Browserfenster lässt sich nicht deinstallieren Virusquelle: http:/ delta-homes.com

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-10-2013
Ran by Hermann (administrator) on ACERLAPTOP on 29-10-2013 16:30:31
Running from C:\Users\Hermann\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Taiwan Shui Mu Chih Ching Technology Limited.) C:\Program Files (x86)\WinZipper\winzipersvc.exe
() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel® Corporation) C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Atheros) C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_11_9_900_117_ActiveX.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe
(BatBrowse) C:\Program Files (x86)\BatBrowse\updateBatBrowse.exe
(MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
(Systweak) C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\IEXPLORE.EXE
() C:\Program Files (x86)\OpenIt\Open It!\openit.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4123 2012-01-20] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12448872 2012-02-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-08] (Realtek Semiconductor)
HKLM-x32\...\Runonce: [Del804434] - cmd.exe /Q /D /c del "C:\Users\Hermann\AppData\Local\Temp\0.del" [x]
HKLM-x32\...\Runonce: [Del819332] - cmd.exe /Q /D /c del "C:\Users\Hermann\AppData\Local\Temp\0.del" [x]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Runonce: [Del804434] - cmd.exe /Q /D /c del "C:\Users\Hermann\AppData\Local\Temp\0.del"
HKCU\...\Runonce: [Del819332] - cmd.exe /Q /D /c del "C:\Users\Hermann\AppData\Local\Temp\0.del"
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.)
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe [150016 2008-08-20] (Hewlett-Packard)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [245872 2013-05-15] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-05-15] (NVIDIA Corporation)
Startup: C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
Startup: C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.5.lnk
ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.5.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=373003a4-231d-90bf-c506-f0b938278db1&searchtype=ds&q={searchTerms}&installDate=27/10/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Metacrawler Search
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1378325215&rver=6.1.6206.0&wp=MBI&wreply=http:%2F%2Fdu121w.dub121.mail.live.com%2Fdefault.aspx%3Frru%3Dinbox&lc=1031&id=64855&mkt=de-de&cbcxt=mai&snsc=1
https://gm-secure.db.com/welcome.html?/ger/region/home/Home.eqsr?regionID=All&page=regionPage&regionCountryDisplay=regionPage&newPage=newRegionPage
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Delta Homes
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Metacrawler Search
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = Metacrawler Search
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe QVO6
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2136752658&ir=
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2136752658&ir=
SearchScopes: HKLM - {47222A32-D609-5E22-2A53-46D3A2D0413B} URL = QVO6
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2136752658&ir=
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2136752658&ir=
SearchScopes: HKLM-x32 - {5094D06B-637F-9B72-0AA2-2702C3F93FD5} URL = hxxp://feed.snapdo.com/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=373003a4-231d-90bf-c506-f0b938278db1&searchtype=ds&q={searchTerms}&installDate=27/10/2013
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2136752658&ir=
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0C0BtDtCzyyBtA0ByDyCtN0D0Tzu0CyCyCyBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=2136752658&ir=
SearchScopes: HKCU - {47222A32-D609-5E22-2A53-46D3A2D0413B} URL = hxxp://feed.snapdo.com/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=373003a4-231d-90bf-c506-f0b938278db1&searchtype=ds&q={searchTerms}&installDate=27/10/2013
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coieplg.dll (Symantec Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\ips\ipsbho.dll (Symantec Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: BatBrowse - {b67b3dbb-c1c9-49d2-b016-2748b0b5017e} - C:\Program Files (x86)\BatBrowse\BatBrowseBHO.dll (BatBrowse)
BHO-x32: metacrawler  Helper Object - {D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B} - C:\Program Files (x86)\metaCrawler\1.8.19.0\bh\metacrawler.dll (Info Space)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coieplg.dll (Symantec Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - metacrawler  Toolbar - {7EACAC38-B7F6-4514-9DC1-3428A7964ABD} - C:\Program Files (x86)\metaCrawler\1.8.19.0\metacrawlerTlbr.dll (Info Space)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - \User Data\Default\Extensions\newtab.crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\Exts\Chrome.crx

==================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [38440 2013-09-19] (Just Develop It)
S2 CLKMSVC10_039CBDDF; C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\NavFilter\kmsvc.exe [241648 2011-01-28] (CyberLink)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe [264360 2013-10-08] (Symantec Corporation)
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] ()
R2 Update BatBrowse; C:\Program Files (x86)\BatBrowse\updateBatBrowse.exe [65824 2013-10-22] (BatBrowse)
R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [424104 2013-08-23] (Taiwan Shui Mu Chih Ching Technology Limited.)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [72864 2012-02-19] (Atheros)
S2 WsysSvc; C:\ProgramData\eSafe\eGdpSvc.exe [x]

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\BASHDefs\20131022.001\BHDrvx64.sys [1524824 2013-10-23] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-09-25] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-09-25] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\IPSDefs\20131025.002\IDSvia64.sys [521816 2013-10-29] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\VirusDefs\20131028.038\ENG64.SYS [126040 2013-09-25] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\VirusDefs\20131028.038\EX64.SYS [2099288 2013-09-25] (Symantec Corporation)
S3 RTL2832UBDA; C:\Windows\SysWow64\drivers\RTL2832UBDA.sys [225256 2011-05-17] (REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832UUSB; C:\Windows\SysWow64\Drivers\RTL2832UUSB.sys [39016 2011-05-17] (REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832U_IRHID; C:\Windows\SysWow64\DRIVERS\RTL2832U_IRHID.sys [48488 2011-06-13] (Realtek)
R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1501000.012\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1501000.012\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-09-25] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1501000.012\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [33048 2006-11-30] (X10 Wireless Technology, Inc.)
R2 {6E090BD5-4EF5-4bf0-A968-74049E88E935}; C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\000.fcl [146928 2010-05-19] (CyberLink Corp.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-29 15:42 - 2013-10-29 15:43 - 00023606 _____ C:\Users\Hermann\Downloads\Addition.txt
2013-10-29 15:41 - 2013-10-29 15:41 - 00000000 ____D C:\FRST
2013-10-29 15:40 - 2013-10-29 15:40 - 01956538 _____ (Farbar) C:\Users\Hermann\Downloads\FRST64.exe
2013-10-29 10:19 - 2013-10-29 13:17 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2013-10-29 10:19 - 2013-10-29 10:19 - 00003120 _____ C:\Windows\System32\Tasks\Advanced System Protector_startup
2013-10-29 10:19 - 2013-10-29 10:19 - 00001203 _____ C:\Users\Public\Desktop\Advanced System Protector.lnk
2013-10-29 10:19 - 2013-10-29 10:19 - 00001089 _____ C:\Users\Hermann\Desktop\MyPC Backup.lnk
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\ProgramData\Systweak
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-10-29 10:19 - 2012-07-25 12:03 - 00016896 _____ C:\Windows\system32\sasnative64.exe
2013-10-29 10:18 - 2013-10-29 16:20 - 00000300 _____ C:\Windows\Tasks\MetaCrawler.job
2013-10-29 10:18 - 2013-10-29 15:52 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Systweak
2013-10-29 10:18 - 2013-10-29 13:17 - 00000000 ____D C:\Program Files (x86)\BatBrowse
2013-10-29 10:18 - 2013-10-29 10:18 - 00003332 _____ C:\Windows\System32\Tasks\Advanced System Protector
2013-10-29 10:18 - 2013-10-29 10:18 - 00003248 _____ C:\Windows\System32\Tasks\MetaCrawler
2013-10-29 10:18 - 2013-10-29 10:18 - 00001112 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\MetaCrawler
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\0D0S1L2Z1P1B
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\metaCrawler
2013-10-29 10:18 - 2013-07-22 16:07 - 00020312 _____ (Systweak Inc., (Systweak - Download Software utilities for Windows optimization, Scan & Clean Spyware for Free)) C:\Windows\system32\roboot64.exe
2013-10-29 10:17 - 2013-10-29 16:25 - 00000300 _____ C:\Windows\Tasks\DigitalSite.job
2013-10-29 10:17 - 2013-10-29 10:25 - 00003248 _____ C:\Windows\System32\Tasks\DigitalSite
2013-10-29 10:17 - 2013-10-29 10:17 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\DigitalSite
2013-10-28 16:15 - 2013-10-28 16:15 - 00000460 _____ C:\Users\Hermann\Desktop\ACERLAPTOP 04.09.2013 1554 Lauf (E) - Verknüpfung.lnk
2013-10-18 23:04 - 2013-10-18 23:04 - 00000000 ____D C:\Windows\System32\Tasks\Norton 360
2013-10-11 15:57 - 2013-10-11 15:58 - 00102957 _____ C:\Users\Hermann\Desktop\Zustandsbericht Reisemobil.zip
2013-10-11 00:04 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-11 00:04 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-11 00:04 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-11 00:04 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-11 00:04 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-11 00:04 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-11 00:04 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-11 00:04 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-11 00:04 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-11 00:04 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-11 00:04 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-11 00:04 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-10 21:41 - 2013-09-14 02:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-10 21:41 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-10 21:41 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-10 21:41 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-10 21:41 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-10 21:41 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-10 21:41 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-10 21:41 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-10 21:41 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-10 21:41 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-10 21:41 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-10 21:41 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-10 21:41 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-10 21:41 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-10 21:41 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-10 21:41 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-10 21:41 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-10 21:41 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-10 21:41 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-10 21:41 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-10 21:41 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-10 21:41 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-10 21:41 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-10 21:41 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-10 21:41 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-10 21:41 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-10 21:41 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-10 21:41 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-10 21:41 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-10 21:41 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-10 21:41 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-10 21:41 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-10 21:41 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-10 21:41 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-10 21:41 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-10 21:41 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-10 21:41 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-10 21:41 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-10 21:41 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-10 21:41 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-10 21:41 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-10 21:41 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-10 21:41 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-10 21:40 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-10 21:40 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-10 21:40 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 21:40 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-08 13:07 - 2013-10-08 13:07 - 00000000 ____D C:\Users\Hermann\Documents\HP Photosmart Projects
2013-10-07 18:31 - 2013-10-28 15:20 - 00000000 ____D C:\Users\Hermann\AppData\Local\CrashDumps
2013-10-04 20:45 - 2013-10-04 20:45 - 01457152 _____ C:\Users\Hermann\Downloads\BatchedSearchResultsReport_2013-10-04_20-43-20.xls
2013-10-03 15:50 - 2013-10-03 15:50 - 00000000 ____D C:\Users\Hermann\Documents\Optimizer Pro
2013-10-03 15:48 - 2013-10-05 16:24 - 00000000 ____D C:\Program Files (x86)\Whilokii
2013-10-03 15:45 - 2013-10-29 15:55 - 00000300 _____ C:\Windows\Tasks\UpdaterEX.job
2013-10-03 15:45 - 2013-10-03 15:55 - 00003248 _____ C:\Windows\System32\Tasks\UpdaterEX
2013-10-03 15:45 - 2013-10-03 15:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\UpdaterEX
2013-10-03 15:44 - 2013-10-05 16:49 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-05 14:18 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2013-10-03 15:44 - 2013-10-03 15:55 - 20586496 _____ C:\Users\Hermann\Downloads\SkypeSetup [1].exe
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\Users\Hermann\AppData\Local\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\ProgramData\BitGuard
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-03 15:43 - 2013-10-03 15:43 - 00000000 ____D C:\ProgramData\Babylon
2013-10-03 15:42 - 2013-10-03 15:54 - 00675952 _____ C:\Users\Hermann\Downloads\SkypeSetup.exe
2013-10-02 15:22 - 2013-10-08 14:46 - 00000000 ____D C:\Users\Bobby\Scans
2013-10-02 15:21 - 2013-10-02 15:22 - 00000000 ____D C:\Users\Bobby
2013-10-02 14:59 - 2013-10-02 14:59 - 00000000 ____D C:\Users\Hermann\AppData\Local\HP
2013-10-02 12:38 - 2013-10-02 15:15 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\HP
2013-10-02 12:38 - 2013-10-02 12:38 - 00000000 ____D C:\ProgramData\WEBREG
2013-10-02 12:36 - 2013-10-02 12:36 - 00002169 _____ C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
2013-10-02 12:36 - 2013-10-02 12:36 - 00000000 ____D C:\ProgramData\HP Product Assistant
2013-10-02 12:35 - 2013-10-02 15:23 - 00000000 ____D C:\UniScan
2013-10-02 12:35 - 2013-10-02 12:35 - 00001353 _____ C:\Users\Public\Desktop\HP Solution Center.lnk
2013-10-02 12:34 - 2013-10-02 12:59 - 00000000 ____D C:\Program Files (x86)\HP
2013-10-02 12:31 - 2013-10-02 12:42 - 00000359 _____ C:\ProgramData\hpzinstall.log
2013-10-01 19:54 - 2013-10-02 15:29 - 00000000 ____D C:\ProgramData\HP
2013-09-29 18:29 - 2013-09-29 18:41 - 00000566 _____ C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Deutsche Bank - Global Markets.website
2013-09-29 16:45 - 2013-09-29 16:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\SanDisk SecureAccess

==================== One Month Modified Files and Folders =======

2013-10-29 16:30 - 2013-08-22 21:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-29 16:25 - 2013-10-29 10:17 - 00000300 _____ C:\Windows\Tasks\DigitalSite.job
2013-10-29 16:20 - 2013-10-29 10:18 - 00000300 _____ C:\Windows\Tasks\MetaCrawler.job
2013-10-29 16:15 - 2013-08-20 20:15 - 00000298 _____ C:\Windows\Tasks\Dealply.job
2013-10-29 15:55 - 2013-10-03 15:45 - 00000300 _____ C:\Windows\Tasks\UpdaterEX.job
2013-10-29 15:52 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Systweak
2013-10-29 15:43 - 2013-10-29 15:42 - 00023606 _____ C:\Users\Hermann\Downloads\Addition.txt
2013-10-29 15:41 - 2013-10-29 15:41 - 00000000 ____D C:\FRST
2013-10-29 15:41 - 2011-04-12 08:43 - 00654166 _____ C:\Windows\system32\perfh007.dat
2013-10-29 15:41 - 2011-04-12 08:43 - 00130006 _____ C:\Windows\system32\perfc007.dat
2013-10-29 15:41 - 2009-07-14 06:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-29 15:40 - 2013-10-29 15:40 - 01956538 _____ (Farbar) C:\Users\Hermann\Downloads\FRST64.exe
2013-10-29 15:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-10-29 15:38 - 2013-05-15 13:02 - 01056328 _____ C:\Windows\WindowsUpdate.log
2013-10-29 13:23 - 2013-08-20 22:05 - 00003946 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{CE278DBB-5B65-4B0F-914C-5D925E2EE7DC}
2013-10-29 13:17 - 2013-10-29 10:19 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2013-10-29 13:17 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\BatBrowse
2013-10-29 11:38 - 2013-08-20 22:15 - 00000113 _____ C:\Users\Hermann\AppData\Roaming\WB.CFG
2013-10-29 11:38 - 2013-08-20 22:15 - 00000006 _____ C:\Users\Hermann\AppData\Roaming\WBPU-TTL.DAT
2013-10-29 10:25 - 2013-10-29 10:17 - 00003248 _____ C:\Windows\System32\Tasks\DigitalSite
2013-10-29 10:19 - 2013-10-29 10:19 - 00003120 _____ C:\Windows\System32\Tasks\Advanced System Protector_startup
2013-10-29 10:19 - 2013-10-29 10:19 - 00001203 _____ C:\Users\Public\Desktop\Advanced System Protector.lnk
2013-10-29 10:19 - 2013-10-29 10:19 - 00001089 _____ C:\Users\Hermann\Desktop\MyPC Backup.lnk
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\ProgramData\Systweak
2013-10-29 10:19 - 2013-10-29 10:19 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-10-29 10:19 - 2013-08-19 12:15 - 00000000 ___RD C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-29 10:18 - 2013-10-29 10:18 - 00003332 _____ C:\Windows\System32\Tasks\Advanced System Protector
2013-10-29 10:18 - 2013-10-29 10:18 - 00003248 _____ C:\Windows\System32\Tasks\MetaCrawler
2013-10-29 10:18 - 2013-10-29 10:18 - 00001112 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\MetaCrawler
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\0D0S1L2Z1P1B
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-10-29 10:18 - 2013-10-29 10:18 - 00000000 ____D C:\Program Files (x86)\metaCrawler
2013-10-29 10:17 - 2013-10-29 10:17 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\DigitalSite
2013-10-29 10:12 - 2009-07-14 05:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-29 10:12 - 2009-07-14 05:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-29 10:07 - 2013-08-23 16:56 - 00000000 ____D C:\Program Files (x86)\WinZipper
2013-10-29 10:04 - 2010-11-21 04:47 - 00056286 _____ C:\Windows\PFRO.log
2013-10-29 10:04 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-29 10:04 - 2009-07-14 05:51 - 00042300 _____ C:\Windows\setupact.log
2013-10-28 16:15 - 2013-10-28 16:15 - 00000460 _____ C:\Users\Hermann\Desktop\ACERLAPTOP 04.09.2013 1554 Lauf (E) - Verknüpfung.lnk
2013-10-28 15:20 - 2013-10-07 18:31 - 00000000 ____D C:\Users\Hermann\AppData\Local\CrashDumps
2013-10-19 20:27 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-10-18 23:04 - 2013-10-18 23:04 - 00000000 ____D C:\Windows\System32\Tasks\Norton 360
2013-10-18 22:59 - 2013-09-25 18:14 - 00003206 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-10-18 22:59 - 2013-09-25 18:14 - 00002321 _____ C:\Users\Public\Desktop\Norton 360.lnk
2013-10-18 22:59 - 2013-09-25 18:13 - 00000000 ____D C:\Windows\system32\Drivers\N360x64
2013-10-15 09:32 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-11 15:58 - 2013-10-11 15:57 - 00102957 _____ C:\Users\Hermann\Desktop\Zustandsbericht Reisemobil.zip
2013-10-11 15:58 - 2013-08-23 16:56 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\WinZipper
2013-10-11 07:20 - 2009-07-14 05:45 - 00342944 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-11 00:06 - 2013-08-19 18:19 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-11 00:02 - 2013-08-19 19:09 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-11 00:02 - 2013-08-19 19:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-10 23:58 - 2013-08-19 19:12 - 00000000 ____D C:\Windows\system32\MRT
2013-10-10 23:57 - 2013-08-19 19:12 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-09 13:31 - 2013-08-22 21:36 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-09 13:31 - 2013-08-22 21:36 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 13:31 - 2013-08-22 21:36 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-08 22:22 - 2013-08-19 18:19 - 00000000 ____D C:\Users\Hermann\AppData\Local\Microsoft Help
2013-10-08 14:46 - 2013-10-02 15:22 - 00000000 ____D C:\Users\Bobby\Scans
2013-10-08 13:07 - 2013-10-08 13:07 - 00000000 ____D C:\Users\Hermann\Documents\HP Photosmart Projects
2013-10-05 16:49 - 2013-10-03 15:44 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2013-10-05 16:24 - 2013-10-03 15:48 - 00000000 ____D C:\Program Files (x86)\Whilokii
2013-10-05 16:24 - 2013-08-19 12:15 - 00086064 _____ C:\Users\Hermann\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-05 14:18 - 2013-10-03 15:44 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2013-10-05 12:46 - 2013-08-19 15:05 - 00000000 ____D C:\Users\Hermann\Documents\Briefe
2013-10-04 20:45 - 2013-10-04 20:45 - 01457152 _____ C:\Users\Hermann\Downloads\BatchedSearchResultsReport_2013-10-04_20-43-20.xls
2013-10-03 15:55 - 2013-10-03 15:45 - 00003248 _____ C:\Windows\System32\Tasks\UpdaterEX
2013-10-03 15:55 - 2013-10-03 15:44 - 20586496 _____ C:\Users\Hermann\Downloads\SkypeSetup [1].exe
2013-10-03 15:54 - 2013-10-03 15:42 - 00675952 _____ C:\Users\Hermann\Downloads\SkypeSetup.exe
2013-10-03 15:50 - 2013-10-03 15:50 - 00000000 ____D C:\Users\Hermann\Documents\Optimizer Pro
2013-10-03 15:45 - 2013-10-03 15:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\UpdaterEX
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\Users\Hermann\AppData\Local\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\ProgramData\BitGuard
2013-10-03 15:44 - 2013-10-03 15:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-03 15:43 - 2013-10-03 15:43 - 00000000 ____D C:\ProgramData\Babylon
2013-10-02 15:29 - 2013-10-01 19:54 - 00000000 ____D C:\ProgramData\HP
2013-10-02 15:23 - 2013-10-02 12:35 - 00000000 ____D C:\UniScan
2013-10-02 15:22 - 2013-10-02 15:21 - 00000000 ____D C:\Users\Bobby
2013-10-02 15:15 - 2013-10-02 12:38 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\HP
2013-10-02 15:02 - 2013-08-19 12:14 - 00000000 ____D C:\Users\Hermann\AppData\Local\VirtualStore
2013-10-02 14:59 - 2013-10-02 14:59 - 00000000 ____D C:\Users\Hermann\AppData\Local\HP
2013-10-02 12:59 - 2013-10-02 12:34 - 00000000 ____D C:\Program Files (x86)\HP
2013-10-02 12:42 - 2013-10-02 12:31 - 00000359 _____ C:\ProgramData\hpzinstall.log
2013-10-02 12:38 - 2013-10-02 12:38 - 00000000 ____D C:\ProgramData\WEBREG
2013-10-02 12:36 - 2013-10-02 12:36 - 00002169 _____ C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
2013-10-02 12:36 - 2013-10-02 12:36 - 00000000 ____D C:\ProgramData\HP Product Assistant
2013-10-02 12:35 - 2013-10-02 12:35 - 00001353 _____ C:\Users\Public\Desktop\HP Solution Center.lnk
2013-10-02 09:22 - 2013-08-20 20:15 - 00000000 ____D C:\ProgramData\eSafe
2013-09-29 18:41 - 2013-09-29 18:29 - 00000566 _____ C:\Users\Hermann\AppData\Roaming\Microsoft\Windows\Start Menu\Deutsche Bank - Global Markets.website
2013-09-29 16:45 - 2013-09-29 16:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\SanDisk SecureAccess
2013-09-29 11:10 - 2013-09-28 10:45 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\eUpdate

Some content of TEMP:
====================
C:\Users\Hermann\AppData\Local\Temp\BackupSetup.exe
C:\Users\Hermann\AppData\Local\Temp\ose00000.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-29 15:06

==================== End Of Log ============================