Hijacker? -> search.certified-toolbar / ständig download wünsche von unbekannten programmen

Verena72 · 28.09.2013, 10:08

Hallo Ihr Lieben,

ich habe diesmal mit meinem Arbeitsrechner ein Problem

und bräucht dringend nochmal Eure tolle Unterstützung!

Mittlerweile habe ich Schwierigkeiten mit meinem Arbeitsrechner und schätze, dass es an dem Plagegeist hier liegt. : search.certified-toolbar.com. Is das ein Hijacker ?!

Ich danke Euch schonmal vorab für Eure Mühe

!!!

Herzlichste Grüße

Verena

M-K-D-B · 28.09.2013, 10:17

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.

Bitte beachte folgende Hinweise:

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags.
Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo.
Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!
Ich kann Dir niemals eine Garantie geben, dass auch ich alles finde. Eine Formatierung ist meist der schnellere und immer der sicherste Weg.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist.

Ich habe dein Thema in Arbeit und melde mich so schnell wie möglich mit weiteren Anweisungen.

M-K-D-B · 28.09.2013, 10:18

Servus,

hast du das hier schon gelesen?
Bereinigung von gewerblich genutzten Rechnern

Verena72 · 28.09.2013, 11:02

Hallo Mathias,

vielen lieben Dank, dass du dich um mich kümmern wirst.

Ich habe Deine obigen Themen gelesen im Link und zur Kenntnis genommen. Ich habe 2 Rechner und bereits mit meinem anderen ein Problem gehabt, wobei mir ein netter Kollege von Dir Abhilfe verschuf.

Mein "Arbeitsrechner" schimpf ich in dieser Art, weil er der neuere von beiden ist und somit deutlichst wichtiger für mich ist, da ich an diesem viel mehr mache. Beruflich bin ich Selbstständig. Daher natürlich auch für mein Kram selbst verantwortlich. :/

Ich danke dir schon jetz dafür

VLG Verena

M-K-D-B · 28.09.2013, 13:45

Servus,

alles klar.

so gehts los:

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Verena72 · 01.10.2013, 09:17

Einen wunderschönen

,

So anbei die Results:
FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-09-2013 02
Ran by Mariejoanna81 (administrator) on VAIO on 28-09-2013 10:54:17
Running from C:\Users\Mariejoanna81\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(InterVideo) c:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Dropbox, Inc.) C:\Users\Mariejoanna81\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(sw4you, Siegfried Weckmann) C:\Program Files (x86)\Hardcopy\hardcopy.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Windows Net) C:\Users\Mariejoanna81\AppData\Roaming\Windows Net Data\net.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Farbar) C:\Users\Mariejoanna81\Downloads\FRST64(1).exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [208384 2009-08-03] (Alps Electric Co., Ltd.)
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7938080 2009-07-24] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-07-24] (Realtek Semiconductor Corp.)
HKCU\...\Run: [] - [x]
HKCU\...\Run: [NokiaSuite.exe] - C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1086376 2012-08-03] (Nokia)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18642024 2013-02-28] (Skype Technologies S.A.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-07-11] (RealNetworks, Inc.)
Startup: C:\Users\Mariejoanna81\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Mariejoanna81\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Mariejoanna81\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK
ShortcutTarget: Hardcopy.LNK -> C:\Program Files (x86)\Hardcopy\hardcopy.exe (sw4you, Siegfried Weckmann)
Startup: C:\Users\Mariejoanna81\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Mariejoanna81\AppData\Roaming\Windows Net Data\net.exe (Windows Net)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Certified-Toolbar Search
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Certified-Toolbar Search
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle
HKCU\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = Certified-Toolbar Search
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Certified-Toolbar Search
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Certified-Toolbar Search
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = Certified-Toolbar Search
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Default_Page_URL = Certified-Toolbar Search
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = Certified-Toolbar Search
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = Certified-Toolbar Search
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = Certified-Toolbar Search
SearchScopes: HKLM-x32 - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q={searchTerms}
SearchScopes: HKLM-x32 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q={searchTerms}
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/mb139/?search={searchTerms}&loc=IB_DS&a=6OyGJHfpZK&i=26
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Web Assistant - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension64.dll ()
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Web Assistant - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll ()
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU -  No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU -  No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
DPF: HKLM {615A1925-0E5B-4767-A65E-3165AEAC32A3} hxxp://quickscan.bitdefender.com/qsax/qsax64.cab
DPF: HKLM-x32 {23A70515-51F4-4FFD-9CAA-5F31B83452E0} https://elias.kabeldeutschland.de/ecommunications_deu/21211/applets/SiebelAx_HI_Client.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Mariejoanna81\AppData\Roaming\Mozilla\Firefox\Profiles\q66nwk3y.default
FF NewTab: hxxp://search.certified-toolbar.com?si=66920&st=newtab&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B
FF DefaultSearchEngine: Web Search
FF SearchEngineOrder.1: Web Search
FF SelectedSearchEngine: Web Search
FF Homepage: about:home
FF Keyword.URL: hxxp://search.certified-toolbar.com?si=66920&st=chrome&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: pricealarm - C:\Users\Mariejoanna81\AppData\Roaming\Mozilla\Firefox\Profiles\q66nwk3y.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF Extension: Web Assistant - C:\Program Files\Web Assistant\Firefox
FF HKLM\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\Web Assistant\Firefox
FF Extension: Web Assistant - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF Extension: Web Assistant - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\Web Assistant\Firefox
FF Extension: Web Assistant - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{FCE04E1F-9378-4f39-96F6-5689A9159E45}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: hxxp://search.certified-toolbar.com?si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B
CHR RestoreOnStartup: "hxxp://search.certified-toolbar.com?si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B"
CHR DefaultSearchURL: (Web Search) - hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q={searchTerms}
CHR DefaultSuggestURL: (Web Search) -       "suggest_url": ""
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Nokia Suite Enabler Plugin) - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
CHR Extension: (Docs) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: () - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html
CHR Extension: (RealDownloader) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.2_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx
CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [137960 2013-08-30] (AVAST Software)
S4 IBUpdaterService; C:\Windows\system32\dmwu.exe [1455408 2013-04-07] ()
S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [111616 2013-08-07] (Microsoft Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] ()
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-06-26] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-06-26] (Sonic Solutions)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [189984 2009-07-24] (Realtek Semiconductor)
S3 SOHDBSvr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-07-27] (Sony Corporation)
S3 SOHPlMgr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-07-27] (Sony Corporation)
S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2013-09-26] (soft Xpansion)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2009-07-23] (Sony Corporation)
R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [642920 2009-07-22] (Sony Corporation)
R3 Vcsw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [313264 2009-07-23] (Sony Corporation)
R3 VzCdbSvc; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [206336 2009-07-23] (Sony Corporation)
S4 Web Assistant Updater; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [188760 2013-01-29] ()

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R1 aswFW; C:\Windows\System32\Drivers\aswFW.sys [131232 2013-08-30] (AVAST Software)
R0 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R0 aswNdis; C:\Windows\System32\DRIVERS\aswNdis.sys [12368 2013-03-07] (ALWIL Software)
R0 aswNdis2; C:\Windows\System32\drivers\aswNdis2.sys [270824 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
R2 risdptsk; C:\Windows\system32\DRIVERS\risdsn64.sys [76288 2009-07-31] (REDC)
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240 2012-08-21] (GEAR Software Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-28 10:53 - 2013-09-28 10:53 - 01953880 _____ (Farbar) C:\Users\Mariejoanna81\Downloads\FRST64(1).exe
2013-09-26 14:46 - 2013-09-26 14:46 - 01095080 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00973736 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00000000 ____D C:\ProgramData\Oracle
2013-09-26 14:44 - 2013-09-26 14:45 - 30669224 _____ (Oracle Corporation) C:\Users\Mariejoanna81\Downloads\jre-7u40-windows-x64.exe
2013-09-26 13:55 - 2013-09-26 13:55 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\PDF Architect
2013-09-26 13:53 - 2013-09-26 13:54 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2013-09-26 13:53 - 2013-04-09 15:13 - 00110264 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2013-09-26 13:53 - 2012-05-05 11:54 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2013-09-26 13:53 - 2012-05-05 11:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL
2013-09-26 13:53 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL
2013-09-26 13:53 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL
2013-09-26 13:53 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL
2013-09-26 13:30 - 2013-09-26 13:30 - 00052364 _____ C:\Users\Mariejoanna81\Desktop\FRST.txt
2013-09-26 13:30 - 2013-09-26 13:30 - 00038276 _____ C:\Users\Mariejoanna81\Desktop\Addition.txt
2013-09-26 13:25 - 2013-09-26 13:26 - 00038276 _____ C:\Users\Mariejoanna81\Downloads\Addition.txt
2013-09-26 13:23 - 2013-09-26 13:23 - 00000000 ____D C:\FRST
2013-09-26 13:22 - 2013-09-26 13:22 - 01956432 _____ (Farbar) C:\Users\Mariejoanna81\Downloads\FRST64.exe
2013-09-26 12:28 - 2013-09-26 12:28 - 01527912 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-26 12:23 - 2013-09-26 12:24 - 17810632 _____ (pdfforge GmbH) C:\Users\Mariejoanna81\Downloads\PDFCreator-1_7_1_setup.exe
2013-09-26 12:18 - 2013-09-26 12:18 - 00010464 _____ C:\Windows\SysWOW64\sx_p2d.tlb
2013-09-26 12:17 - 2013-09-26 12:29 - 00000000 ____D C:\ProgramData\Freemium
2013-09-26 12:16 - 2013-09-26 12:16 - 00000000 ____D C:\Users\Mariejoanna81\Downloads\freepdf
2013-09-26 12:14 - 2013-08-13 08:38 - 00032328 _____ C:\Windows\Launcher.exe
2013-09-26 12:13 - 2013-09-26 12:13 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\Windows Net Data
2013-09-26 12:11 - 2013-09-26 12:12 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Local\DownloadGuide
2013-09-26 12:11 - 2013-09-26 12:11 - 00444400 _____ C:\Users\Mariejoanna81\Downloads\DLG_free-pdf-perfect_chip_de-DE10.exe
2013-09-20 14:02 - 2013-09-27 14:10 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\Beraterpunkt
2013-09-19 20:24 - 2013-09-19 20:24 - 00273936 _____ C:\Windows\Minidump\091913-59155-01.dmp
2013-09-19 14:28 - 2013-09-19 14:28 - 00043008 _____ C:\Users\Mariejoanna81\Desktop\PENDING1 (Aktuelle).xls
2013-09-17 23:19 - 2013-08-07 07:26 - 02724352 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-17 23:19 - 2013-08-07 06:45 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-17 23:19 - 2013-08-07 06:39 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-17 23:19 - 2013-08-07 06:30 - 02724352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-17 23:19 - 2013-08-07 06:10 - 16981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-17 23:19 - 2013-08-07 06:01 - 22563840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-17 23:19 - 2013-08-07 05:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-17 23:19 - 2013-08-07 05:47 - 00444416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-17 23:19 - 2013-08-07 04:57 - 05636608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-17 23:19 - 2013-08-07 04:54 - 04247040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-17 23:19 - 2013-08-07 04:39 - 12829184 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-17 23:19 - 2013-08-07 04:28 - 11087360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-17 23:19 - 2013-08-07 04:00 - 02207232 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-17 23:19 - 2013-08-07 03:53 - 01349120 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-17 23:19 - 2013-08-07 03:50 - 01788928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-17 23:19 - 2013-08-07 03:49 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-16 20:22 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-16 20:22 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-16 20:21 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-16 20:21 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-16 20:21 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-16 20:21 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-16 20:21 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-16 20:21 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-16 20:21 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-16 20:21 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-16 20:21 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-16 20:21 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-16 20:21 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-16 20:21 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-16 20:21 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-16 20:21 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-16 20:21 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-16 20:21 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-16 20:21 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-16 20:21 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-16 20:21 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-16 20:21 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-16 20:21 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-16 20:21 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-16 20:21 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-16 20:21 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-11 11:58 - 2013-09-11 11:58 - 00273992 _____ C:\Windows\Minidump\091113-54647-01.dmp
2013-09-05 11:04 - 2013-08-30 09:48 - 00270824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdis2.sys
2013-09-05 11:04 - 2013-08-30 09:48 - 00131232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFW.sys
2013-09-05 11:01 - 2013-09-05 11:02 - 161978728 _____ C:\Users\Mariejoanna81\Downloads\avast_internet_security_setup.exe
2013-09-05 10:52 - 2013-09-05 10:52 - 00273992 _____ C:\Windows\Minidump\090513-23041-01.dmp
2013-09-01 15:23 - 2013-09-01 15:24 - 51415040 _____ (Microsoft Corporation) C:\Users\Mariejoanna81\Downloads\IE10-Windows6.1-x64-de-de_b16521 (1).exe
2013-09-01 15:19 - 2013-09-28 10:38 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-01 15:19 - 2013-09-27 18:24 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-01 15:19 - 2013-09-01 15:19 - 00004120 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-09-01 15:19 - 2013-09-01 15:19 - 00003868 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-30 00:45 - 2013-08-30 00:45 - 00273992 _____ C:\Windows\Minidump\083013-21637-01.dmp

==================== One Month Modified Files and Folders =======

2013-09-28 10:53 - 2013-09-28 10:53 - 01953880 _____ (Farbar) C:\Users\Mariejoanna81\Downloads\FRST64(1).exe
2013-09-28 10:47 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-28 10:47 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-28 10:44 - 2012-06-15 16:50 - 00003946 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{DD81BAFB-538D-47AC-8FF5-230EA6E43488}
2013-09-28 10:44 - 2012-06-15 16:49 - 01131198 _____ C:\Windows\WindowsUpdate.log
2013-09-28 10:39 - 2013-03-03 20:11 - 00003370 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2766355210-2261221984-3006064297-1000
2013-09-28 10:39 - 2013-02-03 03:16 - 00003252 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2766355210-2261221984-3006064297-1000
2013-09-28 10:39 - 2013-02-02 23:15 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-28 10:39 - 2012-06-25 12:38 - 00000000 ___RD C:\Users\Mariejoanna81\Dropbox
2013-09-28 10:39 - 2012-06-25 12:30 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\Dropbox
2013-09-28 10:39 - 2012-06-17 15:34 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\Skype
2013-09-28 10:38 - 2013-09-01 15:19 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-28 10:38 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-28 10:37 - 2009-07-14 06:51 - 00058398 _____ C:\Windows\setupact.log
2013-09-27 19:14 - 2012-06-17 18:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-27 18:29 - 2013-05-12 12:07 - 00003348 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2766355210-2261221984-3006064297-1000
2013-09-27 18:29 - 2013-02-03 03:06 - 00003230 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2766355210-2261221984-3006064297-1000
2013-09-27 18:24 - 2013-09-01 15:19 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-27 14:10 - 2013-09-20 14:02 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\Beraterpunkt
2013-09-27 09:51 - 2012-06-15 12:36 - 00509688 _____ C:\Windows\PFRO.log
2013-09-26 14:46 - 2013-09-26 14:46 - 01095080 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00973736 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00000000 ____D C:\ProgramData\Oracle
2013-09-26 14:46 - 2009-08-18 20:13 - 00000000 ____D C:\Program Files\Java
2013-09-26 14:45 - 2013-09-26 14:44 - 30669224 _____ (Oracle Corporation) C:\Users\Mariejoanna81\Downloads\jre-7u40-windows-x64.exe
2013-09-26 13:55 - 2013-09-26 13:55 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\PDF Architect
2013-09-26 13:54 - 2013-09-26 13:53 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2013-09-26 13:53 - 2012-07-02 18:56 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\pdfforge
2013-09-26 13:30 - 2013-09-26 13:30 - 00052364 _____ C:\Users\Mariejoanna81\Desktop\FRST.txt
2013-09-26 13:30 - 2013-09-26 13:30 - 00038276 _____ C:\Users\Mariejoanna81\Desktop\Addition.txt
2013-09-26 13:26 - 2013-09-26 13:25 - 00038276 _____ C:\Users\Mariejoanna81\Downloads\Addition.txt
2013-09-26 13:23 - 2013-09-26 13:23 - 00000000 ____D C:\FRST
2013-09-26 13:22 - 2013-09-26 13:22 - 01956432 _____ (Farbar) C:\Users\Mariejoanna81\Downloads\FRST64.exe
2013-09-26 12:37 - 2012-06-17 16:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-26 12:29 - 2013-09-26 12:17 - 00000000 ____D C:\ProgramData\Freemium
2013-09-26 12:28 - 2013-09-26 12:28 - 01527912 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-26 12:28 - 2009-07-14 19:58 - 00657948 _____ C:\Windows\system32\perfh007.dat
2013-09-26 12:28 - 2009-07-14 19:58 - 00131288 _____ C:\Windows\system32\perfc007.dat
2013-09-26 12:24 - 2013-09-26 12:23 - 17810632 _____ (pdfforge GmbH) C:\Users\Mariejoanna81\Downloads\PDFCreator-1_7_1_setup.exe
2013-09-26 12:18 - 2013-09-26 12:18 - 00010464 _____ C:\Windows\SysWOW64\sx_p2d.tlb
2013-09-26 12:16 - 2013-09-26 12:16 - 00000000 ____D C:\Users\Mariejoanna81\Downloads\freepdf
2013-09-26 12:13 - 2013-09-26 12:13 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\Windows Net Data
2013-09-26 12:13 - 2012-06-15 16:50 - 00000000 ___RD C:\Users\Mariejoanna81\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-26 12:12 - 2013-09-26 12:11 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Local\DownloadGuide
2013-09-26 12:11 - 2013-09-26 12:11 - 00444400 _____ C:\Users\Mariejoanna81\Downloads\DLG_free-pdf-perfect_chip_de-DE10.exe
2013-09-26 11:19 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-26 01:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-25 23:39 - 2013-07-26 00:29 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\TELEKOM
2013-09-20 20:45 - 2012-10-14 22:15 - 00000000 ____D C:\Users\Mariejoanna81\Documents\EXPERT
2013-09-20 14:03 - 2013-06-11 18:17 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\pleasure
2013-09-20 13:26 - 2013-02-26 13:56 - 00780800 ___SH C:\Users\Mariejoanna81\Desktop\Thumbs.db
2013-09-20 11:14 - 2012-06-17 18:15 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 11:14 - 2012-06-17 18:15 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-20 11:14 - 2012-06-17 18:15 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-19 20:24 - 2013-09-19 20:24 - 00273936 _____ C:\Windows\Minidump\091913-59155-01.dmp
2013-09-19 20:24 - 2013-01-06 14:38 - 00000000 ____D C:\Windows\Minidump
2013-09-19 20:23 - 2013-02-04 12:24 - 778185296 _____ C:\Windows\MEMORY.DMP
2013-09-19 14:28 - 2013-09-19 14:28 - 00043008 _____ C:\Users\Mariejoanna81\Desktop\PENDING1 (Aktuelle).xls
2013-09-19 11:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-19 11:04 - 2012-06-15 16:50 - 00000000 ___RD C:\Users\Mariejoanna81\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-17 23:44 - 2009-07-14 06:45 - 00456376 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-17 23:27 - 2013-08-08 14:46 - 00000000 ____D C:\Windows\system32\MRT
2013-09-17 23:21 - 2012-06-17 16:49 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-17 23:20 - 2012-06-15 12:14 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-17 23:06 - 2012-06-20 13:56 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-09-17 23:03 - 2012-06-15 16:49 - 00000000 ____D C:\Users\Mariejoanna81
2013-09-17 23:02 - 2009-08-18 20:12 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-09-17 23:01 - 2012-06-17 18:19 - 00000000 ____D C:\ProgramData\Real
2013-09-17 23:01 - 2012-06-15 12:14 - 00000000 __RHD C:\MSOCache
2013-09-17 23:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-09-17 01:59 - 2013-03-21 14:52 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\LADEN_PROJEKT
2013-09-11 11:58 - 2013-09-11 11:58 - 00273992 _____ C:\Windows\Minidump\091113-54647-01.dmp
2013-09-05 11:02 - 2013-09-05 11:01 - 161978728 _____ C:\Users\Mariejoanna81\Downloads\avast_internet_security_setup.exe
2013-09-05 10:52 - 2013-09-05 10:52 - 00273992 _____ C:\Windows\Minidump\090513-23041-01.dmp
2013-09-01 15:24 - 2013-09-01 15:23 - 51415040 _____ (Microsoft Corporation) C:\Users\Mariejoanna81\Downloads\IE10-Windows6.1-x64-de-de_b16521 (1).exe
2013-09-01 15:20 - 2012-06-15 12:10 - 00000000 ____D C:\Program Files (x86)\Google
2013-09-01 15:19 - 2013-09-01 15:19 - 00004120 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-09-01 15:19 - 2013-09-01 15:19 - 00003868 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-30 09:48 - 2013-09-05 11:04 - 00270824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdis2.sys
2013-08-30 09:48 - 2013-09-05 11:04 - 00131232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFW.sys
2013-08-30 09:48 - 2013-04-02 23:43 - 00204880 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-08-30 09:48 - 2013-04-02 23:43 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-08-30 09:48 - 2013-04-02 23:43 - 00022600 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2013-08-30 09:48 - 2013-02-02 23:15 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-08-30 09:48 - 2013-02-02 23:15 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-08-30 09:48 - 2013-02-02 23:15 - 00080816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-08-30 09:48 - 2013-02-02 23:15 - 00072016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-08-30 09:48 - 2013-02-02 23:15 - 00064288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-08-30 09:48 - 2013-02-02 23:15 - 00033400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-08-30 09:47 - 2013-02-02 23:15 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-08-30 09:47 - 2012-06-20 13:56 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-08-30 00:45 - 2013-08-30 00:45 - 00273992 _____ C:\Windows\Minidump\083013-21637-01.dmp

Some content of TEMP:
====================
C:\Users\Mariejoanna81\AppData\Local\Temp\apptorun.exe
C:\Users\Mariejoanna81\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Mariejoanna81\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Mariejoanna81\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Mariejoanna81\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Mariejoanna81\AppData\Local\Temp\stubhelper.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-19 11:42

==================== End Of Log ============================

--- --- ---

--- --- ---

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-09-2013 02
Ran by Mariejoanna81 (administrator) on VAIO on 28-09-2013 10:54:17
Running from C:\Users\Mariejoanna81\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(InterVideo) c:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Dropbox, Inc.) C:\Users\Mariejoanna81\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(sw4you, Siegfried Weckmann) C:\Program Files (x86)\Hardcopy\hardcopy.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Windows Net) C:\Users\Mariejoanna81\AppData\Roaming\Windows Net Data\net.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Farbar) C:\Users\Mariejoanna81\Downloads\FRST64(1).exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [208384 2009-08-03] (Alps Electric Co., Ltd.)
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] 

(Intel Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7938080 2009-07-24] (Realtek 

Semiconductor)
HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-07-24] (Realtek Semiconductor 

Corp.)
HKCU\...\Run: [] - [x]
HKCU\...\Run: [NokiaSuite.exe] - C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1086376 2012-08-03] (Nokia)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18642024 2013-02-28] (Skype Technologies S.A.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] 

(Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe 

[59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-07-11] 

(RealNetworks, Inc.)
Startup: C:\Users\Mariejoanna81\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Mariejoanna81\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Mariejoanna81\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK
ShortcutTarget: Hardcopy.LNK -> C:\Program Files (x86)\Hardcopy\hardcopy.exe (sw4you, Siegfried Weckmann)
Startup: C:\Users\Mariejoanna81\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Mariejoanna81\AppData\Roaming\Windows Net Data\net.exe (Windows Net)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Certified-Toolbar Search

si=66920&st=chrome&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Certified-Toolbar Search

si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle

brand=SVEA&bmod=EU01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = Certified-Toolbar Search

si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Certified-Toolbar Search

si=66920&st=chrome&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Certified-Toolbar Search

si=66920&st=chrome&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = Certified-Toolbar Search

si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://search.certified-

toolbar.com?si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = Certified-Toolbar Search

si=66920&st=chrome&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = Certified-Toolbar Search

si=66920&st=chrome&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = Certified-Toolbar Search

si=66920&st=chrome&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B&q=
SearchScopes: HKLM-x32 - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://search.certified-

toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B&q={searchTerms}
SearchScopes: HKLM-x32 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = Certified-Toolbar Search

si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B&q={searchTerms}
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = Certified-Toolbar Search

si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B&q={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = Certified-Toolbar Search

si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B&q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}

&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = MyStart by IncrediBar.com

{searchTerms}&loc=IB_DS&a=6OyGJHfpZK&i=26
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast

\aswWebRepIE64.dll (AVAST Software)
BHO: Web Assistant - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension64.dll ()
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll 

(Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin

\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:

\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Web Assistant - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll ()
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast

\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common 

Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software

\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software

\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU -  No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU -  No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
DPF: HKLM {615A1925-0E5B-4767-A65E-3165AEAC32A3} hxxp://quickscan.bitdefender.com/qsax/qsax64.cab
DPF: HKLM-x32 {23A70515-51F4-4FFD-9CAA-5F31B83452E0} 

https://elias.kabeldeutschland.de/ecommunications_deu/21211/applets/SiebelAx_HI_Client.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype

\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Mariejoanna81\AppData\Roaming\Mozilla\Firefox\Profiles\q66nwk3y.default
FF NewTab: hxxp://search.certified-toolbar.com?

si=66920&st=newtab&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B
FF DefaultSearchEngine: Web Search
FF SearchEngineOrder.1: Web Search
FF SelectedSearchEngine: Web Search
FF Homepage: about:home
FF Keyword.URL: hxxp://search.certified-toolbar.com?

si=66920&st=chrome&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle 

Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( 

Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll 

( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll 

(Microsoft Corp.)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll 

(RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader

\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader

\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader

\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 - c:\program files (x86)\real\realplayer

\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins

\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update

\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update

\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: pricealarm - C:\Users\Mariejoanna81\AppData\Roaming\Mozilla\Firefox\Profiles\q66nwk3y.default

\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF Extension: Web Assistant - C:\Program Files\Web Assistant\Firefox
FF HKLM\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\Web Assistant\Firefox
FF Extension: Web Assistant - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF Extension: Web Assistant - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\Web Assistant\Firefox
FF Extension: Web Assistant - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks

\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{FCE04E1F-9378-4f39-96F6-5689A9159E45}] - C:\ProgramData\RealNetworks

\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: hxxp://search.certified-toolbar.com?

si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B
CHR RestoreOnStartup: "hxxp://search.certified-toolbar.com?

si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B"
CHR DefaultSearchURL: (Web Search) - Certified-Toolbar Search

si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-

28748E41B5971D66C482CC116C114E9B&q={searchTerms}
CHR DefaultSuggestURL: (Web Search) -       "suggest_url": ""
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\PepperFlash

\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application

\29.0.1547.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft 

Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll 

(Microsoft Corp.)
CHR Plugin: (Nokia Suite Enabler Plugin) - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData

\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks

\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks

\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll 

(RealDownloader)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files (x86)\real\realplayer

\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll 

(RealPlayer)
CHR Extension: (Docs) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions

\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions

\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions

\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions

\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: () - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions

\fmlgoencnlndpglbocajlimaikjohmab\background.html
CHR Extension: (RealDownloader) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions

\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.2_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default

\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions

\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx
CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader

\BrowserPlugins\Chrome\Ext\realdownloader.crx

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] 

(ArcSoft Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [137960 2013-08-30] (AVAST Software)
S4 IBUpdaterService; C:\Windows\system32\dmwu.exe [1455408 2013-04-07] ()
S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [111616 2013-08-07] (Microsoft Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe 

[39056 2013-04-16] ()
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-06-26] 

(Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-06-26] 

(Sonic Solutions)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [189984 2009-07-24] (Realtek 

Semiconductor)
S3 SOHDBSvr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-07-27] (Sony Corporation)
S3 SOHPlMgr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-07-27] (Sony Corporation)
S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2013-09-26] (soft Xpansion)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, 

Inc.)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO 

Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2009-

07-23] (Sony Corporation)
R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [642920 2009-07-22] 

(Sony Corporation)
R3 Vcsw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [313264 2009-07-23] 

(Sony Corporation)
R3 VzCdbSvc; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [206336 

2009-07-23] (Sony Corporation)
S4 Web Assistant Updater; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [188760 2013-01-29] ()

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R1 aswFW; C:\Windows\System32\Drivers\aswFW.sys [131232 2013-08-30] (AVAST Software)
R0 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R0 aswNdis; C:\Windows\System32\DRIVERS\aswNdis.sys [12368 2013-03-07] (ALWIL Software)
R0 aswNdis2; C:\Windows\System32\drivers\aswNdis2.sys [270824 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
R2 risdptsk; C:\Windows\system32\DRIVERS\risdsn64.sys [76288 2009-07-31] (REDC)
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240 2012-08-21] (GEAR Software Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-28 10:53 - 2013-09-28 10:53 - 01953880 _____ (Farbar) C:\Users\Mariejoanna81\Downloads\FRST64(1).exe
2013-09-26 14:46 - 2013-09-26 14:46 - 01095080 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00973736 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-

64.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00000000 ____D C:\ProgramData\Oracle
2013-09-26 14:44 - 2013-09-26 14:45 - 30669224 _____ (Oracle Corporation) C:\Users\Mariejoanna81\Downloads\jre-7u40-

windows-x64.exe
2013-09-26 13:55 - 2013-09-26 13:55 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\PDF Architect
2013-09-26 13:53 - 2013-09-26 13:54 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2013-09-26 13:53 - 2013-04-09 15:13 - 00110264 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2013-09-26 13:53 - 2012-05-05 11:54 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2013-09-26 13:53 - 2012-05-05 11:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL
2013-09-26 13:53 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL
2013-09-26 13:53 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL
2013-09-26 13:53 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL
2013-09-26 13:30 - 2013-09-26 13:30 - 00052364 _____ C:\Users\Mariejoanna81\Desktop\FRST.txt
2013-09-26 13:30 - 2013-09-26 13:30 - 00038276 _____ C:\Users\Mariejoanna81\Desktop\Addition.txt
2013-09-26 13:25 - 2013-09-26 13:26 - 00038276 _____ C:\Users\Mariejoanna81\Downloads\Addition.txt
2013-09-26 13:23 - 2013-09-26 13:23 - 00000000 ____D C:\FRST
2013-09-26 13:22 - 2013-09-26 13:22 - 01956432 _____ (Farbar) C:\Users\Mariejoanna81\Downloads\FRST64.exe
2013-09-26 12:28 - 2013-09-26 12:28 - 01527912 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-26 12:23 - 2013-09-26 12:24 - 17810632 _____ (pdfforge GmbH) C:\Users\Mariejoanna81\Downloads\PDFCreator-

1_7_1_setup.exe
2013-09-26 12:18 - 2013-09-26 12:18 - 00010464 _____ C:\Windows\SysWOW64\sx_p2d.tlb
2013-09-26 12:17 - 2013-09-26 12:29 - 00000000 ____D C:\ProgramData\Freemium
2013-09-26 12:16 - 2013-09-26 12:16 - 00000000 ____D C:\Users\Mariejoanna81\Downloads\freepdf
2013-09-26 12:14 - 2013-08-13 08:38 - 00032328 _____ C:\Windows\Launcher.exe
2013-09-26 12:13 - 2013-09-26 12:13 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\Windows Net Data
2013-09-26 12:11 - 2013-09-26 12:12 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Local\DownloadGuide
2013-09-26 12:11 - 2013-09-26 12:11 - 00444400 _____ C:\Users\Mariejoanna81\Downloads\DLG_free-pdf-perfect_chip_de-

DE10.exe
2013-09-20 14:02 - 2013-09-27 14:10 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\Beraterpunkt
2013-09-19 20:24 - 2013-09-19 20:24 - 00273936 _____ C:\Windows\Minidump\091913-59155-01.dmp
2013-09-19 14:28 - 2013-09-19 14:28 - 00043008 _____ C:\Users\Mariejoanna81\Desktop\PENDING1 (Aktuelle).xls
2013-09-17 23:19 - 2013-08-07 07:26 - 02724352 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-17 23:19 - 2013-08-07 06:45 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-17 23:19 - 2013-08-07 06:39 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-17 23:19 - 2013-08-07 06:30 - 02724352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-17 23:19 - 2013-08-07 06:10 - 16981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-17 23:19 - 2013-08-07 06:01 - 22563840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-17 23:19 - 2013-08-07 05:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-17 23:19 - 2013-08-07 05:47 - 00444416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-17 23:19 - 2013-08-07 04:57 - 05636608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-17 23:19 - 2013-08-07 04:54 - 04247040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-17 23:19 - 2013-08-07 04:39 - 12829184 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-17 23:19 - 2013-08-07 04:28 - 11087360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-17 23:19 - 2013-08-07 04:00 - 02207232 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-17 23:19 - 2013-08-07 03:53 - 01349120 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-17 23:19 - 2013-08-07 03:50 - 01788928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-17 23:19 - 2013-08-07 03:49 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-16 20:22 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-16 20:22 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-16 20:21 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-16 20:21 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-16 20:21 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-16 20:21 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-16 20:21 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-16 20:21 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-16 20:21 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-16 20:21 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-16 20:21 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-16 20:21 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-

base-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

file-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

threadpool-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

processthreads-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

sysinfo-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

synch-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

localregistry-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

localization-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

rtlsupport-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

processenvironment-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

namedpipe-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

misc-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

memory-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

libraryloader-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

heap-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

xstate-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

util-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

string-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

profile-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-

l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

interlocked-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

handle-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

fibers-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

errorhandling-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

delayload-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

debug-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

datetime-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-

console-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-16 20:21 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-16 20:21 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-16 20:21 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-16 20:21 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

file-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

processthreads-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

sysinfo-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

synch-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

misc-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

localregistry-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

localization-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

processenvironment-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

namedpipe-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

memory-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

libraryloader-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

interlocked-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

heap-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

string-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

rtlsupport-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

profile-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-

l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

handle-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

fibers-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

errorhandling-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

delayload-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

debug-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

datetime-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

console-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-16 20:21 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-16 20:21 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-16 20:21 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-16 20:21 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-16 20:21 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-16 20:21 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-

base-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

threadpool-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

xstate-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-

util-l1-1-0.dll
2013-09-16 20:21 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-16 20:21 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-16 20:21 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-16 20:21 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-11 11:58 - 2013-09-11 11:58 - 00273992 _____ C:\Windows\Minidump\091113-54647-01.dmp
2013-09-05 11:04 - 2013-08-30 09:48 - 00270824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdis2.sys
2013-09-05 11:04 - 2013-08-30 09:48 - 00131232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFW.sys
2013-09-05 11:01 - 2013-09-05 11:02 - 161978728 _____ C:\Users\Mariejoanna81\Downloads

\avast_internet_security_setup.exe
2013-09-05 10:52 - 2013-09-05 10:52 - 00273992 _____ C:\Windows\Minidump\090513-23041-01.dmp
2013-09-01 15:23 - 2013-09-01 15:24 - 51415040 _____ (Microsoft Corporation) C:\Users\Mariejoanna81\Downloads\IE10-

Windows6.1-x64-de-de_b16521 (1).exe
2013-09-01 15:19 - 2013-09-28 10:38 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-01 15:19 - 2013-09-27 18:24 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-01 15:19 - 2013-09-01 15:19 - 00004120 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-09-01 15:19 - 2013-09-01 15:19 - 00003868 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-30 00:45 - 2013-08-30 00:45 - 00273992 _____ C:\Windows\Minidump\083013-21637-01.dmp

==================== One Month Modified Files and Folders =======

2013-09-28 10:53 - 2013-09-28 10:53 - 01953880 _____ (Farbar) C:\Users\Mariejoanna81\Downloads\FRST64(1).exe
2013-09-28 10:47 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-

1.C7483456-A289-439d-8115-601632D005A0
2013-09-28 10:47 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-

0.C7483456-A289-439d-8115-601632D005A0
2013-09-28 10:44 - 2012-06-15 16:50 - 00003946 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{DD81BAFB-

538D-47AC-8FF5-230EA6E43488}
2013-09-28 10:44 - 2012-06-15 16:49 - 01131198 _____ C:\Windows\WindowsUpdate.log
2013-09-28 10:39 - 2013-03-03 20:11 - 00003370 _____ C:\Windows\System32\Tasks

\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2766355210-2261221984-3006064297-1000
2013-09-28 10:39 - 2013-02-03 03:16 - 00003252 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-

5-21-2766355210-2261221984-3006064297-1000
2013-09-28 10:39 - 2013-02-02 23:15 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-28 10:39 - 2012-06-25 12:38 - 00000000 ___RD C:\Users\Mariejoanna81\Dropbox
2013-09-28 10:39 - 2012-06-25 12:30 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\Dropbox
2013-09-28 10:39 - 2012-06-17 15:34 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\Skype
2013-09-28 10:38 - 2013-09-01 15:19 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-28 10:38 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-28 10:37 - 2009-07-14 06:51 - 00058398 _____ C:\Windows\setupact.log
2013-09-27 19:14 - 2012-06-17 18:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-27 18:29 - 2013-05-12 12:07 - 00003348 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-

5-21-2766355210-2261221984-3006064297-1000
2013-09-27 18:29 - 2013-02-03 03:06 - 00003230 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21

-2766355210-2261221984-3006064297-1000
2013-09-27 18:24 - 2013-09-01 15:19 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-27 14:10 - 2013-09-20 14:02 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\Beraterpunkt
2013-09-27 09:51 - 2012-06-15 12:36 - 00509688 _____ C:\Windows\PFRO.log
2013-09-26 14:46 - 2013-09-26 14:46 - 01095080 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00973736 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-

64.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00000000 ____D C:\ProgramData\Oracle
2013-09-26 14:46 - 2009-08-18 20:13 - 00000000 ____D C:\Program Files\Java
2013-09-26 14:45 - 2013-09-26 14:44 - 30669224 _____ (Oracle Corporation) C:\Users\Mariejoanna81\Downloads\jre-7u40-

windows-x64.exe
2013-09-26 13:55 - 2013-09-26 13:55 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\PDF Architect
2013-09-26 13:54 - 2013-09-26 13:53 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2013-09-26 13:53 - 2012-07-02 18:56 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\pdfforge
2013-09-26 13:30 - 2013-09-26 13:30 - 00052364 _____ C:\Users\Mariejoanna81\Desktop\FRST.txt
2013-09-26 13:30 - 2013-09-26 13:30 - 00038276 _____ C:\Users\Mariejoanna81\Desktop\Addition.txt
2013-09-26 13:26 - 2013-09-26 13:25 - 00038276 _____ C:\Users\Mariejoanna81\Downloads\Addition.txt
2013-09-26 13:23 - 2013-09-26 13:23 - 00000000 ____D C:\FRST
2013-09-26 13:22 - 2013-09-26 13:22 - 01956432 _____ (Farbar) C:\Users\Mariejoanna81\Downloads\FRST64.exe
2013-09-26 12:37 - 2012-06-17 16:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-26 12:29 - 2013-09-26 12:17 - 00000000 ____D C:\ProgramData\Freemium
2013-09-26 12:28 - 2013-09-26 12:28 - 01527912 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-26 12:28 - 2009-07-14 19:58 - 00657948 _____ C:\Windows\system32\perfh007.dat
2013-09-26 12:28 - 2009-07-14 19:58 - 00131288 _____ C:\Windows\system32\perfc007.dat
2013-09-26 12:24 - 2013-09-26 12:23 - 17810632 _____ (pdfforge GmbH) C:\Users\Mariejoanna81\Downloads\PDFCreator-

1_7_1_setup.exe
2013-09-26 12:18 - 2013-09-26 12:18 - 00010464 _____ C:\Windows\SysWOW64\sx_p2d.tlb
2013-09-26 12:16 - 2013-09-26 12:16 - 00000000 ____D C:\Users\Mariejoanna81\Downloads\freepdf
2013-09-26 12:13 - 2013-09-26 12:13 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\Windows Net Data
2013-09-26 12:13 - 2012-06-15 16:50 - 00000000 ___RD C:\Users\Mariejoanna81\AppData\Roaming\Microsoft\Windows\Start 

Menu\Programs\Startup
2013-09-26 12:12 - 2013-09-26 12:11 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Local\DownloadGuide
2013-09-26 12:11 - 2013-09-26 12:11 - 00444400 _____ C:\Users\Mariejoanna81\Downloads\DLG_free-pdf-perfect_chip_de-

DE10.exe
2013-09-26 11:19 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-26 01:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-25 23:39 - 2013-07-26 00:29 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\TELEKOM
2013-09-20 20:45 - 2012-10-14 22:15 - 00000000 ____D C:\Users\Mariejoanna81\Documents\EXPERT
2013-09-20 14:03 - 2013-06-11 18:17 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\pleasure
2013-09-20 13:26 - 2013-02-26 13:56 - 00780800 ___SH C:\Users\Mariejoanna81\Desktop\Thumbs.db
2013-09-20 11:14 - 2012-06-17 18:15 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows

\SysWOW64\FlashPlayerApp.exe
2013-09-20 11:14 - 2012-06-17 18:15 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows

\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-20 11:14 - 2012-06-17 18:15 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-19 20:24 - 2013-09-19 20:24 - 00273936 _____ C:\Windows\Minidump\091913-59155-01.dmp
2013-09-19 20:24 - 2013-01-06 14:38 - 00000000 ____D C:\Windows\Minidump
2013-09-19 20:23 - 2013-02-04 12:24 - 778185296 _____ C:\Windows\MEMORY.DMP
2013-09-19 14:28 - 2013-09-19 14:28 - 00043008 _____ C:\Users\Mariejoanna81\Desktop\PENDING1 (Aktuelle).xls
2013-09-19 11:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-19 11:04 - 2012-06-15 16:50 - 00000000 ___RD C:\Users\Mariejoanna81\AppData\Roaming\Microsoft\Windows\Start 

Menu\Programs\Administrative Tools
2013-09-17 23:44 - 2009-07-14 06:45 - 00456376 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-17 23:27 - 2013-08-08 14:46 - 00000000 ____D C:\Windows\system32\MRT
2013-09-17 23:21 - 2012-06-17 16:49 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-17 23:20 - 2012-06-15 12:14 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-17 23:06 - 2012-06-20 13:56 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-09-17 23:03 - 2012-06-15 16:49 - 00000000 ____D C:\Users\Mariejoanna81
2013-09-17 23:02 - 2009-08-18 20:12 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-09-17 23:01 - 2012-06-17 18:19 - 00000000 ____D C:\ProgramData\Real
2013-09-17 23:01 - 2012-06-15 12:14 - 00000000 __RHD C:\MSOCache
2013-09-17 23:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-09-17 01:59 - 2013-03-21 14:52 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\LADEN_PROJEKT
2013-09-11 11:58 - 2013-09-11 11:58 - 00273992 _____ C:\Windows\Minidump\091113-54647-01.dmp
2013-09-05 11:02 - 2013-09-05 11:01 - 161978728 _____ C:\Users\Mariejoanna81\Downloads

\avast_internet_security_setup.exe
2013-09-05 10:52 - 2013-09-05 10:52 - 00273992 _____ C:\Windows\Minidump\090513-23041-01.dmp
2013-09-01 15:24 - 2013-09-01 15:23 - 51415040 _____ (Microsoft Corporation) C:\Users\Mariejoanna81\Downloads\IE10-

Windows6.1-x64-de-de_b16521 (1).exe
2013-09-01 15:20 - 2012-06-15 12:10 - 00000000 ____D C:\Program Files (x86)\Google
2013-09-01 15:19 - 2013-09-01 15:19 - 00004120 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-09-01 15:19 - 2013-09-01 15:19 - 00003868 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-30 09:48 - 2013-09-05 11:04 - 00270824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdis2.sys
2013-08-30 09:48 - 2013-09-05 11:04 - 00131232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFW.sys
2013-08-30 09:48 - 2013-04-02 23:43 - 00204880 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-08-30 09:48 - 2013-04-02 23:43 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-08-30 09:48 - 2013-04-02 23:43 - 00022600 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2013-08-30 09:48 - 2013-02-02 23:15 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-08-30 09:48 - 2013-02-02 23:15 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-08-30 09:48 - 2013-02-02 23:15 - 00080816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-08-30 09:48 - 2013-02-02 23:15 - 00072016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-08-30 09:48 - 2013-02-02 23:15 - 00064288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-08-30 09:48 - 2013-02-02 23:15 - 00033400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-08-30 09:47 - 2013-02-02 23:15 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-08-30 09:47 - 2012-06-20 13:56 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-08-30 00:45 - 2013-08-30 00:45 - 00273992 _____ C:\Windows\Minidump\083013-21637-01.dmp

Some content of TEMP:
====================
C:\Users\Mariejoanna81\AppData\Local\Temp\apptorun.exe
C:\Users\Mariejoanna81\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Mariejoanna81\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Mariejoanna81\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Mariejoanna81\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Mariejoanna81\AppData\Local\Temp\stubhelper.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-19 11:42

==================== End Of Log ============================

--- --- ---

--- --- ---

M-K-D-B · 01.10.2013, 16:51

Servus,

Schritt 1
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 3
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Bitte poste mit deiner nächsten Antwort

die Logdatei von AdwCleaner,
die Logdatei von JRT,
die Logdatei von MBAM.

Verena72 · 02.10.2013, 19:48

Servus

,AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v3.006 - Bericht erstellt am 02/10/2013 um 19:01:08
# Updated 01/10/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Mariejoanna81 - VAIO
# Gestartet von : C:\Users\Mariejoanna81\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : IBUpdaterService
[#] Dienst Gelöscht : Web Assistant Updater

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\ProgramData\Premium
Ordner Gelöscht : C:\Windows\SysWOW64\ARFC
Ordner Gelöscht : C:\Windows\SysWOW64\jmdp
Ordner Gelöscht : C:\Windows\SysWOW64\WNLT
Ordner Gelöscht : C:\Program Files\Web Assistant
Ordner Gelöscht : C:\Windows\System32\ARFC
Ordner Gelöscht : C:\Users\Mariejoanna81\AppData\Local\DownloadGuide
Ordner Gelöscht : C:\Users\Mariejoanna81\AppData\LocalLow\incredibar.com
Ordner Gelöscht : C:\Users\Mariejoanna81\AppData\LocalLow\SimplyTech
Ordner Gelöscht : C:\Users\Mariejoanna81\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\Mariejoanna81\AppData\Roaming\pdfforge
Ordner Gelöscht : C:\Users\Mariejoanna81\AppData\Roaming\Windows Net Data
Datei Gelöscht : C:\Windows\System32\dmwu.exe
Datei Gelöscht : C:\Windows\System32\ImhxxpComm.dll
Datei Gelöscht : C:\Users\Mariejoanna81\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
Datei Gelöscht : C:\Users\Mariejoanna81\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_491425\searchplugins\MyStart Search.xml
Datei Gelöscht : C:\Users\Mariejoanna81\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_491425\searchplugins\Web Search.xml
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Web Search.xml

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403A-B9D2-65C292C39087}]
Wert Gelöscht : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403A-B9D2-65C292C39087}]
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]
Wert Gelöscht : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_install_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_install_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\wnlt
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKLM\Software\Web Assistant
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\wnlt
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Web Assistant
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\wnlt
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1

***** [ Browser ] *****

-\\ Internet Explorer v0.0.0.0

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Bar]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Bar]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [(Default)]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [(Default)]

-\\ Mozilla Firefox v23.0.1 (de)

[ Datei : C:\Users\Mariejoanna81\AppData\Roaming\Mozilla\Firefox\Profiles\q66nwk3y.default\prefs.js ]

Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://search.certified-toolbar.com?si=66920&st=newtab&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B");
Zeile gelöscht : user_pref("browser.search.defaultengine", "Web Search");
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelöscht : user_pref("browser.search.order.1", "Web Search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelöscht : user_pref("extensions.crossrider.bic", "14159c3b6fb690afa31e41a750ea3426");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://search.certified-toolbar.com?si=66920&st=chrome&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q=");
Zeile gelöscht : user_pref("wtb6787.homepage", "hxxp://search.certified-toolbar.com?si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B");
Zeile gelöscht : user_pref("wtb6787.newtab", "hxxp://search.certified-toolbar.com?si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B");

[ Datei : C:\Users\Mariejoanna81\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_491425\prefs.js ]

Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://search.certified-toolbar.com?si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B");
Zeile gelöscht : user_pref("wtb6787.homepage", "hxxp://search.certified-toolbar.com?si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B");
Zeile gelöscht : user_pref("wtb6787.newtab", "hxxp://search.certified-toolbar.com?si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B");
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelöscht : user_pref("browser.search.defaultengine", "Web Search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelöscht : user_pref("browser.search.order.1", "Web Search");
Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://search.certified-toolbar.com?si=66920&st=newtab&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://search.certified-toolbar.com?si=66920&st=chrome&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q=");

-\\ Google Chrome v30.0.1599.66

[ Datei : C:\Users\Mariejoanna81\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht : homepage
Gelöscht : search_url
Gelöscht : keyword

*************************

AdwCleaner[R0].txt - [16226 octets] - [02/10/2013 18:59:53]
AdwCleaner[S0].txt - [12145 octets] - [02/10/2013 19:01:08]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [12206 octets] ##########

--- --- ---
VLG VerenaJRT Logfile:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.3 (09.27.2013:1)
OS: Windows 7 Home Premium x64
Ran by Mariejoanna81 on 02.10.2013 at 20:33:35,13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\\DisplayName
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\\URL
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\\URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2766355210-2261221984-3006064297-1000\Software\web assistant
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2766355210-2261221984-3006064297-1000\Software\SweetIM
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted: [File] C:\user.js
Emptied folder: C:\Users\Mariejoanna81\AppData\Roaming\mozilla\firefox\profiles\q66nwk3y.default\minidumps [2 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 02.10.2013 at 20:46:08,92
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

--- --- ---

M-K-D-B · 03.10.2013, 08:49

Servus,

fehlt noch die Logdatei von MBAM.

Verena72 · 04.10.2013, 22:43

Servus,

ach ja richtig

Malwarebytes Anti-Malware (Test) 1.75.0.1300
Malwarebytes : Free Anti-Malware download

Datenbank Version: v2013.10.02.11

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9431.194
Mariejoanna81 :: VAIO [Administrator]

Schutz: Aktiviert

04.10.2013 23:35:32
mbam-log-2013-10-04 (23-35-32).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 214353
Laufzeit: 7 Minute(n), 26 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

VG Verena

M-K-D-B · 05.10.2013, 10:11

Servus,

sieht gut aus.

Wir spüren die letzten Reste auf, damit wir sie später entfernen können:

Schritt 1
Kontrollscan mit FRST
Führe wie zuvor beschrieben einen Scan mit FRST aus.
Setze dazu eine Haken bei Addition.txt rechts unten und klicke auf Scan.
Es werden wieder zwei Logdateien erzeugt. Poste mir diese.

Schritt 2
Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)

Doppelklicke auf die SystemLook.exe, um das Tool zu starten.

Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

Code:

ATTFilter

:filefind
*IBUpdater*
*Web Assistant*
*Premium*
*incredibar*
*SimplyTech*
*OpenCandy*
*HomeTab*
*sweetim*
*Crossrider*
*certified-toolbar*

:folderfind
*IBUpdater*
*Web Assistant*
*Premium*
*incredibar*
*SimplyTech*
*OpenCandy*
*HomeTab*
*sweetim*
*Crossrider*
*certified-toolbar*

:regfind
IBUpdater
Web Assistant
Premium
incredibar
SimplyTech
OpenCandy
HomeTab
sweetim
Crossrider
certified-toolbar

Klicke nun auf den Button Look, um den Scan zu starten.
Der Suchlauf kann einige Zeit dauern.
Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.

Gibt es noch Probleme mit Malware? Wenn ja, welche?
Wie läuft der Rechner derzeit?

Bitte poste mit deiner nächsten Antwort

die beiden Logdateien von FRST,
die Logdatei von SystemLook,
die Beantwortung der gestellten Fragen.

Verena72 · 06.10.2013, 11:43

Servus

FRST Additions Logfile:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Mariejoanna81 at 2013-10-06 12:39:25
Running from C:\Users\Mariejoanna81\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Internet Security (Disabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AS: avast! Internet Security (Disabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: avast! Internet Security (Enabled) {131692B0-0864-D491-4E21-3A3A1D8BBB47}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Photoshop Elements 7.0 (x32 Version: 7.0.1)
Adobe Photoshop Elements 7.0 (x32 Version: 7.0.1.3)
Adobe Premiere Elements 7.0 (x32 Version: 7.0.1)
Adobe Premiere Elements 7.0 (x32 Version: 7.0.1.3)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8)
Alps Pointing-device for VAIO
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.1.85)
ArcSoft WebCam Companion 3 (x32 Version: 3.0.21.193)
ATI Catalyst Install Manager (Version: 3.0.732.0)
avast! Internet Security (x32 Version: 8.0.1497.0)
Bonjour (Version: 3.0.0.10)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Full New (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Light (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Previews Common (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center InstallProxy (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Localization All (x32 Version: 2009.0710.1127.18698)
CCC Help Chinese Standard (x32 Version: 2009.0720.2144.37243)
CCC Help Chinese Traditional (x32 Version: 2009.0720.2144.37243)
CCC Help Czech (x32 Version: 2009.0720.2144.37243)
CCC Help Danish (x32 Version: 2009.0720.2144.37243)
CCC Help Dutch (x32 Version: 2009.0720.2144.37243)
CCC Help English (x32 Version: 2009.0720.2144.37243)
CCC Help Finnish (x32 Version: 2009.0720.2144.37243)
CCC Help French (x32 Version: 2009.0720.2144.37243)
CCC Help German (x32 Version: 2009.0720.2144.37243)
CCC Help Greek (x32 Version: 2009.0720.2144.37243)
CCC Help Hungarian (x32 Version: 2009.0720.2144.37243)
CCC Help Italian (x32 Version: 2009.0720.2144.37243)
CCC Help Japanese (x32 Version: 2009.0720.2144.37243)
CCC Help Korean (x32 Version: 2009.0720.2144.37243)
CCC Help Norwegian (x32 Version: 2009.0720.2144.37243)
CCC Help Polish (x32 Version: 2009.0720.2144.37243)
CCC Help Portuguese (x32 Version: 2009.0720.2144.37243)
CCC Help Russian (x32 Version: 2009.0720.2144.37243)
CCC Help Spanish (x32 Version: 2009.0720.2144.37243)
CCC Help Swedish (x32 Version: 2009.0720.2144.37243)
CCC Help Thai (x32 Version: 2009.0720.2144.37243)
CCC Help Turkish (x32 Version: 2009.0720.2144.37243)
ccc-core-static (x32 Version: 2009.0710.1127.18698)
ccc-utility64 (Version: 2009.0710.1127.18698)
Choice Guard (x32 Version: 1.2.87.0)
Click to Disc (x32 Version: 1.2.70.06160)
Click to Disc Editor (x32 Version: 2.0.02)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000)
Dolby Control Center (Version: 1.2.0702)
Dropbox (HKCU Version: 2.0.22)
Einstellungen für VAIO-Inhaltsüberwachung (x32 Version: 2.4.0.06120)
FileZilla Client 3.5.3 (x32 Version: 3.5.3)
Google Chrome (x32 Version: 30.0.1599.69)
Hardcopy (C:\Program Files (x86)\Hardcopy) (x32 Version: 2012.03.31)
Intel® Matrix Storage Manager
IrfanView (remove only) (x32 Version: 4.36)
iTunes (Version: 11.0.4.4)
Java 7 Update 40 (64-bit) (Version: 7.0.400)
Java(TM) 6 Update 14 (64-bit) (Version: 6.0.140)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.6612.1000)
Microsoft Office Professional Plus 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Suite Activation Assistant (x32 Version: 2.9)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server Compact 3.5 SP1 English (x32 Version: 3.5.5692.0)
Microsoft SQL Server Compact 3.5 SP1 x64 English (Version: 3.5.5692.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Works (x32 Version: 9.7.0621)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1)
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1)
MSVC80_x64_v2 (Version: 1.0.3.0)
MSVC80_x86_v2 (x32 Version: 1.0.3.0)
MSVC90_x64 (Version: 1.0.1.2)
MSVC90_x86 (x32 Version: 1.0.1.2)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Music Transfer (x32 Version: 1.3.01.13160)
MusicStation (x32 Version: 1.2.2.180)
Nokia Connectivity Cable Driver (x32 Version: 7.1.78.0)
Nokia Suite (x32 Version: 3.5.34.0)
PC Connectivity Solution (x32 Version: 12.0.32.0)
PDFCreator (x32 Version: 1.7.1)
Primo (x32 Version: 1.00.0000)
RealDownloader (x32 Version: 1.3.2)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0)
RealPlayer (x32 Version: 16.0.2)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.5897)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5886)
RealUpgrade 1.1 (x32 Version: 1.1.0)
Regi (Version: 1.00.0000)
Roxio Central Audio (x32 Version: 3.8.0)
Roxio Central Copy (x32 Version: 3.8.0)
Roxio Central Core (x32 Version: 3.8.0)
Roxio Central Data (x32 Version: 3.8.0)
Roxio Central Tools (x32 Version: 3.8.0)
Roxio Easy Media Creator 10 LJ (x32 Version: 10.3)
Roxio Easy Media Creator Home (x32 Version: 10.3.121)
Runtime (x32 Version: 1.00.0000)
Setting Utility Series (x32 Version: 5.0.0.07300)
Skype™ 6.3 (x32 Version: 6.3.105)
Sony Home Network Library (x32 Version: 2.0.0.07280)
Sony Picture Utility (x32 Version: 4.2.12.16210)
TeamViewer 8 (x32 Version: 8.0.16642)
Unterstützung für VAIO-Präsentation (x32 Version: 2.0.0.05270)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2825641) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
VAIO Content Metadata Intelligent Analyzing Manager (x32 Version: 3.5.0.06261)
VAIO Content Metadata Intelligent Network Service Manager (x32 Version: 3.5.0.06260)
VAIO Content Metadata Manager Settings (x32 Version: 3.5.0.06260)
VAIO Content Metadata XML Interface Library (x32 Version: 3.5.0.06180)
VAIO Content Monitoring Settings (x32 Version: 2.4.0.06120)
VAIO Control Center (x32 Version: 4.0.0.06120)
VAIO Data Restore Tool (x32 Version: 1.1.01.06290)
VAIO DVD Menu Data Basic (x32 Version: 1.0.00.08130)
VAIO Energie Verwaltung (x32 Version: 4.0.0.07160)
VAIO Entertainment Platform (x32 Version: 3.5.0.07230)
VAIO Event Service (x32 Version: 5.0.0.07010)
VAIO FW screensaver (x32 Version: 1.0.0.0)
VAIO Gate (x32 Version: 1.0.0.08050)
VAIO Marketing Tools (x32)
VAIO Media plus (x32 Version: 2.0.0.07280)
VAIO Media plus Opening Movie (x32 Version: 1.2.0.09100)
VAIO Movie Story (x32 Version: 1.5.00.06191)
VAIO Movie Story Template Data (x32 Version: 1.5.00.06010)
VAIO Original Function Settings (x32 Version: 2.0.0.07010)
VAIO Original Funktion Einstellungen (x32 Version: 2.0.0.07010)
VAIO Premium Partners 1.00 (x32)
VAIO Smart Network (x32 Version: 3.0.0.08120)
VAIO Wallpaper Contents (x32 Version: 2.0.0.06010)
VAIO-Support für Übertragungen (x32 Version: 1.0.0.07290)
WIDCOMM Bluetooth Software (Version: 6.2.0.9600)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.6)
Windows Live Call (x32 Version: 14.0.8050.1202)
Windows Live Communications Platform (x32 Version: 14.0.8050.1202)
Windows Live Essentials (x32 Version: 14.0.8050.1202)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0)
WinDVD BD for VAIO (x32 Version: 8.0.20.79)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
Yahoo! Detect (x32)

==================== Restore Points  =========================

16-09-2013 18:20:43 Windows Update
17-09-2013 20:58:51 Wiederherstellungsvorgang
17-09-2013 21:09:31 Windows Update
24-09-2013 19:20:17 Windows Update
26-09-2013 10:15:19 Free Pdf Perfect Prereq
26-09-2013 10:34:09 Free Pdf Perfect Prereq
26-09-2013 11:59:07 Removed PDF Architect
26-09-2013 12:45:48 Installed Java 7 Update 40 (64-bit)
26-09-2013 12:48:30 Removed Java 7 Update 25
28-09-2013 08:43:33 Windows Update
04-10-2013 21:36:10 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {16E3BE4A-828B-4680-BC67-FEF30B6F8059} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-01] (Google Inc.)
Task: {206751DC-B086-40A2-A4F2-5A068F3C59A1} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {25B9B830-6CDE-4F46-987D-1A74AE30EC08} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated)
Task: {2D68214A-83DC-42AA-B03F-8BC7317CC779} - System32\Tasks\hcdll2_ex_Win32 => C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe [2012-01-19] ()
Task: {5062ABC6-A1B2-4323-A8CD-060FD517DF49} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2766355210-2261221984-3006064297-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {53CA0D25-FCCD-4829-B5AD-B5A5626164EF} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2766355210-2261221984-3006064297-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {60ECC8EE-5ECB-432B-A02D-4C8DFA83BA98} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2766355210-2261221984-3006064297-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-04-16] (RealNetworks, Inc.)
Task: {78F4054B-9957-4659-8387-F3C7E4A58EED} - System32\Tasks\Sun Microsystems-Online-Aktualisierungsprogramm => C:\Program Files\Java\jre6\bin\jusched.exe [2009-08-18] (Sun Microsystems, Inc.)
Task: {7FB48D9F-3DB1-4E8F-9A0F-AE41DC6F018D} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2766355210-2261221984-3006064297-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {89FA052F-4F14-4090-A6B9-B30ED76EB1DB} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2009-08-05] (Sony Corporation)
Task: {919794C7-4CA0-4C8F-AF4E-92A347EF50B4} - System32\Tasks\{CC544450-4226-40BC-AC6C-0890D4281D92} => C:\Program Files (x86)\PDFCreator\PDFCreator.exe [2013-09-26] (pdfforge  GmbH)
Task: {9E856737-8ED3-4EB5-8D50-12F3C5C2346E} - System32\Tasks\hcdll2_ex_x64 => C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe [2012-01-19] ()
Task: {C15CD583-E6F1-49F2-9995-FAB95C50FE72} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2766355210-2261221984-3006064297-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {D204B803-56DB-4428-908F-42391EBA0B14} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2766355210-2261221984-3006064297-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {D82EFE67-DDD0-45AC-8FF2-AA8D4EF7AFFA} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [2013-07-11] (RealNetworks, Inc.)
Task: {DA566FC4-3ADA-4AB3-8D3A-80F0CE715401} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {DD8DEE04-570F-4EDF-892D-DABEE5575EC7} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2766355210-2261221984-3006064297-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {E029CD43-0835-49F5-BB98-BA623582C2C1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-01] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-06-17 15:40 - 2012-03-09 09:45 - 00118784 _____ () C:\Program Files (x86)\Hardcopy\HcDLL2_36_x64.dll
2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2013-10-04 23:28 - 2013-10-04 18:49 - 02104832 _____ () C:\Program Files\AVAST Software\Avast\defs\13100401\algo.dll
2013-04-21 21:44 - 2013-04-21 21:44 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-04-21 21:44 - 2013-04-21 21:44 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-06-17 15:40 - 2012-03-09 09:46 - 00110080 _____ () C:\Program Files (x86)\Hardcopy\HcDLL2_36_Win32.dll
2012-06-15 12:22 - 2009-07-01 11:49 - 00010752 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll
2012-06-15 12:22 - 2009-07-01 11:49 - 00009728 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll
2012-08-03 16:06 - 2012-08-03 16:06 - 08506792 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtGui4.dll
2012-08-03 16:06 - 2012-08-03 16:06 - 02353576 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtCore4.dll
2012-08-03 16:06 - 2012-08-03 16:06 - 01013672 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtNetwork4.dll
2012-08-03 16:06 - 2012-08-03 16:06 - 00363944 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtXml4.dll
2012-08-03 16:06 - 2012-08-03 16:06 - 02480552 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtDeclarative4.dll
2012-08-03 16:06 - 2012-08-03 16:06 - 01346472 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtScript4.dll
2012-08-03 16:06 - 2012-08-03 16:06 - 00205736 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtSql4.dll
2012-08-03 16:06 - 2012-08-03 16:06 - 02652584 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtXmlPatterns4.dll
2012-08-03 16:06 - 2012-08-03 16:06 - 00032680 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qgif4.dll
2012-08-03 16:06 - 2012-08-03 16:06 - 00035240 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qico4.dll
2012-08-03 16:06 - 2012-08-03 16:06 - 00206760 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qjpeg4.dll
2012-08-03 16:06 - 2012-08-03 16:06 - 11166120 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtWebKit4.dll
2012-08-03 16:07 - 2012-08-03 16:07 - 00276392 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\phonon4.dll
2012-07-02 11:29 - 2012-07-02 11:29 - 00391600 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\ssoengine.dll
2012-07-02 11:29 - 2012-07-02 11:29 - 00059280 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\securestorage.dll
2012-08-03 16:06 - 2012-08-03 16:06 - 00437672 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\NService.dll
2012-08-03 16:06 - 2012-08-03 16:06 - 00445864 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\sqldrivers\qsqlite4.dll
2012-08-03 16:06 - 2012-08-03 16:06 - 00520104 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtMultimediaKit1.dll
2012-08-03 16:06 - 2012-08-03 16:06 - 00720296 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtOpenGL4.dll
2012-08-03 16:05 - 2012-08-03 16:05 - 00604072 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\CommonUpdateChecker.dll
2012-07-02 11:28 - 2012-07-02 11:28 - 00110080 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\mediaservice\dsengine.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 24978944 _____ () C:\Users\Mariejoanna81\AppData\Roaming\Dropbox\bin\libcef.dll
2012-06-17 15:40 - 2012-01-07 10:54 - 00047616 _____ () C:\Program Files (x86)\Hardcopy\hardcopy_04.dll
2012-06-17 15:40 - 2012-03-21 14:10 - 02941440 _____ () C:\Program Files (x86)\Hardcopy\HcDllS.dll
2012-01-08 15:41 - 2012-01-08 15:41 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2013-10-04 23:32 - 2013-10-03 08:02 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll
2013-10-04 23:32 - 2013-10-03 08:02 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll
2013-10-04 23:32 - 2013-10-03 08:03 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
2013-10-04 23:32 - 2013-10-03 08:03 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
2013-10-04 23:32 - 2013-10-03 08:02 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:A8AF8B49
AlternateDataStreams: C:\Users\Mariejoanna81\Desktop\konzert.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Mariejoanna81\Desktop\konzert.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Mariejoanna81\Desktop\Maik Comez_beschwerde2.docx.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Mariejoanna81\Desktop\Maik Comez_beschwerde2.docx.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/06/2013 00:30:38 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (10/06/2013 00:28:12 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)

Error: (10/06/2013 00:28:08 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (10/04/2013 11:57:54 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5102

Error: (10/04/2013 11:57:54 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5102

Error: (10/04/2013 11:57:54 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (10/04/2013 11:57:53 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4103

Error: (10/04/2013 11:57:53 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4103

Error: (10/04/2013 11:57:53 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (10/04/2013 11:57:52 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3105


System errors:
=============
Error: (10/06/2013 00:28:16 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (10/06/2013 00:26:59 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.

Error: (10/06/2013 00:26:53 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (10/06/2013 00:26:53 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (10/05/2013 00:12:03 AM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (10/05/2013 00:12:00 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (10/04/2013 11:24:43 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (10/03/2013 05:14:36 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (10/03/2013 10:59:45 AM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (10/03/2013 08:58:14 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)


Microsoft Office Sessions:
=========================
Error: (06/29/2012 09:34:10 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.6612.1000. This session lasted 203 seconds with 120 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 33%
Total physical RAM: 6111.02 MB
Available physical RAM: 4058.63 MB
Total Pagefile: 12220.23 MB
Available Pagefile: 9752.89 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:230.44 GB) (Free:87.17 GB) NTFS
Drive h: (Volume) (Fixed) (Total:224.13 GB) (Free:223.73 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: A20AFACC)
Partition 1: (Not Active) - (Size=11 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=230 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=224 GB) - (Type=OF Extended)

==================== End Of Log ============================

--- --- ---

Servus

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Mariejoanna81 (administrator) on VAIO on 06-10-2013 12:37:38
Running from C:\Users\Mariejoanna81\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(InterVideo) c:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Dropbox, Inc.) C:\Users\Mariejoanna81\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe
(sw4you, Siegfried Weckmann) C:\Program Files (x86)\Hardcopy\hardcopy.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Mariejoanna81\Downloads\FRST64 (1).exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [208384 2009-08-03] (Alps Electric Co., Ltd.)
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7938080 2009-07-24] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-07-24] (Realtek Semiconductor Corp.)
HKCU\...\Run: [] - [x]
HKCU\...\Run: [NokiaSuite.exe] - C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1086376 2012-08-03] (Nokia)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18642024 2013-02-28] (Skype Technologies S.A.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-07-11] (RealNetworks, Inc.)
Startup: C:\Users\Mariejoanna81\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Mariejoanna81\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Mariejoanna81\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK
ShortcutTarget: Hardcopy.LNK -> C:\Program Files (x86)\Hardcopy\hardcopy.exe (sw4you, Siegfried Weckmann)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle
SearchScopes: HKLM-x32 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = Google
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = Google
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM {615A1925-0E5B-4767-A65E-3165AEAC32A3} hxxp://quickscan.bitdefender.com/qsax/qsax64.cab
DPF: HKLM-x32 {23A70515-51F4-4FFD-9CAA-5F31B83452E0} https://elias.kabeldeutschland.de/ecommunications_deu/21211/applets/SiebelAx_HI_Client.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Mariejoanna81\AppData\Roaming\Mozilla\Firefox\Profiles\q66nwk3y.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: pricealarm - C:\Users\Mariejoanna81\AppData\Roaming\Mozilla\Firefox\Profiles\q66nwk3y.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{FCE04E1F-9378-4f39-96F6-5689A9159E45}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: hxxp://search.certified-toolbar.com?si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B
CHR RestoreOnStartup: "hxxp://www.google.de/"
CHR DefaultSearchURL: (Web Search) - hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q={searchTerms}
CHR DefaultSuggestURL: (Web Search) -       "suggest_url": "",
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Nokia Suite Enabler Plugin) - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
CHR Extension: (Google Docs) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: () - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html
CHR Extension: (RealDownloader) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.2_1
CHR Extension: (Chrome In-App Payments service) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\MARIEJ~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [137960 2013-08-30] (AVAST Software)
S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [111616 2013-08-07] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] ()
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-06-26] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-06-26] (Sonic Solutions)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [189984 2009-07-24] (Realtek Semiconductor)
S3 SOHDBSvr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-07-27] (Sony Corporation)
S3 SOHPlMgr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-07-27] (Sony Corporation)
S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2013-09-26] (soft Xpansion)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2009-07-23] (Sony Corporation)
R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [642920 2009-07-22] (Sony Corporation)
R3 Vcsw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [313264 2009-07-23] (Sony Corporation)
R3 VzCdbSvc; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [206336 2009-07-23] (Sony Corporation)

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R1 aswFW; C:\Windows\System32\Drivers\aswFW.sys [131232 2013-08-30] (AVAST Software)
R0 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R0 aswNdis; C:\Windows\System32\DRIVERS\aswNdis.sys [12368 2013-03-07] (ALWIL Software)
R0 aswNdis2; C:\Windows\System32\drivers\aswNdis2.sys [270824 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R2 risdptsk; C:\Windows\system32\DRIVERS\risdsn64.sys [76288 2009-07-31] (REDC)
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240 2012-08-21] (GEAR Software Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-06 12:35 - 2013-10-06 12:35 - 01954124 _____ (Farbar) C:\Users\Mariejoanna81\Downloads\FRST64 (1).exe
2013-10-05 00:27 - 2013-10-05 01:03 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\AQUA_GLOBAL
2013-10-03 08:56 - 2013-10-03 08:56 - 00480240 _____ C:\Windows\Minidump\100313-26504-01.dmp
2013-10-02 23:38 - 2013-10-02 23:38 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-02 23:38 - 2013-10-02 23:38 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\Malwarebytes
2013-10-02 23:38 - 2013-10-02 23:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-02 23:38 - 2013-10-02 23:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-02 23:38 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-10-02 23:32 - 2013-10-02 23:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Mariejoanna81\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-02 20:46 - 2013-10-02 20:46 - 00001903 _____ C:\Users\Mariejoanna81\Desktop\JRT.txt
2013-10-02 20:33 - 2013-10-02 20:33 - 00000000 ____D C:\Windows\ERUNT
2013-10-02 20:31 - 2013-10-02 20:31 - 01030305 _____ (Thisisu) C:\Users\Mariejoanna81\Downloads\JRT.exe
2013-10-02 18:59 - 2013-10-02 19:01 - 00000000 ____D C:\AdwCleaner
2013-10-02 18:58 - 2013-10-02 18:58 - 01045226 _____ C:\Users\Mariejoanna81\Downloads\adwcleaner.exe
2013-09-28 10:53 - 2013-09-28 10:53 - 01953880 _____ (Farbar) C:\Users\Mariejoanna81\Downloads\FRST64(1).exe
2013-09-26 14:46 - 2013-09-26 14:46 - 01095080 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00973736 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00000000 ____D C:\ProgramData\Oracle
2013-09-26 14:44 - 2013-09-26 14:45 - 30669224 _____ (Oracle Corporation) C:\Users\Mariejoanna81\Downloads\jre-7u40-windows-x64.exe
2013-09-26 13:55 - 2013-09-26 13:55 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\PDF Architect
2013-09-26 13:53 - 2013-09-26 13:54 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2013-09-26 13:53 - 2013-04-09 15:13 - 00110264 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2013-09-26 13:53 - 2012-05-05 11:54 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2013-09-26 13:53 - 2012-05-05 11:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL
2013-09-26 13:53 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL
2013-09-26 13:53 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL
2013-09-26 13:53 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL
2013-09-26 13:30 - 2013-09-28 10:56 - 00054443 _____ C:\Users\Mariejoanna81\Desktop\FRST.txt
2013-09-26 13:30 - 2013-09-26 13:30 - 00038276 _____ C:\Users\Mariejoanna81\Desktop\Addition.txt
2013-09-26 13:25 - 2013-09-26 13:26 - 00038276 _____ C:\Users\Mariejoanna81\Downloads\Addition.txt
2013-09-26 13:23 - 2013-09-26 13:23 - 00000000 ____D C:\FRST
2013-09-26 13:22 - 2013-09-26 13:22 - 01956432 _____ (Farbar) C:\Users\Mariejoanna81\Downloads\FRST64.exe
2013-09-26 12:28 - 2013-09-26 12:28 - 01527912 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-26 12:23 - 2013-09-26 12:24 - 17810632 _____ (pdfforge GmbH) C:\Users\Mariejoanna81\Downloads\PDFCreator-1_7_1_setup.exe
2013-09-26 12:18 - 2013-09-26 12:18 - 00010464 _____ C:\Windows\SysWOW64\sx_p2d.tlb
2013-09-26 12:17 - 2013-09-26 12:29 - 00000000 ____D C:\ProgramData\Freemium
2013-09-26 12:16 - 2013-09-26 12:16 - 00000000 ____D C:\Users\Mariejoanna81\Downloads\freepdf
2013-09-26 12:14 - 2013-08-13 08:38 - 00032328 _____ C:\Windows\Launcher.exe
2013-09-26 12:11 - 2013-09-26 12:11 - 00444400 _____ C:\Users\Mariejoanna81\Downloads\DLG_free-pdf-perfect_chip_de-DE10.exe
2013-09-20 14:02 - 2013-09-27 14:10 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\Beraterpunkt
2013-09-19 20:24 - 2013-09-19 20:24 - 00273936 _____ C:\Windows\Minidump\091913-59155-01.dmp
2013-09-19 14:28 - 2013-09-19 14:28 - 00043008 _____ C:\Users\Mariejoanna81\Desktop\PENDING1 (Aktuelle).xls
2013-09-17 23:19 - 2013-08-07 07:26 - 02724352 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-17 23:19 - 2013-08-07 06:45 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-17 23:19 - 2013-08-07 06:39 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-17 23:19 - 2013-08-07 06:30 - 02724352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-17 23:19 - 2013-08-07 06:10 - 16981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-17 23:19 - 2013-08-07 06:01 - 22563840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-17 23:19 - 2013-08-07 05:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-17 23:19 - 2013-08-07 05:47 - 00444416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-17 23:19 - 2013-08-07 04:57 - 05636608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-17 23:19 - 2013-08-07 04:54 - 04247040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-17 23:19 - 2013-08-07 04:39 - 12829184 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-17 23:19 - 2013-08-07 04:28 - 11087360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-17 23:19 - 2013-08-07 04:00 - 02207232 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-17 23:19 - 2013-08-07 03:53 - 01349120 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-17 23:19 - 2013-08-07 03:50 - 01788928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-17 23:19 - 2013-08-07 03:49 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-16 20:22 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-16 20:22 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-16 20:21 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-16 20:21 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-16 20:21 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-16 20:21 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-16 20:21 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-16 20:21 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-16 20:21 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-16 20:21 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-16 20:21 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-16 20:21 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-16 20:21 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-16 20:21 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-16 20:21 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-16 20:21 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-16 20:21 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-16 20:21 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-16 20:21 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-16 20:21 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-16 20:21 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-16 20:21 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-16 20:21 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-16 20:21 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-16 20:21 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-16 20:21 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-16 20:21 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-11 11:58 - 2013-09-11 11:58 - 00273992 _____ C:\Windows\Minidump\091113-54647-01.dmp

==================== One Month Modified Files and Folders =======

2013-10-06 12:35 - 2013-10-06 12:35 - 01954124 _____ (Farbar) C:\Users\Mariejoanna81\Downloads\FRST64 (1).exe
2013-10-06 12:35 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-06 12:35 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-06 12:33 - 2012-06-15 16:50 - 00003946 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{DD81BAFB-538D-47AC-8FF5-230EA6E43488}
2013-10-06 12:32 - 2012-06-15 16:49 - 01218375 _____ C:\Windows\WindowsUpdate.log
2013-10-06 12:30 - 2012-06-17 16:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-06 12:28 - 2013-02-02 23:15 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-10-06 12:28 - 2012-06-17 15:34 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\Skype
2013-10-06 12:27 - 2013-09-01 15:19 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-06 12:27 - 2012-06-25 12:38 - 00000000 ___RD C:\Users\Mariejoanna81\Dropbox
2013-10-06 12:27 - 2012-06-25 12:30 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\Dropbox
2013-10-06 12:26 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-06 12:26 - 2009-07-14 06:51 - 00058656 _____ C:\Windows\setupact.log
2013-10-05 01:03 - 2013-10-05 00:27 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\AQUA_GLOBAL
2013-10-05 00:54 - 2013-07-26 00:29 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\TELEKOM
2013-10-05 00:24 - 2013-09-01 15:19 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-05 00:14 - 2012-06-17 18:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-03 08:56 - 2013-10-03 08:56 - 00480240 _____ C:\Windows\Minidump\100313-26504-01.dmp
2013-10-03 08:56 - 2013-02-04 12:24 - 664934856 _____ C:\Windows\MEMORY.DMP
2013-10-03 08:56 - 2013-01-06 14:38 - 00000000 ____D C:\Windows\Minidump
2013-10-02 23:38 - 2013-10-02 23:38 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-02 23:38 - 2013-10-02 23:38 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\Malwarebytes
2013-10-02 23:38 - 2013-10-02 23:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-02 23:38 - 2013-10-02 23:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-02 23:32 - 2013-10-02 23:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Mariejoanna81\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-02 20:46 - 2013-10-02 20:46 - 00001903 _____ C:\Users\Mariejoanna81\Desktop\JRT.txt
2013-10-02 20:33 - 2013-10-02 20:33 - 00000000 ____D C:\Windows\ERUNT
2013-10-02 20:31 - 2013-10-02 20:31 - 01030305 _____ (Thisisu) C:\Users\Mariejoanna81\Downloads\JRT.exe
2013-10-02 19:06 - 2013-05-12 12:07 - 00003348 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2766355210-2261221984-3006064297-1000
2013-10-02 19:06 - 2013-02-03 03:06 - 00003230 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2766355210-2261221984-3006064297-1000
2013-10-02 19:01 - 2013-10-02 18:59 - 00000000 ____D C:\AdwCleaner
2013-10-02 19:01 - 2012-06-15 16:50 - 00000000 ___RD C:\Users\Mariejoanna81\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-02 18:58 - 2013-10-02 18:58 - 01045226 _____ C:\Users\Mariejoanna81\Downloads\adwcleaner.exe
2013-09-28 10:56 - 2013-09-26 13:30 - 00054443 _____ C:\Users\Mariejoanna81\Desktop\FRST.txt
2013-09-28 10:53 - 2013-09-28 10:53 - 01953880 _____ (Farbar) C:\Users\Mariejoanna81\Downloads\FRST64(1).exe
2013-09-28 10:39 - 2013-03-03 20:11 - 00003370 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2766355210-2261221984-3006064297-1000
2013-09-28 10:39 - 2013-02-03 03:16 - 00003252 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2766355210-2261221984-3006064297-1000
2013-09-27 14:10 - 2013-09-20 14:02 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\Beraterpunkt
2013-09-27 09:51 - 2012-06-15 12:36 - 00509688 _____ C:\Windows\PFRO.log
2013-09-26 14:46 - 2013-09-26 14:46 - 01095080 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00973736 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-09-26 14:46 - 2013-09-26 14:46 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-09-26 14:46 - 2013-09-26 14:46 - 00000000 ____D C:\ProgramData\Oracle
2013-09-26 14:46 - 2009-08-18 20:13 - 00000000 ____D C:\Program Files\Java
2013-09-26 14:45 - 2013-09-26 14:44 - 30669224 _____ (Oracle Corporation) C:\Users\Mariejoanna81\Downloads\jre-7u40-windows-x64.exe
2013-09-26 13:55 - 2013-09-26 13:55 - 00000000 ____D C:\Users\Mariejoanna81\AppData\Roaming\PDF Architect
2013-09-26 13:54 - 2013-09-26 13:53 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2013-09-26 13:30 - 2013-09-26 13:30 - 00038276 _____ C:\Users\Mariejoanna81\Desktop\Addition.txt
2013-09-26 13:26 - 2013-09-26 13:25 - 00038276 _____ C:\Users\Mariejoanna81\Downloads\Addition.txt
2013-09-26 13:23 - 2013-09-26 13:23 - 00000000 ____D C:\FRST
2013-09-26 13:22 - 2013-09-26 13:22 - 01956432 _____ (Farbar) C:\Users\Mariejoanna81\Downloads\FRST64.exe
2013-09-26 12:29 - 2013-09-26 12:17 - 00000000 ____D C:\ProgramData\Freemium
2013-09-26 12:28 - 2013-09-26 12:28 - 01527912 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-26 12:28 - 2009-07-14 19:58 - 00657948 _____ C:\Windows\system32\perfh007.dat
2013-09-26 12:28 - 2009-07-14 19:58 - 00131288 _____ C:\Windows\system32\perfc007.dat
2013-09-26 12:24 - 2013-09-26 12:23 - 17810632 _____ (pdfforge GmbH) C:\Users\Mariejoanna81\Downloads\PDFCreator-1_7_1_setup.exe
2013-09-26 12:18 - 2013-09-26 12:18 - 00010464 _____ C:\Windows\SysWOW64\sx_p2d.tlb
2013-09-26 12:16 - 2013-09-26 12:16 - 00000000 ____D C:\Users\Mariejoanna81\Downloads\freepdf
2013-09-26 12:11 - 2013-09-26 12:11 - 00444400 _____ C:\Users\Mariejoanna81\Downloads\DLG_free-pdf-perfect_chip_de-DE10.exe
2013-09-26 11:19 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-26 01:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-20 20:45 - 2012-10-14 22:15 - 00000000 ____D C:\Users\Mariejoanna81\Documents\EXPERT
2013-09-20 14:03 - 2013-06-11 18:17 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\pleasure
2013-09-20 13:26 - 2013-02-26 13:56 - 00780800 ___SH C:\Users\Mariejoanna81\Desktop\Thumbs.db
2013-09-20 11:14 - 2012-06-17 18:15 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 11:14 - 2012-06-17 18:15 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-20 11:14 - 2012-06-17 18:15 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-19 20:24 - 2013-09-19 20:24 - 00273936 _____ C:\Windows\Minidump\091913-59155-01.dmp
2013-09-19 14:28 - 2013-09-19 14:28 - 00043008 _____ C:\Users\Mariejoanna81\Desktop\PENDING1 (Aktuelle).xls
2013-09-19 11:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-19 11:04 - 2012-06-15 16:50 - 00000000 ___RD C:\Users\Mariejoanna81\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-17 23:44 - 2009-07-14 06:45 - 00456376 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-17 23:27 - 2013-08-08 14:46 - 00000000 ____D C:\Windows\system32\MRT
2013-09-17 23:21 - 2012-06-17 16:49 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-17 23:20 - 2012-06-15 12:14 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-17 23:06 - 2012-06-20 13:56 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-09-17 23:03 - 2012-06-15 16:49 - 00000000 ____D C:\Users\Mariejoanna81
2013-09-17 23:02 - 2009-08-18 20:12 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-09-17 23:01 - 2012-06-17 18:19 - 00000000 ____D C:\ProgramData\Real
2013-09-17 23:01 - 2012-06-15 12:14 - 00000000 __RHD C:\MSOCache
2013-09-17 23:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-09-17 01:59 - 2013-03-21 14:52 - 00000000 ____D C:\Users\Mariejoanna81\Desktop\LADEN_PROJEKT
2013-09-11 11:58 - 2013-09-11 11:58 - 00273992 _____ C:\Windows\Minidump\091113-54647-01.dmp

Some content of TEMP:
====================
C:\Users\Mariejoanna81\AppData\Local\Temp\apptorun.exe
C:\Users\Mariejoanna81\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Mariejoanna81\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Mariejoanna81\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Mariejoanna81\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Mariejoanna81\AppData\Local\Temp\Quarantine.exe
C:\Users\Mariejoanna81\AppData\Local\Temp\stubhelper.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-19 11:42

==================== End Of Log ============================

--- --- ---

--- --- ---

M-K-D-B · 06.10.2013, 12:03

Servus,

fehlt noch die Logdatei von SystemLook.

Verena72 · 06.10.2013, 12:09

SystemLook 30.07.11 by jpshortstuff
Log created at 12:46 on 06/10/2013 by Mariejoanna81
Administrator - Elevation successful

========== filefind ==========

Searching for "*IBUpdater*"
No files found.

Searching for "*Web Assistant*"
No files found.

Searching for "*Premium*"
C:\Program Files\Sony\MFU\VAIO Premium Partners.lnk --a---- 1042 bytes [10:10 15/06/2012] [13:42 22/06/2009] BCD33D164EB91660A5BC29C9301C5D2C
C:\Program Files (x86)\Adobe\Adobe Premiere Elements 7.0\Plug-ins\Common\EffectPreviews\PremiumBadge.png -ra---- 3205 bytes [21:47 18/12/2008] [21:47 18/12/2008] 4D922CCC96DBD16D15A6ABE8E4C92323
C:\Program Files (x86)\Adobe\Photoshop Elements 7.0\Assets\bitmaps\workflow_icons\E_Premium_Lg_N.png --a---- 3139 bytes [13:12 08/12/2008] [13:12 08/12/2008] DCFB70A0D1D251F99ADC9A042B08DDB0
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Premium Partners\VAIO Premium Partners.lnk --a---- 1042 bytes [10:10 15/06/2012] [13:42 22/06/2009] BCD33D164EB91660A5BC29C9301C5D2C
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\VAIO Premium Partners\VAIO Premium Partners.lnk --a---- 1042 bytes [10:10 15/06/2012] [13:42 22/06/2009] BCD33D164EB91660A5BC29C9301C5D2C
C:\Windows\HomePremium.xml --a---- 48265 bytes [18:19 14/07/2009] [20:30 10/06/2009] 1AEB4967A760D6EC21A3270F1B004AC1
C:\Windows\servicing\Editions\HomePremiumEdition.xml --a---- 48265 bytes [20:56 13/07/2009] [20:30 10/06/2009] 1AEB4967A760D6EC21A3270F1B004AC1
C:\Windows\servicing\Packages\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat --a---- 8481 bytes [17:58 14/07/2009] [05:06 14/07/2009] C9DB1C91DFABB7F1104960FB8B36F20C
C:\Windows\servicing\Packages\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.mum --a---- 1344 bytes [17:58 14/07/2009] [02:10 14/07/2009] 07B8382040BE8E4C9A459D07250D150F
C:\Windows\servicing\Packages\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.cat --a---- 8884 bytes [09:44 18/06/2012] [12:57 20/11/2010] F8D0CE8C590F6B8DD40D33172E9D06FC
C:\Windows\servicing\Packages\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.mum --a---- 1364 bytes [09:44 18/06/2012] [12:40 20/11/2010] 73E1CE5FE6513E02B89BF12DA5665F4C
C:\Windows\servicing\Packages\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 21539 bytes [05:29 14/07/2009] [03:00 14/07/2009] 6F1D205AEFCB51FBEBE15305AD449BF1
C:\Windows\servicing\Packages\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.mum --a---- 1288 bytes [05:29 14/07/2009] [20:22 13/07/2009] F0C019B73D4CF43CF844109C51883E95
C:\Windows\servicing\Packages\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat --a---- 21942 bytes [09:44 18/06/2012] [14:36 20/11/2010] 3167DD7DBDCDB285F9CDE9CED0D4B29D
C:\Windows\servicing\Packages\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.mum --a---- 1312 bytes [09:44 18/06/2012] [14:22 20/11/2010] B991AE1504A0BD2B91C443648B97B9B9
C:\Windows\servicing\Packages\Microsoft-Windows-HomePremiumEdition-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514.cat --a---- 7716 bytes [09:43 18/06/2012] [14:37 20/11/2010] EDFE68867E937013C39A121C5E6DDF43
C:\Windows\servicing\Packages\Microsoft-Windows-HomePremiumEdition-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514.mum --a---- 1541 bytes [09:43 18/06/2012] [14:22 20/11/2010] CE8D914F24D11309AF6A3692F5B2D89B
C:\Windows\servicing\Packages\Microsoft-Windows-

HomePremiumEdition~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 7603 bytes [05:29 14/07/2009] [03:00 14/07/2009] 9BC9B14C8D128DB8890038067C53D72F
C:\Windows\servicing\Packages\Microsoft-Windows-HomePremiumEdition~31bf3856ad364e35~amd64~~6.1.7600.16385.mum --a---- 33447 bytes [05:29 14/07/2009] [20:56 13/07/2009] FA9A106D2B1C9A935904936CAFE201C2
C:\Windows\servicing\Packages\Microsoft-Windows-HomePremiumEdition~31bf3856ad364e35~amd64~~6.1.7601.17514.cat --a---- 7716 bytes [09:43 18/06/2012] [14:37 20/11/2010] CA5BA8A1C5452C20CB2E575E4359E4DE
C:\Windows\servicing\Packages\Microsoft-Windows-HomePremiumEdition~31bf3856ad364e35~amd64~~6.1.7601.17514.mum --a---- 32342 bytes [09:43 18/06/2012] [14:22 20/11/2010] 99EB94E5594E4C380633AF5A4CAC1CC1
C:\Windows\servicing\Packages\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat --a---- 9069 bytes [17:58 14/07/2009] [05:06 14/07/2009] 026CF44F0228CB34747466F093E99EEE
C:\Windows\servicing\Packages\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.mum --a---- 1313 bytes [17:58 14/07/2009] [02:10 14/07/2009] E3C4D10CAB698D8EA095C394973A021D
C:\Windows\servicing\Packages\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.cat --a---- 9472 bytes [09:45 18/06/2012] [13:01 20/11/2010] 84062E81C6980A76234924CB84642666
C:\Windows\servicing\Packages\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.mum --a---- 1333 bytes [09:45 18/06/2012] [12:40 20/11/2010] 0EA5CDAC56510C9F6CA1F719DBD9852B
C:\Windows\servicing\Packages\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 10535 bytes [05:29 14/07/2009] [03:00 14/07/2009] B7F63C7F1E7F4066BE0E9379EEBAAC60
C:\Windows\servicing\Packages\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.mum --a---- 1260 bytes [05:29 14/07/2009] [20:37 13/07/2009] 1E29F3D4275AE9A22A88C44F3705AEF6
C:\Windows\servicing\Packages\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat --a---- 11816 bytes [09:44 18/06/2012] [14:37 20/11/2010] 6DEF9503CAE8DECD98B2B50F5BC75ADE
C:\Windows\servicing\Packages\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.mum --a---- 1284 bytes [09:44 18/06/2012] [14:22 20/11/2010] 0104047330D9FD41C9EE657E9F54B0FC
C:\Windows\servicing\Packages\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat --a---- 13758 bytes [17:58 14/07/2009] [05:05 14/07/2009] 0FDFAF11941AAE160084AF78D1037155
C:\Windows\servicing\Packages\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.mum --a---- 1251 bytes [17:58 14/07/2009] [02:10 14/07/2009] 41C1CBF3D5D0B74D6C32C3DCD8B1A869
C:\Windows\servicing\Packages\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.cat --a---- 14176 bytes [09:45 18/06/2012] [13:02 20/11/2010] 87C9F66F6C6255D0567ADD6404718AAA
C:\Windows\servicing\Packages\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.mum --a---- 1271 bytes [09:45 18/06/2012] [12:40 20/11/2010] 8502C2F043153306D50FF6C4AE4C1996
C:\Windows\servicing\Packages\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 17575 bytes [05:29 14/07/2009] [03:00 14/07/2009] 68A7EE931B98D3B5915A2DE64D70B480
C:\Windows\servicing\Packages\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.1.7600.16385.mum --a---- 1187 bytes [05:29 14/07/2009] [20:50 13/07/2009] 4E4FB2D0407908FDC51FADC0CEA0A7AC
C:\Windows\servicing\Packages\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.1.7601.17514.cat --a---- 25018 bytes [09:44 18/06/2012] [14:37 20/11/2010] 681983546BD4CB964AAC5F38F18274B2
C:\Windows\servicing\Packages\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.1.7601.17514.mum --a---- 1211 bytes [09:44 18/06/2012] [14:22 20/11/2010] 04141444EDA4BEFD12BAB3C351883DC7
C:\Windows\servicing\Packages\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat --a---- 10528 bytes [17:58 14/07/2009] [05:05 14/07/2009] CD955A7D18642CBFE72EE6B3E49AEF60
C:\Windows\servicing\Packages\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.mum --a---- 1605 bytes [17:58 14/07/2009] [02:10 14/07/2009] 57A6D592D67701B0678F5AE56447EDBC
C:\Windows\servicing\Packages\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.cat --a---- 12122 bytes [09:45 18/06/2012] [13:02 20/11/2010] CC30AB3975995326B61E6DE0DADE5F1D
C:\Windows\servicing\Packages\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.mum --a---- 1615 bytes [09:45 18/06/2012] [12:40 20/11/2010] DE4F62FA14D4A4C56EE139B21AB9EDB3
C:\Windows\servicing\Packages\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 11406 bytes [05:29 14/07/2009] [03:01 14/07/2009] 03A02C4FB3708E2F9DD5041C14B36E59
C:\Windows\servicing\Packages\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.mum --a---- 1544 bytes [05:29 14/07/2009] [20:54 13/07/2009] EF33A94C0007C2573EC70C8E35268D1D
C:\Windows\servicing\Packages\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat --a---- 15054 bytes [09:44 18/06/2012] [14:37 20/11/2010] 9DADACCE6E92E11A3D4D291BC14CC459
C:\Windows\servicing\Packages\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.mum --a---- 1558 bytes [09:44 18/06/2012] [14:22 20/11/2010] 0CCF12D60D2FCC0482D6EFD40319BA6C
C:\Windows\servicing\Packages\Microsoft-Windows-Security-SPP-Component-SKU-HomePremium-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 16013 bytes [05:29 14/07/2009] [03:01 14/07/2009] A721FF323F410458C7CB736892D300DF
C:\Windows\servicing\Packages\Microsoft-Windows-Security-SPP-Component-SKU-HomePremium-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.mum --a---- 1465 bytes [05:29 14/07/2009] [20:54 13/07/2009] 10088FA00CDE0F959A5AF7D6394AFB27
C:\Windows\servicing\Packages\Microsoft-Windows-Security-SPP-Component-SKU-HomePremium-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat --a---- 21636 bytes [09:44 18/06/2012] [14:38 20/11/2010] 027B39D70B5E4158E10943DA86178E16
C:\Windows\servicing\Packages\Microsoft-Windows-Security-SPP-Component-SKU-HomePremium-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.mum --a---- 1489 bytes [09:44 18/06/2012] [14:22 20/11/2010] 4DBDC29A205C328080684B1A75B63181
C:\Windows\servicing\Packages\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat --a---- 9359 bytes [17:58 14/07/2009] [05:05 14/07/2009] B67F76569C8D542716820C2FC3267F80
C:\Windows\servicing\Packages\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.mum --a---- 1952 bytes [17:58 14/07/2009] [02:10 14/07/2009] 079182C226AFFBD235FF1CDF2894A433
C:\Windows\servicing\Packages\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.cat --a---- 9762 bytes [09:45 18/06/2012] [13:02 20/11/2010] 6E9409AFCA790D578A5751E5505007F0
C:\Windows\servicing\Packages\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.mum --a---- 1920 bytes [09:45 18/06/2012] [12:40 20/11/2010] 3B97A8BA8056A21E014F6BE08AC814D2
C:\Windows\servicing\Packages\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 11100 bytes [05:29 14/07/2009] [03:00 14/07/2009] AF73E949AC10A38460AE7AF23F9FCC36
C:\Windows\servicing\Packages\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.mum --a---- 2102 bytes [05:29 14/07/2009] [20:32 13/07/2009] 7FC7EF62308BEF1C772D24336BE83770
C:\Windows\servicing\Packages\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat --a---- 11518 bytes [09:44 18/06/2012] [14:39 20/11/2010] 606E15F0376092E2086419CEAA4345D9
C:\Windows\servicing\Packages\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.mum --a---- 2054 bytes [09:44 18/06/2012] [14:22 20/11/2010] 5462299A32CB52A974FCE180D1199EC6
C:\Windows\servicing\Packages\Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 13693 bytes [05:29 14/07/2009] [03:00 14/07/2009] 355596400026ACFB8D6BA25D695D3159
C:\Windows\servicing\Packages\Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.mum --a---- 1213 bytes [05:29 14/07/2009] [20:43 13/07/2009] 23219B236EA7D907B53C1E8A7B07BEE2
C:\Windows\servicing\Packages\Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat --a---- 14096 bytes [09:44 18/06/2012] [14:39 20/11/2010] 8D72D5A884B99B47D9BFD3A662E78A51
C:\Windows\servicing\Packages\Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.mum --a---- 1237 bytes [09:44 18/06/2012] [14:23 20/11/2010] 374E6D80A739B2D0724AE73F5192BAA0
C:\Windows\servicing\Packages\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat --a---- 33727 bytes [17:58 14/07/2009] [05:06 14/07/2009] 1FC2900AC4EAB38144085A83B0C34DC7
C:\Windows\servicing\Packages\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.mum --a---- 1701 bytes [17:58 14/07/2009] [02:10 14/07/2009] F7212D9C5BE003C5277A2B7DAB14A329
C:\Windows\servicing\Packages\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.cat --a---- 35290 bytes [09:45 18/06/2012] [13:03 20/11/2010] 04B32639204F5F716A7DC74A538156F3
C:\Windows\servicing\Packages\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.mum --a---- 1692 bytes [09:45 18/06/2012] [12:40 20/11/2010] DBFA16254B0D28B14CA183CEB3F42EB6
C:\Windows\servicing\Packages\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 20943 bytes [05:29 14/07/2009] [03:01 14/07/2009] 75083456717FA0CD67A0F9ABBEF1C793
C:\Windows\servicing\Packages\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~~6.1.7600.16385.mum --a---- 1465 bytes [05:29 14/07/2009] [20:55 13/07/2009] 876D585AF566BE40627BACCC3E884136
C:\Windows\servicing\Packages\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~~6.1.7601.17514.cat --a---- 21346 bytes [09:44 18/06/2012] [14:39 20/11/2010] 26C0304EA19898B2C2860B37EF26DEE4
C:\Windows\servicing\Packages\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~~6.1.7601.17514.mum --a---- 1479 bytes [09:44 18/06/2012] [14:23 20/11/2010] D5A92EFD6EE46B8942527E3C60FDAE70
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat --a---- 8481 bytes [17:58 14/07/2009] [05:06 14/07/2009] C9DB1C91DFABB7F1104960FB8B36F20C
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.cat ----s-- 8884 bytes [09:44 18/06/2012] [12:57 20/11/2010] F8D0CE8C590F6B8DD40D33172E9D06FC
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 21539 bytes [05:29 14/07/2009] [03:00 14/07/2009] 6F1D205AEFCB51FBEBE15305AD449BF1
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat ----s-- 21942 bytes [09:44 18/06/2012] [14:36 20/11/2010] 3167DD7DBDCDB285F9CDE9CED0D4B29D
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-HomePremiumEdition-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514.cat ----s-- 7716 bytes [09:43 18/06/2012] [14:37 20/11/2010] EDFE68867E937013C39A121C5E6DDF43
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-HomePremiumEdition~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 7603 bytes [05:29 14/07/2009] [03:00 14/07/2009] 9BC9B14C8D128DB8890038067C53D72F
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-HomePremiumEdition~31bf3856ad364e35~amd64~~6.1.7601.17514.cat ----s-- 7716 bytes [09:43 18/06/2012] [14:37 20/11/2010] CA5BA8A1C5452C20CB2E575E4359E4DE
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat --a---- 9069 bytes [17:58 14/07/2009] [05:06 14/07/2009] 026CF44F0228CB34747466F093E99EEE
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.cat ----s-- 9472 bytes [09:45 18/06/2012] [13:01 20/11/2010] 84062E81C6980A76234924CB84642666
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 10535 bytes [05:29 14/07/2009] [03:00 14/07/2009] B7F63C7F1E7F4066BE0E9379EEBAAC60
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat ----s-- 11816 bytes [09:44 18/06/2012] [14:37 20/11/2010] 6DEF9503CAE8DECD98B2B50F5BC75ADE
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat --a---- 13758 bytes [17:58 14/07/2009] [05:05 14/07/2009] 0FDFAF11941AAE160084AF78D1037155
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.cat ----s-- 14176 bytes [09:45 18/06/2012] [13:02 20/11/2010] 87C9F66F6C6255D0567ADD6404718AAA
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 17575 bytes [05:29 14/07/2009] [03:00 14/07/2009] 68A7EE931B98D3B5915A2DE64D70B480
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.1.7601.17514.cat ----s-- 25018 bytes [09:44 18/06/2012] [14:37 20/11/2010] 681983546BD4CB964AAC5F38F18274B2
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat --a---- 10528 bytes [17:58 14/07/2009] [05:05 14/07/2009] CD955A7D18642CBFE72EE6B3E49AEF60
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.cat ----s-- 12122 bytes [09:45 18/06/2012] [13:02 20/11/2010] CC30AB3975995326B61E6DE0DADE5F1D
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 11406 bytes [05:29 14/07/2009] [03:01 14/07/2009] 03A02C4FB3708E2F9DD5041C14B36E59
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat ----s-- 15054 bytes [09:44 18/06/2012] [14:37 20/11/2010] 9DADACCE6E92E11A3D4D291BC14CC459
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Security-SPP-Component-SKU-HomePremium-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 16013 bytes [05:29 14/07/2009] [03:01 14/07/2009] A721FF323F410458C7CB736892D300DF
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Security-SPP-Component-SKU-HomePremium-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat ----s-- 21636 bytes [09:44 18/06/2012] [14:38 20/11/2010] 027B39D70B5E4158E10943DA86178E16
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat --a---- 9359 bytes [17:58 14/07/2009] [05:05 14/07/2009] B67F76569C8D542716820C2FC3267F80
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.cat ----s-- 9762 bytes [09:45 18/06/2012] [13:02 20/11/2010] 6E9409AFCA790D578A5751E5505007F0
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 11100 bytes [05:29 14/07/2009] [03:00 14/07/2009] AF73E949AC10A38460AE7AF23F9FCC36
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat ----s-- 11518 bytes [09:44 18/06/2012] [14:39 20/11/2010] 606E15F0376092E2086419CEAA4345D9
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 13693 bytes [05:29 14/07/2009] [03:00 14/07/2009] 355596400026ACFB8D6BA25D695D3159
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat ----s-- 14096 bytes [09:44 18/06/2012] [14:39 20/11/2010] 8D72D5A884B99B47D9BFD3A662E78A51
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat --a---- 33727 bytes [17:58 14/07/2009] [05:06 14/07/2009] 1FC2900AC4EAB38144085A83B0C34DC7
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.cat ----s-- 35290 bytes [09:45 18/06/2012] [13:03 20/11/2010] 04B32639204F5F716A7DC74A538156F3
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~~6.1.7600.16385.cat --a---- 20943 bytes [05:29 14/07/2009] [03:01 14/07/2009] 75083456717FA0CD67A0F9ABBEF1C793
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~~6.1.7601.17514.cat ----s-- 21346 bytes [09:44 18/06/2012] [14:39 20/11/2010] 26C0304EA19898B2C2860B37EF26DEE4
C:\Windows\System32\spp\tokens\ppdlic\Security-SPP-Component-SKU-HomePremium-ppdlic.xrm-ms --a---- 13790 bytes [10:18 18/06/2012] [13:39 20/11/2010] 37EB75F0F6891CD5AAEBA816754AC6C2
C:\Windows\System32\spp\tokens\ppdlic\Shell-PremiumInBoxGames-Chess-ppdlic.xrm-ms --a---- 3034 bytes [01:53 14/07/2009] [01:53 14/07/2009] 610DCE8131E5F167EFE07952355A8AFD
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] 750484764A8A390E8A67FFE7E30CA747
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP-ul-oob.xrm-ms --a---- 13077 bytes [01:53 14/07/2009] [01:53 14/07/2009] 4B6BFC98D15B32E7AACBDEC703C70B7E
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP-ul-phn.xrm-ms --a---- 16295 bytes [01:53 14/07/2009] [01:53 14/07/2009] 2FA7E9F5A0F117D5FEA5660606E5BC27
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP1-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] 29D226063DBC319AA8CE7F32C4096F7A
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP1-ul-oob.xrm-ms --a---- 13077 bytes [01:53 14/07/2009] [01:53 14/07/2009] 47B7E04ED17A7EB115395DCBE83236D9
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP1-ul-phn.xrm-ms --a---- 16295 bytes [01:53 14/07/2009] [01:53 14/07/2009] C3DBCABF72F10745B700F776AA875DF4
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP2-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] ADA27CFC2390AD0B249120744CA230C8
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP2-ul-oob.xrm-ms --a---- 13077 bytes [01:53 14/07/2009] [01:53 14/07/2009] 71F34D7C6C70BA716AB57BF31156C191
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP2-ul-phn.xrm-ms --a---- 16295 bytes [01:53 14/07/2009] [01:53 14/07/2009] 11DCECE03467A432DEF6A2A21E8C991A
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP3-pl.xrm-ms --a---- 13305 bytes [10:19 18/06/2012] [13:40 20/11/2010] 13D3286F861B3AC6C52827F09C137713
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP3-ul-oob.xrm-ms --a---- 13077 bytes [10:19 18/06/2012] [13:40 20/11/2010] D82FF52C4747B83240F1DFD407731365
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP3-ul-phn.xrm-ms --a---- 16295 bytes [10:19 18/06/2012] [13:40 20/11/2010] F6774CBC8475D2CAF3778ECE6C3D94C9
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-SLP-ul-oob.xrm-ms --a---- 13067 bytes [01:53 14/07/2009] [01:53 14/07/2009] 2BAD7E2ED44CC1E85A91D88E40A863C9
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-SLP-ul.xrm-ms --a---- 11520 bytes [10:19 18/06/2012] [13:40 20/11/2010] B365D5204B2FD3A060B68CD0026A906D
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-SLP1-ul-oob.xrm-ms --a---- 13067 bytes [10:19 18/06/2012] [13:40 20/11/2010] A868EAE9C6A816123E8854A8859C5F18
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-SLP1-ul.xrm-ms --a---- 11520 bytes [10:19 18/06/2012] [13:40 20/11/2010] 3CAF61FBBA0AF07E1575993CC18FF468
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] DA775E827290B6446180FB4A066CAACA
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA-ul-oob.xrm-ms --a---- 13075 bytes [01:53 14/07/2009] [01:53 14/07/2009] 96C1D33B5071F707455B704884110524
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA-ul-phn.xrm-ms --a---- 16293 bytes [01:53 14/07/2009] [01:53 14/07/2009] 7A3AB20A88C364DF3FBC6B0F40E23E4A
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA1-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] 35BDE40B73B82AB9B93B59BC614035E6
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA1-ul-oob.xrm-ms --a---- 13075 bytes [01:53 14/07/2009] [01:53 14/07/2009] 262F322F96C9E43955D6FFFC81506AB2
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA1-ul-phn.xrm-ms --a---- 16293 bytes [01:53 14/07/2009] [01:53 14/07/2009] 41210B440EEA40CEABC3D20BDC36B492
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA2-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] 5F57DA9FF5CD312D562F12834F95F099
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA2-ul-oob.xrm-ms --a---- 13075 bytes [01:53 14/07/2009] [01:53 14/07/2009] 5D2A643D6943FA2066E9645F69EEE3EC
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA2-ul-phn.xrm-ms --a---- 16293 bytes [01:53 14/07/2009] [01:53 14/07/2009] DC58DA02FDD8E2A505B6C305DD30CA9C
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA3-pl.xrm-ms --a---- 13305 bytes [10:19 18/06/2012] [13:40 20/11/2010] EE7E3C0B6AA2584C2403ADEF7035673E
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA3-ul-oob.xrm-ms --a---- 13075 bytes [10:19 18/06/2012] [13:40 20/11/2010] 35D7B59B53ACF63FC48F00FC9A13C7C5
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA3-ul-phn.xrm-ms --a---- 16293 bytes [10:19 18/06/2012] [13:40 20/11/2010] 62D820597D361F1E9685CD159BC8B9AC
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] 188DE4D8333821282DB8E6D98BB4D227
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-RETAIL1-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] D635B5071F4A6BD5CF8DD55695FC1B6A
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-RETAIL1-ul-oob.xrm-ms --a---- 13065 bytes [01:53 14/07/2009] [01:53 14/07/2009] 5DA1088D5DF05448A9D5A7FE17A657E8
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-RETAIL1-ul-phn.xrm-ms --a---- 16283 bytes [01:53 14/07/2009] [01:53 14/07/2009] 4B9D41C9A95DE5BCE031470FF0CFE84F
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-RETAIL2-pl.xrm-ms --a---- 13305 bytes [10:19 18/06/2012] [13:40 20/11/2010] 933929396D4C8D7D5A9F720595CFA214
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-RETAIL2-ul-oob.xrm-ms --a---- 13065 bytes [10:19 18/06/2012] [13:40 20/11/2010] 3CCA4D4322D70176CFAD731D5FC48240
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-RETAIL2-ul-phn.xrm-ms --a---- 16283 bytes [10:19 18/06/2012] [13:40 20/11/2010] A9F1486E8A400D7A8EE4A56372ED329E
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-RETAIL3-pl.xrm-ms --a---- 13305 bytes [10:19 18/06/2012] [13:40 20/11/2010] A01299ADD83AD094267CE9C110A1754F
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-RETAIL3-ul-oob.xrm-ms --a---- 13065 bytes [10:19 18/06/2012] [13:40 20/11/2010] 1F8DD1BC8325518D2F9FDCE35A1FD7CD
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-RETAIL3-ul-phn.xrm-ms --a---- 16283 bytes [10:19 18/06/2012] [13:40 20/11/2010] 1B45D8E4F2E07D6338EB9B4EF297E45C
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-ul-oob.xrm-ms --a---- 13065 bytes [01:53 14/07/2009] [01:53 14/07/2009] 595B12B16F607144EB6F610F2C856DDF
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium\Security-SPP-Component-SKU-HomePremium-ul-phn.xrm-ms --a---- 16283 bytes [01:53 14/07/2009] [01:53 14/07/2009] DD3CD0423602699D888EE7009ACCA3AF
C:\Windows\winsxs\amd64_microsoft-windows-editions-client_31bf3856ad364e35_6.1.7600.16385_none_bc037fbe81d7b074\HomePremiumEdition.xml --a---- 48265 bytes [20:56 13/07/2009] [20:30 10/06/2009] 1AEB4967A760D6EC21A3270F1B004AC1
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] 750484764A8A390E8A67FFE7E30CA747
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP-ul-oob.xrm-ms --a---- 13077 bytes [01:53 14/07/2009] [01:53 14/07/2009] 4B6BFC98D15B32E7AACBDEC703C70B7E
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP-ul-phn.xrm-ms --a---- 16295 bytes [01:53 14/07/2009] [01:53 14/07/2009] 2FA7E9F5A0F117D5FEA5660606E5BC27
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP1-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] 29D226063DBC319AA8CE7F32C4096F7A
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP1-ul-oob.xrm-ms --a---- 13077 bytes [01:53 14/07/2009] [01:53 14/07/2009] 47B7E04ED17A7EB115395DCBE83236D9
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP1-ul-phn.xrm-ms --a---- 16295 bytes [01:53 14/07/2009] [01:53 14/07/2009] C3DBCABF72F10745B700F776AA875DF4
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP2-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] ADA27CFC2390AD0B249120744CA230C8
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP2-ul-oob.xrm-ms --a---- 13077 bytes [01:53 14/07/2009] [01:53 14/07/2009] 71F34D7C6C70BA716AB57BF31156C191
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-

homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP2-ul-phn.xrm-ms --a---- 16295 bytes [01:53 14/07/2009] [01:53 14/07/2009] 11DCECE03467A432DEF6A2A21E8C991A
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-SLP-ul-oob.xrm-ms --a---- 13067 bytes [01:53 14/07/2009] [01:53 14/07/2009] 2BAD7E2ED44CC1E85A91D88E40A863C9
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-SLP-ul.xrm-ms --a---- 11658 bytes [01:53 14/07/2009] [01:53 14/07/2009] 26BEE3202BCFE5729E2A3D8F29020EFF
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] DA775E827290B6446180FB4A066CAACA
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA-ul-oob.xrm-ms --a---- 13075 bytes [01:53 14/07/2009] [01:53 14/07/2009] 96C1D33B5071F707455B704884110524
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA-ul-phn.xrm-ms --a---- 16293 bytes [01:53 14/07/2009] [01:53 14/07/2009] 7A3AB20A88C364DF3FBC6B0F40E23E4A
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA1-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] 35BDE40B73B82AB9B93B59BC614035E6
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA1-ul-oob.xrm-ms --a---- 13075 bytes [01:53 14/07/2009] [01:53 14/07/2009] 262F322F96C9E43955D6FFFC81506AB2
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA1-ul-phn.xrm-ms --a---- 16293 bytes [01:53 14/07/2009] [01:53 14/07/2009] 41210B440EEA40CEABC3D20BDC36B492
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA2-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] 5F57DA9FF5CD312D562F12834F95F099
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA2-ul-oob.xrm-ms --a---- 13075 bytes [01:53 14/07/2009] [01:53 14/07/2009] 5D2A643D6943FA2066E9645F69EEE3EC
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA2-ul-phn.xrm-ms --a---- 16293 bytes [01:53 14/07/2009] [01:53 14/07/2009] DC58DA02FDD8E2A505B6C305DD30CA9C
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] 188DE4D8333821282DB8E6D98BB4D227
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-ppdlic.xrm-ms --a---- 13807 bytes [01:53 14/07/2009] [01:53 14/07/2009] 0523B168CA39C80789CC838D43C1F1F4
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-RETAIL1-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] D635B5071F4A6BD5CF8DD55695FC1B6A
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-RETAIL1-ul-oob.xrm-ms --a---- 13065 bytes [01:53 14/07/2009] [01:53 14/07/2009] 5DA1088D5DF05448A9D5A7FE17A657E8
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-RETAIL1-ul-phn.xrm-ms --a---- 16283 bytes [01:53 14/07/2009] [01:53 14/07/2009] 4B9D41C9A95DE5BCE031470FF0CFE84F
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-ul-oob.xrm-ms --a---- 13065 bytes [01:53 14/07/2009] [01:53 14/07/2009] 595B12B16F607144EB6F610F2C856DDF
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404\Security-SPP-Component-SKU-HomePremium-ul-phn.xrm-ms --a---- 16283 bytes [01:53 14/07/2009] [01:53 14/07/2009] DD3CD0423602699D888EE7009ACCA3AF
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] 750484764A8A390E8A67FFE7E30CA747
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP-ul-oob.xrm-ms --a---- 13077 bytes [01:53 14/07/2009] [01:53 14/07/2009] 4B6BFC98D15B32E7AACBDEC703C70B7E
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP-ul-phn.xrm-ms --a---- 16295 bytes [01:53 14/07/2009] [01:53 14/07/2009] 2FA7E9F5A0F117D5FEA5660606E5BC27
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP1-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] 29D226063DBC319AA8CE7F32C4096F7A
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP1-ul-oob.xrm-ms --a---- 13077 bytes [01:53 14/07/2009] [01:53 14/07/2009] 47B7E04ED17A7EB115395DCBE83236D9
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP1-ul-phn.xrm-ms --a---- 16295 bytes [01:53 14/07/2009] [01:53 14/07/2009] C3DBCABF72F10745B700F776AA875DF4
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP2-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] ADA27CFC2390AD0B249120744CA230C8
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP2-ul-oob.xrm-ms --a---- 13077 bytes [01:53 14/07/2009] [01:53 14/07/2009] 71F34D7C6C70BA716AB57BF31156C191
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP2-ul-phn.xrm-ms --a---- 16295 bytes [01:53 14/07/2009] [01:53 14/07/2009] 11DCECE03467A432DEF6A2A21E8C991A
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP3-pl.xrm-ms --a---- 13305 bytes [10:19 18/06/2012] [13:40 20/11/2010] 13D3286F861B3AC6C52827F09C137713
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP3-ul-oob.xrm-ms --a---- 13077 bytes [10:19 18/06/2012] [13:40 20/11/2010] D82FF52C4747B83240F1DFD407731365
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-NONSLP3-ul-phn.xrm-ms --a---- 16295 bytes [10:19 18/06/2012] [13:40 20/11/2010] F6774CBC8475D2CAF3778ECE6C3D94C9
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-SLP-ul-oob.xrm-ms --a---- 13067 bytes [01:53 14/07/2009] [01:53 14/07/2009] 2BAD7E2ED44CC1E85A91D88E40A863C9
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-SLP-ul.xrm-ms --a---- 11520 bytes [10:19 18/06/2012] [13:40 20/11/2010] B365D5204B2FD3A060B68CD0026A906D
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-SLP1-ul-oob.xrm-ms --a---- 13067 bytes [10:19 18/06/2012] [13:40 20/11/2010] A868EAE9C6A816123E8854A8859C5F18
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-SLP1-ul.xrm-ms --a---- 11520 bytes [10:19 18/06/2012] [13:40 20/11/2010] 3CAF61FBBA0AF07E1575993CC18FF468
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] DA775E827290B6446180FB4A066CAACA
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA-ul-oob.xrm-ms --a---- 13075 bytes [01:53 14/07/2009] [01:53 14/07/2009] 96C1D33B5071F707455B704884110524
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA-ul-phn.xrm-ms --a---- 16293 bytes [01:53 14/07/2009] [01:53 14/07/2009] 7A3AB20A88C364DF3FBC6B0F40E23E4A
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA1-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] 35BDE40B73B82AB9B93B59BC614035E6
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA1-ul-oob.xrm-ms --a---- 13075 bytes [01:53 14/07/2009] [01:53 14/07/2009] 262F322F96C9E43955D6FFFC81506AB2
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA1-ul-phn.xrm-ms --a---- 16293 bytes [01:53 14/07/2009] [01:53 14/07/2009] 41210B440EEA40CEABC3D20BDC36B492
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA2-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] 5F57DA9FF5CD312D562F12834F95F099
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA2-ul-oob.xrm-ms --a---- 13075 bytes [01:53 14/07/2009] [01:53 14/07/2009] 5D2A643D6943FA2066E9645F69EEE3EC
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA2-ul-phn.xrm-ms --a---- 16293 bytes [01:53 14/07/2009] [01:53 14/07/2009] DC58DA02FDD8E2A505B6C305DD30CA9C
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA3-pl.xrm-ms --a---- 13305 bytes [10:19 18/06/2012] [13:40 20/11/2010] EE7E3C0B6AA2584C2403ADEF7035673E
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA3-ul-oob.xrm-ms --a---- 13075 bytes [10:19 18/06/2012] [13:40 20/11/2010] 35D7B59B53ACF63FC48F00FC9A13C7C5
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-OEM-SLPCOA3-ul-phn.xrm-ms --a---- 16293 bytes [10:19 18/06/2012] [13:40 20/11/2010] 62D820597D361F1E9685CD159BC8B9AC
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] 188DE4D8333821282DB8E6D98BB4D227
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-ppdlic.xrm-ms --a---- 13790 bytes [10:18 18/06/2012] [13:39 20/11/2010] 37EB75F0F6891CD5AAEBA816754AC6C2
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-RETAIL1-pl.xrm-ms --a---- 13305 bytes [01:53 14/07/2009] [01:53 14/07/2009] D635B5071F4A6BD5CF8DD55695FC1B6A
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-RETAIL1-ul-oob.xrm-ms --a---- 13065 bytes [01:53 14/07/2009] [01:53 14/07/2009] 5DA1088D5DF05448A9D5A7FE17A657E8
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-RETAIL1-ul-phn.xrm-ms --a---- 16283 bytes [01:53 14/07/2009] [01:53 14/07/2009] 4B9D41C9A95DE5BCE031470FF0CFE84F
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-RETAIL2-pl.xrm-ms --a---- 13305 bytes [10:19 18/06/2012] [13:40 20/11/2010] 933929396D4C8D7D5A9F720595CFA214
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-RETAIL2-ul-oob.xrm-ms --a---- 13065 bytes [10:19 18/06/2012] [13:40 20/11/2010] 3CCA4D4322D70176CFAD731D5FC48240
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-RETAIL2-ul-phn.xrm-ms --a---- 16283 bytes [10:19 18/06/2012] [13:40 20/11/2010] A9F1486E8A400D7A8EE4A56372ED329E
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-RETAIL3-pl.xrm-ms --a---- 13305 bytes [10:19 18/06/2012] [13:40 20/11/2010] A01299ADD83AD094267CE9C110A1754F
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-RETAIL3-ul-oob.xrm-ms --a---- 13065 bytes [10:19 18/06/2012] [13:40 20/11/2010] 1F8DD1BC8325518D2F9FDCE35A1FD7CD
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-RETAIL3-ul-phn.xrm-ms --a---- 16283 bytes [10:19 18/06/2012] [13:40 20/11/2010] 1B45D8E4F2E07D6338EB9B4EF297E45C
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-ul-oob.xrm-ms --a---- 13065 bytes [01:53 14/07/2009] [01:53 14/07/2009] 595B12B16F607144EB6F610F2C856DDF
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e\Security-SPP-Component-SKU-HomePremium-ul-phn.xrm-ms --a---- 16283 bytes [01:53 14/07/2009] [01:53 14/07/2009] DD3CD0423602699D888EE7009ACCA3AF
C:\Windows\winsxs\amd64_microsoft-windows-s..iuminboxgames-chess_31bf3856ad364e35_6.1.7600.16385_none_d0c99374981840d5\Shell-PremiumInBoxGames-Chess-ppdlic.xrm-ms --a---- 3034 bytes [01:53 14/07/2009] [01:53 14/07/2009] 610DCE8131E5F167EFE07952355A8AFD
C:\Windows\winsxs\FileMaps\$$_system32_de-de_licenses_default_homepremiume_7e2047d3a6b5097c.cdf-ms --a---- 688 bytes [17:58 14/07/2009] [12:55 23/06/2012] 3363884E9CD156C0BAB792E67C196E5F
C:\Windows\winsxs\FileMaps\$$_system32_de-de_licenses_default_homepremiumn_7e2047d3a6b50985.cdf-ms --a---- 688 bytes [17:58 14/07/2009] [12:55 23/06/2012] F4E7E853B2CBD28E6EC51487A217B036
C:\Windows\winsxs\FileMaps\$$_system32_de-de_licenses_default_homepremium_7e2047d3606a36f3.cdf-ms --a---- 684 bytes [17:58 14/07/2009] [12:55 23/06/2012] 4FD67A2619638F072B2E3AECD916CDD7
C:\Windows\winsxs\FileMaps\$$_system32_de-de_licenses_eval_homepremiume_70580cf2d496a9d6.cdf-ms --a---- 684 bytes [17:58 14/07/2009] [17:58 14/07/2009] 0CFA104F5EB22C7D9BC3F4BC0EA48880
C:\Windows\winsxs\FileMaps\$$_system32_de-de_licenses_eval_homepremiumn_70580cf2d496a9df.cdf-ms --a---- 684 bytes [17:58 14/07/2009] [17:58 14/07/2009] 56E2148EE209972D1C7083E3458ECCEE
C:\Windows\winsxs\FileMaps\$$_system32_de-de_licenses_eval_homepremium_70580cf31dac9ed7.cdf-ms --a---- 676 bytes [17:58 14/07/2009] [17:58 14/07/2009] 740D6737BBA4F5367A3AE60212DF81AB
C:\Windows\winsxs\FileMaps\$$_system32_de-de_licenses_oem_homepremiume_d73bd8e8b65b0b27.cdf-ms --a---- 676 bytes [17:58 14/07/2009] [12:55 23/06/2012] 71BCF970767C287854218C316FAD73BA
C:\Windows\winsxs\FileMaps\$$_system32_de-de_licenses_oem_homepremiumn_d73bd8fab65b0ad6.cdf-ms --a---- 676 bytes [17:58 14/07/2009] [12:55 23/06/2012] FABEDADF04E5A76D86E03EA0B05A4BD7
C:\Windows\winsxs\FileMaps\$$_system32_de-de_licenses_oem_homepremium_1200cad1ade4ca8a.cdf-ms --a---- 676 bytes [17:58 14/07/2009] [12:55 23/06/2012] DD5128F8A2EDB55E503F2792EA3052B9
C:\Windows\winsxs\FileMaps\$$_system32_spp_tokens_skus_security-spp-component-sku-homepremium_89c11f8e8dc99340.cdf-ms --a---- 5572 bytes [18:18 14/07/2009] [12:55 23/06/2012] 8AFA9C01D612BEF89DB4A6DDE22BF34F
C:\Windows\winsxs\FileMaps\$$_syswow64_de-de_licenses_default_homepremiume_8585d384b338a744.cdf-ms --a---- 684 bytes [17:58 14/07/2009] [12:55 23/06/2012] CF56101D6A4BBDBB9E5ACCBECAEC01EF
C:\Windows\winsxs\FileMaps\$$_syswow64_de-de_licenses_default_homepremiumn_8585d384b338a74d.cdf-ms --a---- 684 bytes [17:58 14/07/2009] [12:55 23/06/2012] EF4EAED4E5312D0F83719071EE97C6E6
C:\Windows\winsxs\FileMaps\$$_syswow64_de-de_licenses_default_homepremium_8585d38458596427.cdf-ms --a---- 680 bytes [17:58 14/07/2009] [12:55 23/06/2012] B386269CAE2FD3A390E098653DA9BEED
C:\Windows\winsxs\FileMaps\$$_syswow64_de-de_licenses_eval_homepremiume_729e84252c671a0e.cdf-ms --a---- 680 bytes [17:58 14/07/2009] [17:58 14/07/2009] 770A1F4E696ED225ECD3D35B8DF86AFE
C:\Windows\winsxs\FileMaps\$$_syswow64_de-de_licenses_eval_homepremiumn_729e84252c671a17.cdf-ms --a---- 680 bytes [17:58 14/07/2009] [17:58 14/07/2009] D7EFF78BEE89F8DD986DDA2FB8EACAA2
C:\Windows\winsxs\FileMaps\$$_syswow64_de-de_licenses_eval_homepremium_729e8424c71ae4a3.cdf-ms --a---- 672 bytes [17:58 14/07/2009] [17:58 14/07/2009] 1300B1E28B3404135D1081B3ECE88FC7
C:\Windows\winsxs\FileMaps\$$_syswow64_de-de_licenses_oem_homepremiume_d982506c5fc950f3.cdf-ms --a---- 672 bytes [17:58 14/07/2009] [12:55 23/06/2012] 0D4B8C01A44418B9F4451DBC4D22772C
C:\Windows\winsxs\FileMaps\$$_syswow64_de-de_licenses_oem_homepremiumn_d982507e5fc950a2.cdf-ms --a---- 672 bytes [17:58 14/07/2009] [12:55 23/06/2012] B05394F3575DB66FC7262E01FBC4DA65
C:\Windows\winsxs\FileMaps\$$_syswow64_de-de_licenses_oem_homepremium_1eb8f7d928535f84.cdf-ms --a---- 672 bytes [17:58 14/07/2009] [12:55 23/06/2012] C8977BBE64023EEB938C02CFC0176CA5
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-a..indowshomepremiumed_31bf3856ad364e35_6.1.7600.16385_none_ffce07f8a0e4a598.manifest --a---- 1140 bytes [02:27 14/07/2009] [02:10 14/07/2009] AC45ED4221E6E7D1CE9CC74D33637879
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-a..premiumed.resources_31bf3856ad364e35_6.1.7600.16385_de-de_603a0d18d8fc57e4.manifest --a---- 2303 bytes [17:57 14/07/2009] [17:57 14/07/2009] D1BD4915C88BE1AC5EA198CBC6932894
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-b..epremium-deployment_31bf3856ad364e35_6.1.7600.16385_none_e93723ce29b7aac9.manifest --a---- 1552 bytes [05:29 14/07/2009] [05:29 14/07/2009] FDF0FEA40BF3B87C1C985E7D23001957
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-b..g-shell-homepremium_31bf3856ad364e35_6.1.7600.16385_none_9c05526173da9e18.manifest --a---- 3007 bytes [02:19 14/07/2009] [02:19 14/07/2009] 05BB38DA9BD012970B7AE4D040B9D1FF
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-b..mepremium.resources_31bf3856ad364e35_6.1.7600.16385_de-de_a929f0f3243439af.manifest --a---- 2557 bytes [17:57 14/07/2009] [17:57 14/07/2009] 9C801070A39DE759C1A5475594C43000
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-b..ng-base-homepremium_31bf3856ad364e35_6.1.7600.16385_none_7de3f055667d5adf.manifest --a---- 5560 bytes [02:26 14/07/2009] [02:26 14/07/2009] CF7F5E8FDD6F25D41638BB807FDCEA8C
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-h..epremium-deployment_31bf3856ad364e35_6.1.7600.16385_none_1081cb3d7be15b1d.manifest --a---- 880 bytes [05:29 14/07/2009] [05:29 14/07/2009] 5687E8F5019B8A21603BA618121E7B6A
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-h..epremium-deployment_31bf3856ad364e35_6.1.7600.16385_none_f6e5bc47ed8fe84b.manifest --a---- 13172 bytes [05:29 14/07/2009] [05:29 14/07/2009] EB6F60FFB568DE265BA1468508D84A56
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-h..epremium-deployment_31bf3856ad364e35_6.1.7601.17514_none_f916d00fea7e6be5.manifest ------- 13175 bytes [09:38 18/06/2012] [09:38 18/06/2012] 3C37AF00903154C740212AADA5971A47
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..default-homepremium_31bf3856ad364e35_6.1.7600.16385_none_4c3fe4d0eaa17311.manifest --a---- 1078 bytes [02:27 14/07/2009] [02:10 14/07/2009] 9D335D315269EEDF637B0FE7794DB33D
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..e-eval-homepremiume_31bf3856ad364e35_6.1.7600.16385_none_e71254e0730af885.manifest --a---- 1070 bytes [02:14 14/07/2009] [02:11 14/07/2009] 307C16F1ACE150FBEE653D836E1DD392
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..e-eval-homepremiumn_31bf3856ad364e35_6.1.7600.16385_none_e71b577a7302dc94.manifest --a---- 1070 bytes [02:27 14/07/2009] [02:11 14/07/2009] 87E53E74B29954994DF2842DF7F762DC
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..efault-homepremiume_31bf3856ad364e35_6.1.7600.16385_none_1754bbb7124fc816.manifest --a---- 1082 bytes [02:17 14/07/2009] [02:10 14/07/2009] 3FC1B2B04DD8821FD1CC7B32F360FBA2
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..efault-homepremiumn_31bf3856ad364e35_6.1.7600.16385_none_16f36c6b1298c38f.manifest --a---- 1082 bytes [02:24 14/07/2009] [02:10 14/07/2009] 819186E1A84D94C48CFFE166C8D36DDA
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7600.16385_de-de_01cafd1aaa8ec853.manifest --a---- 2243 bytes [17:57 14/07/2009] [17:57 14/07/2009] 6F544EE73872BE2B20DCE1F037D5892F
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7600.16385_de-de_6e00f9e78298ad24.manifest --a---- 2254 bytes [17:57 14/07/2009] [17:57 14/07/2009] 41698BEA7A63C8C80F4C07921A5E2FE1
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7600.16385_de-de_bffbdced62f80464.manifest --a---- 2240 bytes [17:57 14/07/2009] [17:57 14/07/2009] 9AC3B04122CF56BB8CC5515BAC288FDF
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7601.17514_de-de_70320daf7f8730be.manifest ------- 2254 bytes [09:36 18/06/2012] [03:30 20/11/2010] 42F965DA48CF2677114D85291E07C206
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7601.17514_de-de_c22cf0b55fe687fe.manifest ------- 2240 bytes [09:36 18/06/2012] [03:30 20/11/2010] 096A81A0032A1FCF04E120E623AB7842
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7600.16385_de-de_15b4b7bedb9f974c.manifest --a---- 2243 bytes [17:57 14/07/2009] [17:57 14/07/2009] F9B71E04ED26EF302F8277620B567F52
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7600.16385_de-de_1ceb0813c9016663.manifest --a---- 2254 bytes [17:57 14/07/2009] [17:57 14/07/2009] BA24BCC605D023884AFF7BA89DDBE8C2
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7600.16385_de-de_6ee5eb19a960bda3.manifest --a---- 2240 bytes [17:57 14/07/2009] [17:57 14/07/2009] 3E2DD9C30582014BA9B9AEF08B317C9D
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7601.17514_de-de_1f1c1bdbc5efe9fd.manifest ------- 2254 bytes [09:36 18/06/2012] [03:31 20/11/2010] C98203B99AEDD61B367BBBEA5D041847
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7601.17514_de-de_7116fee1a64f413d.manifest ------- 2240 bytes [09:36 18/06/2012] [03:29 20/11/2010] EBDB4F888B5C202891E7428F59D9E5E2
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7600.16385_de-de_a8ebe5a9d6bf0d55.manifest --a---- 2237 bytes [17:57 14/07/2009] [17:57 14/07/2009] 689EB199EEF7CC6D76357672F34F75AF
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7600.16385_de-de_d197ecefd4c922a9.manifest --a---- 2251 bytes [17:57 14/07/2009] [17:57 14/07/2009] 9284080C0E54079227B9504BC744FFE6
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7600.16385_de-de_ee871b8ab496c12c.manifest --a---- 2240 bytes [17:57 14/07/2009] [17:57 14/07/2009] 6F75B4950D3CF3E987BC1DF454C12F90
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7601.17514_de-de_ab1cf971d3ad90ef.manifest ------- 2237 bytes [09:36 18/06/2012] [03:30 20/11/2010] D2801C719D2A1729E2721234265837AB
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7601.17514_de-de_d3c900b7d1b7a643.manifest ------- 2251 bytes [09:36 18/06/2012] [03:29 20/11/2010] 797B1F03A7154AAD1F8603C19D315AD6
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..nse-oem-homepremium_31bf3856ad364e35_6.1.7600.16385_none_0586ee5dd15f679b.manifest --a---- 1062 bytes [02:14 14/07/2009] [02:11 14/07/2009] B553B04A522231BF177695312D9C9A9F
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..se-eval-homepremium_31bf3856ad364e35_6.1.7600.16385_none_1c6b4a2cc3077626.manifest --a---- 1066 bytes [02:18 14/07/2009] [02:11 14/07/2009] F60B9F99FD52C55514AD1243A5002E3E
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..se-oem-homepremiume_31bf3856ad364e35_6.1.7600.16385_none_e69ada36a88cdb8e.manifest --a---- 1066 bytes [02:16 14/07/2009] [02:11 14/07/2009] FC335E6E7AF4D364CAD12095F076CA2D
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..se-oem-homepremiumn_31bf3856ad364e35_6.1.7600.16385_none_e6398aeaa8d5d707.manifest --a---- 1066 bytes [02:14 14/07/2009] [02:11 14/07/2009] 849F5BA4A1680A0AE8CB6C323A1D2377
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-m..-premium-deployment_31bf3856ad364e35_6.1.7600.16385_none_5ff65dcae973aae6.manifest --a---- 1197 bytes [05:29 14/07/2009] [05:29 14/07/2009] 76B553F9669E229F3781A363EF5948FD
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-m..-premium-deployment_31bf3856ad364e35_6.1.7601.17514_none_62277192e6622e80.manifest ------- 1200 bytes [09:38 18/06/2012] [09:38 18/06/2012] 8E6207E37291CF92F713419E42367530
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-m..aultlocationpremium_31bf3856ad364e35_6.1.7600.16385_none_bb5cbd0914a046fc.manifest --a---- 11049 bytes [02:25 14/07/2009] [02:25 14/07/2009] 165AD07DE2B6D0EEF63C9D06CD48064A
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-m..aultlocationpremium_31bf3856ad364e35_6.1.7601.17514_none_bd8dd0d1118eca96.manifest ------- 11049 bytes [09:36 18/06/2012] [04:20 20/11/2010] E86C0CF25F97660A442F96350644401F
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-photopremiumdeployment_31bf3856ad364e35_6.1.7600.16385_none_b719c5565884aaa3.manifest --a---- 1810 bytes [05:29 14/07/2009] [05:29 14/07/2009] F4460F6503662960F59DA50CF8AAA917
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-photopremiumdeployment_31bf3856ad364e35_6.1.7601.17514_none_b94ad91e55732e3d.manifest ------- 1813 bytes [09:38 18/06/2012] [09:38 18/06/2012] 51526E2BD33FDB83ED93E7B84B817750
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404.manifest --a---- 55414 bytes [02:13 14/07/2009] [02:13 14/07/2009] BD877D8F0AF8C407416CBE7A9C747E88
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e.manifest ------- 69405 bytes [09:37 18/06/2012] [04:40 20/11/2010] 51364E3DF1896DED99C94EF1626860D6
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-s..epremium-deployment_31bf3856ad364e35_6.1.7600.16385_none_ec75c926611048b0.manifest --a---- 975 bytes [05:29 14/07/2009] [05:29 14/07/2009] 6B3FA5B949D1FBDAB2C1F65A236FE2B8
C:\Windows\winsxs\Manifests\amd64_microsoft-windows-s..epremium-deployment_31bf3856ad364e35_6.1.7601.17514_none_eea6dcee5dfecc4a.manifest ------- 978 bytes [09:38 18/06/2012] [09:38 18/06/2012] F2D1376C0CF9DB57C1D92CCB680EB4A4
C:\Windows\winsxs\Manifests\amd64_server-help-deploym..ienthomepremium.chm_31bf3856ad364e35_6.1.7600.16385_none_9becfbcc557c474e.manifest --a---- 14281 bytes [05:29 14/07/2009] [05:29 14/07/2009] C2414FBA85499B628DAC39470A68F9BC
C:\Windows\winsxs\Manifests\amd64_server-help-deploym..ienthomepremium.h1s_31bf3856ad364e35_6.1.7600.16385_none_9b7f539a55d6fb18.manifest --a---- 1501 bytes [05:29 14/07/2009] [05:29 14/07/2009] 08290F39B83786EB52972BB77CF478E0
C:\Windows\winsxs\Manifests\wow64_microsoft-windows-m..aultlocationpremium_31bf3856ad364e35_6.1.7600.16385_none_c5b1675b490108f7.manifest --a---- 11045 bytes [01:43 14/07/2009] [01:43 14/07/2009] E6F54E87C726E6514CA97A6172A9799D
C:\Windows\winsxs\Manifests\wow64_microsoft-windows-m..aultlocationpremium_31bf3856ad364e35_6.1.7601.17514_none_c7e27b2345ef8c91.manifest ------- 11045 bytes [09:36 18/06/2012] [02:59 20/11/2010] EDA89C49D1A20CB0EAE00134F66B1B39
C:\Windows\winsxs\Manifests\wow64_microsoft-windows-photopremiumdeployment_31bf3856ad364e35_6.1.7600.16385_none_c16e6fa88ce56c9e.manifest --a---- 1455 bytes [01:43 14/07/2009] [01:42 14/07/2009] 6C2516F00F60F050006ADF09C12BA323
C:\Windows\winsxs\Manifests\wow64_microsoft-windows-photopremiumdeployment_31bf3856ad364e35_6.1.7601.17514_none_c39f837089d3f038.manifest ------- 1458 bytes [09:36 18/06/2012] [08:42 20/11/2010] 4555257B8E554133B2CFE2723981356B
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..default-homepremium_31bf3856ad364e35_6.1.7600.16385_none_f021494d324401db.manifest --a---- 1074 bytes [01:58 14/07/2009] [01:44 14/07/2009] 4EE9858D7265E4E2832FF00E60A5BDFC
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..e-eval-homepremiume_31bf3856ad364e35_6.1.7600.16385_none_8af3b95cbaad874f.manifest --a---- 1066 bytes [01:48 14/07/2009] [01:44 14/07/2009] 7BA2A1B99BC4C5B69A85789B72E05903
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..e-eval-homepremiumn_31bf3856ad364e35_6.1.7600.16385_none_8afcbbf6baa56b5e.manifest --a---- 1066 bytes [01:58 14/07/2009] [01:44 14/07/2009] EEC463D284A4DC99664B4083CD4E483D
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..efault-homepremiume_31bf3856ad364e35_6.1.7600.16385_none_bb36203359f256e0.manifest --a---- 1078 bytes [01:51 14/07/2009] [01:44 14/07/2009] BA6CE18AFFFB04C837D3CC7A6AECC282
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..efault-homepremiumn_31bf3856ad364e35_6.1.7600.16385_none_bad4d0e75a3b5259.manifest --a---- 1078 bytes [01:55 14/07/2009] [01:44 14/07/2009] 8180771B7A85CFD713587DEF2647614A
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7600.16385_de-de_11e25e63ca3b3bee.manifest --a---- 2252 bytes [17:57 14/07/2009] [17:57 14/07/2009] 31A97352ED2A7720608720A581D9D451

Verena72 · 06.10.2013, 12:11

C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7600.16385_de-de_63dd4169aa9a932e.manifest --a---- 2238 bytes [17:57 14/07/2009] [17:57 14/07/2009] 33E5EC4F7E81F4C8B9C8EAEF2A8EC7FC
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7600.16385_de-de_a5ac6196f231571d.manifest --a---- 2241 bytes [17:57 14/07/2009] [17:57 14/07/2009] 8E97B063D90AC608286287124D3857B0
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7601.17514_de-de_1413722bc729bf88.manifest ------- 2252 bytes [09:36 18/06/2012] [02:26 20/11/2010] B9B75B59DDD821A096012EBEA4C810E0
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7601.17514_de-de_660e5531a78916c8.manifest ------- 2238 bytes [09:36 18/06/2012] [02:26 20/11/2010] 9103CB80CAF53EC17513955383C863B9
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7600.16385_de-de_12c74f95f1034c6d.manifest --a---- 2238 bytes [17:57 14/07/2009] [17:57 14/07/2009] 416F0AD1D18E0C665354AA767B29B137
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7600.16385_de-de_b9961c3b23422616.manifest --a---- 2241 bytes [17:57 14/07/2009] [17:57 14/07/2009] F5033405BD06B5CCC329FA79A57597DF
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7600.16385_de-de_c0cc6c9010a3f52d.manifest --a---- 2252 bytes [17:57 14/07/2009] [17:57 14/07/2009] B6ACC517D82B02131DBB5F6D998ABFFA
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7601.17514_de-de_14f8635dedf1d007.manifest ------- 2238 bytes [09:36 18/06/2012] [02:25 20/11/2010] 7DC0400F3CC8AD52180265BE13C422E8
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7601.17514_de-de_c2fd80580d9278c7.manifest ------- 2252 bytes [09:36 18/06/2012] [02:27 20/11/2010] 80DB3F26D9CEF3585E4838C73473DBC3
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7600.16385_de-de_4ccd4a261e619c1f.manifest --a---- 2235 bytes [17:57 14/07/2009] [17:57 14/07/2009] 10A1B01654096D522280648BCD7EF7C3
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7600.16385_de-de_7579516c1c6bb173.manifest --a---- 2249 bytes [17:57 14/07/2009] [17:57 14/07/2009] 1881020CBA18BB8B80A432089A7896AC
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7600.16385_de-de_92688006fc394ff6.manifest --a---- 2238 bytes [17:57 14/07/2009] [17:57 14/07/2009] 3C3028F0370CA4BC06F82D0C4CF2E593
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7601.17514_de-de_4efe5dee1b501fb9.manifest ------- 2235 bytes [09:36 18/06/2012] [02:26 20/11/2010] 61E4BC25AAEA921437916129496FCD9D
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7601.17514_de-de_77aa6534195a350d.manifest ------- 2249 bytes [09:36 18/06/2012] [02:25 20/11/2010] A09FFEEF238D23172EA17EAF6C4EF9F8
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..nse-oem-homepremium_31bf3856ad364e35_6.1.7600.16385_none_a96852da1901f665.manifest --a---- 1058 bytes [01:48 14/07/2009] [01:45 14/07/2009] D691AF9412EB9578F76424DCC6F614FE
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..se-eval-homepremium_31bf3856ad364e35_6.1.7600.16385_none_c04caea90aaa04f0.manifest --a---- 1062 bytes [01:52 14/07/2009] [01:44 14/07/2009] 00329143DF8FA1818EE357F96EEFC6D8
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..se-oem-homepremiume_31bf3856ad364e35_6.1.7600.16385_none_8a7c3eb2f02f6a58.manifest --a---- 1062 bytes [01:50 14/07/2009] [01:45 14/07/2009] 94A23FEDACEA9006C37EDAE42093EE13
C:\Windows\winsxs\Manifests\x86_microsoft-windows-l..se-oem-homepremiumn_31bf3856ad364e35_6.1.7600.16385_none_8a1aef66f07865d1.manifest --a---- 1062 bytes [01:48 14/07/2009] [01:45 14/07/2009] 65CB8CC9A5FD2430B2EE2E8EF6DA544B

Searching for "*incredibar*"
No files found.

Searching for "*SimplyTech*"
No files found.

Searching for "*OpenCandy*"
No files found.

Searching for "*HomeTab*"
C:\AdwCleaner\Quarantine\C\Users\Mariejoanna81\AppData\Local\DownloadGuide\Offers\hometab.exe.vir --a---- 3618696 bytes [10:12 26/09/2013] [10:12 26/09/2013] 18ACCC6319051EE187A121A3AAEB4181

Searching for "*sweetim*"
No files found.

Searching for "*Crossrider*"
C:\Users\Mariejoanna81\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8QJH4I95\CrossriderInfo[1].js --a---- 2084 bytes [10:14 26/09/2013] [10:14 26/09/2013] DF446F3DBD84A1DEB1058DBF4BEC2DD6
C:\Users\Mariejoanna81\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8QJH4I95\CrossriderUtils[1].js --a---- 12231 bytes [10:14 26/09/2013] [10:14 26/09/2013] 4AA9356C3BD16EEFA0B71433B7091328
C:\Users\Mariejoanna81\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M1M7GDF7\CrossriderAppUtils[1].js --a---- 5811 bytes [10:14 26/09/2013] [10:14 26/09/2013] 1F43EE7D7D526DB302BF483B9215B007
C:\Users\Mariejoanna81\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_491425\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\13_CrossriderAppUtils.js --a---- 5955 bytes [10:15 26/09/2013] [10:14 26/09/2013] A15314F10FA928B5C242EDDC4B91F503
C:\Users\Mariejoanna81\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_491425\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\14_CrossriderUtils.js --a---- 12369 bytes [10:15 26/09/2013] [10:14 26/09/2013] 56E07DB48844B5EB4DD57F053D87A38D
C:\Users\Mariejoanna81\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_491425\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\78_CrossriderInfo.js --a---- 2220 bytes [10:15 26/09/2013] [10:14 26/09/2013] EC3226E86137F361EEEF8F1244A0225A
C:\Users\Mariejoanna81\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_491425\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\skin\crossrider_statusbar.png --a---- 1361 bytes [10:15 26/09/2013] [10:14 26/09/2013] 8B1EB9CB80417EC0022D278A44AB1DC7

Searching for "*certified-toolbar*"
No files found.

========== folderfind ==========

Searching for "*IBUpdater*"
No folders found.

Searching for "*Web Assistant*"
C:\AdwCleaner\Quarantine\C\Program Files\Web Assistant d------ [17:01 02/10/2013]

Searching for "*Premium*"
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Premium Partners d------ [10:10 15/06/2012]
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\VAIO Premium Partners d------ [10:10 15/06/2012]
C:\Windows\System32\de-DE\Licenses\eval\HomePremium d------ [17:58 14/07/2009]
C:\Windows\System32\de-DE\Licenses\eval\HomePremiumE d------ [17:58 14/07/2009]
C:\Windows\System32\de-DE\Licenses\eval\HomePremiumN d------ [17:58 14/07/2009]
C:\Windows\System32\de-DE\Licenses\OEM\HomePremium d------ [17:58 14/07/2009]
C:\Windows\System32\de-DE\Licenses\OEM\HomePremiumE d------ [17:58 14/07/2009]
C:\Windows\System32\de-DE\Licenses\OEM\HomePremiumN d------ [17:58 14/07/2009]
C:\Windows\System32\de-DE\Licenses\_Default\HomePremium d------ [17:58 14/07/2009]
C:\Windows\System32\de-DE\Licenses\_Default\HomePremiumE d------ [17:58 14/07/2009]
C:\Windows\System32\de-DE\Licenses\_Default\HomePremiumN d------ [17:58 14/07/2009]
C:\Windows\System32\spp\tokens\skus\Security-SPP-Component-SKU-HomePremium d------ [18:18 14/07/2009]
C:\Windows\SysWOW64\de-DE\Licenses\eval\HomePremium d------ [17:58 14/07/2009]
C:\Windows\SysWOW64\de-DE\Licenses\eval\HomePremiumE d------ [17:58 14/07/2009]
C:\Windows\SysWOW64\de-DE\Licenses\eval\HomePremiumN d------ [17:58 14/07/2009]
C:\Windows\SysWOW64\de-DE\Licenses\OEM\HomePremium d------ [17:58 14/07/2009]
C:\Windows\SysWOW64\de-DE\Licenses\OEM\HomePremiumE d------ [17:58 14/07/2009]
C:\Windows\SysWOW64\de-DE\Licenses\OEM\HomePremiumN d------ [17:58 14/07/2009]
C:\Windows\SysWOW64\de-DE\Licenses\_Default\HomePremium d------ [17:58 14/07/2009]
C:\Windows\SysWOW64\de-DE\Licenses\_Default\HomePremiumE d------ [17:58 14/07/2009]
C:\Windows\SysWOW64\de-DE\Licenses\_Default\HomePremiumN d------ [17:58 14/07/2009]
C:\Windows\winsxs\amd64_microsoft-windows-a..premiumed.resources_31bf3856ad364e35_6.1.7600.16385_de-de_603a0d18d8fc57e4 d------ [17:58 14/07/2009]
C:\Windows\winsxs\amd64_microsoft-windows-b..g-shell-homepremium_31bf3856ad364e35_6.1.7600.16385_none_9c05526173da9e18 d------ [05:30 14/07/2009]
C:\Windows\winsxs\amd64_microsoft-windows-b..mepremium.resources_31bf3856ad364e35_6.1.7600.16385_de-de_a929f0f3243439af d------ [17:58 14/07/2009]
C:\Windows\winsxs\amd64_microsoft-windows-b..ng-base-homepremium_31bf3856ad364e35_6.1.7600.16385_none_7de3f055667d5adf d------ [05:30 14/07/2009]
C:\Windows\winsxs\amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7600.16385_de-de_01cafd1aaa8ec853 d------ [17:58 14/07/2009]
C:\Windows\winsxs\amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7600.16385_de-de_6e00f9e78298ad24 d------ [17:58 14/07/2009]
C:\Windows\winsxs\amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7600.16385_de-de_bffbdced62f80464 d------ [17:58 14/07/2009]
C:\Windows\winsxs\amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7601.17514_de-de_70320daf7f8730be d------ [12:50 23/06/2012]
C:\Windows\winsxs\amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7601.17514_de-de_c22cf0b55fe687fe d------ [12:50 23/06/2012]
C:\Windows\winsxs\amd64_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7600.16385_de-de_15b4b7bedb9f974c d------ [17:58 14/07/2009]
C:\Windows\winsxs\amd64_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7600.16385_de-de_1ceb0813c9016663 d------ [17:58 14/07/2009]
C:\Windows\winsxs\amd64_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7600.16385_de-de_6ee5eb19a960bda3 d------ [17:58 14/07/2009]
C:\Windows\winsxs\amd64_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7601.17514_de-de_1f1c1bdbc5efe9fd d------ [12:50 23/06/2012]
C:\Windows\winsxs\amd64_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7601.17514_de-de_7116fee1a64f413d d------ [12:50 23/06/2012]
C:\Windows\winsxs\amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7600.16385_de-de_a8ebe5a9d6bf0d55 d------ [17:58 14/07/2009]
C:\Windows\winsxs\amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7600.16385_de-de_d197ecefd4c922a9 d------ [17:58 14/07/2009]
C:\Windows\winsxs\amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7600.16385_de-de_ee871b8ab496c12c d------ [17:58 14/07/2009]
C:\Windows\winsxs\amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7601.17514_de-de_ab1cf971d3ad90ef d------ [12:50 23/06/2012]
C:\Windows\winsxs\amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7601.17514_de-de_d3c900b7d1b7a643 d------ [12:50 23/06/2012]
C:\Windows\winsxs\amd64_microsoft-windows-m..aultlocationpremium_31bf3856ad364e35_6.1.7600.16385_none_bb5cbd0914a046fc d------ [05:30 14/07/2009]
C:\Windows\winsxs\amd64_microsoft-windows-m..aultlocationpremium_31bf3856ad364e35_6.1.7601.17514_none_bd8dd0d1118eca96 d------ [12:49 23/06/2012]
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7600.16385_none_8b01e2f4127bf404 d------ [05:30 14/07/2009]
C:\Windows\winsxs\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_6.1.7601.17514_none_8d32f6bc0f6a779e d------ [09:42 18/06/2012]
C:\Windows\winsxs\wow64_microsoft-windows-m..aultlocationpremium_31bf3856ad364e35_6.1.7600.16385_none_c5b1675b490108f7 d------ [05:30 14/07/2009]
C:\Windows\winsxs\wow64_microsoft-windows-m..aultlocationpremium_31bf3856ad364e35_6.1.7601.17514_none_c7e27b2345ef8c91 d------ [12:50 23/06/2012]
C:\Windows\winsxs\x86_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7600.16385_de-de_11e25e63ca3b3bee d------ [17:58 14/07/2009]
C:\Windows\winsxs\x86_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7600.16385_de-de_63dd4169aa9a932e d------ [17:58 14/07/2009]
C:\Windows\winsxs\x86_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7600.16385_de-de_a5ac6196f231571d d------ [17:58 14/07/2009]
C:\Windows\winsxs\x86_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7601.17514_de-de_1413722bc729bf88 d------ [12:50 23/06/2012]
C:\Windows\winsxs\x86_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7601.17514_de-de_660e5531a78916c8 d------ [12:50 23/06/2012]
C:\Windows\winsxs\x86_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7600.16385_de-de_12c74f95f1034c6d d------ [17:58 14/07/2009]
C:\Windows\winsxs\x86_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7600.16385_de-de_b9961c3b23422616 d------ [17:58 14/07/2009]
C:\Windows\winsxs\x86_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7600.16385_de-de_c0cc6c9010a3f52d d------ [17:58 14/07/2009]
C:\Windows\winsxs\x86_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7601.17514_de-de_14f8635dedf1d007 d------ [12:50 23/06/2012]
C:\Windows\winsxs\x86_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7601.17514_de-de_c2fd80580d9278c7 d------ [12:50 23/06/2012]
C:\Windows\winsxs\x86_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7600.16385_de-de_4ccd4a261e619c1f d------ [17:58 14/07/2009]
C:\Windows\winsxs\x86_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7600.16385_de-de_7579516c1c6bb173 d------ [17:58 14/07/2009]
C:\Windows\winsxs\x86_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7600.16385_de-de_92688006fc394ff6 d------ [17:58 14/07/2009]
C:\Windows\winsxs\x86_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7601.17514_de-de_4efe5dee1b501fb9 d------ [12:50 23/06/2012]
C:\Windows\winsxs\x86_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7601.17514_de-de_77aa6534195a350d d------ [12:50 23/06/2012]

Searching for "*incredibar*"
No folders found.

Searching for "*SimplyTech*"
C:\AdwCleaner\Quarantine\C\Users\Mariejoanna81\AppData\LocalLow\SimplyTech d------ [17:01 02/10/2013]

Searching for "*OpenCandy*"
C:\AdwCleaner\Quarantine\C\Users\Mariejoanna81\AppData\Roaming\OpenCandy d------ [17:01 02/10/2013]

Searching for "*HomeTab*"
No folders found.

Searching for "*sweetim*"
No folders found.

Searching for "*Crossrider*"
No folders found.

Searching for "*certified-toolbar*"
No folders found.

========== regfind ==========

Searching for "IBUpdater"
No data found.

Searching for "Web Assistant"
[HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-18\Software\Web Assistant]
[HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-18\Software\Web Assistant]

Searching for "Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-HomePremiumEdition~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-HomePremiumEEdition~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-HomePremiumNEdition~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-PremiumCodecs-WMV~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~de-DE~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Microsoft-Windows-HomePremiumEdition-wrapper~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Microsoft-Windows-HomePremiumEdition~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~de-DE~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~de-DE~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~de-DE~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Microsoft-Windows-Security-SPP-Component-SKU-HomePremium-Package~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~de-DE~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~de-DE~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~~0.0.0.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385]
"InstallName"="Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514]
"InstallName"="Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~~6.1.7600.16385]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~~6.1.7600.16385]
"InstallName"="Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514]
"InstallName"="Microsoft-Windows-Branding-HomePremium-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-HomePremiumEdition-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-HomePremiumEdition-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514]
"InstallName"="Microsoft-Windows-HomePremiumEdition-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-HomePremiumEdition~31bf3856ad364e35~amd64~~6.1.7600.16385]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-HomePremiumEdition~31bf3856ad364e35~amd64~~6.1.7600.16385]
"InstallName"="HomePremium.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-HomePremiumEdition~31bf3856ad364e35~amd64~~6.1.7601.17514]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-HomePremiumEdition~31bf3856ad364e35~amd64~~6.1.7601.17514]
"InstallName"="Microsoft-Windows-HomePremiumEdition~31bf3856ad364e35~amd64~~6.1.7601.17514.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-LocalPack-DE-Package~31bf3856ad364e35~amd64~~6.1.7600.16385]
"InstallLocation"="\\?\C:\temp\HomePremium\dism-sandbox\D84ACC58-CDE2-4C51-BA50-4C94371B5EC8\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385]
"InstallName"="Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514]
"InstallName"="Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.1.7600.16385]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.1.7600.16385]
"InstallName"="Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.1.7601.17514]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.1.7601.17514]
"InstallName"="Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385]
"InstallName"="Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514]
"InstallName"="Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.1.7600.16385]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.1.7600.16385]
"InstallName"="Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.1.7600.16385.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.1.7601.17514]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.1.7601.17514]
"InstallName"="Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.1.7601.17514.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385]
"InstallName"="Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514]
"InstallName"="Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~6.1.7600.16385]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~6.1.7600.16385]
"InstallName"="Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~6.1.7601.17514]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~6.1.7601.17514]
"InstallName"="Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Security-SPP-Component-SKU-HomePremium-Package~31bf3856ad364e35~amd64~~6.1.7600.16385]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Security-SPP-Component-SKU-HomePremium-Package~31bf3856ad364e35~amd64~~6.1.7600.16385]
"InstallName"="Microsoft-Windows-Security-SPP-Component-SKU-HomePremium-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Security-SPP-Component-SKU-HomePremium-Package~31bf3856ad364e35~amd64~~6.1.7601.17514]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Security-SPP-Component-SKU-HomePremium-Package~31bf3856ad364e35~amd64~~6.1.7601.17514]
"InstallName"="Microsoft-Windows-Security-SPP-Component-SKU-HomePremium-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385]
"InstallName"="Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514]
"InstallName"="Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~6.1.7600.16385]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~6.1.7600.16385]
"InstallName"="Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~6.1.7601.17514]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~6.1.7601.17514]
"InstallName"="Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~6.1.7600.16385]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~6.1.7600.16385]
"InstallName"="Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~6.1.7601.17514]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~6.1.7601.17514]
"InstallName"="Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385]
"InstallName"="Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514]
"InstallName"="Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~~6.1.7600.16385]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~~6.1.7600.16385]
"InstallName"="Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~~6.1.7600.16385.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~~6.1.7601.17514]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~~6.1.7601.17514]
"InstallName"="Server-Help-Package.ClientHomePremium~31bf3856ad364e35~amd64~~6.1.7601.17514.mum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\UpdateDetect\Server-Help-Package.ClientHomePremium-Update]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-a..indowshomepremiumed_31bf3856ad364e35_none_b5cdfdefdca2e0b7]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-a..premiumed.resources_31bf3856ad364e35_de-de_7a4c7762811205cb]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-b..epremium-deployment_31bf3856ad364e35_none_de05cb4f06528ace]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-b..g-shell-homepremium_31bf3856ad364e35_none_406c711d1a878c37]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-b..mepremium.resources_31bf3856ad364e35_de-de_40ee0fcd23612598]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-b..ng-base-homepremium_31bf3856ad364e35_none_fe920f0ce32021e8]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-h..epremium-deployment_31bf3856ad364e35_none_dad3c57d7ec8bcdc]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-h..epremium-deployment_31bf3856ad364e35_none_edc06ba8e0bfb01a]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..default-homepremium_31bf3856ad364e35_none_465ab4140d5502c6]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..e-eval-homepremiume_31bf3856ad364e35_none_bcd86b716ff3f3f2]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..e-eval-homepremiumn_31bf3856ad364e35_none_bcd79e696ff4da9b]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..efault-homepremiume_31bf3856ad364e35_none_67b2e5f408ec4ea9]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..efault-homepremiumn_31bf3856ad364e35_none_67bbe88e08e432b8]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_de-de_5f9c2ca038d99d4b]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_de-de_6fd07339a2ac6b14]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_de-de_e65b97046e398a8b]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_de-de_434dc4d5645537a3]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_de-de_7385e74469ea6c44]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_de-de_fa4551a89f4a5984]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_de-de_0c9243c5da72a4c3]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_de-de_154ff135f35099ee]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_de-de_4f82e91064dff1a2]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..nse-oem-homepremium_31bf3856ad364e35_none_cd417a694907040c]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..se-eval-homepremium_31bf3856ad364e35_none_29e195c6f549ad19]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..se-oem-homepremiume_31bf3856ad364e35_none_aeef214b311e68f1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-l..se-oem-homepremiumn_31bf3856ad364e35_none_aef823e531164d00]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-m..aultlocationpremium_31bf3856ad364e35_none_71dc44a608aa7973]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-photopremiumdeployment_31bf3856ad364e35_none_4abb4de85674a744]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-s..ent-sku-homepremium_31bf3856ad364e35_none_c9757b5f7aae82ab]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-s..epremium-deployment_31bf3856ad364e35_none_bfd9e149002c405f]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_server-help-deploym..ienthomepremium.chm_31bf3856ad364e35_none_14efe52c56caeb31]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_server-help-deploym..ienthomepremium.h1s_31bf3856ad364e35_none_14f9d6fa56c0d737]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\wow64_microsoft-windows-m..aultlocationpremium_31bf3856ad364e35_none_7c30eef83d0b3b6e]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\wow64_microsoft-windows-photopremiumdeployment_31bf3856ad364e35_none_550ff83a8ad5693f]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..default-homepremium_31bf3856ad364e35_none_ea3c189054f79190]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..e-eval-homepremiume_31bf3856ad364e35_none_60b9cfedb79682bc]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..e-eval-homepremiumn_31bf3856ad364e35_none_60b902e5b7976965]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..efault-homepremiume_31bf3856ad364e35_none_0b944a70508edd73]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..efault-homepremiumn_31bf3856ad364e35_none_0b9d4d0a5086c182]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_de-de_037d911c807c2c15]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_de-de_13b1d7b5ea4ef9de]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_de-de_8a3cfb80b5dc1955]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_de-de_17674bc0b18cfb0e]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_de-de_9e26b624e6ece84e]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_de-de_e72f2951abf7c66d]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_de-de_b073a8422215338d]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_de-de_b93155b23af328b8]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_de-de_f3644d8cac82806c]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..nse-oem-homepremium_31bf3856ad364e35_none_7122dee590a992d6]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..se-eval-homepremium_31bf3856ad364e35_none_cdc2fa433cec3be3]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..se-oem-homepremiume_31bf3856ad364e35_none_52d085c778c0f7bb]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-l..se-oem-homepremiumn_31bf3856ad364e35_none_52d9886178b8dbca]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SMDEn]
"OEM3"="c:\programdata\Microsoft\Windows\Start Menu\Programs\VAIO Premium Partners\Microsoft Office - 60-Tage-Testversion.lnk"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SMDEn]
"OEM4"="c:\programdata\Microsoft\Windows\Start Menu\Programs\VAIO Premium Partners\VAIO Premium Partners.lnk"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
"EditionID"="HomePremium"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
"ProductName"="Windows 7 Home Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VAIO Premium Partners 1.00]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VAIO Premium Partners 1.00]
"DisplayName"="VAIO Premium Partners 1.00"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion]
"EditionID"="HomePremium"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion]
"ProductName"="Windows 7 Home Premium"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sony Corporation\Installed Software\Modules\VAIO Premium Partners 150395]

Searching for "incredibar"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2766355210-2261221984-3006064297-1000\Software\Incredibar.com]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2766355210-2261221984-3006064297-1000\Software\Incredibar.com\incredibar]
[HKEY_USERS\S-1-5-21-2766355210-2261221984-3006064297-1000\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2766355210-2261221984-3006064297-1000\Software\Incredibar.com]
[HKEY_USERS\S-1-5-21-2766355210-2261221984-3006064297-1000\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2766355210-2261221984-3006064297-1000\Software\Incredibar.com\incredibar]

Searching for "SimplyTech"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"newtab"="%appdata%\SimplyTech\home\home.htm"

Searching for "OpenCandy"
No data found.

Searching for "HomeTab"
No data found.

Searching for "sweetim"
No data found.

Searching for "Crossrider"
No data found.

Searching for "certified-toolbar"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="hxxp://search.certified-toolbar.com?si=66920&st=newtab&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}]
"TopResultURLFallback"="hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q={searchTerms}"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURI]
"(Default)"="hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="hxxp://search.certified-toolbar.com?si=66920&st=newtab&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://search.certified-toolbar.com?si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main]
"Start Default_Page_URL"="hxxp://search.certified-toolbar.com?si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="hxxp://search.certified-toolbar.com?si=66920&st=chrome&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main]
"Search Bar"="hxxp://search.certified-toolbar.com?si=66920&st=chrome&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main]
"Search Page"="hxxp://search.certified-toolbar.com?si=66920&st=chrome&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search]
"Start Page"="hxxp://search.certified-toolbar.com?si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search]
"Start Default_Page_URL"="hxxp://search.certified-toolbar.com?si=66920&st=home&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="hxxp://search.certified-toolbar.com?si=66920&st=chrome&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search]
"Search Bar"="hxxp://search.certified-toolbar.com?si=66920&st=chrome&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search]
"Search Page"="hxxp://search.certified-toolbar.com?si=66920&st=chrome&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"URL"="hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q={searchTerms}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"TopResultURLFallback"="hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q={searchTerms}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchURI]
"(Default)"="hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}]
"TopResultURLFallback"="hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q={searchTerms}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchURI]
"(Default)"="hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q=%s"
[HKEY_USERS\S-1-5-21-2766355210-2261221984-3006064297-1000\Software\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="hxxp://search.certified-toolbar.com?si=66920&st=newtab&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B"
[HKEY_USERS\S-1-5-21-2766355210-2261221984-3006064297-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}]
"TopResultURLFallback"="hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q={searchTerms}"
[HKEY_USERS\S-1-5-21-2766355210-2261221984-3006064297-1000\Software\Microsoft\Internet Explorer\SearchURI]
"(Default)"="hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1380146400000.000008&tguid=66920-6787-1380190410140-28748E41B5971D66C482CC116C114E9B&q=%s"

Searching for " "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell]
"ConfigXML"=" <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" > <InitializationParameters> <Param Name="PSVersion" Value="2.0"/> </InitializationParameters> <Resources> <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" SupportsOptions="true" ExactMatch="true"> <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/> <Capability Type="Shell"/> </Resource> </Res
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell32]
"ConfigXML"="<PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell32" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" Architecture="32" > <InitializationParameters> <Param Name="PSVersion" Value="2.0"/> </InitializationParameters> <Resources> <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" SupportsOptions="true" ExactMatch="true"> <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&2&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_FREECOM&PROD_DATABAR&REV_1.00#12110000 000067BF&0#]
"DeviceDesc"="DATABAR "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&2&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_NOKIA&PROD_S60&REV_1.0#359374033266236 &0#]
"DeviceDesc"="S60 "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&2&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_NOKIA&PROD_S60&REV_1.0#359374033266236 &1#]
"DeviceDesc"="S60 "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&2&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_FREECOM&PROD_DATABAR&REV_1.00#12110000 000067BF&0#]
"DeviceDesc"="DATABAR "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&2&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_NOKIA&PROD_S60&REV_1.0#359374033266236 &0#]
"DeviceDesc"="S60 "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&2&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_NOKIA&PROD_S60&REV_1.0#359374033266236 &1#]
"DeviceDesc"="S60 "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&2&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_FREECOM&PROD_DATABAR&REV_1.00#1211 0000000067BF&0#]
"DeviceDesc"="DATABAR "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&2&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_NOKIA&PROD_S60&REV_1.0#35937403326 6236&0#]
"DeviceDesc"="S60 "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&2&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_NOKIA&PROD_S60&REV_1.0#35937403326 6236&1#]
"DeviceDesc"="S60 "

-= EOF =-

03.10.2013, 08:49	#9
M-K-D-B /// TB-Ausbilder	Hijacker? -> search.certified-toolbar / ständig download wünsche von unbekannten programmen Servus, fehlt noch die Logdatei von MBAM.

06.10.2013, 12:03	#13
M-K-D-B /// TB-Ausbilder	Hijacker? -> search.certified-toolbar / ständig download wünsche von unbekannten programmen Servus, fehlt noch die Logdatei von SystemLook.

Hijacker? -> search.certified-toolbar / ständig download wünsche von unbekannten programmen

Plagegeister aller Art und deren Bekämpfung: Hijacker? -> search.certified-toolbar / ständig download wünsche von unbekannten programmen