TubeSaver 15, W7x64, Registry Einträge lassen sich nicht löschen

TRIGGER70 · 12.01.2014, 10:54

Hallo erstmal,

habe mir den TubeSaver 15 eingefangen.
Habe schon mehrere Utilities laufen lassen um es zu entfernen.
adwcleaner, JRT, mbar-1.07.0.1008
Was aber immer noch übrig ist, sind einige Einträge in der Registry.
Die befinden sich unter dem Pfad :

/HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Schedule/Aliases/Signatures/

und lauten : TubeSaver-15-chromeinstaller.job, TubeSaver-15-chromeinstaller.job.fp, TubeSaver-15-codedownloader.job, TubeSaver-15-codedownloader.job.fp, TubeSaver-15-enabler.job, TubeSaver-15-enabler.job.fp, TubeSaver-15-firefoxinstaller.job, TubeSaver-15-firefoxinstaller.job.fp, TubeSaver-15-updater.job, TubeSaver-15-updater.job.fp

Die Einträge lassen sich mit Adminrechten und auch im Abgesicherten Modus nicht löschen.
Wie werde ich sie los?

Schöne Grüße
TRIGGER70

schrauber · 12.01.2014, 13:03

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

TRIGGER70 · 12.01.2014, 13:16

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-01-2014 05
Ran by Zsolt Soproni (administrator) on CLEVO on 12-01-2014 13:09:49
Running from D:\Benutzer\Zsolt Soproni\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(UPEK Inc.) C:\Program Files\Protector Suite\upeksvr.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\AllShareFrameworkManagerDMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\AllShareFrameworkDMS.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
() C:\ProgramData\DataCardService\HWDeviceService64.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\nis.exe
(Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\Hotkey\PowerBiosServer.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(PandoraTV) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Golden Frog, Inc.) C:\Program Files (x86)\VyprVPN\VyprVPNService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
() C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\nis.exe
(AddGadgets) C:\Program Files (x86)\PCMeter\PCMeterV0.2.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DataCardService\DCSHelper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(UPEK Inc.) C:\Program Files\Protector Suite\psqltray.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Box, Inc.) C:\Program Files\Box Sync\BoxSyncHelper.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe
() C:\Program Files\Bitcasa\Bitcasa.exe
(Valve Corporation) D:\Spiele\Steam\Steam.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
(Microsoft Corporation) D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
(LogMeIn, Inc.) D:\Benutzer\Zsolt Soproni\AppData\Roaming\cubby\cubby.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointG\SetPointII.exe
() C:\Program Files (x86)\Dump Truck\python\python.exe
(Box, Inc.) C:\Program Files\Box Sync\BoxSync.exe
() C:\Program Files (x86)\Hotkey\Hotkey.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Dropbox, Inc.) D:\Benutzer\Zsolt Soproni\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe
() C:\Program Files (x86)\Dump Truck\python\python.exe
() C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Create 5\PdfCreate5Hook.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(GoldenFrog) C:\Program Files (x86)\Dump Truck\GoldenFrog.DumpTruck.exe
() C:\Program Files (x86)\Dump Truck\python\python.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_11_9_900_170_ActiveX.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2328360 2010-09-16] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11776104 2011-02-11] (Realtek Semiconductor)
HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2010-11-02] (Intel(R) Corporation)
HKLM\...\Run: [PSQLLauncher] - C:\Program Files\Protector Suite\launcher.exe [84744 2010-04-27] (UPEK Inc.)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10228224 2010-11-03] (Intel Corporation)
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\THXCfg64.dll [25600 2010-09-14] (Creative Technology Ltd.)
HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [395344 2011-09-22] (Acronis)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [Start WingMan Profiler] - C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)
HKLM\...\Run: [Plantronics MyHeadset Updater] - C:\Program Files\Plantronics\MyHeadsetUpdater\MyHeadsetUpdater.exe [69632 2012-04-09] (Plantronics)
HKLM\...\Run: [BoxSyncHelper] - C:\Program Files\Box Sync\BoxSyncHelper.exe [393216 2013-06-07] (Box, Inc.)
HKLM\...\Run: [Samsung Link] - C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe [597576 2013-11-05] (Copyright 2013 SAMSUNG)
HKLM\...\Run: [Bitcasa] - C:\Program Files\Bitcasa\Bitcasa.exe [4237824 2013-11-19] ()
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-30] (Intel Corporation)
HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1374720 2010-11-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\Updreg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [adm_tray.exe] - C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe [470120 2011-02-24] ()
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Nuance OmniPage 17-reminder] - C:\ProgramData\ScanSoft\OmniPage 17\Ereg\Ereg.ini [342 2013-11-09] ()
HKLM-x32\...\Run: [PDFHook] - C:\Program Files (x86)\Nuance\PDF Create 5\PdfCreate5Hook.exe [1277952 2009-04-10] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDF5 Registry Controller] - C:\Program Files (x86)\Nuance\PDF Create 5\RegistryController.exe [58656 2008-12-13] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [vmware-tray.exe] - C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [111696 2013-10-18] (VMware, Inc.)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
Winlogon\Notify\psfus: C:\Program Files\Protector Suite\psqlpwd.dll (UPEK Inc.)
HKCU\...\Run: [Steam] - D:\Spiele\Steam\Steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [Mobile Partner] - C:\Program Files (x86)\MobileWiFi\MobileWiFi
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [SkyDrive] - D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257136 2013-08-15] (Microsoft Corporation)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-06-18] ()
HKCU\...\Run: [LogMeIn Cubby] - D:\Benutzer\Zsolt Soproni\AppData\Roaming\cubby\cubby.exe [5020432 2013-11-04] (LogMeIn, Inc.)
HKCU\...\Run: [Dump Truck] - C:\Program Files (x86)\Dump Truck\DumpTruck.exe [434592 2013-04-05] (Data Foundry)
HKCU\...\Run: [RoboForm] - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [109784 2013-10-12] (Siber Systems)
HKCU\...\Run: [OpAgent] - "OpAgent.exe" /agent
HKCU\...\Runonce: [Uninstall D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64"
HKCU\...\Runonce: [Uninstall D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530"
HKCU\...\Runonce: [Uninstall D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64"
HKCU\...\Runonce: [Uninstall D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627"
MountPoints2: {0f928b93-4f52-11e1-8654-0090f5c8edc3} - G:\AutoRun.exe
MountPoints2: {20171773-4efa-11e1-8720-88532e822eea} - G:\AutoRun.exe
MountPoints2: {39bad73d-3b7e-11e2-bbce-88532e822eee} - G:\AutoRun.exe
MountPoints2: {48cd63fd-56b1-11e2-bb11-88532e822eee} - "G:\WD Drive Unlock.exe" autoplay=true
MountPoints2: {83c80c38-ac72-11e1-8ceb-88532e822eee} - "H:\WD Drive Unlock.exe" autoplay=true
MountPoints2: {87cdc55e-4ef6-11e1-9b3c-88532e822eea} - G:\AutoRun.exe
MountPoints2: {9000f88b-51ad-11e1-baa8-88532e822eea} - G:\application\Nokia_Internet_Modem.exe
MountPoints2: {91f1c255-4efa-11e1-85e3-88532e822eea} - G:\AutoRun.exe
MountPoints2: {a5505ddd-4ef9-11e1-8edc-88532e822eea} - G:\AutoRun.exe
MountPoints2: {adf202f3-4ef8-11e1-891d-88532e822eea} - G:\AutoRun.exe
MountPoints2: {adf2031c-4ef8-11e1-891d-88532e822eea} - G:\AutoRun.exe
MountPoints2: {b706238d-4c35-11e1-a62d-806e6f6e6963} - E:\autorun.exe
MountPoints2: {c3dde328-4f4d-11e1-b8c2-88532e822eee} - T:\AutoRun.exe
MountPoints2: {cf565146-4efa-11e1-b984-88532e822eea} - G:\AutoRun.exe
MountPoints2: {f7c32bf0-4cf9-11e1-bff1-88532e822eee} - F:\Setup.exe
Lsa: [Notification Packages] scecli C:\Program Files\Protector Suite\psqlpwd.dll
Startup: D:\Benutzer\Zsolt Soproni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> D:\Benutzer\Zsolt Soproni\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: D:\Benutzer\Zsolt Soproni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/?rlz=1w4chba_dede561
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF790518351E0CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
SearchScopes: HKCU - DefaultScope {BBEC3121-A6CE-493E-BCBE-1E4D338B98A8} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKCU - {BBEC3121-A6CE-493E-BCBE-1E4D338B98A8} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: LastPass Browser Helper Object - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPBar64.dll (LastPass)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\ips\ipsbho.dll (Symantec Corporation)
BHO-x32: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: LastPass Browser Helper Object - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPBar.dll (LastPass)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: ZeonIEEventHelper Class - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - C:\Program Files (x86)\Nuance\PDF Create 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPBar64.dll (LastPass)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPBar.dll (LastPass)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Nuance PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - C:\Program Files (x86)\Nuance\PDF Create 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
Toolbar: HKCU - &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} https://secure.logmein.com//activex/ractrl.cab?lmi=1058
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: D:\Benutzer\Zsolt Soproni\AppData\Roaming\Mozilla\Firefox\Profiles\9wa0kfjp.default
FF NewTab: www.google.com
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: www.google.com
FF Keyword.URL: https://www.google.com/search
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.118.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.118.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.122.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: samsung.com/SamsungLinkPCPlugin - C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll (Samsung)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: LogMeIn, Inc. Remote Access Plugin - D:\Benutzer\Zsolt Soproni\AppData\Roaming\Mozilla\Firefox\Profiles\9wa0kfjp.default\Extensions\LogMeInClient@logmein.com [2013-08-03]
FF Extension: LastPass - D:\Benutzer\Zsolt Soproni\AppData\Roaming\Mozilla\Firefox\Profiles\9wa0kfjp.default\Extensions\support@lastpass.com [2013-12-07]
FF Extension: Tab Mix Plus - D:\Benutzer\Zsolt Soproni\AppData\Roaming\Mozilla\Firefox\Profiles\9wa0kfjp.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2012-03-10]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-01-04]
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox
FF Extension: RoboForm Toolbar for Firefox - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox [2012-03-10]
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\IPSFF [2013-10-11]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-01-04]

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (TubeSaver-15) - D:\Benutzer\Zsolt Soproni\AppData\Local\Google\Chrome\User Data\Default\Extensions\aacaalipcbmakfddcbikkebnjedofmec\1.25.20_0 [2013-11-10]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\Exts\Chrome.crx [2013-12-15]

==================== Services (Whitelisted) =================

R2 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\AllShareFrameworkManagerDMS.exe [404360 2013-10-11] (Samsung)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-11-02] ()
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [32568 2013-08-22] (The OpenVPN Project)
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625304 2012-09-28] (Pandora.TV)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-12-10] ()
R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [33792 2011-02-15] ()
R2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [605768 2013-11-05] (Copyright 2013 SAMSUNG)
R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [14405200 2013-10-18] ()
R2 VyprVPN; C:\Program Files (x86)\VyprVPN\VyprVPNService.exe [20912 2013-11-15] (Golden Frog, Inc.)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.1.3\Definitions\BASHDefs\20131218.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [352448 2013-02-11] (EldoS Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
S3 DxkgFilter; C:\Program Files (x86)\iDisplay\idisplay.sys [55720 2012-08-31] ()
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()
S3 iDispService; C:\Windows\System32\DRIVERS\idisplayminiport.sys [15568 2011-07-22] (SHAPE Services)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.1.3\Definitions\IPSDefs\20140110.001\IDSvia64.sys [521944 2013-12-15] (Symantec Corporation)
R3 mod7700; C:\Windows\System32\Drivers\dvb7700all.sys [663552 2008-06-12] (DiBcom)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.1.3\Definitions\VirusDefs\20140111.005\ENG64.SYS [126040 2013-09-27] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.1.3\Definitions\VirusDefs\20140111.005\EX64.SYS [2099288 2013-09-27] (Symantec Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-06-08] (Duplex Secure Ltd.)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-09-07] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [73296 2013-10-08] (VMware, Inc.)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [33872 2013-02-22] (VMware, Inc.)
U3 aar99d7m; C:\Windows\System32\Drivers\aar99d7m.sys [0 ] (Advanced Micro Devices)
S3 ALSysIO; \??\D:\Benutzer\ZSOLTS~1\AppData\Local\Temp\ALSysIO64.sys [x]
S3 DisplayLinkUsbPort; system32\DRIVERS\DisplayLinkUsbPort_6.1.32700.0.sys [x]
U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [117248 2010-07-27] (Huawei Technologies Co., Ltd.)
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [x]
R3 WinRing0_1_2_0; \??\D:\Benutzer\Zsolt Soproni\AppData\Local\Temp\tmp972F.tmp [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-12 13:08 - 2014-01-12 13:09 - 00029219 _____ D:\Benutzer\Zsolt Soproni\Desktop\FRST.txt
2014-01-12 13:08 - 2014-01-12 10:32 - 02076672 _____ (Farbar) D:\Benutzer\Zsolt Soproni\Desktop\FRST64.exe
2014-01-12 10:32 - 2014-01-12 10:32 - 00000000 ____D C:\FRST
2014-01-12 10:01 - 2014-01-12 10:57 - 00000000 ____D D:\Benutzer\Zsolt Soproni\Desktop\Trojaner entfernen
2014-01-12 09:50 - 2014-01-12 09:50 - 00000000 ____D C:\Windows\ERUNT
2014-01-12 09:48 - 2014-01-12 10:25 - 00000168 _____ C:\Windows\setupact.log
2014-01-12 09:48 - 2014-01-12 09:48 - 00000000 _____ C:\Windows\setuperr.log
2014-01-12 09:39 - 2014-01-12 09:45 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-12 09:39 - 2014-01-12 09:39 - 00117464 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-01-12 09:39 - 2014-01-12 09:39 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-12 09:38 - 2014-01-12 09:38 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-12 08:06 - 2014-01-12 10:28 - 00018186 _____ C:\Windows\WindowsUpdate.log
2014-01-04 17:28 - 2014-01-04 17:28 - 00001468 _____ D:\Benutzer\Zsolt Soproni\Desktop\Fritz!NAS.lnk
2014-01-04 10:00 - 2014-01-03 12:27 - 00000921 _____ D:\Benutzer\Zsolt Soproni\Desktop\HDDScan.txt
2014-01-04 10:00 - 2013-11-25 19:49 - 00000035 _____ D:\Benutzer\Zsolt Soproni\Desktop\Norton Kevin.txt
2013-12-22 09:35 - 2013-12-22 09:35 - 00003464 _____ D:\Benutzer\Zsolt Soproni\Desktop\RT2880_Settings.dat
2013-12-15 05:48 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-15 05:48 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-15 05:48 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-15 05:48 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-15 05:47 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-15 05:47 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-15 05:47 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-15 05:47 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-15 05:47 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-15 05:47 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-15 05:47 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-15 05:47 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-15 05:47 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-15 05:47 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-15 05:47 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-15 05:47 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-15 05:47 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-15 05:47 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-15 05:47 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-15 05:47 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-15 05:47 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-15 05:47 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-15 05:47 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-15 05:47 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-15 05:47 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-15 05:47 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-15 05:47 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-15 05:47 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-15 05:47 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-15 05:47 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-15 05:47 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-15 05:47 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-15 05:47 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-15 05:47 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-15 05:47 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-15 05:44 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-15 05:44 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-15 05:44 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-15 05:44 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-15 05:44 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-15 05:44 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-15 05:44 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-15 05:44 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-15 05:44 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-15 05:44 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-15 05:44 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-15 05:44 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-15 05:44 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-15 05:44 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-15 05:44 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-15 05:44 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-15 05:44 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-15 05:44 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-15 05:44 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

==================== One Month Modified Files and Folders =======

2014-01-12 13:09 - 2014-01-12 13:08 - 00029219 _____ D:\Benutzer\Zsolt Soproni\Desktop\FRST.txt
2014-01-12 13:09 - 2013-06-18 20:11 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Local\PMB Files
2014-01-12 12:53 - 2012-04-06 07:12 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-12 11:30 - 2013-11-20 22:04 - 00000000 ____D C:\Program Files (x86)\VyprVPN
2014-01-12 11:30 - 2013-09-07 07:01 - 00000000 ____D C:\Program Files (x86)\Dump Truck
2014-01-12 11:30 - 2012-01-31 19:24 - 00000000 ____D C:\Program Files (x86)\Hotkey
2014-01-12 11:02 - 2013-06-08 13:18 - 00000000 ___RD D:\Benutzer\Zsolt Soproni\SkyDrive
2014-01-12 10:57 - 2014-01-12 10:01 - 00000000 ____D D:\Benutzer\Zsolt Soproni\Desktop\Trojaner entfernen
2014-01-12 10:55 - 2009-07-14 18:58 - 03604472 _____ C:\Windows\system32\perfh007.dat
2014-01-12 10:55 - 2009-07-14 18:58 - 01101114 _____ C:\Windows\system32\perfc007.dat
2014-01-12 10:55 - 2009-07-14 06:13 - 00006514 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-12 10:32 - 2014-01-12 13:08 - 02076672 _____ (Farbar) D:\Benutzer\Zsolt Soproni\Desktop\FRST64.exe
2014-01-12 10:32 - 2014-01-12 10:32 - 00000000 ____D C:\FRST
2014-01-12 10:32 - 2009-07-14 05:45 - 00013584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-12 10:32 - 2009-07-14 05:45 - 00013584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-12 10:28 - 2014-01-12 08:06 - 00018186 _____ C:\Windows\WindowsUpdate.log
2014-01-12 10:26 - 2013-09-07 07:00 - 00000000 ___RD D:\Benutzer\Zsolt Soproni\Dropbox
2014-01-12 10:26 - 2013-09-07 06:58 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Roaming\Dropbox
2014-01-12 10:26 - 2013-09-07 06:51 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Roaming\Box Sync
2014-01-12 10:26 - 2013-08-10 16:43 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Roaming\cubby
2014-01-12 10:25 - 2014-01-12 09:48 - 00000168 _____ C:\Windows\setupact.log
2014-01-12 10:25 - 2013-11-20 22:04 - 00012440 _____ C:\Windows\SysWOW64\vyprVPN.log
2014-01-12 10:25 - 2013-09-28 06:37 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-12 10:25 - 2012-02-12 19:54 - 00000000 ____D C:\ProgramData\VMware
2014-01-12 10:25 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-12 10:01 - 2013-11-10 08:59 - 00001356 _____ C:\Windows\Tasks\TubeSaver-15-updater.job
2014-01-12 10:01 - 2013-11-10 08:59 - 00001262 _____ C:\Windows\Tasks\TubeSaver-15-codedownloader.job
2014-01-12 10:01 - 2013-11-10 08:59 - 00001162 _____ C:\Windows\Tasks\TubeSaver-15-enabler.job
2014-01-12 10:01 - 2013-11-10 08:58 - 00001972 _____ C:\Windows\Tasks\TubeSaver-15-chromeinstaller.job
2014-01-12 10:01 - 2013-11-10 08:58 - 00001896 _____ C:\Windows\Tasks\TubeSaver-15-firefoxinstaller.job
2014-01-12 09:50 - 2014-01-12 09:50 - 00000000 ____D C:\Windows\ERUNT
2014-01-12 09:48 - 2014-01-12 09:48 - 00000000 _____ C:\Windows\setuperr.log
2014-01-12 09:45 - 2014-01-12 09:39 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-12 09:39 - 2014-01-12 09:39 - 00117464 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-01-12 09:39 - 2014-01-12 09:39 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-12 09:38 - 2014-01-12 09:38 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-04 17:50 - 2012-05-06 10:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-04 17:47 - 2012-02-04 22:58 - 00000000 ____D C:\Program Files\CCleaner
2014-01-04 17:39 - 2012-02-12 19:56 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Roaming\VMware
2014-01-04 17:39 - 2012-02-12 19:56 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Local\VMware
2014-01-04 17:38 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2014-01-04 17:28 - 2014-01-04 17:28 - 00001468 _____ D:\Benutzer\Zsolt Soproni\Desktop\Fritz!NAS.lnk
2014-01-04 17:23 - 2012-04-09 08:34 - 00000000 ____D C:\Program Files (x86)\Allway Sync
2014-01-04 17:15 - 2012-02-02 06:31 - 00000000 ____D C:\Program Files (x86)\Origin
2014-01-04 17:05 - 2012-10-13 11:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-04 17:04 - 2012-02-05 12:08 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Roaming\Skype
2014-01-04 16:58 - 2012-02-05 12:08 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-04 16:58 - 2012-02-05 12:07 - 00000000 ____D C:\ProgramData\Skype
2014-01-03 12:27 - 2014-01-04 10:00 - 00000921 _____ D:\Benutzer\Zsolt Soproni\Desktop\HDDScan.txt
2013-12-22 19:58 - 2013-09-28 13:05 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Roaming\NVIDIA
2013-12-22 09:35 - 2013-12-22 09:35 - 00003464 _____ D:\Benutzer\Zsolt Soproni\Desktop\RT2880_Settings.dat
2013-12-22 07:11 - 2012-01-31 19:06 - 00000000 ___RD D:\Benutzer\Zsolt Soproni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-15 07:53 - 2012-04-06 07:12 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-15 07:53 - 2012-04-06 07:12 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-15 07:53 - 2012-01-31 21:49 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-15 06:08 - 2009-07-14 05:45 - 00504168 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-15 05:48 - 2012-02-11 07:39 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-15 05:46 - 2013-07-20 06:55 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 05:45 - 2012-01-31 20:36 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Files to move or delete:
====================
D:\Benutzer\Zsolt Soproni\AppData\Roaming\Network Meter_Usage.ini
D:\Benutzer\Zsolt Soproni\GadgetArranger.exe
D:\Benutzer\Zsolt Soproni\IP_Log_Data.js
D:\Benutzer\Zsolt Soproni\Network_Meter_Data.js


Some content of TEMP:
====================
D:\Benutzer\Zsolt Soproni\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-01 10:59

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

FRST Additions Logfile:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-01-2014 05
Ran by Zsolt Soproni at 2014-01-12 13:10:04
Running from D:\Benutzer\Zsolt Soproni\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton Internet Security (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Acronis Drive Monitor (x32 Version: 1.0.566 - Acronis)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.3.633 - Adobe Systems, Inc.)
Aliens vs. Predator (x32 Version:  - Rebellion)
Aliens vs. Predator 2 (x32 Version:  - )
AllShare Framework DMS (Version: 1.3.21 - Samsung)
Allway Sync version 14.0.1 (x32 Version:  - Botkind Inc)
ARMA 2 Operation Arrowhead Uninstall (x32 Version:  - )
ArmA 2 Uninstall (x32 Version:  - )
Arma Cold War Assault Uninstall (x32 Version:  - )
ArmA Uninstall (x32 Version:  - )
Assassin's Creed II (x32 Version: 1.00 - Ubisoft)
Battlefield 2(TM) (x32 Version:  - )
Battlefield 2: Special Forces (x32 Version:  - )
Battlefield 2142 (x32 Version:  - )
Battlefield 3™ (x32 Version: 1.4.0.0 - Electronic Arts)
Battlefield: Bad Company™ 2 (x32 Version: 1.0.0.0 - Electronic Arts)
Battlelog Web Plugins (x32 Version: 1.122.0 - EA Digital Illusions CE AB)
Battlestations: Midway - Iowa Mission Pack (x32 Version: 1.00.0000 - Ihr Firmenname)
Battlestations: Midway (x32 Version: 1.00.0000 - Ihr Firmenname)
Battlestations: Midway Patch V1.1 (x32 Version: 1.00.0000 - Ihr Firmenname) Hidden
Battlestations: Midway Patch V1.1.1 (x32 Version: 1.00.0000 - EIDOS HUNGARY) Hidden
Battlestations: Pacific (x32 Version: 1.00.0000 - Eidos plc)
BisonCam (x32 Version: 9.2.1.71.52 - BisonCam)
Bitcasa Version 1.1.4.12 (Version: 1.1.4.12 - Bitcasa Inc.)
Box Sync (64 bit) (Version: 3.4.25.0 - Box, Inc)
BufferChm (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
C410 (x32 Version: 140.0.273.000 - Hewlett-Packard) Hidden
CCleaner (Version: 4.09 - Piriform)
CM Installer (x32 Version: 1.0.0.0 - Cyanogen Inc.)
Creative Pack Volume 1 (x32 Version: 3.0.0 - Avid Technology, Inc.)
Crysis(R) (x32 Version: 1.21.0000 - Electronic Arts)
Crysis® 2 (x32 Version: 1.0.0.0 - Electronic Arts)
Cubby (HKCU Version: 1.0.0.12421 - LogMeIn, Inc.)
DAEMON Tools Lite (x32 Version: 4.47.1.0333 - Disc Soft Ltd)
Dead Space™ (x32 Version: 1.0.222.0 - Electronic Arts)
Dead Space™ 2 (x32 Version: 1.0.948.0 - Electronic Arts)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version:  - Microsoft)
Destinations (x32 Version: 140.0.77.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.99.000 - Hewlett-Packard) Hidden
Dropbox (HKCU Version: 2.4.10 - Dropbox, Inc.)
Dump Truck (x32 Version: 1.1.1.632 - Golden Frog, Inc.)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESN Sonar (x32 Version: 0.70.4 - ESN Social Software AB)
Euro-Fahrtenbuch 2012 (remove only) (x32 Version: 7.0.2 - TaskX GmbH)
Evolution GT (x32 Version: 1.00.0000 - )
Far Cry (Patch 1) (x32 Version: 1.00.0000 - Ihr Firmenname) Hidden
Far Cry (Patch 1.3) (x32 Version: 1.00.0000 - Ubisoft) Hidden
Far Cry (Patch 1.31) (x32 Version: 1.00.0000 - Ubisoft) Hidden
Far Cry (Patch 1.32) (x32 Version: 1.00.0000 - Ubisoft) Hidden
Far Cry (Patch 1.33) (x32 Version: 1.00.0000 - Ubisoft) Hidden
Far Cry (Patch 1.4) (x32 Version: 1.00.0000 - Ubisoft) Hidden
Far Cry (x32 Version:  - Crytek)
Far Cry 3 (x32 Version: 1.05 - Ubisoft)
Fax (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Filmmaker's Toolkit for Studio (x32 Version: 1.00.0000 - Red Giant)
Filmmaker's Toolkit for Studio (x32 Version: 1.00.0000 - Red Giant) Hidden
Flash Slideshow Maker Pro 5.20 (x32 Version: 5.20 - Flash-Slideshow-Maker.COM)
FlashFXP v4.2 (x32 Version: 4.2.5.1810 - OpenSight Software, LLC)
GoPro CineForm Studio 1.3.2 (x32 Version: 1.3.2 - CineForm, Inc & GoPro, Inc.)
GPBaseService2 (x32 Version: 140.0.211.000 - Hewlett-Packard) Hidden
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Hewlett-Packard ACLM.NET v1.1.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
Hollywood FX Volumes 1-3 (x32 Version: 2.0.0 - Avid Technology, Inc.)
Hotkey 3.3028 (x32 Version: 3.3028 - NoteBook)
Hotkey 3.3028 (x32 Version: 3.3028 - NoteBook) Hidden
HP Imaging Device Functions 14.0 (Version: 14.0 - HP)
HP Photosmart Prem C410 All-In-One Driver Software 14.0 Rel. 7 (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (Version: 4.60 - HP)
HP Solution Center 14.0 (Version: 14.0 - HP)
HP Update (x32 Version: 5.005.000.001 - Hewlett-Packard)
HPAppStudio (x32 Version: 140.0.95.000 - Hewlett-Packard) Hidden
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
iDisplay 2.2.0 (x32 Version: 2.2.0.11 - SHAPE)
Image Resizer for Windows (64 bit) (Version: 3.0.4802.35565 - Brice Lambson) Hidden
Image Resizer for Windows (x32 Version: 3.0.4802.35565 - Brice Lambson)
Image Resizer Powertoy Clone for Windows (64 bit) (Version: 2.1 - Brice Lambson)
Intel PROSet Wireless (Version:  - ) Hidden
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 1.0.0.0454 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (Version: 14.00.0000 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 10.5.0.1026 - Intel Corporation)
ITE Infrared Transceiver (x32 Version: 1.00.0000 - ITE)
JMicron Ethernet Adapter NDIS Driver (x32 Version: 6.0.26.6 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (x32 Version: 1.0.62.0 - JMicron Technology Corp.)
JPEG Lossless Rotator 9.1 (Version:  - Anny)
LastPass (uninstall only) (x32 Version:  - LastPass)
Leawo PowerPoint to Video Free version 2.4.0.62 (x32 Version:  - Leawo Software)
Logitech Gaming Software 5.10 (Version: 5.10.127 - Logitech)
Logitech SetPoint 6.32 (Version: 6.32.20 - Logitech)
Mafia II (x32 Version: 1.0 - Take-Two Interactive Software, Inc.)
Media Add-ons für Acronis True Image Home 2011 (x32 Version: 14.0.5519 - Acronis)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Primary Interoperability Assemblies 2005 (x32 Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU Version: 17.0.2015.0811 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ Run Time  Lib Setup (x32 Version: 1.0.0 - Microsoft)
Midnight Club II (x32 Version: 2.0 - )
MOBackup - Datensicherung für Outlook (Vollversion) (x32 Version: 7.0 - Heiko Schröder)
MobileWiFi (x32 Version: TOOL-ConnLaucher_WIN1.09.02.00 - Huawei Technologies Co.,Ltd)
Mobipocket Reader 6.2 (x32 Version: 6.2.608 - Mobipocket.com)
Motion Graphics Toolkit for Studio (x32 Version: 1.00.0000 - Red Giant)
Motion Graphics Toolkit for Studio (x32 Version: 1.00.0000 - Red Giant) Hidden
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MPC-HC 1.7.1 (64-bit) (Version: 1.7.1.0 - MPC-HC Team)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
Nero 10 ClipartPack (x32 Version: 10.0.10300.0.0 - Nero AG)
Nero 10 Menu TemplatePack 1 (x32 Version: 10.0.10300.0.0 - Nero AG)
Nero 10 Menu TemplatePack 2 (x32 Version: 10.0.10300.0.0 - Nero AG)
Nero 10 Menu TemplatePack 3 (x32 Version: 10.0.10300.0.0 - Nero AG)
Nero 10 Menu TemplatePack Basic (x32 Version: 10.0.10300.0.0 - Nero AG) Hidden
Nero 10 Movie ThemePack 1 (x32 Version: 10.0.10300.1.0 - Nero AG)
Nero 10 Movie ThemePack 2 (x32 Version: 10.0.10300.1.0 - Nero AG)
Nero 10 Movie ThemePack Basic (x32 Version: 10.0.10300.1.0 - Nero AG) Hidden
Nero 10 Sample ImagePack (x32 Version: 10.0.10300.0.0 - Nero AG)
Nero 10 Sample Videos (x32 Version: 10.0.10300.2.0 - Nero AG)
Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.20012 - Nero AG) Hidden
Nero Burning ROM 10 (x32 Version: 10.6.10700.5.100 - Nero AG)
Nero Control Center 10 (x32 Version: 10.6.13000.0.11 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.19900.9.11 - Nero AG) Hidden
Nero CoverDesigner 10 (x32 Version: 5.6.10600.4.100 - Nero AG)
Nero DiscSpeed 10 (x32 Version: 6.4.10500.1.100 - Nero AG)
Nero InfoTool 10 (x32 Version: 7.4.10300.1.100 - Nero AG)
Nero Multimedia Suite 10 (x32 Version: 10.0.11200 - Nero AG)
Nero Recode 10 (x32 Version: 4.10.10700.5.100 - Nero AG)
Nero RescueAgent 10 (x32 Version: 3.6.10500.3.100 - Nero AG)
Nero SoundTrax 10 (x32 Version: 4.10.10500.4.100 - Nero AG)
Nero Update (x32 Version: 11.0.11500.28.0 - Nero AG) Hidden
Nero Vision 10 (x32 Version: 7.4.11000.9.100 - Nero AG)
Nero WaveEditor 10 (x32 Version: 5.10.10700.6.100 - Nero AG)
Network64 (Version: 140.0.215.000 - Hewlett-Packard) Hidden
Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden
Norton Internet Security (x32 Version: 21.1.0.18 - Symantec Corporation)
Nuance OmniPage 17 (x32 Version: 17.0.0000 - Nuance Communications, Inc.)
Nuance PDF Create! 5 (Version: 5.20.6400 - Nuance Communications, Inc)
NVIDIA 3D Vision Treiber 327.23 (Version: 327.23 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.23 (Version: 327.23 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.902 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2723 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 327.23 (Version: 327.23 - NVIDIA Corporation) Hidden
OCR Software by I.R.I.S. 14.0 (Version: 14.0 - HP)
OpenAL (x32 Version:  - )
OpenVPN 2.3.2-I003  (x32 Version: 2.3.2-I003 - )
Origin (x32 Version: 8.5.0.4554 - Electronic Arts, Inc.)
Pando Media Booster (x32 Version: 2.6.0.8 - Pando Networks Inc.)
Pandora Service (x32 Version:  - Pandora.TV)
Pinnacle Studio 16 - Install Manager (x32 Version: 16.0.75 - Avid Technology, Inc.)
Pinnacle Studio 16 - Standard Content Pack (x32 Version: 16.0.0 - Avid Technology, Inc.)
Pinnacle Studio 16 (x32 Version: 16.1.0.115 - Corel Corporation)
Pinnacle Video Treiber (Version: 12.1.0.030 - Pinnacle Systems)
Plantronics MyHeadset Updater (x64) (Version: 2.7.55033.0 - Plantronics, Inc.)
PlayReady PC Runtime amd64 (Version: 1.3.0 - Microsoft Corporation)
Premium Pack Volumes 1-2 (x32 Version: 2.0.0 - Avid Technology, Inc.)
Protector Suite 2009 (Version: 5.9.3.6379 - UPEK Inc.)
PS_AIO_07_C410_SW_Min (x32 Version: 140.0.273.000 - Hewlett-Packard) Hidden
PunkBuster Services (x32 Version: 0.993 - Even Balance, Inc.)
QuickTransfer (x32 Version: 140.0.98.000 - Hewlett-Packard) Hidden
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6307 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0 - Renesas Electronics Corporation) Hidden
RoboForm 7-9-2-5 (All Users) (x32 Version: 7-9-2-5 - Siber Systems)
Rockstar Games Social Club (x32 Version: 1.1.0.1 - Rockstar Games)
S.T.A.L.K.E.R. - Shadow of Chernobyl [v1.0005] (x32 Version: 1.0005 - THQ)
Samsung Link 1.7.0.1311052230 (Version: 1.7.0.1311052230 - Copyright 2013 SAMSUNG)
Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden
Scan (x32 Version: 140.0.80.000 - Hewlett-Packard) Hidden
Scansoft PDF Create (x32 Version:  - ) Hidden
ScoreFitter Volumes 1-2 (x32 Version: 2.0.0 - Avid Technology, Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
SmartWebPrinting (x32 Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
Status (x32 Version: 140.0.256.000 - Hewlett-Packard) Hidden
Steam (x32 Version: 1.0.0.0 - Valve)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (Version: 15.1.14.0 - Synaptics Incorporated)
TAP-Windows 9.9.2 (Version: 9.9.2 - )
TeamViewer 8 (x32 Version: 8.0.22298 - TeamViewer)
Test Drive Unlimited (x32 Version: 0.10.0000 - Ihr Firmenname)
THX TruStudio Pro (x32 Version: TAMB-CVS1D-1-LB R07 - Creative Technology Limited)
Title Extreme (x32 Version: 2.0.0 - Avid Technology, Inc.)
Tivizen (x32 Version: 1.0.2499 - Valups)
Tom Clancy's EndWar (x32 Version: 1.00.0000 - Ubisoft)
Tom Clancy's Ghost Recon Advanced Warfighter® 2 (x32 Version: 1.00.0000 - UBISOFT)
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
tools-freebsd (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
tools-linux (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
tools-netware (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
tools-solaris (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
tools-windows (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
tools-winPre2k (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
TrayApp (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
TrueCrypt (x32 Version: 7.1a - TrueCrypt Foundation)
Ubisoft Game Launcher (x32 Version: 1.0.0.0 - UBISOFT)
Unreal II (x32 Version:  - )
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version:  - Microsoft)
Uplay (x32 Version: 2.0 - Ubisoft)
Vista Shortcut Manager x64 (Version: 2.0 - Frameworkx)
VLC media player 2.0.2 (x32 Version: 2.0.2 - VideoLAN)
VMware Workstation (Version: 10.0.1 - VMware, Inc.) Hidden
VMware Workstation (x32 Version: 10.0.1 - VMware, Inc)
VyprVPN (x32 Version: 2.0.0.1494 - Golden Frog, Inc.)
VyprVPN (x32 Version: 2.0.0.1494 - Golden Frog, Inc.) Hidden
Wargame: European Escalation (x32 Version:  - Focus,Eugen Systems)
WebCam Installer (x32 Version: 3.32 - WebCam)
WebReg (x32 Version: 140.0.212.017 - Hewlett-Packard) Hidden
Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices  (03/07/2012 ) (Version: 03/07/2012  - GoPro)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0 - Microsoft Corporation)
Windows XP Mode (Version: 1.3.7600.16422 - Microsoft Corporation)
Windows-Treiberpaket - Cambridge Silicon Radio (CSRBC) USB  (08/15/2010 2.1.0.2) (Version: 08/15/2010 2.1.0.2 - Cambridge Silicon Radio)
Windows-Treiberpaket - YUAN (mod7700) Media  (05/22/2009 2.3.3.31) (Version: 05/22/2009 2.3.3.31 - YUAN)
Windows-Treiberpaket - YUAN (mod7700) Media  (12/03/2008 2.3.3.27) (Version: 12/03/2008 2.3.3.27 - YUAN)
WinRAR 4.01 (64-Bit) (Version: 4.01.0 - win.rar GmbH)
Xilisoft Audio Converter Pro (x32 Version: 6.4.0.20121023 - Xilisoft)
Xilisoft Blu-ray Ripper (x32 Version: 7.1.0.20121016 - Xilisoft)
Xilisoft DVD Creator (x32 Version: 7.1.2.20121016 - Xilisoft)
Xilisoft DVD Ripper Ultimate (x32 Version: 7.6.0.20121027 - Xilisoft)
Xilisoft Foto Slideshow Maker (x32 Version: 1.0.2.20120228 - Xilisoft)
Xilisoft Video Converter Ultimate (x32 Version: 7.7.3.20131014 - Xilisoft)

==================== Restore Points  =========================

16-11-2013 06:43:28 Windows Update
20-11-2013 21:04:01 Gerätetreiber-Paketinstallation: TAP-Windows Provider V9 Netzwerkadapter
24-11-2013 14:23:30 Installed Microsoft Fix it 50906
01-12-2013 11:00:26 Installed CM Installer
01-12-2013 11:02:37 Gerätetreiber-Paketinstallation: ClockworkMod SAMSUNG Android Phone
01-12-2013 12:09:11 Removed Samsung Kies
01-12-2013 14:39:21 Removed Google Talk Plugin
07-12-2013 06:40:06 Windows Update
15-12-2013 04:45:08 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1B18BE1F-1107-4C51-B931-EB5F1ACAC13B} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\SymErr.exe [2013-08-01] (Symantec Corporation)
Task: {7A588926-5C3B-42B9-A4BF-539B326C5EDA} - System32\Tasks\Run RoboForm Process => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2013-10-12] (Siber Systems)
Task: {7D6F3342-C079-48E6-84EB-DA4EFA26738F} - System32\Tasks\Core Temp Autostart => C:\Program Files\Core Temp\Core Temp.exe
Task: {95D39B90-E672-4565-BA89-4760488CD053} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMNIKICNNJAJOJNILJCNPMPMPMPMCNPMPMPMPMCNPMPMPMPMCNPMPMPMPMPMPMPMPMPMPMPMPMJNJICMIMCNGMCNNMFMGMCNOMPMCNGMNMPMPMFMJMCNOMCNIMJMPMOMCNNMJNPICMMMFMEKMICNJJCKFMGMOMJMJNHICMMJBJKJLIMJJNBJCMFKMIAJDJLIPNMKAJPINIAJBJGJJNKJCMMIAJPINIAJBJGJPLIIKJNJBNLJKJJNNICMJNDJCMLJKJ"
Task: {9A22D2C8-37A7-4679-84C4-6FE610D077F8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-15] (Adobe Systems Incorporated)
Task: {A3B00DE6-CE1B-4DB7-AF09-AEEE7525393B} - System32\Tasks\PCMeter\Startup => C:\Program Files (x86)\PCMeter\PCMeterV0.2.exe [2012-08-08] (AddGadgets)
Task: {A9C19495-2DE4-4C3E-98F3-EFA0FC0AD0A2} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {AD4E610A-42CF-4DB4-B782-FB52E0000742} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\WSCStub.exe [2013-10-08] (Symantec Corporation)
Task: {D4593E0C-EF5D-4B25-BBF8-91975CA83019} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2013-10-12] (Siber Systems)
Task: {ED493A6F-B3AA-4618-A44E-B9BE1CCB08E6} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\SymErr.exe [2013-08-01] (Symantec Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\TubeSaver-15-chromeinstaller.job => C:\Program Files (x86)\TubeSaver-15\TubeSaver-15-chromeinstaller.exe
Task: C:\Windows\Tasks\TubeSaver-15-codedownloader.job => C:\Program Files (x86)\TubeSaver-15\TubeSaver-15-codedownloader.exe
Task: C:\Windows\Tasks\TubeSaver-15-enabler.job => C:\Program Files (x86)\TubeSaver-15\TubeSaver-15-enabler.exe
Task: C:\Windows\Tasks\TubeSaver-15-firefoxinstaller.job => C:\Program Files (x86)\TubeSaver-15\TubeSaver-15-firefoxinstaller.exe
Task: C:\Windows\Tasks\TubeSaver-15-updater.job => C:\Program Files (x86)\TubeSaver-15\TubeSaver-15-updater.exe

==================== Loaded Modules (whitelisted) =============

2013-09-28 06:37 - 2013-09-12 08:25 - 00097568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2010-11-02 12:58 - 2010-11-02 12:58 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2013-10-03 13:18 - 2013-11-05 22:30 - 00012800 _____ () C:\Program Files\Samsung\Samsung Link\JniSys.dll
2013-10-03 13:18 - 2013-10-03 13:18 - 00515584 ____N () C:\Windows\Temp\sqlite-3.7.2-sqlitejdbc.dll
2013-10-03 13:18 - 2013-11-05 22:30 - 01394176 _____ () C:\Program Files\Samsung\Samsung Link\scone_proxy.dll
2013-10-03 13:18 - 2013-11-05 22:30 - 01435648 _____ () C:\Program Files\Samsung\Samsung Link\scone_stub.dll
2013-10-11 15:34 - 2013-10-11 15:34 - 00036864 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\64bit\JNIInterface.dll
2013-10-11 15:35 - 2013-10-11 15:35 - 00144384 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\64bit\ASFAPI.dll
2013-10-11 15:36 - 2013-10-11 15:36 - 00018944 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\64bit\MediaDB_Manager.dll
2013-10-01 10:09 - 2013-10-01 10:09 - 00030720 _____ () C:\Windows\system32\MediaDB64.dll
2013-10-01 10:09 - 2013-10-01 10:09 - 00908800 _____ () C:\Windows\system32\ContentDirectoryPresenter64.dll
2013-10-11 15:35 - 2013-10-11 15:35 - 00521728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\64bit\DMS_Manager.dll
2013-07-23 19:19 - 2013-07-23 19:19 - 00049152 _____ () C:\Windows\system32\boost_date_time-vc90-mt-1_47.dll
2013-07-23 19:19 - 2013-07-23 19:19 - 00016896 _____ () C:\Windows\system32\boost_system-vc90-mt-1_47.dll
2013-07-23 19:19 - 2013-07-23 19:19 - 00058880 _____ () C:\Windows\system32\boost_thread-vc90-mt-1_47.dll
2013-07-23 19:19 - 2013-07-23 19:19 - 00299520 _____ () C:\Windows\system32\boost_serialization-vc90-mt-1_47.dll
2013-10-03 13:18 - 2013-11-05 22:30 - 00043520 _____ () C:\Program Files\Samsung\Samsung Link\JniIO.dll
2013-12-07 08:39 - 2013-11-19 00:38 - 00300544 _____ () C:\Program Files\Bitcasa\ExplorerMenu.dll
2013-12-07 08:39 - 2013-11-19 00:49 - 01909760 _____ () C:\Program Files\Bitcasa\bitcasaui.dll
2012-01-31 20:03 - 2011-05-28 22:05 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll
2013-09-28 09:24 - 2013-03-13 14:08 - 02268160 _____ () C:\Program Files\JPEG Lossless Rotator\contmenu.dll
2010-11-02 12:58 - 2010-11-02 12:58 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2012-01-31 19:51 - 2010-11-12 12:38 - 00241152 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL
2011-10-07 10:39 - 2011-10-07 10:39 - 01304856 _____ () C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll
2013-09-07 06:50 - 2013-09-07 06:50 - 00537600 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_64\Python.Runtime\f08e82ee2db2af735c14823ad8695ac7\Python.Runtime.ni.dll
2013-01-03 18:12 - 2013-01-03 18:12 - 00471552 _____ () C:\Program Files\Box Sync\_hashlib.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00046080 _____ () C:\Program Files\Box Sync\_socket.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 01167360 _____ () C:\Program Files\Box Sync\_ssl.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00689664 _____ () C:\Program Files\Box Sync\unicodedata.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00166912 _____ () C:\Program Files\Box Sync\_elementtree.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00164352 _____ () C:\Program Files\Box Sync\pyexpat.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00111616 _____ () C:\Program Files\Box Sync\_ctypes.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00127488 _____ () C:\Program Files\Box Sync\win32api.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00136704 _____ () C:\Program Files\Box Sync\pywintypes27.dll
2013-01-03 18:12 - 2013-01-03 18:12 - 00058368 _____ () C:\Program Files\Box Sync\_sqlite3.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00535040 _____ () C:\Program Files\Box Sync\sqlite3.dll
2013-01-03 18:12 - 2013-01-03 18:12 - 00037888 _____ () C:\Program Files\Box Sync\_testcapi.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00135168 _____ () C:\Program Files\Box Sync\win32security.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00007168 _____ () C:\Program Files\Box Sync\_win32sysloader.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00138752 _____ () C:\Program Files\Box Sync\win32file.pyd
2013-10-10 22:40 - 2013-10-10 22:40 - 01114624 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\DMSManager.dll
2013-10-01 09:11 - 2013-10-01 09:11 - 00706560 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\ContentDirectoryPresenter.dll
2013-10-01 09:46 - 2013-10-01 09:46 - 00107008 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\DCMCDP.dll
2013-10-01 09:11 - 2013-10-01 09:11 - 00102400 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\FolderCDP.dll
2013-10-01 09:10 - 2013-10-01 09:10 - 00077312 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\MetadataFramework.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00520234 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\sqlite3.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00450560 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\MoodExtractor.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 05717504 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\DCMImgExtractor.dll
2013-08-12 19:27 - 2013-08-12 19:27 - 00028672 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\AutoChaptering.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00147456 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\libexpat.dll
2013-08-12 19:27 - 2013-08-12 19:27 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\VideoThumb.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 04671488 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\avcodec-52.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00070656 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\avutil-50.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00686080 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\avformat-52.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00152064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\swscale-0.dll
2013-08-09 17:07 - 2013-08-09 17:07 - 00028160 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\AudioExtractor.dll
2013-08-09 17:07 - 2013-08-09 17:07 - 00064000 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\ID3Driver.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00366592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\tag.dll
2013-04-12 08:58 - 2013-04-12 08:58 - 00289792 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\libThumbnail.dll
2013-08-09 17:07 - 2013-08-09 17:07 - 00023040 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\RichInfoDriver.dll
2013-08-23 10:51 - 2013-08-23 10:51 - 00017920 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\VideoExtractor.dll
2013-08-23 10:51 - 2013-08-23 10:51 - 00117248 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\ThumbnailMaker.dll
2013-08-23 10:51 - 2013-08-23 10:51 - 01033216 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\ImageMagickWrapper.dll
2013-08-22 18:17 - 2013-08-22 18:17 - 00134144 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\VideoMetadataDriver.dll
2013-08-09 17:07 - 2013-08-09 17:07 - 00290816 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\libKeyFrame.dll
2013-08-09 17:07 - 2013-08-09 17:07 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\SECMetaDriver.dll
2013-08-23 10:51 - 2013-08-23 10:51 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\ImageExtractor.dll
2013-04-12 08:58 - 2013-04-12 08:58 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\photoDriver.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00399826 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\libexif-12.dll.dll
2013-08-09 17:07 - 2013-08-09 17:07 - 00013824 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\TextExtractor.dll
2013-10-01 09:47 - 2013-10-01 09:47 - 00032768 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\Autobackup.dll
2013-04-19 16:38 - 2013-04-19 16:38 - 00055808 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\RosettaAllShare.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00227840 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\boost_serialization-vc90-mt-1_47.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00038912 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\boost_date_time-vc90-mt-1_47.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00012800 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\boost_system-vc90-mt-1_47.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00046592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\boost_thread-vc90-mt-1_47.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00044032 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\us.dll
2013-02-17 08:45 - 2012-10-22 11:21 - 01277952 _____ () C:\Program Files (x86)\PANDORA.TV\PanService\avformat-53.dll
2013-02-17 08:45 - 2012-07-09 17:57 - 02090496 _____ () C:\Program Files (x86)\PANDORA.TV\PanService\avcodec-53.dll
2013-02-17 08:45 - 2011-12-06 16:19 - 00133632 _____ () C:\Program Files (x86)\PANDORA.TV\PanService\avutil-51.dll
2013-02-17 08:45 - 2012-03-23 10:07 - 00224768 _____ () C:\Program Files (x86)\PANDORA.TV\PanService\libupnp.dll
2013-10-18 12:46 - 2013-10-18 12:46 - 01260624 _____ () C:\Program Files (x86)\VMware\VMware Workstation\libxml2.dll
2014-01-12 08:04 - 2013-12-12 23:19 - 00142848 _____ () D:\Spiele\Steam\libavresample-1.dll
2014-01-12 08:04 - 2013-11-05 02:12 - 00890592 _____ () D:\Spiele\Steam\libavutil-52.dll
2013-03-25 13:23 - 2013-12-12 23:04 - 00716800 _____ () D:\Spiele\Steam\SDL2.dll
2012-05-04 04:37 - 2014-01-07 22:00 - 01138088 _____ () D:\Spiele\Steam\bin\chromehtml.DLL
2012-05-04 04:37 - 2013-12-12 23:04 - 20625832 _____ () D:\Spiele\Steam\bin\libcef.dll
2012-05-04 04:37 - 2013-06-15 00:49 - 01100800 _____ () D:\Spiele\Steam\bin\avcodec-53.dll
2012-05-04 04:37 - 2013-06-15 00:49 - 00124416 _____ () D:\Spiele\Steam\bin\avutil-51.dll
2012-05-04 04:37 - 2013-06-15 00:49 - 00192000 _____ () D:\Spiele\Steam\bin\avformat-53.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2013-09-07 07:01 - 2013-04-05 03:42 - 00137216 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Launcher.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00009728 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\select.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00040960 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\_socket.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00721920 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\_ssl.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00240640 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\utils.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00074240 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\_ctypes.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00157696 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\libzmq.dll
2013-09-07 07:01 - 2013-04-05 03:40 - 00010752 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\utils\initthreads.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00030208 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\constants.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00022016 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\error.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00047616 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\message.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00038400 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\context.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00069632 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\socket.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00285184 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\_hashlib.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00024064 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\_poll.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00016896 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\stopwatch.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00011776 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\_version.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00017408 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\device.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00023552 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\_multiprocessing.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00027136 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\devices\monitoredqueue.pyd
2013-09-07 07:01 - 2013-04-05 03:41 - 00013312 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\DTPlatform.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00028672 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Env.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00033792 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\UnicodeSafeConfigParser.pyd
2013-09-07 07:01 - 2013-04-05 03:41 - 00156160 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\DavWorkEngine.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00103424 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\pyexpat.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00686592 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\unicodedata.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00053760 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\egenix_pyopenssl-0.13.0_1.0.0j_1-py2.7-win32.egg\OpenSSL\crypto.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00010240 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\egenix_pyopenssl-0.13.0_1.0.0j_1-py2.7-win32.egg\OpenSSL\rand.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00041984 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\egenix_pyopenssl-0.13.0_1.0.0j_1-py2.7-win32.egg\OpenSSL\SSL.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00014848 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Version.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00010752 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\BuildVersion.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00286208 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\FSCharmap.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00091648 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Governor.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00241152 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Configuration.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00037376 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Keychain.pyd
2013-09-07 07:01 - 2013-04-05 03:41 - 00080896 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\ConfigurationBussables.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00069120 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\EventBus\Bussable.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00055808 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Settings.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00033792 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\ThreadPool.pyd
2013-09-07 07:01 - 2013-04-05 03:41 - 00026112 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\DumptruckEventBus.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00156672 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\EventBus\EventBus.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00101888 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\EventBus\ServiceSocket.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00027136 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\EventBus\PacketValidation.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00031744 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\EventBus\LocatorBussables.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00041472 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\EventBus\EventBusInvoker.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00031232 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\EventBus\LocatorService.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00047104 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\GovernorBussables.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00070656 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\ProcessUtils.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00077312 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\SocketPair.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00022528 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\LogHandler.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00083456 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\UpdateWatcher.pyd
2009-06-06 14:50 - 2009-06-06 14:50 - 00019968 _____ () C:\Program Files (x86)\Hotkey\Audiodll.dll
2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () D:\Benutzer\Zsolt Soproni\AppData\Roaming\Dropbox\bin\libcef.dll
2012-01-31 19:51 - 2010-11-01 17:34 - 00159744 ____N () C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\de-DE\THXAudio.resources.dll
2011-02-24 18:39 - 2011-02-24 18:39 - 00012128 _____ () C:\Program Files (x86)\Common Files\Acronis\DriveMonitor\Common\icudt38.dll
2013-09-07 07:01 - 2013-04-05 03:39 - 00382976 _____ () C:\Program Files (x86)\Dump Truck\libzmq.dll
2013-09-07 07:01 - 2013-04-05 03:41 - 00121856 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\FilesystemMonitor.pyd
2013-09-07 07:01 - 2013-04-05 03:41 - 00028672 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\FilesystemMonitorBussables.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00023552 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\EventBus\Utils.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00172544 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\NetworkMonitor.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00039424 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\NetworkMonitorBussables.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00348160 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\SyncEngine.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00048128 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\SetQueue.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00041984 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\_sqlite3.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00337920 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\sqlite3.dll
2013-09-07 07:01 - 2013-04-05 03:41 - 00289792 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\FileTracker.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00044032 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\DeleteGC.pyd
2013-09-07 07:01 - 2013-04-05 03:41 - 00119296 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\DBUtils.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00189440 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\FullScan.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00100352 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Graph.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00147456 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\SyncEngineControl.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00062464 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\SyncEngineEventBusListeners.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00094208 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\SyncEngineProcessor.pyd
2013-09-07 07:01 - 2013-04-05 03:41 - 00117248 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\DownloadEngine.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00037376 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\RabinStreamingDiffer.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00025600 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Rabin.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00023040 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\rabinc.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00173568 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\UploadEngine.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00085504 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\SyncEngineRequestHandler.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00105984 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\SyncEngineBussables.pyd
2013-08-15 10:55 - 2013-08-15 10:55 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\f60b3ee2de3f41a024920486d46d49f2\IsdiInterop.ni.dll
2012-01-31 19:45 - 2011-04-30 00:28 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:054203E4
AlternateDataStreams: C:\ProgramData\Temp:0A8E2C33
AlternateDataStreams: C:\ProgramData\Temp:9B013599
AlternateDataStreams: C:\ProgramData\Temp:FED912DB

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C410 series
Description: Photosmart Prem C410 series
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Photosmart Prem C410 series
Description: Photosmart Prem C410 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/12/2014 10:55:49 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (01/12/2014 10:55:49 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (01/12/2014 10:55:49 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (01/12/2014 10:25:55 AM) (Source: vmauthd) (User: )
Description: 2014-01-12T10:25:55.722+01:00| vthread-5| E105: Cannot find perfmon object in array returned by perfDLL, index=0

Error: (01/12/2014 10:25:54 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (01/12/2014 10:25:54 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (01/12/2014 10:25:54 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (01/12/2014 10:00:46 AM) (Source: vmauthd) (User: )
Description: 2014-01-12T10:00:46.840+01:00| vthread-5| E105: Cannot find perfmon object in array returned by perfDLL, index=0


System errors:
=============
Error: (01/12/2014 10:22:37 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (01/12/2014 10:22:37 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (01/12/2014 10:22:37 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (01/12/2014 10:22:37 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (01/12/2014 10:22:37 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (01/12/2014 10:22:37 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (01/12/2014 10:22:36 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (01/12/2014 10:22:36 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (01/12/2014 10:22:36 AM) (Source: DCOM) (User: )
Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (01/12/2014 10:22:36 AM) (Source: DCOM) (User: )
Description: 1068netprofm{A47979D2-C419-11D9-A5B4-001185AD2B89}


Microsoft Office Sessions:
=========================
Error: (01/12/2014 10:55:49 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (01/12/2014 10:55:49 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (01/12/2014 10:55:49 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (01/12/2014 10:25:55 AM) (Source: vmauthd)(User: )
Description: 2014-01-12T10:25:55.722+01:00| vthread-5| E105: Cannot find perfmon object in array returned by perfDLL, index=0

Error: (01/12/2014 10:25:54 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (01/12/2014 10:25:54 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (01/12/2014 10:25:54 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (01/12/2014 10:00:46 AM) (Source: vmauthd)(User: )
Description: 2014-01-12T10:00:46.840+01:00| vthread-5| E105: Cannot find perfmon object in array returned by perfDLL, index=0


CodeIntegrity Errors:
===================================
  Date: 2013-02-17 09:38:53.473
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-17 09:38:53.425
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-17 09:38:51.332
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-17 09:38:51.284
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-17 09:38:49.166
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-17 09:38:49.120
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-17 09:38:47.039
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-17 09:38:46.992
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-17 09:38:44.896
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-17 09:38:44.848
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 21%
Total physical RAM: 16361.46 MB
Available physical RAM: 12811.2 MB
Total Pagefile: 32721.09 MB
Available Pagefile: 28062.96 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (WINDOWS) (Fixed) (Total:119.14 GB) (Free:40.05 GB) NTFS
Drive d: (ABLAGE) (Fixed) (Total:698.64 GB) (Free:310.12 GB) NTFS
Drive i: (Bitcasa Infinite Drive) (Removable) (Total:8589934592 GB) (Free:8589934592 GB) Bitcasa

==================== MBR & Partition Table ==================

==================== End Of Log ============================

--- --- ---

Hallo Schrauber,

anbei die gewünschten Logfiles.

Greetz
TRIGGER70

schrauber · 13.01.2014, 10:12

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

TRIGGER70 · 19.01.2014, 09:42

Hallo Schrauber,

habe nochmal alle Programme die du aufgelistet hast laufen lassen. Gleich als erstes Malwarebytes Anti-Malware. Der hats gebracht! Alle Einträge wurden entfernt! Super Anleitung, danke!

Greetz
TRIGGER70

schrauber · 19.01.2014, 11:16

Die Logs bitte

TRIGGER70 · 19.01.2014, 11:32

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-01-2014 05
Ran by Zsolt Soproni at 2014-01-19 09:10:10
Running from D:\Benutzer\Zsolt Soproni\Desktop
Boot Mode: Normal
==========================================================

==================== Security Center ========================

AV: Norton Internet Security (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Acronis Drive Monitor (x32 Version: 1.0.566 - Acronis)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.38 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (x32 Version: 10.1.9 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.3.633 - Adobe Systems, Inc.)
Aliens vs. Predator (x32 Version: - Rebellion)
Aliens vs. Predator 2 (x32 Version: - )
AllShare Framework DMS (Version: 1.3.23 - Samsung)
Allway Sync version 14.0.1 (x32 Version: - Botkind Inc)
ARMA 2 Operation Arrowhead Uninstall (x32 Version: - )
ArmA 2 Uninstall (x32 Version: - )
Arma Cold War Assault Uninstall (x32 Version: - )
ArmA Uninstall (x32 Version: - )
Assassin's Creed II (x32 Version: 1.00 - Ubisoft)
Battlefield 2(TM) (x32 Version: - )
Battlefield 2: Special Forces (x32 Version: - )
Battlefield 2142 (x32 Version: - )
Battlefield 3™ (x32 Version: 1.4.0.0 - Electronic Arts)
Battlefield: Bad Company™ 2 (x32 Version: 1.0.0.0 - Electronic Arts)
Battlelog Web Plugins (x32 Version: 1.122.0 - EA Digital Illusions CE AB)
Battlestations: Midway - Iowa Mission Pack (x32 Version: 1.00.0000 - Ihr Firmenname)
Battlestations: Midway (x32 Version: 1.00.0000 - Ihr Firmenname)
Battlestations: Midway Patch V1.1 (x32 Version: 1.00.0000 - Ihr Firmenname) Hidden
Battlestations: Midway Patch V1.1.1 (x32 Version: 1.00.0000 - EIDOS HUNGARY) Hidden
Battlestations: Pacific (x32 Version: 1.00.0000 - Eidos plc)
BisonCam (x32 Version: 9.2.1.71.52 - BisonCam)
Bitcasa Version 1.1.4.12 (Version: 1.1.4.12 - Bitcasa Inc.)
Box Sync (64 bit) (Version: 3.4.25.0 - Box, Inc)
BufferChm (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
C410 (x32 Version: 140.0.273.000 - Hewlett-Packard) Hidden
CCleaner (Version: 4.09 - Piriform)
CM Installer (x32 Version: 1.0.0.0 - Cyanogen Inc.)
Creative Pack Volume 1 (x32 Version: 3.0.0 - Avid Technology, Inc.)
Crysis(R) (x32 Version: 1.21.0000 - Electronic Arts)
Crysis® 2 (x32 Version: 1.0.0.0 - Electronic Arts)
Cubby (HKCU Version: 1.0.0.12447 - LogMeIn, Inc.)
DAEMON Tools Lite (x32 Version: 4.47.1.0333 - Disc Soft Ltd)
Dead Space™ (x32 Version: 1.0.222.0 - Electronic Arts)
Dead Space™ 2 (x32 Version: 1.0.948.0 - Electronic Arts)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version: - Microsoft)
Destinations (x32 Version: 140.0.77.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.99.000 - Hewlett-Packard) Hidden
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
Dump Truck (x32 Version: 1.1.1.632 - Golden Frog, Inc.)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESN Sonar (x32 Version: 0.70.4 - ESN Social Software AB)
Euro-Fahrtenbuch 2012 (remove only) (x32 Version: 7.0.2 - TaskX GmbH)
Evolution GT (x32 Version: 1.00.0000 - )
Far Cry (Patch 1) (x32 Version: 1.00.0000 - Ihr Firmenname) Hidden
Far Cry (Patch 1.3) (x32 Version: 1.00.0000 - Ubisoft) Hidden
Far Cry (Patch 1.31) (x32 Version: 1.00.0000 - Ubisoft) Hidden
Far Cry (Patch 1.32) (x32 Version: 1.00.0000 - Ubisoft) Hidden
Far Cry (Patch 1.33) (x32 Version: 1.00.0000 - Ubisoft) Hidden
Far Cry (Patch 1.4) (x32 Version: 1.00.0000 - Ubisoft) Hidden
Far Cry (x32 Version: - Crytek)
Far Cry 3 (x32 Version: 1.05 - Ubisoft)
Fax (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Filmmaker's Toolkit for Studio (x32 Version: 1.00.0000 - Red Giant)
Filmmaker's Toolkit for Studio (x32 Version: 1.00.0000 - Red Giant) Hidden
Flash Slideshow Maker Pro 5.20 (x32 Version: 5.20 - Flash-Slideshow-Maker.COM)
FlashFXP v4.2 (x32 Version: 4.2.5.1810 - OpenSight Software, LLC)
GoPro CineForm Studio 1.3.2 (x32 Version: 1.3.2 - CineForm, Inc & GoPro, Inc.)
GPBaseService2 (x32 Version: 140.0.211.000 - Hewlett-Packard) Hidden
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Hewlett-Packard ACLM.NET v1.1.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
Hollywood FX Volumes 1-3 (x32 Version: 2.0.0 - Avid Technology, Inc.)
Hotkey 3.3028 (x32 Version: 3.3028 - NoteBook)
Hotkey 3.3028 (x32 Version: 3.3028 - NoteBook) Hidden
HP Imaging Device Functions 14.0 (Version: 14.0 - HP)
HP Photosmart Prem C410 All-In-One Driver Software 14.0 Rel. 7 (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (Version: 4.60 - HP)
HP Solution Center 14.0 (Version: 14.0 - HP)
HP Update (x32 Version: 5.005.000.001 - Hewlett-Packard)
HPAppStudio (x32 Version: 140.0.95.000 - Hewlett-Packard) Hidden
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
iDisplay 2.2.0 (x32 Version: 2.2.0.11 - SHAPE)
Image Resizer for Windows (64 bit) (Version: 3.0.4802.35565 - Brice Lambson) Hidden
Image Resizer for Windows (x32 Version: 3.0.4802.35565 - Brice Lambson)
Image Resizer Powertoy Clone for Windows (64 bit) (Version: 2.1 - Brice Lambson)
Intel PROSet Wireless (Version: - ) Hidden
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 1.0.0.0454 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (Version: 14.00.0000 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 10.5.0.1026 - Intel Corporation)
ITE Infrared Transceiver (x32 Version: 1.00.0000 - ITE)
JMicron Ethernet Adapter NDIS Driver (x32 Version: 6.0.26.6 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (x32 Version: 1.0.62.0 - JMicron Technology Corp.)
JPEG Lossless Rotator 9.1 (Version: - Anny)
LastPass (uninstall only) (x32 Version: - LastPass)
Leawo PowerPoint to Video Free version 2.4.0.62 (x32 Version: - Leawo Software)
Logitech Gaming Software 5.10 (Version: 5.10.127 - Logitech)
Logitech SetPoint 6.32 (Version: 6.32.20 - Logitech)
Mafia II (x32 Version: 1.0 - Take-Two Interactive Software, Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Media Add-ons für Acronis True Image Home 2011 (x32 Version: 14.0.5519 - Acronis)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Primary Interoperability Assemblies 2005 (x32 Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU Version: 17.0.2015.0811 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ Run Time Lib Setup (x32 Version: 1.0.0 - Microsoft)
Midnight Club II (x32 Version: 2.0 - )
MOBackup - Datensicherung für Outlook (Vollversion) (x32 Version: 7.0 - Heiko Schröder)
MobileWiFi (x32 Version: TOOL-ConnLaucher_WIN1.09.02.00 - Huawei Technologies Co.,Ltd)
Mobipocket Reader 6.2 (x32 Version: 6.2.608 - Mobipocket.com)
Motion Graphics Toolkit for Studio (x32 Version: 1.00.0000 - Red Giant)
Motion Graphics Toolkit for Studio (x32 Version: 1.00.0000 - Red Giant) Hidden
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MPC-HC 1.7.1 (64-bit) (Version: 1.7.1.0 - MPC-HC Team)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
Nero 10 ClipartPack (x32 Version: 10.0.10300.0.0 - Nero AG)
Nero 10 Menu TemplatePack 1 (x32 Version: 10.0.10300.0.0 - Nero AG)
Nero 10 Menu TemplatePack 2 (x32 Version: 10.0.10300.0.0 - Nero AG)
Nero 10 Menu TemplatePack 3 (x32 Version: 10.0.10300.0.0 - Nero AG)
Nero 10 Menu TemplatePack Basic (x32 Version: 10.0.10300.0.0 - Nero AG) Hidden
Nero 10 Movie ThemePack 1 (x32 Version: 10.0.10300.1.0 - Nero AG)
Nero 10 Movie ThemePack 2 (x32 Version: 10.0.10300.1.0 - Nero AG)
Nero 10 Movie ThemePack Basic (x32 Version: 10.0.10300.1.0 - Nero AG) Hidden
Nero 10 Sample ImagePack (x32 Version: 10.0.10300.0.0 - Nero AG)
Nero 10 Sample Videos (x32 Version: 10.0.10300.2.0 - Nero AG)
Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.20012 - Nero AG) Hidden
Nero Burning ROM 10 (x32 Version: 10.6.10700.5.100 - Nero AG)
Nero Control Center 10 (x32 Version: 10.6.13000.0.11 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.19900.9.11 - Nero AG) Hidden
Nero CoverDesigner 10 (x32 Version: 5.6.10600.4.100 - Nero AG)
Nero DiscSpeed 10 (x32 Version: 6.4.10500.1.100 - Nero AG)
Nero InfoTool 10 (x32 Version: 7.4.10300.1.100 - Nero AG)
Nero Multimedia Suite 10 (x32 Version: 10.0.11200 - Nero AG)
Nero Recode 10 (x32 Version: 4.10.10700.5.100 - Nero AG)
Nero RescueAgent 10 (x32 Version: 3.6.10500.3.100 - Nero AG)
Nero SoundTrax 10 (x32 Version: 4.10.10500.4.100 - Nero AG)
Nero Update (x32 Version: 11.0.11500.28.0 - Nero AG) Hidden
Nero Vision 10 (x32 Version: 7.4.11000.9.100 - Nero AG)
Nero WaveEditor 10 (x32 Version: 5.10.10700.6.100 - Nero AG)
Network64 (Version: 140.0.215.000 - Hewlett-Packard) Hidden
Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden
Norton Internet Security (x32 Version: 21.1.0.18 - Symantec Corporation)
Nuance OmniPage 17 (x32 Version: 17.0.0000 - Nuance Communications, Inc.)
Nuance PDF Create! 5 (Version: 5.20.6400 - Nuance Communications, Inc)
NVIDIA 3D Vision Treiber 327.23 (Version: 327.23 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.23 (Version: 327.23 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.902 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2723 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 327.23 (Version: 327.23 - NVIDIA Corporation) Hidden
OCR Software by I.R.I.S. 14.0 (Version: 14.0 - HP)
OpenAL (x32 Version: - )
OpenVPN 2.3.2-I003 (x32 Version: 2.3.2-I003 - )
Origin (x32 Version: 8.5.0.4554 - Electronic Arts, Inc.)
Pinnacle Studio 16 - Install Manager (x32 Version: 16.0.75 - Avid Technology, Inc.)
Pinnacle Studio 16 - Standard Content Pack (x32 Version: 16.0.0 - Avid Technology, Inc.)
Pinnacle Studio 16 (x32 Version: 16.1.0.115 - Corel Corporation)
Pinnacle Video Treiber (Version: 12.1.0.030 - Pinnacle Systems)
Plantronics MyHeadset Updater (x64) (Version: 2.7.55033.0 - Plantronics, Inc.)
PlayReady PC Runtime amd64 (Version: 1.3.0 - Microsoft Corporation)
Premium Pack Volumes 1-2 (x32 Version: 2.0.0 - Avid Technology, Inc.)
Protector Suite 2009 (Version: 5.9.3.6379 - UPEK Inc.)
PS_AIO_07_C410_SW_Min (x32 Version: 140.0.273.000 - Hewlett-Packard) Hidden
PunkBuster Services (x32 Version: 0.993 - Even Balance, Inc.)
QuickTransfer (x32 Version: 140.0.98.000 - Hewlett-Packard) Hidden
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6307 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0 - Renesas Electronics Corporation) Hidden
RoboForm 7-9-2-5 (All Users) (x32 Version: 7-9-2-5 - Siber Systems)
Rockstar Games Social Club (x32 Version: 1.1.0.1 - Rockstar Games)
S.T.A.L.K.E.R. - Shadow of Chernobyl [v1.0005] (x32 Version: 1.0005 - THQ)
Samsung Link 1.8.0.1401171024 (Version: 1.8.0.1401171024 - Copyright 2013 SAMSUNG)
Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden
Scan (x32 Version: 140.0.80.000 - Hewlett-Packard) Hidden
Scansoft PDF Create (x32 Version: - ) Hidden
ScoreFitter Volumes 1-2 (x32 Version: 2.0.0 - Avid Technology, Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
SmartWebPrinting (x32 Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
Status (x32 Version: 140.0.256.000 - Hewlett-Packard) Hidden
Steam (x32 Version: 1.0.0.0 - Valve)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (Version: 15.1.14.0 - Synaptics Incorporated)
TAP-Windows 9.9.2 (Version: 9.9.2 - )
TeamViewer 8 (x32 Version: 8.0.22298 - TeamViewer)
Test Drive Unlimited (x32 Version: 0.10.0000 - Ihr Firmenname)
THX TruStudio Pro (x32 Version: TAMB-CVS1D-1-LB R07 - Creative Technology Limited)
Title Extreme (x32 Version: 2.0.0 - Avid Technology, Inc.)
Tivizen (x32 Version: 1.0.2499 - Valups)
Tom Clancy's EndWar (x32 Version: 1.00.0000 - Ubisoft)
Tom Clancy's Ghost Recon Advanced Warfighter® 2 (x32 Version: 1.00.0000 - UBISOFT)
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
tools-freebsd (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
tools-linux (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
tools-netware (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
tools-solaris (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
tools-windows (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
tools-winPre2k (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
TrayApp (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
TrueCrypt (x32 Version: 7.1a - TrueCrypt Foundation)
Ubisoft Game Launcher (x32 Version: 1.0.0.0 - UBISOFT)
Unreal II (x32 Version: - )
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version: - Microsoft)
Uplay (x32 Version: 2.0 - Ubisoft)
Vista Shortcut Manager x64 (Version: 2.0 - Frameworkx)
VMware Workstation (Version: 10.0.1 - VMware, Inc.) Hidden
VMware Workstation (x32 Version: 10.0.1 - VMware, Inc)
VyprVPN (x32 Version: 2.0.0.1494 - Golden Frog, Inc.)
VyprVPN (x32 Version: 2.0.0.1494 - Golden Frog, Inc.) Hidden
Wargame: European Escalation (x32 Version: - Focus,Eugen Systems)
WebCam Installer (x32 Version: 3.32 - WebCam)
WebReg (x32 Version: 140.0.212.017 - Hewlett-Packard) Hidden
Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices (03/07/2012 ) (Version: 03/07/2012 - GoPro)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0 - Microsoft Corporation)
Windows XP Mode (Version: 1.3.7600.16422 - Microsoft Corporation)
Windows-Treiberpaket - Cambridge Silicon Radio (CSRBC) USB (08/15/2010 2.1.0.2) (Version: 08/15/2010 2.1.0.2 - Cambridge Silicon Radio)
Windows-Treiberpaket - YUAN (mod7700) Media (05/22/2009 2.3.3.31) (Version: 05/22/2009 2.3.3.31 - YUAN)
Windows-Treiberpaket - YUAN (mod7700) Media (12/03/2008 2.3.3.27) (Version: 12/03/2008 2.3.3.27 - YUAN)
WinRAR 4.01 (64-Bit) (Version: 4.01.0 - win.rar GmbH)
Xilisoft Audio Converter Pro (x32 Version: 6.4.0.20121023 - Xilisoft)
Xilisoft Blu-ray Ripper (x32 Version: 7.1.0.20121016 - Xilisoft)
Xilisoft DVD Creator (x32 Version: 7.1.2.20121016 - Xilisoft)
Xilisoft DVD Ripper Ultimate (x32 Version: 7.6.0.20121027 - Xilisoft)
Xilisoft Foto Slideshow Maker (x32 Version: 1.0.2.20120228 - Xilisoft)
Xilisoft Video Converter Ultimate (x32 Version: 7.7.3.20131014 - Xilisoft)

==================== Restore Points =========================

01-12-2013 11:02:37 Gerätetreiber-Paketinstallation: ClockworkMod SAMSUNG Android Phone
01-12-2013 12:09:11 Removed Samsung Kies
01-12-2013 14:39:21 Removed Google Talk Plugin
07-12-2013 06:40:06 Windows Update
15-12-2013 04:45:08 Windows Update
19-01-2014 07:45:18 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1B18BE1F-1107-4C51-B931-EB5F1ACAC13B} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\SymErr.exe [2013-08-01] (Symantec Corporation)
Task: {7A588926-5C3B-42B9-A4BF-539B326C5EDA} - System32\Tasks\Run RoboForm Process => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2013-10-12] (Siber Systems)
Task: {7D6F3342-C079-48E6-84EB-DA4EFA26738F} - System32\Tasks\Core Temp Autostart => C:\Program Files\Core Temp\Core Temp.exe
Task: {95D39B90-E672-4565-BA89-4760488CD053} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMNIKICNNJAJOJNILJCNPMPMPMPMCNPMPMPMPMCNPMPMPMPMCNPMPMPMPMPMPMPMPMPMPMPMPMJNJICMIMCNGMCNNMFMGMCNOMPMCNGMNMPMPMFMJMCNOMCNIMJMPMOMCNNMJN PICMMMFMEKMICNJJCKFMGMOMJMJNHICMMJBJKJLIMJJNBJCMFKMIAJDJLIPNMKAJPINIAJBJGJJNKJCMMIAJPINIAJBJGJPLIIKJNJBNLJKJJNNICMJNDJCMLJKJ"
Task: {9A22D2C8-37A7-4679-84C4-6FE610D077F8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-19] (Adobe Systems Incorporated)
Task: {A3B00DE6-CE1B-4DB7-AF09-AEEE7525393B} - System32\Tasks\PCMeter\Startup => C:\Program Files (x86)\PCMeter\PCMeterV0.2.exe [2012-08-08] (AddGadgets)
Task: {A9C19495-2DE4-4C3E-98F3-EFA0FC0AD0A2} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {AD4E610A-42CF-4DB4-B782-FB52E0000742} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\WSCStub.exe [2013-10-08] (Symantec Corporation)
Task: {D4593E0C-EF5D-4B25-BBF8-91975CA83019} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2013-10-12] (Siber Systems)
Task: {ED493A6F-B3AA-4618-A44E-B9BE1CCB08E6} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\SymErr.exe [2013-08-01] (Symantec Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2010-11-02 12:58 - 2010-11-02 12:58 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2011-10-07 10:39 - 2011-10-07 10:39 - 01304856 _____ () C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll
2013-10-03 13:18 - 2014-01-17 10:24 - 00013824 _____ () C:\Program Files\Samsung\Samsung Link\JniSys.dll
2013-10-03 13:18 - 2014-01-17 10:24 - 00048640 _____ () C:\Program Files\Samsung\Samsung Link\JniIO.dll
2013-12-21 11:25 - 2013-12-21 11:25 - 00036864 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\JNIInterface.dll
2013-12-21 11:26 - 2013-12-21 11:26 - 00144384 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\ASFAPI.dll
2013-12-21 11:27 - 2013-12-21 11:27 - 00018944 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\MediaDB_Manager.dll
2013-10-22 09:52 - 2013-10-22 09:52 - 00030720 _____ () C:\Windows\system32\MediaDB64.dll
2013-10-22 09:52 - 2013-10-22 09:52 - 00908800 _____ () C:\Windows\system32\ContentDirectoryPresenter64.dll
2013-12-21 11:27 - 2013-12-21 11:27 - 00521728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\DMS_Manager.dll
2013-07-23 19:19 - 2013-07-23 19:19 - 00049152 _____ () C:\Windows\system32\boost_date_time-vc90-mt-1_47.dll
2013-07-23 19:19 - 2013-07-23 19:19 - 00016896 _____ () C:\Windows\system32\boost_system-vc90-mt-1_47.dll
2013-07-23 19:19 - 2013-07-23 19:19 - 00058880 _____ () C:\Windows\system32\boost_thread-vc90-mt-1_47.dll
2013-07-23 19:19 - 2013-07-23 19:19 - 00299520 _____ () C:\Windows\system32\boost_serialization-vc90-mt-1_47.dll
2013-12-07 08:39 - 2013-11-19 00:49 - 01909760 _____ () C:\Program Files\Bitcasa\bitcasaui.dll
2013-09-07 06:50 - 2013-09-07 06:50 - 00537600 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_64\Python.Runtime\f08e82ee2db2af735c14823ad8695ac7\Python.Runtime.ni.dll
2013-01-03 18:12 - 2013-01-03 18:12 - 00471552 _____ () C:\Program Files\Box Sync\_hashlib.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00046080 _____ () C:\Program Files\Box Sync\_socket.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 01167360 _____ () C:\Program Files\Box Sync\_ssl.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00689664 _____ () C:\Program Files\Box Sync\unicodedata.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00166912 _____ () C:\Program Files\Box Sync\_elementtree.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00164352 _____ () C:\Program Files\Box Sync\pyexpat.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00111616 _____ () C:\Program Files\Box Sync\_ctypes.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00127488 _____ () C:\Program Files\Box Sync\win32api.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00136704 _____ () C:\Program Files\Box Sync\pywintypes27.dll
2013-01-03 18:12 - 2013-01-03 18:12 - 00058368 _____ () C:\Program Files\Box Sync\_sqlite3.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00535040 _____ () C:\Program Files\Box Sync\sqlite3.dll
2013-01-03 18:12 - 2013-01-03 18:12 - 00037888 _____ () C:\Program Files\Box Sync\_testcapi.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00135168 _____ () C:\Program Files\Box Sync\win32security.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00007168 _____ () C:\Program Files\Box Sync\_win32sysloader.pyd
2013-01-03 18:12 - 2013-01-03 18:12 - 00138752 _____ () C:\Program Files\Box Sync\win32file.pyd
2013-12-07 08:39 - 2013-11-19 00:38 - 00300544 _____ () C:\Program Files\Bitcasa\ExplorerMenu.dll
2013-12-11 16:46 - 2013-12-11 16:46 - 01114624 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DMSManager.dll
2013-10-22 09:48 - 2013-10-22 09:48 - 00707072 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ContentDirectoryPresenter.dll
2013-10-24 16:53 - 2013-10-24 16:53 - 00107008 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMCDP.dll
2013-12-11 16:46 - 2013-12-11 16:46 - 00102400 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\FolderCDP.dll
2013-12-11 16:46 - 2013-12-11 16:46 - 00077312 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MetadataFramework.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00520234 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\sqlite3.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00450560 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MoodExtractor.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 05717504 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMImgExtractor.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00028672 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AutoChaptering.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00147456 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexpat.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoThumb.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 04671488 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avcodec-52.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00070656 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avutil-50.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00686080 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avformat-52.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00152064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\swscale-0.dll
2013-10-25 19:49 - 2013-10-25 19:49 - 00028160 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AudioExtractor.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00064000 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ID3Driver.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00366592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\tag.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00289792 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libThumbnail.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00023040 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RichInfoDriver.dll
2013-12-11 16:45 - 2013-12-11 16:45 - 00017920 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoExtractor.dll
2013-10-25 19:53 - 2013-10-25 19:53 - 00117248 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ThumbnailMaker.dll
2013-10-25 19:53 - 2013-10-25 19:53 - 01033728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageMagickWrapper.dll
2013-12-11 16:45 - 2013-12-11 16:45 - 00134144 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoMetadataDriver.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00290816 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libKeyFrame.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\SECMetaDriver.dll
2013-10-25 19:53 - 2013-10-25 19:53 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageExtractor.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\photoDriver.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00399826 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexif-12.dll.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00013824 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\TextExtractor.dll
2013-10-24 16:53 - 2013-10-24 16:53 - 00032768 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\Autobackup.dll
2013-04-19 16:38 - 2013-04-19 16:38 - 00055808 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RosettaAllShare.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00227840 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_serialization-vc90-mt-1_47.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00038912 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_date_time-vc90-mt-1_47.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00012800 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_system-vc90-mt-1_47.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00046592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_thread-vc90-mt-1_47.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00044032 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\us.dll
2013-10-18 12:46 - 2013-10-18 12:46 - 01260624 _____ () C:\Program Files (x86)\VMware\VMware Workstation\libxml2.dll
2014-01-12 08:04 - 2013-12-12 23:19 - 00142848 _____ () D:\Spiele\Steam\libavresample-1.dll
2014-01-12 08:04 - 2013-11-05 02:12 - 00890592 _____ () D:\Spiele\Steam\libavutil-52.dll
2013-03-25 13:23 - 2013-12-12 23:04 - 00716800 _____ () D:\Spiele\Steam\SDL2.dll
2012-05-04 04:37 - 2014-01-07 22:00 - 01138088 _____ () D:\Spiele\Steam\bin\chromehtml.DLL
2012-05-04 04:37 - 2013-12-12 23:04 - 20625832 _____ () D:\Spiele\Steam\bin\libcef.dll
2012-05-04 04:37 - 2013-06-15 00:49 - 01100800 _____ () D:\Spiele\Steam\bin\avcodec-53.dll
2012-05-04 04:37 - 2013-06-15 00:49 - 00124416 _____ () D:\Spiele\Steam\bin\avutil-51.dll
2012-05-04 04:37 - 2013-06-15 00:49 - 00192000 _____ () D:\Spiele\Steam\bin\avformat-53.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2009-06-06 14:50 - 2009-06-06 14:50 - 00019968 _____ () C:\Program Files (x86)\Hotkey\Audiodll.dll
2013-09-07 07:01 - 2013-04-05 03:42 - 00137216 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Launcher.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00009728 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\select.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00040960 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\_socket.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00721920 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\_ssl.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00240640 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\utils.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00074240 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\_ctypes.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00157696 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\libzmq.dll
2013-09-07 07:01 - 2013-04-05 03:40 - 00010752 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\utils\initthreads.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00030208 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\constants.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00022016 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\error.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00047616 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\message.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00038400 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\context.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00069632 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\socket.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00285184 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\_hashlib.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00024064 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\_poll.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00016896 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\stopwatch.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00011776 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\_version.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00017408 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\core\device.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00023552 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\_multiprocessing.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00027136 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\zmq\devices\monitoredqueue.pyd
2013-09-07 07:01 - 2013-04-05 03:41 - 00013312 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\DTPlatform.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00028672 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Env.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00033792 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\UnicodeSafeConfigParser.pyd
2013-09-07 07:01 - 2013-04-05 03:41 - 00156160 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\DavWorkEngine.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00103424 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\pyexpat.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00686592 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\unicodedata.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00053760 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\egenix_pyopenssl-0.13.0_1.0.0j_1-py2.7-win32.egg\OpenSSL\crypto.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00010240 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\egenix_pyopenssl-0.13.0_1.0.0j_1-py2.7-win32.egg\OpenSSL\rand.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00041984 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\egenix_pyopenssl-0.13.0_1.0.0j_1-py2.7-win32.egg\OpenSSL\SSL.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00014848 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Version.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00010752 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\BuildVersion.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00286208 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\FSCharmap.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00091648 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Governor.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00241152 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Configuration.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00037376 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Keychain.pyd
2013-09-07 07:01 - 2013-04-05 03:41 - 00080896 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\ConfigurationBussables.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00069120 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\EventBus\Bussable.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00055808 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Settings.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00033792 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\ThreadPool.pyd
2013-09-07 07:01 - 2013-04-05 03:41 - 00026112 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\DumptruckEventBus.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00156672 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\EventBus\EventBus.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00101888 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\EventBus\ServiceSocket.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00027136 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\EventBus\PacketValidation.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00031744 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\EventBus\LocatorBussables.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00041472 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\EventBus\EventBusInvoker.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00031232 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\EventBus\LocatorService.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00047104 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\GovernorBussables.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00070656 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\ProcessUtils.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00077312 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\SocketPair.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00022528 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\LogHandler.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00083456 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\UpdateWatcher.pyd
2012-01-31 19:51 - 2010-11-01 17:34 - 00159744 ____N () C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\de-DE\THXAudio.resources.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () D:\Benutzer\Zsolt Soproni\AppData\Roaming\Dropbox\bin\libcef.dll
2011-02-24 18:39 - 2011-02-24 18:39 - 00012128 _____ () C:\Program Files (x86)\Common Files\Acronis\DriveMonitor\Common\icudt38.dll
2013-08-15 10:55 - 2013-08-15 10:55 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\f60b3ee2de3f41a024920486d46d49f2\IsdiInterop.ni.dll
2012-01-31 19:45 - 2011-04-30 00:28 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-09-07 07:01 - 2013-04-05 03:39 - 00382976 _____ () C:\Program Files (x86)\Dump Truck\libzmq.dll
2013-09-07 07:01 - 2013-04-05 03:41 - 00121856 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\FilesystemMonitor.pyd
2013-09-07 07:01 - 2013-04-05 03:41 - 00028672 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\FilesystemMonitorBussables.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00023552 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\EventBus\Utils.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00172544 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\NetworkMonitor.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00039424 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\NetworkMonitorBussables.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00348160 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\SyncEngine.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00048128 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\SetQueue.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00041984 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\_sqlite3.pyd
2013-09-07 07:01 - 2012-04-11 05:31 - 00337920 _____ () C:\Program Files (x86)\Dump Truck\python\DLLs\sqlite3.dll
2013-09-07 07:01 - 2013-04-05 03:41 - 00289792 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\FileTracker.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00044032 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\DeleteGC.pyd
2013-09-07 07:01 - 2013-04-05 03:41 - 00119296 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\DBUtils.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00189440 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\FullScan.pyd
2013-09-07 07:01 - 2013-04-05 03:44 - 00100352 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Graph.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00147456 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\SyncEngineControl.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00062464 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\SyncEngineEventBusListeners.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00094208 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\SyncEngineProcessor.pyd
2013-09-07 07:01 - 2013-04-05 03:41 - 00117248 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\DownloadEngine.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00037376 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\RabinStreamingDiffer.pyd
2013-09-07 07:01 - 2013-04-05 03:42 - 00025600 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\Rabin.pyd
2013-09-07 07:01 - 2013-04-05 03:40 - 00023040 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\rabinc.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00173568 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\UploadEngine.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00085504 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\SyncEngineRequestHandler.pyd
2013-09-07 07:01 - 2013-04-05 03:43 - 00105984 _____ () C:\Program Files (x86)\Dump Truck\sync-engine\lib\site-packages\SyncEngineBussables.pyd

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:054203E4
AlternateDataStreams: C:\ProgramData\Temp:0A8E2C33
AlternateDataStreams: C:\ProgramData\Temp:9B013599
AlternateDataStreams: C:\ProgramData\Temp:FED912DB

==================== Safe Mode (whitelisted) ===================

==================== Faulty Device Manager Devices =============

Name: Photosmart Prem C410 series
Description: Photosmart Prem C410 series
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C410 series
Description: Photosmart Prem C410 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2013-02-17 09:38:53.473
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-02-17 09:38:53.425
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-02-17 09:38:51.332
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-02-17 09:38:51.284
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-02-17 09:38:49.166
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-02-17 09:38:49.120
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-02-17 09:38:47.039
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-02-17 09:38:46.992
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-02-17 09:38:44.896
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-02-17 09:38:44.848
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

==================== Memory info ===========================

Percentage of memory in use: 19%
Total physical RAM: 16361.46 MB
Available physical RAM: 13111.91 MB
Total Pagefile: 32721.09 MB
Available Pagefile: 28379.2 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (WINDOWS) (Fixed) (Total:119.14 GB) (Free:41.29 GB) NTFS
Drive d: (ABLAGE) (Fixed) (Total:698.64 GB) (Free:329.2 GB) NTFS
Drive i: (Bitcasa Infinite Drive) (Removable) (Total:8589934592 GB) (Free:8589934592 GB) Bitcasa

==================== MBR & Partition Table ==================

==================== End Of Log ============================

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-01-2014 05
Ran by Zsolt Soproni (administrator) on CLEVO on 19-01-2014 09:09:53
Running from D:\Benutzer\Zsolt Soproni\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
() C:\ProgramData\DataCardService\HWDeviceService64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\nis.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\Hotkey\PowerBiosServer.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Golden Frog, Inc.) C:\Program Files (x86)\VyprVPN\VyprVPNService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
() C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(UPEK Inc.) C:\Program Files\Protector Suite\upeksvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DataCardService\DCSHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(UPEK Inc.) C:\Program Files\Protector Suite\psqltray.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Box, Inc.) C:\Program Files\Box Sync\BoxSyncHelper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe
() C:\Program Files\Bitcasa\Bitcasa.exe
(Valve Corporation) D:\Spiele\Steam\Steam.exe
(Microsoft Corporation) D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Box, Inc.) C:\Program Files\Box Sync\BoxSync.exe
() C:\Program Files (x86)\Hotkey\Hotkey.exe
() C:\Program Files (x86)\Dump Truck\python\python.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointG\SetPointII.exe
(Dropbox, Inc.) D:\Benutzer\Zsolt Soproni\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Create 5\PdfCreate5Hook.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Program Files (x86)\Dump Truck\python\python.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\nis.exe
(AddGadgets) C:\Program Files (x86)\PCMeter\PCMeterV0.2.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(GoldenFrog) C:\Program Files (x86)\Dump Truck\GoldenFrog.DumpTruck.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
() C:\Program Files (x86)\Dump Truck\python\python.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2328360 2010-09-16] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11776104 2011-02-11] (Realtek Semiconductor)
HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2010-11-02] (Intel(R) Corporation)
HKLM\...\Run: [PSQLLauncher] - C:\Program Files\Protector Suite\launcher.exe [84744 2010-04-27] (UPEK Inc.)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10228224 2010-11-03] (Intel Corporation)
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\THXCfg64.dll [25600 2010-09-14] (Creative Technology Ltd.)
HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [395344 2011-09-22] (Acronis)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [Start WingMan Profiler] - C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)
HKLM\...\Run: [Plantronics MyHeadset Updater] - C:\Program Files\Plantronics\MyHeadsetUpdater\MyHeadsetUpdater.exe [69632 2012-04-09] (Plantronics)
HKLM\...\Run: [BoxSyncHelper] - C:\Program Files\Box Sync\BoxSyncHelper.exe [393216 2013-06-07] (Box, Inc.)
HKLM\...\Run: [Samsung Link] - C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe [600928 2014-01-17] (Copyright 2013 SAMSUNG)
HKLM\...\Run: [Bitcasa] - C:\Program Files\Bitcasa\Bitcasa.exe [4237824 2013-11-19] ()
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-30] (Intel Corporation)
HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1374720 2010-11-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\Updreg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [adm_tray.exe] - C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe [470120 2011-02-24] ()
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Nuance OmniPage 17-reminder] - C:\ProgramData\ScanSoft\OmniPage 17\Ereg\Ereg.ini [342 2013-11-09] ()
HKLM-x32\...\Run: [PDFHook] - C:\Program Files (x86)\Nuance\PDF Create 5\PdfCreate5Hook.exe [1277952 2009-04-10] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDF5 Registry Controller] - C:\Program Files (x86)\Nuance\PDF Create 5\RegistryController.exe [58656 2008-12-13] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [vmware-tray.exe] - C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [111696 2013-10-18] (VMware, Inc.)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
Winlogon\Notify\psfus: C:\Program Files\Protector Suite\psqlpwd.dll (UPEK Inc.)
HKCU\...\Run: [Steam] - D:\Spiele\Steam\Steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [Mobile Partner] - C:\Program Files (x86)\MobileWiFi\MobileWiFi
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [SkyDrive] - D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257136 2013-08-15] (Microsoft Corporation)
HKCU\...\Run: [LogMeIn Cubby] - D:\Benutzer\Zsolt Soproni\AppData\Roaming\cubby\cubby.exe [5292816 2014-01-10] (LogMeIn, Inc.)
HKCU\...\Run: [Dump Truck] - C:\Program Files (x86)\Dump Truck\DumpTruck.exe [434592 2013-04-05] (Data Foundry)
HKCU\...\Run: [RoboForm] - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [109784 2013-10-12] (Siber Systems)
HKCU\...\Run: [OpAgent] - "OpAgent.exe" /agent
HKCU\...\Runonce: [Uninstall D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64"
HKCU\...\Runonce: [Uninstall D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530"
HKCU\...\Runonce: [Uninstall D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64"
HKCU\...\Runonce: [Uninstall D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "D:\Benutzer\Zsolt Soproni\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627"
MountPoints2: {0f928b93-4f52-11e1-8654-0090f5c8edc3} - G:\AutoRun.exe
MountPoints2: {20171773-4efa-11e1-8720-88532e822eea} - G:\AutoRun.exe
MountPoints2: {39bad73d-3b7e-11e2-bbce-88532e822eee} - G:\AutoRun.exe
MountPoints2: {48cd63fd-56b1-11e2-bb11-88532e822eee} - "G:\WD Drive Unlock.exe" autoplay=true
MountPoints2: {83c80c38-ac72-11e1-8ceb-88532e822eee} - "H:\WD Drive Unlock.exe" autoplay=true
MountPoints2: {87cdc55e-4ef6-11e1-9b3c-88532e822eea} - G:\AutoRun.exe
MountPoints2: {9000f88b-51ad-11e1-baa8-88532e822eea} - G:\application\Nokia_Internet_Modem.exe
MountPoints2: {91f1c255-4efa-11e1-85e3-88532e822eea} - G:\AutoRun.exe
MountPoints2: {a5505ddd-4ef9-11e1-8edc-88532e822eea} - G:\AutoRun.exe
MountPoints2: {adf202f3-4ef8-11e1-891d-88532e822eea} - G:\AutoRun.exe
MountPoints2: {adf2031c-4ef8-11e1-891d-88532e822eea} - G:\AutoRun.exe
MountPoints2: {b706238d-4c35-11e1-a62d-806e6f6e6963} - E:\autorun.exe
MountPoints2: {c3dde328-4f4d-11e1-b8c2-88532e822eee} - T:\AutoRun.exe
MountPoints2: {cf565146-4efa-11e1-b984-88532e822eea} - G:\AutoRun.exe
MountPoints2: {f7c32bf0-4cf9-11e1-bff1-88532e822eee} - F:\Setup.exe
Lsa: [Notification Packages] scecli C:\Program Files\Protector Suite\psqlpwd.dll
Startup: D:\Benutzer\Zsolt Soproni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> D:\Benutzer\Zsolt Soproni\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: D:\Benutzer\Zsolt Soproni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/?rlz=1w4chba_dede561
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF790518351E0CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Bing
SearchScopes: HKCU - DefaultScope {BBEC3121-A6CE-493E-BCBE-1E4D338B98A8} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKCU - {BBEC3121-A6CE-493E-BCBE-1E4D338B98A8} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: LastPass Browser Helper Object - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPBar64.dll (LastPass)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\ips\ipsbho.dll (Symantec Corporation)
BHO-x32: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: LastPass Browser Helper Object - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPBar.dll (LastPass)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: ZeonIEEventHelper Class - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - C:\Program Files (x86)\Nuance\PDF Create 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPBar64.dll (LastPass)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPBar.dll (LastPass)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Nuance PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - C:\Program Files (x86)\Nuance\PDF Create 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
Toolbar: HKCU - &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} https://secure.logmein.com//activex/ractrl.cab?lmi=1058
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: D:\Benutzer\Zsolt Soproni\AppData\Roaming\Mozilla\Firefox\Profiles\9wa0kfjp.default
FF NewTab: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: Google
FF Keyword.URL: https://www.google.com/search
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.118.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.118.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.122.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: samsung.com/SamsungLinkPCPlugin - C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll No File
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: LogMeIn, Inc. Remote Access Plugin - D:\Benutzer\Zsolt Soproni\AppData\Roaming\Mozilla\Firefox\Profiles\9wa0kfjp.default\Extensions\LogMeInClient@logmein.com [2013-08-03]
FF Extension: LastPass - D:\Benutzer\Zsolt Soproni\AppData\Roaming\Mozilla\Firefox\Profiles\9wa0kfjp.default\Extensions\support@lastpass.com [2013-12-07]
FF Extension: Tab Mix Plus - D:\Benutzer\Zsolt Soproni\AppData\Roaming\Mozilla\Firefox\Profiles\9wa0kfjp.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2012-03-10]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-01-04]
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox
FF Extension: RoboForm Toolbar for Firefox - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox [2012-03-10]
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\IPSFF [2013-10-11]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-01-04]

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (TubeSaver-15) - D:\Benutzer\Zsolt Soproni\AppData\Local\Google\Chrome\User Data\Default\Extensions\aacaalipcbmakfddcbikkebnjedofmec\1.25.20_0 [2013-11-10]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\Exts\Chrome.crx [2013-12-15]

==================== Services (Whitelisted) =================

R2 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [404360 2013-12-21] (Samsung)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-11-02] ()
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [32568 2013-08-22] (The OpenVPN Project)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-12-10] ()
R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [33792 2011-02-15] ()
R2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [609632 2014-01-17] (Copyright 2013 SAMSUNG)
R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [14405200 2013-10-18] ()
R2 VyprVPN; C:\Program Files (x86)\VyprVPN\VyprVPNService.exe [20912 2013-11-15] (Golden Frog, Inc.)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.1.3\Definitions\BASHDefs\20140110.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [352448 2013-02-11] (EldoS Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
S3 DxkgFilter; C:\Program Files (x86)\iDisplay\idisplay.sys [55720 2012-08-31] ()
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()
S3 iDispService; C:\Windows\System32\DRIVERS\idisplayminiport.sys [15568 2011-07-22] (SHAPE Services)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.1.3\Definitions\IPSDefs\20140117.001\IDSvia64.sys [521944 2013-12-15] (Symantec Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 mod7700; C:\Windows\System32\Drivers\dvb7700all.sys [663552 2008-06-12] (DiBcom)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.1.3\Definitions\VirusDefs\20140118.007\ENG64.SYS [126040 2013-09-27] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.1.3\Definitions\VirusDefs\20140118.007\EX64.SYS [2099288 2013-09-27] (Symantec Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-06-08] (Duplex Secure Ltd.)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-09-07] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [73296 2013-10-08] (VMware, Inc.)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [33872 2013-02-22] (VMware, Inc.)
U3 a9dhstdj; C:\Windows\System32\Drivers\a9dhstdj.sys [0 ] (JMicron Technology Corporation)
S3 ALSysIO; \??\D:\Benutzer\ZSOLTS~1\AppData\Local\Temp\ALSysIO64.sys [x]
S3 DisplayLinkUsbPort; system32\DRIVERS\DisplayLinkUsbPort_6.1.32700.0.sys [x]
U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [117248 2010-07-27] (Huawei Technologies Co., Ltd.)
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [x]
R3 WinRing0_1_2_0; \??\D:\Benutzer\Zsolt Soproni\AppData\Local\Temp\tmp5427.tmp [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-19 09:09 - 2014-01-19 09:10 - 00028835 _____ D:\Benutzer\Zsolt Soproni\Desktop\FRST.txt
2014-01-19 09:09 - 2014-01-19 09:09 - 00000000 ____D C:\FRST
2014-01-19 09:01 - 2014-01-19 09:01 - 00000776 _____ D:\Benutzer\Zsolt Soproni\Desktop\JRT.txt
2014-01-19 08:44 - 2014-01-19 08:44 - 00001131 _____ D:\Benutzer\Zsolt Soproni\Desktop\AdwCleaner[S2].txt
2014-01-19 07:45 - 2014-01-19 07:45 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Roaming\Malwarebytes
2014-01-19 07:44 - 2014-01-19 07:44 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-19 07:44 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-19 07:40 - 2014-01-12 10:32 - 02076672 _____ (Farbar) D:\Benutzer\Zsolt Soproni\Desktop\FRST64.exe
2014-01-19 07:38 - 2014-01-19 07:39 - 01037068 _____ (Thisisu) D:\Benutzer\Zsolt Soproni\Desktop\JRT.exe
2014-01-19 07:38 - 2014-01-19 07:38 - 01236282 _____ D:\Benutzer\Zsolt Soproni\Desktop\adwcleaner.exe
2014-01-19 07:37 - 2014-01-19 07:37 - 10285040 _____ (Malwarebytes Corporation                                    ) D:\Benutzer\Zsolt Soproni\Desktop\mbam-setup-1.75.0.1300.exe
2014-01-19 06:57 - 2014-01-19 06:57 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung
2014-01-19 06:56 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-19 06:56 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-19 06:56 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-19 06:56 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-19 06:56 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-19 06:56 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-19 06:56 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-19 06:56 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-19 06:56 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-19 06:49 - 2014-01-19 08:50 - 00000224 _____ C:\Windows\setupact.log
2014-01-19 06:49 - 2014-01-19 06:49 - 00000000 _____ C:\Windows\setuperr.log
2014-01-12 10:01 - 2014-01-12 18:13 - 00000000 ____D D:\Benutzer\Zsolt Soproni\Desktop\Trojaner entfernen
2014-01-12 09:50 - 2014-01-12 09:50 - 00000000 ____D C:\Windows\ERUNT
2014-01-12 09:39 - 2014-01-12 09:45 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-12 09:39 - 2014-01-12 09:39 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-12 09:38 - 2014-01-12 09:38 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-12 08:06 - 2014-01-19 08:53 - 00116140 _____ C:\Windows\WindowsUpdate.log
2014-01-04 17:28 - 2014-01-04 17:28 - 00001468 _____ D:\Benutzer\Zsolt Soproni\Desktop\Fritz!NAS.lnk
2014-01-04 10:00 - 2014-01-03 12:27 - 00000921 _____ D:\Benutzer\Zsolt Soproni\Desktop\HDDScan.txt
2014-01-04 10:00 - 2013-11-25 19:49 - 00000035 _____ D:\Benutzer\Zsolt Soproni\Desktop\Norton Kevin.txt
2013-12-22 09:35 - 2013-12-22 09:35 - 00003464 _____ D:\Benutzer\Zsolt Soproni\Desktop\RT2880_Settings.dat

==================== One Month Modified Files and Folders =======

2014-01-19 09:10 - 2014-01-19 09:09 - 00028835 _____ D:\Benutzer\Zsolt Soproni\Desktop\FRST.txt
2014-01-19 09:09 - 2014-01-19 09:09 - 00000000 ____D C:\FRST
2014-01-19 09:08 - 2012-04-06 07:12 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-19 09:08 - 2012-04-06 07:12 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-19 09:08 - 2012-04-06 07:12 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-19 09:08 - 2012-01-31 22:18 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Local\Adobe
2014-01-19 09:08 - 2012-01-31 21:49 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-19 09:01 - 2014-01-19 09:01 - 00000776 _____ D:\Benutzer\Zsolt Soproni\Desktop\JRT.txt
2014-01-19 08:57 - 2009-07-14 05:45 - 00013584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-19 08:57 - 2009-07-14 05:45 - 00013584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-19 08:53 - 2014-01-12 08:06 - 00116140 _____ C:\Windows\WindowsUpdate.log
2014-01-19 08:52 - 2013-09-07 07:00 - 00000000 ___RD D:\Benutzer\Zsolt Soproni\Dropbox
2014-01-19 08:52 - 2013-09-07 06:58 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Roaming\Dropbox
2014-01-19 08:52 - 2013-09-07 06:51 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Roaming\Box Sync
2014-01-19 08:52 - 2013-08-10 16:43 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Roaming\cubby
2014-01-19 08:52 - 2013-06-08 13:18 - 00000000 ___RD D:\Benutzer\Zsolt Soproni\SkyDrive
2014-01-19 08:50 - 2014-01-19 06:49 - 00000224 _____ C:\Windows\setupact.log
2014-01-19 08:50 - 2013-11-20 22:04 - 00013684 _____ C:\Windows\SysWOW64\vyprVPN.log
2014-01-19 08:50 - 2013-09-28 06:37 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-19 08:50 - 2012-02-12 19:54 - 00000000 ____D C:\ProgramData\VMware
2014-01-19 08:50 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-19 08:49 - 2009-07-14 05:45 - 00504168 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-19 08:47 - 2013-07-20 06:55 - 00000000 ____D C:\Windows\system32\MRT
2014-01-19 08:45 - 2012-01-31 20:36 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-19 08:44 - 2014-01-19 08:44 - 00001131 _____ D:\Benutzer\Zsolt Soproni\Desktop\AdwCleaner[S2].txt
2014-01-19 08:42 - 2013-06-18 20:10 - 00000000 ____D C:\Program Files (x86)\Pando Networks
2014-01-19 08:27 - 2013-11-20 22:04 - 00000000 ____D C:\Program Files (x86)\VyprVPN
2014-01-19 08:27 - 2013-09-07 07:01 - 00000000 ____D C:\Program Files (x86)\Dump Truck
2014-01-19 08:27 - 2012-01-31 19:24 - 00000000 ____D C:\Program Files (x86)\Hotkey
2014-01-19 07:45 - 2014-01-19 07:45 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Roaming\Malwarebytes
2014-01-19 07:44 - 2014-01-19 07:44 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-19 07:39 - 2014-01-19 07:38 - 01037068 _____ (Thisisu) D:\Benutzer\Zsolt Soproni\Desktop\JRT.exe
2014-01-19 07:38 - 2014-01-19 07:38 - 01236282 _____ D:\Benutzer\Zsolt Soproni\Desktop\adwcleaner.exe
2014-01-19 07:37 - 2014-01-19 07:37 - 10285040 _____ (Malwarebytes Corporation                                    ) D:\Benutzer\Zsolt Soproni\Desktop\mbam-setup-1.75.0.1300.exe
2014-01-19 06:57 - 2014-01-19 06:57 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung
2014-01-19 06:54 - 2012-01-31 19:06 - 00000000 ___RD D:\Benutzer\Zsolt Soproni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-19 06:49 - 2014-01-19 06:49 - 00000000 _____ C:\Windows\setuperr.log
2014-01-12 18:13 - 2014-01-12 10:01 - 00000000 ____D D:\Benutzer\Zsolt Soproni\Desktop\Trojaner entfernen
2014-01-12 10:55 - 2009-07-14 18:58 - 03604472 _____ C:\Windows\system32\perfh007.dat
2014-01-12 10:55 - 2009-07-14 18:58 - 01101114 _____ C:\Windows\system32\perfc007.dat
2014-01-12 10:55 - 2009-07-14 06:13 - 00006514 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-12 10:32 - 2014-01-19 07:40 - 02076672 _____ (Farbar) D:\Benutzer\Zsolt Soproni\Desktop\FRST64.exe
2014-01-12 09:50 - 2014-01-12 09:50 - 00000000 ____D C:\Windows\ERUNT
2014-01-12 09:45 - 2014-01-12 09:39 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-12 09:39 - 2014-01-12 09:39 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-12 09:38 - 2014-01-12 09:38 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-04 17:50 - 2012-05-06 10:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-04 17:47 - 2012-02-04 22:58 - 00000000 ____D C:\Program Files\CCleaner
2014-01-04 17:39 - 2012-02-12 19:56 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Roaming\VMware
2014-01-04 17:39 - 2012-02-12 19:56 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Local\VMware
2014-01-04 17:38 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2014-01-04 17:28 - 2014-01-04 17:28 - 00001468 _____ D:\Benutzer\Zsolt Soproni\Desktop\Fritz!NAS.lnk
2014-01-04 17:23 - 2012-04-09 08:34 - 00000000 ____D C:\Program Files (x86)\Allway Sync
2014-01-04 17:15 - 2012-02-02 06:31 - 00000000 ____D C:\Program Files (x86)\Origin
2014-01-04 17:05 - 2012-10-13 11:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-04 17:04 - 2012-02-05 12:08 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Roaming\Skype
2014-01-04 16:58 - 2012-02-05 12:08 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-04 16:58 - 2012-02-05 12:07 - 00000000 ____D C:\ProgramData\Skype
2014-01-03 12:27 - 2014-01-04 10:00 - 00000921 _____ D:\Benutzer\Zsolt Soproni\Desktop\HDDScan.txt
2013-12-22 19:58 - 2013-09-28 13:05 - 00000000 ____D D:\Benutzer\Zsolt Soproni\AppData\Roaming\NVIDIA
2013-12-22 09:35 - 2013-12-22 09:35 - 00003464 _____ D:\Benutzer\Zsolt Soproni\Desktop\RT2880_Settings.dat

Files to move or delete:
====================
D:\Benutzer\Zsolt Soproni\AppData\Roaming\Network Meter_Usage.ini
D:\Benutzer\Zsolt Soproni\GadgetArranger.exe
D:\Benutzer\Zsolt Soproni\IP_Log_Data.js
D:\Benutzer\Zsolt Soproni\Network_Meter_Data.js


Some content of TEMP:
====================
D:\Benutzer\Zsolt Soproni\AppData\Local\Temp\i4jdel0.exe
D:\Benutzer\Zsolt Soproni\AppData\Local\Temp\Quarantine.exe
D:\Benutzer\Zsolt Soproni\AppData\Local\Temp\SamsungAPInstaller_1390110903448.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== BCD ================================

Windows-Start-Manager
---------------------
Bezeichner              {bootmgr}
device                  partition=\Device\HarddiskVolume1
description             Windows Boot Manager
locale                  de-DE
inherit                 {globalsettings}
default                 {current}
resumeobject            {a3652711-4c35-11e1-b5ec-fa5cac9b4a9b}
displayorder            {current}
toolsdisplayorder       {memdiag}
timeout                 30

Windows-Startladeprogramm
-------------------------
Bezeichner              {current}
device                  partition=C:
path                    \Windows\system32\winload.exe
description             Windows 7
locale                  de-DE
inherit                 {bootloadersettings}
recoverysequence        {a3652713-4c35-11e1-b5ec-fa5cac9b4a9b}
recoveryenabled         Yes
osdevice                partition=C:
systemroot              \Windows
resumeobject            {a3652711-4c35-11e1-b5ec-fa5cac9b4a9b}
nx                      OptIn

Windows-Startladeprogramm
-------------------------
Bezeichner              {a3652713-4c35-11e1-b5ec-fa5cac9b4a9b}
device                  ramdisk=[C:]\Recovery\a3652713-4c35-11e1-b5ec-fa5cac9b4a9b\Winre.wim,{a3652714-4c35-11e1-b5ec-fa5cac9b4a9b}
path                    \windows\system32\winload.exe
description             Windows Recovery Environment
inherit                 {bootloadersettings}
osdevice                ramdisk=[C:]\Recovery\a3652713-4c35-11e1-b5ec-fa5cac9b4a9b\Winre.wim,{a3652714-4c35-11e1-b5ec-fa5cac9b4a9b}
systemroot              \windows
nx                      OptIn
winpe                   Yes

Wiederaufnahme aus dem Ruhezustand
----------------------------------
Bezeichner              {a3652711-4c35-11e1-b5ec-fa5cac9b4a9b}
device                  partition=C:
path                    \Windows\system32\winresume.exe
description             Windows Resume Application
locale                  de-DE
inherit                 {resumeloadersettings}
filedevice              partition=C:
filepath                \hiberfil.sys
debugoptionenabled      No

Windows-Speichertestprogramm
----------------------------
Bezeichner              {memdiag}
device                  partition=\Device\HarddiskVolume1
path                    \boot\memtest.exe
description             Windows-Speicherdiagnose
locale                  de-DE
inherit                 {globalsettings}
badmemoryaccess         Yes

EMS-Einstellungen
-----------------
Bezeichner              {emssettings}
bootems                 Yes

Debuggereinstellungen
---------------------
Bezeichner              {dbgsettings}
debugtype               Serial
debugport               1
baudrate                115200

RAM-Defekte
-----------
Bezeichner              {badmemory}

Globale Einstellungen
---------------------
Bezeichner              {globalsettings}
inherit                 {dbgsettings}
                        {emssettings}
                        {badmemory}

Startladeprogramm-Einstellungen
-------------------------------
Bezeichner              {bootloadersettings}
inherit                 {globalsettings}
                        {hypervisorsettings}

Hypervisoreinstellungen
-------------------
Bezeichner              {hypervisorsettings}
hypervisordebugtype     Serial
hypervisordebugport     1
hypervisorbaudrate      115200

Einstellungen zur Ladeprogrammfortsetzung
-----------------------------------------
Bezeichner              {resumeloadersettings}
inherit                 {globalsettings}

Ger„teoptionen
--------------
Bezeichner              {a3652714-4c35-11e1-b5ec-fa5cac9b4a9b}
description             Ramdisk Options
ramdisksdidevice        partition=C:
ramdisksdipath          \Recovery\a3652713-4c35-11e1-b5ec-fa5cac9b4a9b\boot.sdi



LastRegBack: 2013-12-01 10:59

==================== End Of Log ============================

--- --- ---

--- --- ---
AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v3.017 - Bericht erstellt am 19/01/2014 um 08:41:47
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Zsolt Soproni - CLEVO
# Gestartet von : D:\Benutzer\Zsolt Soproni\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (de)

[ Datei : D:\Benutzer\Zsolt Soproni\AppData\Roaming\Mozilla\Firefox\Profiles\9wa0kfjp.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [3659 octets] - [12/01/2014 09:46:25]
AdwCleaner[R1].txt - [950 octets] - [12/01/2014 09:57:37]
AdwCleaner[R2].txt - [1069 octets] - [19/01/2014 08:34:26]
AdwCleaner[S0].txt - [3211 octets] - [12/01/2014 09:47:08]
AdwCleaner[S1].txt - [1010 octets] - [12/01/2014 09:59:53]
AdwCleaner[S2].txt - [992 octets] - [19/01/2014 08:41:47]

########## EOF - D:\AdwCleaner\AdwCleaner[S2].txt - [1051 octets] ##########

--- --- ---

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Professional x64
Ran by Zsolt Soproni on 19.01.2014 at 8:54:22,30
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

~~~ Files

~~~ Folders

~~~ FireFox

Emptied folder: D:\Benutzer\Zsolt Soproni\AppData\Roaming\mozilla\firefox\profiles\9wa0kfjp.default\minidumps [26 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19.01.2014 at 9:01:37,53
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Malwarebytes Anti-Malware (Test) 1.75.0.1300
Malwarebytes : Free Anti-Malware

Datenbank Version: v2014.01.19.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Zsolt Soproni :: CLEVO [limitiert]

Schutz: Aktiviert

19.01.2014 07:52:54
mbam-log-2014-01-19 (07-52-54).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 515995
Laufzeit: 34 Minute(n), 1 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 5
C:\Windows\Tasks\TubeSaver-15-chromeinstaller.job (PUP.Optional.TubeSaver.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\TubeSaver-15-codedownloader.job (PUP.Optional.TubeSaver.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\TubeSaver-15-enabler.job (PUP.Optional.TubeSaver.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\TubeSaver-15-firefoxinstaller.job (PUP.Optional.TubeSaver.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\TubeSaver-15-updater.job (PUP.Optional.TubeSaver.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Anbei die Logs! ;-)

schrauber · 19.01.2014, 11:33

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

19.01.2014, 11:16	#6
schrauber /// the machine /// TB-Ausbilder	TubeSaver 15, W7x64, Registry Einträge lassen sich nicht löschen Die Logs bitte __________________ --> TubeSaver 15, W7x64, Registry Einträge lassen sich nicht löschen

TubeSaver 15, W7x64, Registry Einträge lassen sich nicht löschen

Plagegeister aller Art und deren Bekämpfung: TubeSaver 15, W7x64, Registry Einträge lassen sich nicht löschen