Nils\AppData\Local\avgchrome
2013-08-16 00:29 - 2012-09-15 12:24 - 00000000 ____D C:\Output
2013-08-16 00:13 - 2013-08-16 00:13 - 00001141 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk
2013-08-16 00:13 - 2013-08-16 00:12 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-08-16 00:12 - 2011-07-26 00:30 - 00000000 ____D C:\Users\Nils\AppData\Roaming\DVDVideoSoft
2013-08-16 00:05 - 2006-11-02 15:33 - 00000000 ____D C:\Windows\rescache
2013-08-15 03:23 - 2008-09-17 21:04 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-15 03:13 - 2013-07-11 22:15 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 03:07 - 2006-11-02 14:35 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

Files to move or delete:
====================
C:\Users\Nils\AppData\Local\Temp\Quarantine.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-10 22:19

==================== End Of Log ============================
         

--- --- ---



Das müsste es gewesen sein vorerst

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Irgendwie scheint hier etwas nicht zu klappen beim ESET Online Scanner:

Habe nun schon zum zweiten Mal den Scan durchgeführt und wieder hängt er bei 19%.
Bei folgendem Target:

C:\Downloads\openSUSE-11.2-DVD-i586.iso

Hatte es jeweils ca. 30min laufen bei 19% oder war ich einfach nur ungeduldig?
Firewall ist aus.

Soo jetzt aber. Hat einfach nur ewig gedauert.

Als erstes die Eset-Logfile:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=60720f34e832654e8ea89f9d94c09078
# engine=15091
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-11 03:55:13
# local_time=2013-09-11 05:55:13 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=772 16777213 83 94 5370135 155624785 0 0
# compatibility_mode=5892 16776574 100 100 71818 216438819 0 0
# scanned=11140
# found=0
# cleaned=0
# scan_time=4228
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=60720f34e832654e8ea89f9d94c09078
# engine=15091
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-11 09:00:17
# local_time=2013-09-11 11:00:17 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=772 16777213 83 94 5388439 155643089 0 0
# compatibility_mode=5892 16776574 100 100 90122 216457123 0 0
# scanned=361149
# found=1
# cleaned=0
# scan_time=18249
sh=B1232787C87662F48714B103FECBF588A19DBB66 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Nils\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\1b2bea76-59845150"
         

Dann die kurze "Info" vom SecurityCheck:

 UNSUPPORTED OPERATING SYSTEM! ABORTED!
         

Und zum Schluss die frische FRST:


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-09-2013 01
Ran by Nils (administrator) on NILS-PC on 11-09-2013 23:26:37
Running from C:\Users\Nils\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ETKTY90X
Windows Vista (TM) Home Premium Service Pack 2 (X64) OS Language: German Standard
Internet Explorer Version 7
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
() C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
() C:\Program Files\Acer\Empowering Technology\SysMonitor.exe
() C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe
(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
(Realtek Semiconductor) C:\Windows\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
(Akamai Technologies, Inc.) C:\Users\Nils\AppData\Local\Akamai\netsession_win.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Dropbox, Inc.) C:\Users\Nils\AppData\Roaming\Dropbox\bin\Dropbox.exe
(NewTech InfoSystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
() C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe
() C:\Program Files (x86)\SiteAdvisor\6172\SAService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
(BitDefender) C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe
() C:\Program Files\bin32\nSvcAppFlt.exe
() C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
() C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
(Advanced Micro Devices Inc.) c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Computer, Inc.) C:\Program Files (x86)\QuickTime\qttask.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files\bin32\nSvcIp.exe
(Akamai Technologies, Inc.) C:\Users\Nils\AppData\Local\Akamai\netsession_win.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Logitech, Inc.) C:\Program Files (x86)\Logitech\LWS\LU\LULnchr.exe
(Logitech, Inc.) C:\Program Files (x86)\Logitech\LWS\LU\LogitechUpdate.exe
(Microsoft Corporation) C:\Windows\system32\sdclt.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.233.0\SeaPort.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginClientService.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
(BitDefender SRL) C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
(Google Inc.) C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe
() c:\Users\Nils\Downloads\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Farbar) C:\Users\Nils\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ETKTY90X\FRST64[1].exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [Acer Empowering Technology Monitor] - C:\Program Files\Acer\Empowering Technology\SysMonitor.exe [319488 2008-04-25] ()
HKLM\...\Run: [EmpoweringTechnology] - C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe [319488 2008-04-25] ()
HKLM\...\Run: [BitDefender Antiphishing Helper] - C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe [67072 2007-10-09] (BitDefender)
HKLM\...\Run: [BDAgent] - C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe [468480 2010-02-16] (BitDefender S.R.L.)
HKLM\...\Run: [Ocs_SM] - C:\Users\Nils\AppData\Roaming\OCS\SM\SearchAnonymizer.exe
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RAVCpl64.exe [6150656 2008-03-26] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] - C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Autodesk Sync] - C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [415680 2012-02-06] (Autodesk, Inc.)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [138240 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856 2009-12-28] (Google Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [17418928 2012-07-13] (Skype Technologies S.A.)
HKCU\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3549528 2013-08-27] (Electronic Arts)
HKCU\...\Run: [Logitech Vid] - C:\Program Files (x86)\Logitech\Vid HD\Vid.exe [6129496 2011-01-13] (Logitech Inc.)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Nils\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [Snoozer] - C:\Users\Nils\AppData\Roaming\Snz\Snz.exe [1137764 2013-08-28] ()
HKCU\...\Policies\Explorer: [] 
HKLM-x32\...\Run: [SiteAdvisor] - C:\Program Files (x86)\SiteAdvisor\6172\SiteAdv.exe [36640 2007-08-24] ()
HKLM-x32\...\Run: [PCMMediaSharing] - C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe [204908 2008-01-25] ()
HKLM-x32\...\Run: [BkupTray] - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe [28672 2008-04-25] ()
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe [40048 2007-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-08-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Trigger New Acer AlaunchX] - c:\Acer\Preload\Command\AlaunchX\AppInRun.exe [172032 2008-08-13] (Acer Inc.)
HKLM-x32\...\Run: [WarReg_PopUp] - C:\Program Files (x86)\Acer\WR_PopUp\WarReg_PopUp.exe [303104 2008-01-29] (Acer Incorporated)
HKLM-x32\...\Run: [TrojanScanner] - C:\Program Files (x86)\Trojan Remover\Trjscan.exe [1068424 2009-08-04] (Simply Super Software)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\qttask.exe [282624 2010-09-08] (Apple Computer, Inc.)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [190808 2011-03-02] (Logitech Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default\...\RunOnce: [RUN] - C:\Windows\Acer_Normal\run_DT.exe [31528 2007-04-19] ()
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\RunOnce: [RUN] - C:\Windows\Acer_Normal\run_DT.exe [31528 2007-04-19] ()
Startup: C:\Users\Nils\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Nils\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.diablos-leutzsch.net/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp64&d=1006&m=aspire_x3200
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg64.dll (Google Inc.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll (Google Inc.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.233.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll (Bitdefender)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\Antispam32\IEToolbar.dll (Bitdefender)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.233.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU -  No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files (x86)\SiteAdvisor\6172\SiteAd64.dll ()
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files (x86)\SiteAdvisor\6172\SiteAdv.dll ()
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Nils\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Nils\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Nils\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Nils\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: @yahoo.com/BrowserPlus,version=2.9.8 - C:\Users\Nils\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll (Yahoo! Inc.)
FF Plugin HKCU: electronicarts.com/GameFacePlugin - C:\Users\Nils\AppData\Roaming\Electronic Arts\Game Face\1.0.0.18\npGameFacePlugin.dll (Electronic Arts)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\search_the_web.xml
FF SearchPlugin: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\{2F060849-F324-4549-99A5-34B2C483B4B6}.xml
FF SearchPlugin: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\{B90EEDAF-5392-4D5F-AFF8-842B3A4F4FA9}.xml
FF SearchPlugin: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\searchplugins\{C644B2D6-694E-49AA-A681-B3FC838377DF}.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Search the web.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: Yahoo! Toolbar - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}(231)
FF Extension: fdm_ffext - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\fdm_ffext@freedownloadmanager.org
FF Extension: toolbar_SGT-SAT - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\toolbar_SGT-SAT@apn.ask.com.xpi
FF Extension: No Name - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\aave9duk.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: Skype extension - C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2008\tbextension
FF Extension: No Name - C:\Program Files\BitDefender\BitDefender 2008\tbextension

Chrome: 
=======
CHR DefaultSearchURL: (Search) - hxxp://search.fbdownloader.com/search.php?channel=sfde203fbdgy21&q={searchTerms}
CHR DefaultSuggestURL: (Search) -       "suggest_url": ""
CHR Plugin: (Shockwave Flash) - C:\Users\Nils\AppData\Local\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Nils\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Nils\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Computer, Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (PDF-XChange Viewer) - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
CHR Plugin: (Unity Player) - C:\Users\Nils\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Nils\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Google Update) - C:\Users\Nils\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (BrowserPlus (from Yahoo!) v2.9.8) - C:\Users\Nils\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll (Yahoo! Inc.)
CHR Plugin: (Game Face Plugin) - C:\Users\Nils\AppData\Roaming\Electronic Arts\Game Face\1.0.0.18\npGameFacePlugin.dll (Electronic Arts)
CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.16) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Google Docs) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (SiteAdvisor) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.50.146.2_0
CHR Extension: (OfferMosquito) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\0.6.6_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_1
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_1
CHR Extension: (Gmail) - C:\Users\Nils\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
CHR StartMenuInternet: Google Chrome - C:\Users\Nils\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

S2 0014911378902231mcinstcleanup; C:\Windows\TEMP\001491~1.EXE [827456 2012-01-09] (McAfee, Inc.)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [137960 2013-05-09] (AVAST Software)
R2 BUNAgentSvc; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [16384 2008-03-03] (NewTech Infosystems, Inc.)
R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576 2008-04-25] ()
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-11-17] (MAGIX®)
R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\bin32\nSvcAppFlt.exe [920064 2008-01-29] ()
R2 LIVESRV; C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe [1675264 2010-03-23] (BitDefender SRL)
R2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [103472 2012-06-15] (McAfee, Inc.)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [3969336 2012-04-05] (INCA Internet Co., Ltd.)
R2 nSvcIp; C:\Program Files\bin32\nSvcIp.exe [193024 2008-01-29] ()
R2 NTISchedulerSvc; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072 2008-04-25] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2013-03-10] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe [262247 2006-07-19] ()
S3 scan; C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\scan.dll [236032 2010-02-16] (S.C. BitDefender S.R.L)
R2 SiteAdvisor Service; C:\Program Files (x86)\SiteAdvisor\6172\SAService.exe [341280 2008-09-17] ()
S3 Sony Ericsson PCCompanion; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [155344 2011-06-29] (Avanquest Software)
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2143552 2012-04-05] (TuneUp Software)
S2 VSSERV; C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe [1968640 2010-02-16] (BitDefender S.R.L.)
R2 XCOMM; C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe [99840 2007-11-27] (BitDefender)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R1 aswFW; C:\Windows\System32\Drivers\aswFW.sys [131232 2013-05-09] (AVAST Software)
R0 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R0 aswNdis; C:\Windows\System32\DRIVERS\aswNdis.sys [12368 2012-09-21] (ALWIL Software)
R0 aswNdis2; C:\Windows\System32\Drivers\aswNdis2.sys [270824 2013-05-09] (AVAST Software)
R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [59144 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
S3 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [234000 2008-01-07] (BitDefender S.R.L. Bucharest, ROMANIA)
R1 bdftdif; C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdftdif.sys [169488 2008-01-25] (BitDefender SRL)
R2 int15; C:\Windows\SysWOW64\drivers\int15_64.sys [17952 2008-04-25] (Acer, Inc.)
R2 int15; C:\Windows\SysWOW64\drivers\int15_64.sys [17952 2008-04-25] (Acer, Inc.)
R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2012-01-07] (Sony Ericsson Mobile Communications)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2012-03-29] (TuneUp Software)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27648 2008-01-21] (Microsoft Corporation)
S3 AVFSFilter; system32\DRIVERS\avfsfilter.sys [x]
S3 BDSelfPr; \??\C:\Program Files\BitDefender\BitDefender 2008\bdselfpr.sys [x]
S1 Beep; No ImagePath
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-11 16:46 - 2013-09-11 16:55 - 00000000 ____D C:\Users\Nils\Documents\FIFA 14 Demo
2013-09-11 16:37 - 2013-09-11 23:13 - 00000000 ____D C:\Program Files (x86)\ESET
2013-09-11 16:36 - 2013-09-11 16:37 - 02347384 _____ (ESET) C:\Users\Nils\Downloads\esetsmartinstaller_enu (1).exe
2013-09-11 15:06 - 2013-09-11 15:06 - 09430408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-10 22:34 - 2013-09-10 22:34 - 00046929 _____ C:\Users\Nils\Downloads\FRST.txt
2013-09-10 22:16 - 2013-09-10 22:16 - 01029490 _____ (Thisisu) C:\Users\Nils\Downloads\JRT (2).exe
2013-09-10 22:07 - 2013-09-10 22:09 - 00000000 ____D C:\AdwCleaner
2013-09-10 22:06 - 2013-09-10 22:07 - 01037278 _____ C:\Users\Nils\Downloads\adwcleaner.exe
2013-09-10 22:01 - 2013-09-10 22:13 - 00000112 _____ C:\Windows\wininit.ini
2013-09-10 12:32 - 2013-09-10 12:32 - 00026441 _____ C:\ComboFix.txt
2013-09-10 12:08 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-10 12:08 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-10 12:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-10 12:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-10 12:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-10 12:08 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-10 12:08 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-10 12:08 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-10 11:20 - 2013-09-10 11:24 - 00064170 _____ C:\Users\Nils\Downloads\Addition.txt
2013-09-10 11:17 - 2013-09-10 11:17 - 00000000 ____D C:\FRST
2013-09-10 11:10 - 2013-09-10 11:10 - 00745328 _____ C:\Users\Nils\Downloads\ZipOpenerSetup.exe
2013-09-07 00:34 - 2013-09-07 00:34 - 00958312 _____ (                                                            ) C:\Users\Nils\Downloads\VLC_Media_Player.exe
2013-08-30 15:08 - 2013-08-30 15:08 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Snz
2013-08-28 15:16 - 2013-08-02 16:06 - 01706496 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-28 15:16 - 2013-08-02 06:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-16 00:52 - 2013-08-16 00:52 - 00000000 ____D C:\Users\Nils\AppData\Local\avgchrome
2013-08-16 00:13 - 2013-08-16 00:13 - 00001141 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk
2013-08-16 00:12 - 2013-08-16 00:13 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-08-15 00:17 - 2013-07-30 06:30 - 01176576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-15 00:17 - 2013-07-30 06:30 - 00834048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-15 00:17 - 2013-07-30 06:30 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 06118912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 03625472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00671232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstime.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00479744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00180736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-15 00:17 - 2013-07-30 06:29 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-15 00:17 - 2013-07-30 02:31 - 01428992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-15 00:17 - 2013-07-30 02:31 - 01032192 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-15 00:17 - 2013-07-30 02:31 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-08-15 00:17 - 2013-07-30 02:30 - 05730304 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-15 00:17 - 2013-07-30 02:30 - 01129984 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2013-08-15 00:17 - 2013-07-30 02:30 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-08-15 00:17 - 2013-07-30 02:30 - 00623104 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 07051264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 00375808 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-15 00:17 - 2013-07-30 02:29 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-15 00:17 - 2013-07-30 01:22 - 00485376 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-08-15 00:17 - 2013-07-30 00:56 - 01383424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-15 00:17 - 2013-07-30 00:27 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-08-15 00:17 - 2013-07-30 00:12 - 01383424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-15 00:17 - 2013-07-09 14:04 - 01585256 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-15 00:17 - 2013-07-09 14:04 - 01168088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-15 00:17 - 2013-07-08 06:51 - 04691904 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-15 00:17 - 2013-07-08 06:20 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-15 00:17 - 2013-07-08 06:18 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-15 00:17 - 2013-07-08 06:15 - 00234496 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-15 00:17 - 2013-07-08 06:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-08-15 00:17 - 2013-07-08 03:39 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-15 00:17 - 2013-07-08 03:39 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-15 00:17 - 2013-07-08 03:39 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-15 00:17 - 2013-06-15 15:27 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2013-08-15 00:17 - 2013-06-15 13:38 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-15 00:16 - 2013-07-30 06:29 - 00380928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-08-15 00:16 - 2013-07-17 22:01 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-15 00:16 - 2013-07-17 21:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-15 00:16 - 2013-07-10 11:47 - 00677888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-15 00:16 - 2013-07-10 11:42 - 01303552 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-15 00:16 - 2013-07-08 06:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-15 00:16 - 2013-07-08 06:16 - 00992768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-15 00:16 - 2013-07-08 06:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-15 00:16 - 2013-07-08 06:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-15 00:16 - 2013-07-08 06:15 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-15 00:16 - 2013-07-08 06:12 - 01276416 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-15 00:16 - 2013-07-08 06:12 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-15 00:16 - 2013-07-08 06:12 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-15 00:16 - 2013-07-05 06:45 - 01423808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

==================== One Month Modified Files and Folders =======

2013-09-11 23:27 - 2010-04-28 13:33 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-11 23:20 - 2013-09-11 23:20 - 00891144 _____ C:\Users\Nils\Downloads\SecurityCheck.exe
2013-09-11 23:20 - 2011-01-22 01:04 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Skype
2013-09-11 23:14 - 2006-10-11 00:07 - 01479825 _____ C:\Windows\WindowsUpdate.log
2013-09-11 23:13 - 2013-09-11 16:37 - 00000000 ____D C:\Program Files (x86)\ESET
2013-09-11 23:06 - 2012-03-29 14:42 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-11 23:03 - 2012-09-29 11:36 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000UA.job
2013-09-11 22:13 - 2006-11-02 17:22 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-11 22:13 - 2006-11-02 17:22 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-11 21:10 - 2012-09-11 11:40 - 00000000 ____D C:\Users\Nils\Documents\FIFA 13
2013-09-11 19:27 - 2006-11-02 15:34 - 00000000 ____D C:\Windows\tracing
2013-09-11 16:55 - 2013-09-11 16:46 - 00000000 ____D C:\Users\Nils\Documents\FIFA 14 Demo
2013-09-11 16:44 - 2009-12-28 19:14 - 00542897 _____ C:\Windows\DirectX.log
2013-09-11 16:37 - 2013-09-11 16:36 - 02347384 _____ (ESET) C:\Users\Nils\Downloads\esetsmartinstaller_enu (1).exe
2013-09-11 15:07 - 2012-03-29 14:42 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-11 15:07 - 2012-03-29 14:42 - 00003736 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-11 15:07 - 2011-07-14 11:09 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-11 15:06 - 2013-09-11 15:06 - 09430408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-11 14:55 - 2011-09-29 14:58 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-09-11 14:23 - 2012-12-25 21:59 - 00000000 ____D C:\Program Files\McAfee
2013-09-10 22:34 - 2013-09-10 22:34 - 00046929 _____ C:\Users\Nils\Downloads\FRST.txt
2013-09-10 22:16 - 2013-09-10 22:16 - 01029490 _____ (Thisisu) C:\Users\Nils\Downloads\JRT (2).exe
2013-09-10 22:13 - 2013-09-10 22:01 - 00000112 _____ C:\Windows\wininit.ini
2013-09-10 22:13 - 2013-04-10 23:38 - 00000000 ___RD C:\Users\Nils\Dropbox
2013-09-10 22:13 - 2013-04-10 23:04 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Dropbox
2013-09-10 22:13 - 2012-09-27 17:54 - 00000000 ____D C:\Program Files (x86)\Origin
2013-09-10 22:13 - 2010-04-28 13:33 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-10 22:12 - 2012-12-02 13:18 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-10 22:12 - 2010-01-16 19:30 - 00081984 _____ C:\Windows\system32\bdod.bin
2013-09-10 22:11 - 2010-12-12 19:29 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2013-09-10 22:11 - 2008-09-17 20:50 - 00000147 _____ C:\Windows\SysWOW64\agent.log
2013-09-10 22:11 - 2006-11-02 17:42 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-10 22:11 - 2006-10-11 00:18 - 00000000 _____ C:\Windows\system32\LogConfigTemp.xml
2013-09-10 22:10 - 2013-08-06 11:37 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Common
2013-09-10 22:10 - 2012-07-19 19:46 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Uniblue
2013-09-10 22:10 - 2012-07-19 19:46 - 00000000 ____D C:\Program Files (x86)\Uniblue
2013-09-10 22:10 - 2008-01-21 05:26 - 24309824 _____ C:\Windows\PFRO.log
2013-09-10 22:09 - 2013-09-10 22:07 - 00000000 ____D C:\AdwCleaner
2013-09-10 22:09 - 2006-11-02 17:42 - 00032532 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-10 22:07 - 2013-09-10 22:06 - 01037278 _____ C:\Users\Nils\Downloads\adwcleaner.exe
2013-09-10 21:57 - 2010-01-16 22:41 - 00000121 _____ C:\Windows\bdagent.INI
2013-09-10 12:32 - 2013-09-10 12:32 - 00026441 _____ C:\ComboFix.txt
2013-09-10 12:32 - 2013-06-03 23:01 - 00000000 ____D C:\Qoobox
2013-09-10 12:28 - 2006-11-02 14:34 - 00000215 _____ C:\Windows\system.ini
2013-09-10 12:07 - 2013-05-19 12:53 - 05125565 ____R (Swearware) C:\Users\Nils\Downloads\ComboFix.exe
2013-09-10 11:24 - 2013-09-10 11:20 - 00064170 _____ C:\Users\Nils\Downloads\Addition.txt
2013-09-10 11:17 - 2013-09-10 11:17 - 00000000 ____D C:\FRST
2013-09-10 11:10 - 2013-09-10 11:10 - 00745328 _____ C:\Users\Nils\Downloads\ZipOpenerSetup.exe
2013-09-10 11:03 - 2012-09-29 11:36 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4046807941-2027364974-1543117049-1000Core.job
2013-09-07 00:34 - 2013-09-07 00:34 - 00958312 _____ (                                                            ) C:\Users\Nils\Downloads\VLC_Media_Player.exe
2013-09-04 13:09 - 2011-02-16 11:11 - 00002041 _____ C:\Users\Nils\Desktop\Google Chrome.lnk
2013-08-30 15:08 - 2013-08-30 15:08 - 00000000 ____D C:\Users\Nils\AppData\Roaming\Snz
2013-08-29 22:29 - 2008-01-21 13:10 - 01567888 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-29 22:29 - 2008-01-21 13:09 - 00674722 _____ C:\Windows\system32\perfh007.dat
2013-08-29 22:29 - 2008-01-21 13:09 - 00145390 _____ C:\Windows\system32\perfc007.dat
2013-08-25 14:06 - 2013-03-08 12:01 - 00010744 _____ C:\Users\Nils\Documents\Finanzen.xlsx
2013-08-24 02:35 - 2013-04-13 01:21 - 00006836 _____ C:\Users\Nils\AppData\Local\d3d9caps.dat
2013-08-16 00:52 - 2013-08-16 00:52 - 00000000 ____D C:\Users\Nils\AppData\Local\avgchrome
2013-08-16 00:29 - 2012-09-15 12:24 - 00000000 ____D C:\Output
2013-08-16 00:13 - 2013-08-16 00:13 - 00001141 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk
2013-08-16 00:13 - 2013-08-16 00:12 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-08-16 00:12 - 2011-07-26 00:30 - 00000000 ____D C:\Users\Nils\AppData\Roaming\DVDVideoSoft
2013-08-16 00:05 - 2006-11-02 15:33 - 00000000 ____D C:\Windows\rescache
2013-08-15 03:23 - 2008-09-17 21:04 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-15 03:13 - 2013-07-11 22:15 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 03:07 - 2006-11-02 14:35 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

Files to move or delete:
====================
C:\Users\Nils\AppData\Local\Temp\Quarantine.exe
C:\Users\Nils\AppData\Local\Temp\SkypeSetup.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-10 22:19

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

HKCU\...\Run: [Snoozer] - C:\Users\Nils\AppData\Roaming\Snz\Snz.exe [1137764 2013-08-28] ()
HKCU\...\Policies\Explorer: []
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.


Noch Probleme?

hier die FRST-Fixlog:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-09-2013 02
Ran by Nils at 2013-09-12 13:53:54 Run:1
Running from C:\FRST
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKCU\...\Run: [Snoozer] - C:\Users\Nils\AppData\Roaming\Snz\Snz.exe [1137764 2013-08-28] ()
HKCU\...\Policies\Explorer: []
         
*****************

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Snoozer => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\HKCU\...\Policies\Explorer: [] => Value not found.

==== End of Fixlog ====
         

Meine Frage?

Eine Kleinigkeit eventuell:

diese TuneUp-Utilities nerven mich total, normal deinstallieren in der Systemsteuerung habe ich schon probiert.
Gibt's da eine Lösung?

Revo Uninstaller Pro - Uninstall Software, Remove Programs easily, Forced Uninstall, Leftovers Uninstaller

Damit deinstallieren und Reste entfernen lassen.

Nur eine kleine Sache eventuell noch:

Wie bekomme ich diese TuneUp-Utilities weg, normales deinstallieren klappt da nicht

ehm meine Antwort oben hast Du gesehen?