um es abzukürzen ein Zitat von kikastrid. Spyhunter konnte ich entfernen mein Problem liegt das ich das Abo kündigen will, mich aber nicht registrieren kann da ich mit paypal anstatt Kreditkarte bezahlt habe und sie zum registrieren die letzten 4 Ziffern meiner Kreditkarte wollen. Kann mir da jemand weiterhelfen? Vielen Dank -Amberg

Zitat kikastrid:

Ich bin der dümmste Idiot, den es auf der Welt auch nur gibt. Nachdem ich die Datei wssetup.exe von meinem Computer entfernen wollte, bin ich auf die Software SpyHunter hereingefallen. Die versprachen eine Bereinigung meines Computers, der scheinbar total infiziert war, wenn ich mir die Software kaufe. Und ich Vollidiot gib da meine Kreditkartennummer ein. Darauf folgte eine Mail mit der Zahlungsbestätigung und dem Hinweis, dass ich ein Abo abgeschlossen hätte. Das kann man jederzeit kündigen, nur kann ich mich auf der dazugehörigen Website nicht einloggen. Und das Programm richtet ja scheinbar auch nur Schaden an...HILFE! Hat irgendwer eine Idee wie ich da wieder rauskomme?

Danke.
kikiastrid.

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

dditional scan result of Farbar Recovery Scan Tool (x64) Version: 27-01-2014
Ran by Udo at 2014-01-27 14:14:27
Running from C:\Users\Udo\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: FireWall (Enabled) {CE40CCC0-8ADB-6D67-25A0-C5B6438E4B57}

==================== Installed Programs ======================

Acer Docs (x32 Version: 1.01.3006 - Acer Incorporated)
Acer Media (x32 Version: 2.02.3104.3 - Acer Incorporated)
Acer Photo (x32 Version: 2.02.3104.6 - Acer Incorporated)
Acer Portal (x32 Version: 2.02.3104 - Acer Incorporated)
Acer Remote Files (Version: 1.00.3007 - Acer Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.15.100.30925 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.0925.645.10236 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Avira Internet Security (x32 Version: 14.0.2.286 - Avira)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0925.645.10236 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0925.645.10236 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0925.645.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0925.0644.10236 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0925.645.10236 - Advanced Micro Devices, Inc.) Hidden
CyberLink PowerDVD 12 (x32 Version: 12.0.3126.57 - CyberLink Corp.)
CyberLink PowerDVD 12 (x32 Version: 12.0.3126.57 - CyberLink Corp.) Hidden
Download Protect (HKCU Version: - Download Protect)
eBay Worldwide (x32 Version: 2.4.0105 - OEM)
ETDWare PS/2-X64 11.6.27.201_WHQL (Version: 11.6.27.201 - ELAN Microelectronic Corp.)
FileParade bundle uninstaller (x32 Version: 1.0.0.0 - FileParade)
Free CD Ripper V2.0 (x32 Version: 2.0.0.0 - Koyote Soft)
GMX Desktop Icons (x32 Version: 3.0.3.0 - 1&1 Mail & Media GmbH)
GMX MailCheck für Internet Explorer (x32 Version: 2.4.1.0 - 1&1 Mail & Media GmbH)
GMX Softwareaktualisierung (x32 Version: 3.0.0.55 - 1&1 Mail & Media GmbH)
Google Update Helper (x32 Version: 1.3.23.0 - SaveSense) Hidden <==== ATTENTION
Identity Card (x32 Version: 2.00.8100 - Packard Bell)
IePluginService12.27.0.3326 (x32 Version: 12.27.0.3326 - Cherished Technololgy LIMITED) <==== ATTENTION
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 24.2.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla)
Nero BackItUp (x32 Version: 12.5.11000 - Nero AG) Hidden
Nero BackItUp 12 Essentials OEM.a01 (x32 Version: 12.5.01200 - Nero AG)
Nero BackItUp Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.15900 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.20900 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
OEM Application Profile (x32 Version: 1.00.0000 - Ihr Firmenname)
Office Addin (x32 Version: 2.02.2009 - Acer)
Office Addin 2003 (x32 Version: 2.02.2009 - Acer)
Ominent toolbar (x32 Version: 1.8.26.12 - weDownload Ltd)
OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation)
Packard Bell Launch Manager (Version: 8.00.8101 - Packard Bell)
Packard Bell Power Management (Version: 7.00.8100 - Packard Bell)
Packard Bell Quick Access (Version: 1.00.3000 - Packard Bell)
Packard Bell Recovery Management (Version: 6.00.8100 - Packard Bell)
Plus-HD-3.8 (x32 Version: 1.33.153.1 - Plus HD) <==== ATTENTION
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.1.305 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (x32 Version: 12.07 - Qualcomm Atheros)
Realtek Card Reader (x32 Version: 6.2.9600.28145 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.7027 - Realtek Semiconductor Corp.)
RightSurf (Version: 2014.01.25.024532 - RightSurf) <==== ATTENTION
SaveSense (HKCU Version: 6.4.0.0 - SaveSense) <==== ATTENTION
Search Protect (x32 Version: 2.9.40.12 - Conduit) <==== ATTENTION
Spyware Terminator 2012 (x32 Version: 3.0.0.82 - Crawler.com)
SupTab (x32 Version: 1.1.1.0 - )
Updater (x32 Version: 2.6.53 - Creative Island Media, LLC)
VIS (x32 Version: - ) <==== ATTENTION
Visual Studio 2005 Tools for Office Second Edition Runtime (x32 Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (x32 Version: 1 - Microsoft Corporation)
Websteroids (x32 Version: 2.6.53 - Creative Island Media, LLC) <==== ATTENTION
WPM17.8.0.3325 (x32 Version: 17.8.0.3325 - Cherished Technololgy LIMITED) <==== ATTENTION

==================== Restore Points =========================

24-01-2014 10:25:00 Windows Modules Installer
25-01-2014 12:32:38 Removed OpenOffice 4.0.1

==================== Hosts content: ==========================

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {01B3AF28-A866-4AED-B804-D9B94EAFF932} - System32\Tasks\Plus-HD-3.8-enabler => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-enabler.exe [2014-01-24] (Plus HD) <==== ATTENTION
Task: {035792A1-D4EF-4A78-BF9A-AA9628C281A3} - System32\Tasks\Microsoft\Windows\Setup\SetupCleanupTask
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {3CDA38F4-8E52-4270-ACE4-CD6B7F4E5B43} - System32\Tasks\Launch Manager => C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMLauncher.exe [2013-08-03] (Acer Incorporate)
Task: {42D0687F-84E5-4CDE-BE43-CB97ECE9658C} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Packard Bell\Packard Bell Recovery Management\Notification\Notification.exe [2013-07-10] (Acer Incorporated)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {5150D4C9-E38A-452E-94DA-1BD773FB5732} - System32\Tasks\Quick Access => C:\Program Files\Packard Bell\Packard Bell Quick Access\QALauncher.exe [2013-08-02] (Acer Incorporate)
Task: {5B95B1A4-C183-4FDA-B766-AB10CFDBB0F1} - System32\Tasks\Plus-HD-3.8-updater => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-updater.exe [2014-01-24] (Plus HD) <==== ATTENTION
Task: {5CF8E662-7573-41CD-8BD5-B8A612F46F2A} - System32\Tasks\Power Management => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2013-07-05] (Acer Incorporated)
Task: {663C01A1-9888-497D-8856-3D373BDF62E2} - System32\Tasks\Plus-HD-3.8-codedownloader => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-codedownloader.exe [2014-01-24] (Plus HD) <==== ATTENTION
Task: {682CB14F-86E6-4864-80FE-E6CD86D27274} - System32\Tasks\Plus-HD-3.8-chromeinstaller => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-chromeinstaller.exe [2014-01-24] (Plus HD) <==== ATTENTION
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {8139AA86-7444-4A61-B853-5E5A007738DF} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [2013-07-26] (Acer Incorporated)
Task: {82C48F60-CBB4-4609-BF52-6E823FDC9D61} - System32\Tasks\SaveSenseLiveUpdateTaskMachineCore => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [2014-01-26] (SaveSense) <==== ATTENTION
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {91BFF720-E410-4398-95A2-179142E6DB4E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-25] (Adobe Systems Incorporated)
Task: {91DCFFA9-C804-41EF-9E99-3728BC2F5BD7} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION
Task: {9364D8B3-F729-41DB-9ED7-CC0E1B4C5A0A} - System32\Tasks\SaveSenseLiveUpdateTaskMachineUA => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [2014-01-26] (SaveSense) <==== ATTENTION
Task: {98058FCA-C74E-4414-B77F-DA07FAD11C6B} - System32\Tasks\SaveSense => C:\Users\Udo\AppData\Roaming\SaveSense\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A73F51C9-9F4F-48E0-9AB7-D24FF8D66AEF} - System32\Tasks\Plus-HD-3.8-firefoxinstaller => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-firefoxinstaller.exe [2014-01-24] (Plus HD) <==== ATTENTION
Task: {A8F97E93-04E7-4D1C-BC36-F56B8BBFA904} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-01-06] (Microsoft Corporation)
Task: {C3B280F9-2FFD-4F6B-BCD4-33BD5ECD738E} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {FDBEAC6A-0267-4AF5-A6BE-1DF2B4DDBE12} - System32\Tasks\Registration 1und1 Task => C:\Program Files (x86)\1und1Softwareaktualisierung\cdsupdclient.exe [2013-06-18] (1&1 Mail & Media GmbH)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Plus-HD-3.8-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-3.8-codedownloader.job => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-3.8-enabler.job => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-3.8-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-3.8-updater.job => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION
Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION
Task: C:\Windows\Tasks\SaveSense.job => C:\Users\Udo\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATTENTION
Task: C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2014-01-26 00:45 - 2014-01-26 00:46 - 00183808 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\ErrorReporting.dll
2013-09-07 01:48 - 2013-09-07 01:48 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-09-07 01:45 - 2013-09-07 01:45 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2014-01-24 12:07 - 2014-01-24 12:03 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-24 12:07 - 2014-01-24 12:02 - 00197632 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\pcre.dll
2014-01-24 12:07 - 2014-01-24 12:02 - 00447488 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\libxml2.dll
2014-01-24 12:07 - 2014-01-24 12:01 - 00059904 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\cares.dll
2014-01-25 10:26 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:AD022376
AlternateDataStreams: C:\Users\Udo\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Could not start eventlog service, could not read events.

Der angeforderte Dienst wurde bereits gestartet.

Sie erhalten weitere Hilfe, wenn Sie NET HELPMSG 2182 eingeben.


==================== Memory info ===========================

Percentage of memory in use: 49%
Total physical RAM: 3529.25 MB
Available physical RAM: 1774.64 MB
Total Pagefile: 7113.25 MB
Available Pagefile: 4785.61 MB
Total Virtual: 131072 MB
Available Virtual: 131071.78 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:913.7 GB) (Free:878.13 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 375D534E)

Partition: GPT Partition Type
==================== End Of Log ============================

Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-01-2014
Ran by Udo (administrator) on SCHOFSCHEISS-2 on 27-01-2014 14:12:17
Running from C:\Users\Udo\Downloads
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe
() C:\Windows\System32\NlsLexjcons0026.exe
() C:\Windows\System32\DlProtectSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMSvc.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
() C:\Program Files (x86)\RightSurf\updateRightSurf.exe
() C:\Program Files (x86)\RightSurf\bin\utilRightSurf.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMEvent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Quick Access\RMSvc.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMTray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Quick Access\QuickAccess.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Packard Bell) C:\Program Files\WindowsApps\AcerIncorporated.PackardBellExplorer_1.0.0.3014_neutral__48frkmn4z8aw4\PackardBellExplorer.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Updater) C:\ProgramData\Updater\updater.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\ProgramData\dlprotect.exe
(1und1 Mail und Media GmbH) C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck_Broker.exe
(WatchDog) C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe
(WatchDog) C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe
(WatchDog) C:\ProgramData\RHelpers\IeHelper\IeHelper.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Recovery Management\Notification\Notification.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-09-06] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-09-25] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2014-01-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Download Protect] - C:\ProgramData\dlprotect.exe [12800 2014-01-24] ()
HKLM-x32\...\Run: [MailCheck IE Broker] - C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck_Broker.exe [1731136 2013-12-10] (1und1 Mail und Media GmbH)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Run: [Updater] - C:\ProgramData\Updater\Updater.exe [486264 2013-12-18] (Updater)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))
HKCU\...\Run: [NextLive] - C:\Users\Udo\AppData\Roaming\newnext.me\nengine.dll [1283584 2014-01-06] (NewNextDotMe)
HKCU\...\Run: [Updater] - C:\ProgramData\Updater\updater.exe [486264 2013-12-18] (Updater)
HKU\Default\...\Run: [Pokki] - C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1344800 2014-01-01] (Conduit)
AppInit_DLLs-x32: c:\progra~2\searchprotect\searchprotect\bin\spvc32loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1037600 2014-01-01] (Conduit)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Sweet Page
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1390652679&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX31E73AUZD5AUZD5&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Sweet Page
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Mysearchdial Search
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1390652679&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX31E73AUZD5AUZD5&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1390652679&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX31E73AUZD5AUZD5&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = Sweet Page
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = Mysearchdial Search
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1390652679&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX31E73AUZD5AUZD5&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe Sweet Page
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2412} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=412&sr=0&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1390652679&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX31E73AUZD5AUZD5&q={searchTerms}
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL =
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2412} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=412&sr=0&q={searchTerms}
SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM - {E07BBD64-EFE3-4833-B77E-0E1BBF6226F5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=APJB
SearchScopes: HKLM-x32 - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2412} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=412&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1390652679&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX31E73AUZD5AUZD5&q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2412} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=412&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 - {E07BBD64-EFE3-4833-B77E-0E1BBF6226F5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=APJB
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0103aw&cd=2XzuyEtN2Y1L1QzuyCtDtDtB0ByEyEzy0DyDyByC0FtA0F0EtN0D0Tzu0SyByDyCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1Cz utBtAtDtC1N1R&cr=328300638&ir=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0103aw&cd=2XzuyEtN2Y1L1QzuyCtDtDtB0ByEyEzy0DyDyByC0FtA0F0EtN0D0Tzu0SyByDyCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1Cz utBtAtDtC1N1R&cr=328300638&ir=
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1390652679&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX31E73AUZD5AUZD5&q={searchTerms}
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3323737&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP3B8A0633-E150-4916-AE41-13DEEEFC75D9&q={searchTerms}&SSPV=
SearchScopes: HKCU - {83189651-2B7B-40A4-92A3-242EA3DF789B} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {85E81BD9-6B5D-45D3-B9AF-0A8010A29929} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {8ECA4943-0424-4B75-BB74-EB88AF3BB586} URL = hxxp://search.ominent.com/ws/?source=9f1d0980&tbp=rbox&toolbarid=base&u=ca6df3fe0000000000005202b449d576&q={searchTerms}
SearchScopes: HKCU - {9428C694-C5B6-4657-974C-A0FCFE79A58B} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2412} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=412&sr=0&q={searchTerms}
SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKCU - {D9960DA7-0064-489A-AC68-43B72FE6C1C0} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {E07BBD64-EFE3-4833-B77E-0E1BBF6226F5} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
BHO: Plus-HD-3.8 - {11111111-1111-1111-1111-110311901130} - C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-bho64.dll (Plus HD)
BHO: GMX MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
BHO-x32: Plus-HD-3.8 - {11111111-1111-1111-1111-110311901130} - C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-bho.dll (Plus HD)
BHO-x32: ominent Helper Object - {271FF4A7-3AA1-4DA8-B272-B10D2025C9D6} - C:\Program Files (x86)\weDownload Ltd\ominent\1.8.26.12\bh\ominent.dll (weDownload LTD)
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: Websteroids - {44ed99e2-16a6-4b89-80d6-5b21cf42e78b} - C:\ProgramData\Websteroids\IE\common.dll (Creative Island Media, LLC)
BHO-x32: SaveSense - {71e129ff-6c2a-4984-818c-7e2c998b8d99} - C:\Users\Udo\AppData\Local\SaveSense\SaveSenseIE.dll (SaveSense)
BHO-x32: RightSurf - {88be1aa9-6740-461c-9e3e-f35eb8fa741c} - C:\Program Files (x86)\RightSurf\RightSurfbho.dll (RightSurf)
BHO-x32: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\SEARCH~2\Datamngr\ToolBar\searchqudtx.dll No File
BHO-x32: GMX MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Toolbar: HKLM - GMX MailCheck - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Toolbar: HKLM-x32 - GMX MailCheck - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Toolbar: HKLM-x32 - Ominent Toolbar - {817F6EB1-1780-46C5-9225-6832A54AE708} - C:\Program Files (x86)\weDownload Ltd\ominent\1.8.26.12\ominentTlbr.dll (weDownload LTD)
Toolbar: HKLM-x32 - Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\SEARCH~2\Datamngr\ToolBar\searchqudtx.dll No File
Toolbar: HKCU - GMX MailCheck - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
DPF: HKLM-x32 {55A2C0CD-3DE8-4264-9637-A0B40B05714E} https://col0-sec.mail.live.com/mail/MailMigrationCabFileHolder.aspx?n=24362135
Handler: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Handler-x32: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default
FF user.js: detected! => C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\user.js
FF DefaultSearchEngine: Mysearchdial
FF SearchEngineOrder.1: Mysearchdial
FF SelectedSearchEngine: Mysearchdial
FF Homepage: hxxp://start.mysearchdial.com/?f=1&a=irmsd0103aw&cd=2XzuyEtN2Y1L1QzuyCtDtDtB0ByEyEzy0DyDyByC0FtA0F0EtN0D0Tzu0SyByDyCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=328300638& ir=
FF Keyword.URL: user_pref("keyword.URL", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=3 - C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense)
FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=9 - C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense)
FF SearchPlugin: C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\searchplugins\Mysearchdial.xml
FF SearchPlugin: C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\searchplugins\Search_Results.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\sweet-page.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Plus-HD-3.8 - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\Extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com [2014-01-25]
FF Extension: Websteroids - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\Extensions\support@websteroidsapp.com [2014-01-25]
FF Extension: GMX MailCheck - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\Extensions\toolbar@gmx.net [2014-01-25]
FF Extension: SaveSense - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\Extensions\{2d7886a0-85bb-4bf2-b684-ba92b4b21d23} [2014-01-26]
FF Extension: MySearchDial NewTab - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} [2014-01-26]
FF Extension: Extension_Protected - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\Extensions\jid0-O6MIff3eO5dIGf5Tcv8RsJDKxrs@jetpack.xpi [2014-01-25]
FF Extension: Lightning Speed Dial - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\Extensions\lightningnewtab@gmail.com.xpi [2014-01-25]
FF Extension: RightSurf - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\Extensions\{b9a19c25-a741-47e5-91a2-0b62bef307ff}.xpi [2014-01-25]
FF HKLM-x32\...\Firefox\Extensions: [lightningnewtab@gmail.com] - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\extensions\lightningnewtab@gmail.com.xpi
FF Extension: Lightning Speed Dial - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\extensions\lightningnewtab@gmail.com.xpi [2014-01-25]

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Plus-HD-3.8) - C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh [2014-01-26]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

U2 AntiVirFirewallService; C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [1012280 2014-01-24] (Avira Operations GmbH & Co. KG)
U2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [908856 2014-01-24] (Avira Operations GmbH & Co. KG)
U2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2014-01-24] (Avira Operations GmbH & Co. KG)
U2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2014-01-24] (Avira Operations GmbH & Co. KG)
U2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2014-01-24] (Avira Operations GmbH & Co. KG)
U2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
U2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2650696 2013-07-26] (Acer Incorporated)
U4 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2301216 2014-01-01] (Conduit)
U2 dfrgui64; C:\Windows\system32\NlsLexjcons0026.exe [118784 2014-01-24] ()
U2 DlProtectSvc; C:\Windows\System32\DlProtectSvc.exe [125440 2014-01-24] ()
U3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)
U2 ETDService; C:\Program Files\Elantech\ETDService.exe [101192 2013-09-06] (ELAN Microelectronics Corp.)
U2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [508016 2014-01-14] (Cherished Technololgy LIMITED)
U2 LMSvc; C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
U3 QASvc; C:\Program Files\Packard Bell\Packard Bell Quick Access\QASvc.exe [457768 2013-08-02] (Acer Incorporate)
U3 RMSvc; C:\Program Files\Packard Bell\Packard Bell Quick Access\RMSvc.exe [448040 2013-08-02] (Acer Incorporate)
U2 savesenselive; C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920 2014-01-26] (SaveSense)
U3 savesenselivem; C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920 2014-01-26] (SaveSense)
U2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)
U2 Update RightSurf; C:\Program Files (x86)\RightSurf\updateRightSurf.exe [102176 2014-01-25] ()
U2 Util RightSurf; C:\Program Files (x86)\RightSurf\bin\utilRightSurf.exe [102176 2014-01-26] ()
U3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
U3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
U2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [493568 2014-01-25] (Cherished Technololgy LIMITED)

==================== Drivers (Whitelisted) ====================

U0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
U3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
U3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [138240 2013-06-22] (Advanced Micro Devices)
U3 avfwim; C:\Windows\system32\DRIVERS\avfwim.sys [114608 2014-01-24] (Avira GmbH)
U1 avfwot; C:\Windows\system32\DRIVERS\avfwot.sys [141376 2014-01-24] (Avira GmbH)
U2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-01-24] (Avira Operations GmbH & Co. KG)
U1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2014-01-24] (Avira Operations GmbH & Co. KG)
U1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-01-24] (Avira Operations GmbH & Co. KG)
U2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [84720 2014-01-24] (Avira Operations GmbH & Co. KG)
U3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
U3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
U3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
U3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
U3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
U3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
U0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
U0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
U3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
U0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
U3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
U3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
U3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
U3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
U3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
U2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2014-01-26] (Windows (R) Win 7 DDK provider)
U0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
U3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
U3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
U3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-27 14:12 - 2014-01-27 14:12 - 00025726 _____ C:\Users\Udo\Downloads\FRST.txt
2014-01-27 14:12 - 2014-01-27 14:12 - 00000000 ____D C:\FRST
2014-01-27 14:09 - 2014-01-27 14:09 - 02078208 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2014-01-26 22:03 - 2014-01-27 11:37 - 00000000 ___RD C:\Windows\BrowserChoice
2014-01-26 13:42 - 2014-01-26 22:01 - 00000000 ____D C:\ProgramData\Spyware Terminator
2014-01-26 13:42 - 2014-01-26 13:42 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-01-26 13:42 - 2014-01-26 13:42 - 00001022 _____ C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-01-26 13:42 - 2014-01-26 13:42 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Spyware Terminator
2014-01-26 13:42 - 2014-01-26 13:42 - 00000000 ____D C:\Program Files (x86)\Spyware Terminator
2014-01-26 13:40 - 2014-01-26 13:40 - 05049344 _____ (Crawler.com ) C:\Users\Udo\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2014-01-26 13:30 - 2014-01-06 23:31 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-26 13:30 - 2014-01-06 23:31 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-26 13:24 - 2014-01-26 13:26 - 00000000 ____D C:\Windows\system32\MRT
2014-01-26 13:24 - 2014-01-06 16:20 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-26 13:00 - 2014-01-26 13:00 - 00000000 ____D C:\Users\Udo\Documents\Optimizer Pro
2014-01-26 12:59 - 2014-01-27 14:04 - 00000956 _____ C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job
2014-01-26 12:59 - 2014-01-27 13:52 - 00000952 _____ C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job
2014-01-26 12:59 - 2014-01-26 12:59 - 00003928 _____ C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineUA
2014-01-26 12:59 - 2014-01-26 12:59 - 00003692 _____ C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineCore
2014-01-26 12:58 - 2014-01-27 13:58 - 00000314 _____ C:\Windows\Tasks\SaveSense.job
2014-01-26 12:58 - 2014-01-26 13:04 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro
2014-01-26 12:58 - 2014-01-26 12:58 - 00002652 _____ C:\Windows\System32\Tasks\SaveSense
2014-01-26 12:58 - 2014-01-26 12:58 - 00000000 ____D C:\Users\Udo\AppData\Roaming\SaveSense
2014-01-26 12:58 - 2014-01-26 12:58 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense
2014-01-26 12:58 - 2014-01-26 12:58 - 00000000 ____D C:\Users\Udo\AppData\Local\SaveSenseLive
2014-01-26 12:58 - 2014-01-26 12:58 - 00000000 ____D C:\Users\Udo\AppData\Local\SaveSense
2014-01-26 12:58 - 2014-01-26 12:58 - 00000000 ____D C:\ProgramData\SaveSenseLive
2014-01-26 12:58 - 2014-01-26 12:58 - 00000000 ____D C:\Program Files (x86)\SaveSenseLive
2014-01-26 09:25 - 2014-01-26 12:36 - 00000000 ____D C:\Program Files (x86)\RightSurf
2014-01-26 09:25 - 2014-01-26 09:25 - 00000057 _____ C:\Users\Udo\AppData\Roaming\WB.CFG
2014-01-26 09:25 - 2014-01-26 09:25 - 00000000 ____D C:\Users\Udo\AppData\Local\Google
2014-01-26 09:24 - 2014-01-26 09:24 - 00608840 _____ C:\Users\Udo\Downloads\adblock-plus.xpi
2014-01-26 09:23 - 2014-01-26 09:23 - 00675736 _____ ( ) C:\Users\Udo\Downloads\adblock-plus.exe
2014-01-26 09:01 - 2013-09-26 07:51 - 00669184 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-01-26 09:01 - 2013-09-26 07:34 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\MrmIndexer.dll
2014-01-26 09:01 - 2013-09-26 07:34 - 00515072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmIndexer.dll
2014-01-26 08:59 - 2013-10-22 08:55 - 02328872 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-01-26 08:59 - 2013-10-08 11:13 - 02551640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-01-26 08:59 - 2013-10-07 03:13 - 03532288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-01-26 08:59 - 2013-10-04 09:10 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2014-01-26 08:58 - 2013-10-23 12:29 - 00044936 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll
2014-01-26 08:58 - 2013-10-23 12:21 - 00155480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-26 08:58 - 2013-10-23 12:13 - 00171864 _____ (Microsoft Corporation) C:\Windows\system32\kd_02_8086.dll
2014-01-26 08:58 - 2013-10-22 09:18 - 01287064 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-01-26 08:58 - 2013-10-22 07:03 - 02065448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-01-26 08:58 - 2013-10-22 06:15 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2014-01-26 08:58 - 2013-10-22 05:04 - 00618496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2014-01-26 08:58 - 2013-10-22 05:02 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-01-26 08:58 - 2013-10-22 04:56 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-01-26 08:58 - 2013-10-22 04:44 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-01-26 08:58 - 2013-10-22 03:38 - 01362944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-01-26 08:58 - 2013-10-22 03:22 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-01-26 08:58 - 2013-10-22 03:13 - 01704448 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-01-26 08:58 - 2013-10-22 03:07 - 02617344 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-01-26 08:58 - 2013-10-22 02:53 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-01-26 08:58 - 2013-10-22 02:47 - 02295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-01-26 08:58 - 2013-10-19 09:51 - 00481392 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2014-01-26 08:58 - 2013-10-19 08:12 - 00380656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2014-01-26 08:58 - 2013-10-19 05:48 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2014-01-26 08:58 - 2013-10-19 05:03 - 00531968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2014-01-26 08:58 - 2013-10-19 04:26 - 01231360 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-01-26 08:58 - 2013-10-19 04:14 - 00888832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-01-26 08:58 - 2013-10-17 16:42 - 01399176 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2014-01-26 08:58 - 2013-10-17 16:42 - 01373872 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-01-26 08:58 - 2013-10-17 15:04 - 01204968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2014-01-26 08:58 - 2013-10-16 10:34 - 00518656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2014-01-26 08:58 - 2013-10-16 10:33 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2014-01-26 08:58 - 2013-10-13 04:06 - 00258904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2014-01-26 08:58 - 2013-10-13 03:43 - 00708616 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2014-01-26 08:58 - 2013-10-10 17:44 - 00031064 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2014-01-26 08:58 - 2013-10-10 17:26 - 00317616 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-01-26 08:58 - 2013-10-10 17:26 - 00104320 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2014-01-26 08:58 - 2013-10-10 15:53 - 00235960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-01-26 08:58 - 2013-10-10 15:53 - 00088272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2014-01-26 08:58 - 2013-10-10 12:38 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-01-26 08:58 - 2013-10-09 06:40 - 00385528 _____ C:\Windows\system32\ApnDatabase.xml
2014-01-26 08:58 - 2013-10-08 11:28 - 00523096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2014-01-26 08:58 - 2013-10-08 07:46 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2014-01-26 08:58 - 2013-10-08 06:58 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll
2014-01-26 08:58 - 2013-10-08 06:50 - 00656384 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-01-26 08:58 - 2013-10-08 06:48 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-01-26 08:58 - 2013-10-08 06:15 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-01-26 08:58 - 2013-10-08 06:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2014-01-26 08:58 - 2013-10-08 05:50 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-01-26 08:58 - 2013-10-08 05:50 - 00762368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2014-01-26 08:58 - 2013-10-07 08:21 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-01-26 08:58 - 2013-10-05 16:25 - 00057176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2014-01-26 08:58 - 2013-10-05 15:21 - 00699840 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-01-26 08:58 - 2013-10-05 13:05 - 00578952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-01-26 08:58 - 2013-10-05 12:01 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-01-26 08:58 - 2013-10-05 12:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2014-01-26 08:58 - 2013-10-05 12:00 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-01-26 08:58 - 2013-10-05 10:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-01-26 08:58 - 2013-10-05 10:18 - 01011712 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-01-26 08:58 - 2013-10-05 10:07 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2014-01-26 08:58 - 2013-10-05 09:56 - 01147904 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2014-01-26 08:58 - 2013-10-05 09:55 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\miutils.dll
2014-01-26 08:58 - 2013-10-05 09:40 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-01-26 08:58 - 2013-10-05 09:24 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\miutils.dll
2014-01-26 08:58 - 2013-10-05 09:21 - 00920064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2014-01-26 08:58 - 2013-10-05 09:15 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2014-01-26 08:58 - 2013-10-05 08:43 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2014-01-26 08:58 - 2013-10-05 08:39 - 06639616 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-01-26 08:58 - 2013-10-05 08:35 - 00411648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2014-01-26 08:58 - 2013-10-05 08:32 - 05769728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-01-26 08:58 - 2013-09-19 06:04 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2014-01-26 08:58 - 2013-09-17 10:06 - 01067080 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2014-01-26 08:58 - 2013-09-17 10:06 - 00465960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-01-26 08:58 - 2013-09-17 07:31 - 00883184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2014-01-26 08:58 - 2013-09-17 07:31 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-01-26 08:58 - 2013-09-17 05:37 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2014-01-26 08:58 - 2013-09-14 15:07 - 02134120 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-01-26 08:58 - 2013-09-14 15:00 - 00391512 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2014-01-26 08:58 - 2013-09-14 13:39 - 01799944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2014-01-26 08:58 - 2013-09-14 13:33 - 00345552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2014-01-26 08:58 - 2013-09-14 11:05 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2014-01-26 08:58 - 2013-09-14 10:11 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2014-01-26 08:58 - 2013-09-13 09:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
2014-01-26 08:58 - 2013-09-13 08:47 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ftp.exe
2014-01-26 08:58 - 2013-09-12 09:45 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2014-01-26 08:58 - 2013-09-12 09:08 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2014-01-26 08:58 - 2013-09-12 09:08 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2014-01-26 08:58 - 2013-09-12 09:02 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2014-01-26 08:58 - 2013-09-12 08:44 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2014-01-26 08:58 - 2013-09-12 08:37 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2014-01-26 08:58 - 2013-09-12 08:37 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll
2014-01-26 08:58 - 2013-09-12 08:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2014-01-26 08:58 - 2013-09-12 08:16 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2014-01-26 08:58 - 2013-09-12 08:01 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
2014-01-26 08:58 - 2013-09-10 06:26 - 04599808 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-01-26 08:58 - 2013-09-10 05:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\msched.dll
2014-01-26 08:58 - 2013-09-10 05:34 - 03934208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-01-26 08:55 - 2013-11-05 21:21 - 21196664 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-01-26 08:55 - 2013-11-05 17:20 - 13925888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-01-26 08:55 - 2013-11-05 17:11 - 18577408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-01-26 08:55 - 2013-10-10 12:26 - 02801664 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-01-26 08:55 - 2013-10-10 12:05 - 01019392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-01-26 08:55 - 2013-10-10 11:34 - 01085952 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-01-26 08:55 - 2013-10-10 11:27 - 00869888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-01-26 08:54 - 2013-11-11 03:48 - 00039768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2014-01-26 08:54 - 2013-11-09 12:55 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2014-01-26 08:54 - 2013-11-09 07:37 - 01756160 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2014-01-26 08:54 - 2013-11-09 06:56 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2014-01-26 08:54 - 2013-11-08 11:26 - 00358896 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2014-01-26 08:54 - 2013-11-08 05:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2014-01-26 08:54 - 2013-11-08 05:28 - 13177344 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-01-26 08:54 - 2013-11-08 05:26 - 11674624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-01-26 08:54 - 2013-11-08 05:16 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2014-01-26 08:54 - 2013-11-08 05:15 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2014-01-26 08:54 - 2013-11-08 05:07 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2014-01-26 08:54 - 2013-11-08 04:41 - 01302528 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2014-01-26 08:54 - 2013-11-08 04:14 - 00922624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2014-01-26 08:54 - 2013-11-05 19:51 - 18642504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-01-26 08:54 - 2013-11-05 15:19 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2014-01-26 08:54 - 2013-11-05 15:03 - 00637952 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2014-01-26 08:54 - 2013-11-05 14:57 - 00479744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2014-01-26 08:54 - 2013-11-05 14:33 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2014-01-26 08:54 - 2013-11-05 14:32 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2014-01-26 08:54 - 2013-11-04 18:13 - 01530200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-01-26 08:54 - 2013-11-04 18:13 - 00382808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-01-26 08:54 - 2013-11-04 14:07 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2014-01-26 08:54 - 2013-11-04 12:50 - 02143744 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-01-26 08:54 - 2013-11-04 11:32 - 02570240 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-01-26 08:54 - 2013-11-04 03:28 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2014-01-26 08:54 - 2013-11-04 02:30 - 01765376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2014-01-26 08:54 - 2013-11-01 12:39 - 00086872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2014-01-26 08:54 - 2013-11-01 07:08 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll
2014-01-26 08:54 - 2013-11-01 06:57 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2014-01-26 08:54 - 2013-10-31 01:58 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-01-26 08:54 - 2013-10-31 01:42 - 07399256 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-01-26 08:54 - 2013-10-31 01:33 - 01642016 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-01-26 08:54 - 2013-10-31 01:33 - 01506680 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-01-26 08:54 - 2013-10-31 01:33 - 01476184 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-01-26 08:54 - 2013-10-31 01:33 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-01-26 08:54 - 2013-10-26 02:54 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SerCx2.sys
2014-01-26 08:54 - 2013-10-24 10:31 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll
2014-01-26 08:54 - 2013-10-24 10:12 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2014-01-26 08:54 - 2013-10-17 12:21 - 02896896 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2014-01-26 08:54 - 2013-10-17 11:36 - 02266624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2014-01-26 08:54 - 2013-10-11 14:24 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-01-26 08:54 - 2013-10-11 14:03 - 00621056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-01-26 08:54 - 2013-10-10 12:53 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2014-01-26 08:54 - 2013-10-10 12:21 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2014-01-26 08:54 - 2013-10-05 15:21 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-01-26 08:54 - 2013-10-05 15:21 - 00516496 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-01-26 08:54 - 2013-10-05 13:05 - 01765384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-01-26 08:54 - 2013-10-05 13:05 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-01-26 08:51 - 2013-09-21 05:48 - 07544320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-01-26 08:50 - 2013-09-25 11:25 - 00783504 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2014-01-26 08:50 - 2013-09-25 09:58 - 00648648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2014-01-26 08:50 - 2013-09-24 06:05 - 01245696 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2014-01-26 08:50 - 2013-09-21 12:18 - 01109936 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-01-26 08:50 - 2013-09-21 11:53 - 02131120 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-01-26 08:50 - 2013-09-21 11:53 - 01928656 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2014-01-26 08:50 - 2013-09-21 11:53 - 01534504 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2014-01-26 08:50 - 2013-09-21 11:51 - 01720552 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-01-26 08:50 - 2013-09-21 10:12 - 01370800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2014-01-26 08:50 - 2013-09-21 10:09 - 02142424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-01-26 08:50 - 2013-09-21 10:09 - 01472048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-01-26 08:50 - 2013-09-21 10:09 - 00796928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2014-01-26 08:50 - 2013-09-21 07:33 - 11366912 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2014-01-26 08:50 - 2013-09-21 07:06 - 01415168 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-01-26 08:50 - 2013-09-21 06:59 - 00940544 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-01-26 08:50 - 2013-09-21 06:56 - 08712704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2014-01-26 08:50 - 2013-09-21 06:34 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2014-01-26 08:50 - 2013-09-21 06:10 - 12028416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2014-01-26 08:50 - 2013-09-21 06:05 - 08875008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2014-01-26 08:50 - 2013-09-21 05:49 - 04975104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-01-26 08:50 - 2013-09-21 05:45 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-01-26 08:50 - 2013-09-21 05:44 - 01662464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2014-01-26 08:50 - 2013-09-21 05:42 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-01-26 08:50 - 2013-09-21 05:39 - 01455616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2014-01-26 08:50 - 2013-09-19 05:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2014-01-26 08:49 - 2013-09-26 10:20 - 00556032 _____ (Microsoft Corporation) C:\Windows\system32\recimg.exe
2014-01-26 08:49 - 2013-09-26 08:32 - 00638464 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2014-01-26 08:49 - 2013-09-26 08:14 - 00528896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2014-01-26 08:49 - 2013-09-25 08:32 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
2014-01-26 08:49 - 2013-09-25 06:40 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\windows.immersiveshell.serviceprovider.dll
2014-01-26 08:49 - 2013-09-24 06:59 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe
2014-01-26 08:49 - 2013-09-24 06:54 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2014-01-26 08:49 - 2013-09-24 06:10 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2014-01-26 08:49 - 2013-09-24 04:56 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.ContentPrefetchTask.dll
2014-01-26 08:49 - 2013-09-21 13:10 - 00579416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-01-26 08:49 - 2013-09-21 13:10 - 00236376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2014-01-26 08:49 - 2013-09-21 13:10 - 00151384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2014-01-26 08:49 - 2013-09-21 12:50 - 00528048 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2014-01-26 08:49 - 2013-09-21 12:48 - 00534048 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-01-26 08:49 - 2013-09-21 12:48 - 00123480 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-01-26 08:49 - 2013-09-21 12:04 - 00419160 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2014-01-26 08:49 - 2013-09-21 11:56 - 01119576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-01-26 08:49 - 2013-09-21 11:56 - 00101208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-01-26 08:49 - 2013-09-21 11:53 - 00996320 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2014-01-26 08:49 - 2013-09-21 11:53 - 00934856 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2014-01-26 08:49 - 2013-09-21 11:53 - 00366688 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2014-01-26 08:49 - 2013-09-21 11:53 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-01-26 08:49 - 2013-09-21 11:45 - 00171968 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-01-26 08:49 - 2013-09-21 10:23 - 00427096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-01-26 08:49 - 2013-09-21 10:23 - 00098104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-01-26 08:49 - 2013-09-21 10:12 - 01092896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2014-01-26 08:49 - 2013-09-21 10:09 - 00312936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2014-01-26 08:49 - 2013-09-21 08:58 - 00675328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-01-26 08:49 - 2013-09-21 08:57 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-01-26 08:49 - 2013-09-21 08:56 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-01-26 08:49 - 2013-09-21 08:55 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys
2014-01-26 08:49 - 2013-09-21 08:50 - 00240128 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2014-01-26 08:49 - 2013-09-21 08:17 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe
2014-01-26 08:49 - 2013-09-21 08:05 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-01-26 08:49 - 2013-09-21 07:55 - 00168448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2014-01-26 08:49 - 2013-09-21 07:27 - 00911872 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2014-01-26 08:49 - 2013-09-21 07:00 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2014-01-26 08:49 - 2013-09-21 06:57 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\livessp.dll
2014-01-26 08:49 - 2013-09-21 06:50 - 00767488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2014-01-26 08:49 - 2013-09-21 06:43 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2014-01-26 08:49 - 2013-09-21 06:38 - 00365568 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2014-01-26 08:49 - 2013-09-21 06:36 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2014-01-26 08:49 - 2013-09-21 06:31 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-01-26 08:49 - 2013-09-21 06:26 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2014-01-26 08:49 - 2013-09-21 06:20 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-01-26 08:49 - 2013-09-21 06:16 - 01503232 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-01-26 08:49 - 2013-09-21 06:09 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-01-26 08:49 - 2013-09-21 06:08 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-01-26 08:49 - 2013-09-21 06:02 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2014-01-26 08:49 - 2013-09-21 05:58 - 00803328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-01-26 08:49 - 2013-09-21 05:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2014-01-26 08:49 - 2013-09-21 05:38 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2014-01-26 08:49 - 2013-09-21 05:38 - 00102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
2014-01-26 08:49 - 2013-09-21 05:37 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2014-01-26 08:49 - 2013-09-21 05:36 - 01185280 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2014-01-26 08:49 - 2013-09-19 08:19 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersRes.dll
2014-01-26 08:49 - 2013-09-19 07:39 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.dll
2014-01-26 08:49 - 2013-09-19 07:27 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\WorkFolders.exe
2014-01-26 08:49 - 2013-09-19 07:23 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WorkFoldersRes.dll
2014-01-26 08:49 - 2013-09-19 07:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2014-01-26 08:49 - 2013-09-19 06:47 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.dll
2014-01-26 08:49 - 2013-09-19 06:29 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2014-01-26 08:49 - 2013-09-19 06:08 - 01150976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2014-01-26 08:49 - 2013-09-19 06:01 - 00401920 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
2014-01-26 08:49 - 2013-09-19 05:37 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2014-01-26 08:49 - 2013-09-19 05:32 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll
2014-01-26 08:49 - 2013-09-19 05:27 - 01730560 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll
2014-01-26 08:49 - 2013-09-19 05:25 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2014-01-26 08:49 - 2013-09-19 05:11 - 01344000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dui70.dll
2014-01-26 08:49 - 2013-09-19 05:10 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2014-01-26 08:49 - 2013-09-19 04:59 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2014-01-26 08:49 - 2013-09-19 04:55 - 00552448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2014-01-26 08:49 - 2013-09-19 04:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2014-01-26 08:49 - 2013-09-19 04:32 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2014-01-26 08:49 - 2013-09-17 10:18 - 00467800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-01-26 08:49 - 2013-09-17 07:58 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-01-26 08:49 - 2013-09-17 06:15 - 01225728 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2014-01-26 08:49 - 2013-09-17 06:00 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2014-01-26 08:49 - 2013-09-17 05:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2014-01-26 08:49 - 2013-09-17 05:08 - 00738304 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll
2014-01-26 08:49 - 2013-09-17 04:28 - 00695808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll
2014-01-26 08:49 - 2013-09-14 15:06 - 00175960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VerifierExt.sys
2014-01-26 08:49 - 2013-09-14 15:06 - 00066904 _____ (Microsoft Corporation) C:\Windows\system32\PSHED.DLL
2014-01-26 08:49 - 2013-09-14 12:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2014-01-26 08:49 - 2013-09-14 12:38 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipnat.sys
2014-01-26 08:49 - 2013-09-13 10:52 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\SensorsClassExtension.dll
2014-01-26 08:49 - 2013-09-13 09:54 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2014-01-26 08:49 - 2013-09-13 09:10 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll
2014-01-26 08:49 - 2013-09-13 08:55 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2014-01-26 08:49 - 2013-09-13 08:30 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2014-01-26 08:49 - 2013-09-12 13:33 - 06353952 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2014-01-26 08:49 - 2013-09-12 08:37 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2014-01-26 08:49 - 2013-09-11 10:32 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys
2014-01-26 08:49 - 2013-09-11 10:31 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-01-26 08:49 - 2013-09-11 10:31 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-01-26 08:49 - 2013-09-11 08:41 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2014-01-26 08:49 - 2013-09-11 08:09 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
2014-01-26 08:49 - 2013-09-07 17:12 - 00458616 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2014-01-26 08:49 - 2013-09-07 17:12 - 00407016 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2014-01-26 08:49 - 2013-09-07 15:45 - 00408480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2014-01-26 08:49 - 2013-09-07 15:45 - 00368736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2014-01-26 08:49 - 2013-09-07 13:44 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\fdprint.dll
2014-01-26 08:49 - 2013-09-07 13:29 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll
2014-01-26 08:49 - 2013-09-07 13:00 - 00256000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdprint.dll
2014-01-26 08:49 - 2013-09-07 12:50 - 00482816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceCenter.dll
2014-01-26 08:49 - 2013-09-07 12:45 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
2014-01-26 08:49 - 2013-09-07 12:30 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2014-01-26 08:49 - 2013-09-07 12:22 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CryptoWinRT.dll
2014-01-26 08:49 - 2013-09-07 12:13 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2014-01-26 08:49 - 2013-09-07 12:07 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\TetheringMgr.dll
2014-01-26 08:49 - 2013-09-07 11:51 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2014-01-26 08:49 - 2013-09-07 11:51 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2014-01-26 08:49 - 2013-09-05 08:39 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-01-26 08:49 - 2013-09-05 07:42 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\Utilman.exe
2014-01-26 08:49 - 2013-09-04 08:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll
2014-01-26 08:49 - 2013-09-04 07:16 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
2014-01-26 08:49 - 2013-09-04 06:47 - 00492032 _____ (Microsoft Corporation) C:\Windows\system32\tpmvsc.dll
2014-01-26 08:49 - 2013-09-04 06:12 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\DscCoreConfProv.dll
2014-01-26 08:49 - 2013-09-04 05:57 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
2014-01-26 08:49 - 2013-09-04 05:48 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2014-01-26 08:49 - 2013-09-04 05:35 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2014-01-26 08:49 - 2013-08-31 15:18 - 00205024 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll
2014-01-26 08:49 - 2013-08-31 13:15 - 00180232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2014-01-26 08:49 - 2013-08-30 08:31 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll
2014-01-26 08:49 - 2013-08-28 08:55 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2014-01-26 08:49 - 2013-08-28 08:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe
2014-01-26 08:49 - 2013-08-28 08:09 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\rdsdwmdr.dll
2014-01-26 08:49 - 2013-08-27 08:44 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BtaMPM.sys
2014-01-26 08:49 - 2013-08-27 07:09 - 00970752 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2014-01-26 08:49 - 2013-08-27 06:24 - 00813568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
2014-01-26 08:48 - 2013-09-26 09:24 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-01-26 08:48 - 2013-09-24 07:55 - 00284160 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
2014-01-26 08:48 - 2013-09-21 07:01 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll
2014-01-26 08:48 - 2013-09-21 06:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-01-26 08:48 - 2013-09-17 06:26 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-01-26 08:48 - 2013-09-05 06:40 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Utilman.exe
2014-01-26 08:48 - 2013-08-31 11:00 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2014-01-26 08:48 - 2013-08-31 10:25 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2014-01-26 08:48 - 2013-08-28 09:03 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-01-26 08:48 - 2013-08-28 08:04 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2014-01-26 08:42 - 2013-10-03 10:16 - 00294400 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2014-01-26 08:42 - 2013-10-03 10:02 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2014-01-26 08:42 - 2013-10-02 12:00 - 01286552 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2014-01-26 08:42 - 2013-10-02 10:47 - 01018960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2014-01-26 08:42 - 2013-10-01 04:42 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2014-01-26 08:42 - 2013-10-01 04:36 - 00977408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2014-01-26 08:41 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2014-01-26 08:41 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe
2014-01-26 08:41 - 2013-11-27 11:34 - 00138240 _____ C:\Windows\system32\OEMLicense.dll
2014-01-26 08:41 - 2013-11-27 10:54 - 00103936 _____ C:\Windows\SysWOW64\OEMLicense.dll
2014-01-26 08:41 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-26 08:41 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2014-01-26 08:41 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-26 08:41 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2014-01-26 08:41 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-01-26 08:41 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-01-26 08:41 - 2013-11-23 05:34 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-01-26 08:41 - 2013-11-23 05:13 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-01-26 08:41 - 2013-11-23 04:32 - 04105728 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-01-26 08:41 - 2013-11-23 04:10 - 00568832 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-01-26 08:41 - 2013-10-23 12:01 - 00872840 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-01-26 08:41 - 2013-10-23 09:59 - 00698232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-01-26 08:41 - 2013-10-19 09:53 - 00075360 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-01-26 08:41 - 2013-10-19 08:14 - 00070680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-01-26 08:41 - 2013-10-13 03:48 - 00136536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2014-01-26 08:41 - 2013-10-12 22:48 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-01-26 08:41 - 2013-10-12 22:34 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-01-26 08:41 - 2013-10-05 15:21 - 01341288 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-01-26 08:41 - 2013-10-05 09:39 - 01067008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-01-26 08:35 - 2014-01-26 09:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2014-01-26 08:32 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-26 08:32 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-01-26 08:32 - 2013-10-15 09:54 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-01-26 08:32 - 2013-10-15 09:03 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-01-26 08:31 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-26 08:31 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-26 08:31 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-01-26 08:31 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-26 08:31 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-01-26 08:31 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-26 08:31 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-26 08:31 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-01-26 08:31 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-01-26 08:31 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-26 08:31 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-26 08:31 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-26 08:31 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-01-26 08:31 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-01-26 08:31 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-01-26 08:31 - 2013-10-19 06:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-01-26 08:29 - 2013-11-08 08:21 - 04191744 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-26 08:29 - 2013-10-16 16:58 - 01943536 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-01-26 08:29 - 2013-10-16 14:54 - 01581968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-01-26 08:28 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2014-01-26 08:27 - 2013-11-09 07:34 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-01-26 08:27 - 2013-11-09 07:34 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2014-01-26 08:27 - 2013-11-09 06:52 - 00240128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2014-01-26 08:24 - 2014-01-26 08:24 - 00000000 ____D C:\Users\Udo\AppData\Local\MediaShow
2014-01-26 08:22 - 2014-01-26 08:23 - 00000000 ____D C:\Users\Udo\Documents\CyberLink
2014-01-26 08:22 - 2014-01-26 08:22 - 00000000 ____D C:\Users\Udo\AppData\Roaming\CyberLink
2014-01-26 08:22 - 2014-01-26 08:22 - 00000000 ____D C:\Users\Udo\AppData\Local\CyberLink
2014-01-26 08:19 - 2014-01-26 08:19 - 00816320 _____ C:\Windows\Minidump\012614-37703-01.dmp
2014-01-26 01:33 - 2014-01-26 01:33 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WildTangent
2014-01-25 14:32 - 2014-01-26 21:31 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-25 14:32 - 2014-01-25 14:32 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-25 14:32 - 2014-01-25 14:32 - 00000000 ____D C:\Users\Udo\AppData\Local\Macromedia
2014-01-25 14:32 - 2014-01-25 14:32 - 00000000 ____D C:\ProgramData\McAfee
2014-01-25 14:31 - 2014-01-25 14:32 - 00000000 ____D C:\Users\Udo\AppData\Local\Adobe
2014-01-25 14:01 - 2014-01-25 14:01 - 00001132 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-01-25 14:01 - 2014-01-25 14:01 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2014-01-25 13:58 - 2014-01-25 13:58 - 00624120 _____ ( ) C:\Users\Udo\Downloads\Open-Office.exe
2014-01-25 13:51 - 2014-01-25 13:55 - 163606685 _____ C:\Users\Udo\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de(1).exe
2014-01-25 13:48 - 2014-01-25 13:51 - 163606685 _____ C:\Users\Udo\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-25 13:42 - 2014-01-25 13:42 - 00606080 _____ C:\Users\Udo\Downloads\openoffice setup.exe
2014-01-25 13:36 - 2014-01-25 13:37 - 00000000 ____D C:\Users\Udo\AppData\Roaming\FreeCDRipper
2014-01-25 13:36 - 2014-01-25 13:36 - 00001093 _____ C:\Users\Udo\Desktop\Free CD Ripper.lnk
2014-01-25 13:29 - 2014-01-25 13:29 - 00000000 ____D C:\Users\Udo\Documents\PC Speed Maximizer
2014-01-25 13:27 - 2014-01-25 13:36 - 00000000 ____D C:\Program Files (x86)\Free CD Ripper
2014-01-25 13:25 - 2014-01-25 13:26 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-25 13:25 - 2014-01-25 13:26 - 00000000 ____D C:\Program Files (x86)\SupTab
2014-01-25 13:25 - 2014-01-25 13:25 - 00000000 ____D C:\ProgramData\WPM
2014-01-25 13:17 - 2014-01-25 13:17 - 00675736 _____ ( ) C:\Users\Udo\Downloads\free-cd-ripper.exe
2014-01-25 13:04 - 2014-01-25 13:04 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-01-25 13:01 - 2014-01-26 08:19 - 629508090 _____ C:\Windows\MEMORY.DMP
2014-01-25 13:01 - 2014-01-26 08:19 - 00000000 ____D C:\Windows\Minidump
2014-01-25 13:01 - 2014-01-25 13:01 - 00816288 _____ C:\Windows\Minidump\012514-27109-01.dmp
2014-01-25 10:27 - 2014-01-26 09:19 - 00001131 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-25 10:27 - 2014-01-25 10:27 - 00000000 ____D C:\Users\Udo\AppData\Local\Mozilla
2014-01-25 10:04 - 2014-01-26 09:18 - 24260744 _____ (Mozilla) C:\Users\Udo\Downloads\GMX_Firefox_Setup.exe
2014-01-25 09:57 - 2014-01-25 09:57 - 24039048 _____ (Mozilla) C:\Users\Udo\Downloads\Firefox_Setup.exe
2014-01-25 09:50 - 2014-01-25 09:50 - 00000000 ____D C:\Users\Udo\Documents\clear.fi
2014-01-25 09:50 - 2014-01-25 09:50 - 00000000 ____D C:\Users\Public\OEM
2014-01-25 01:50 - 2014-01-26 09:38 - 00000000 ___RD C:\Users\Udo\Desktop\Fotos
2014-01-25 01:47 - 2014-01-25 13:11 - 00000000 ___RD C:\Users\Udo\Desktop\Udo
2014-01-25 00:38 - 2014-01-25 00:38 - 00000000 _____ C:\autoexec.bat
2014-01-25 00:37 - 2014-01-26 13:07 - 00000000 ____D C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-01-25 00:37 - 2014-01-25 00:37 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-24 18:04 - 2014-01-25 15:01 - 00000302 _____ C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2014-01-24 18:04 - 2014-01-25 01:25 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2014-01-24 18:04 - 2014-01-25 00:11 - 00000310 _____ C:\Windows\Tasks\RegClean Pro_UPDATES.job
2014-01-24 18:04 - 2014-01-24 18:04 - 00003040 _____ C:\Windows\System32\Tasks\RegClean Pro_UPDATES
2014-01-24 18:04 - 2014-01-24 18:04 - 00002884 _____ C:\Windows\System32\Tasks\RegClean Pro_DEFAULT
2014-01-24 18:04 - 2014-01-24 18:04 - 00000000 ____D C:\Users\Udo\AppData\Roaming\systweak
2014-01-24 18:04 - 2014-01-21 17:28 - 00020312 _____ (Systweak Inc., (Systweak - Download Software utilities for Windows optimization, Scan & Clean Spyware for Free)) C:\Windows\system32\roboot64.exe
2014-01-24 17:50 - 2014-01-26 09:17 - 00000000 ____D C:\Users\Udo\AppData\Local\CrashDumps
2014-01-24 14:56 - 2014-01-24 14:56 - 00000000 ____D C:\ProgramData\Websteroids
2014-01-24 14:56 - 2014-01-24 14:56 - 00000000 ____D C:\ProgramData\Updater
2014-01-24 14:56 - 2014-01-24 14:56 - 00000000 ____D C:\ProgramData\RHelpers
2014-01-24 14:11 - 2014-01-24 14:11 - 00000000 ____D C:\Users\Udo\AppData\Roaming\OpenOffice
2014-01-24 14:06 - 2014-01-27 13:55 - 00000000 ____D C:\Users\Udo\AppData\Roaming\newnext.me
2014-01-24 14:06 - 2014-01-24 14:14 - 00000000 ____D C:\Users\Udo\AppData\Local\Mobogenie
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\Documents\Mobogenie
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\AppData\Local\genienext
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\AppData\Local\cache
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\.android
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 _____ C:\Users\Udo\daemonprocess.txt
2014-01-24 14:05 - 2014-01-26 09:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-24 14:05 - 2014-01-24 14:08 - 143485940 _____ C:\Users\Udo\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_enUS.exe
2014-01-24 14:05 - 2014-01-24 14:05 - 00000000 ____D C:\Program Files (x86)\weDownload Ltd
2014-01-24 13:54 - 2014-01-24 13:54 - 00003880 _____ C:\Windows\System32\Tasks\Registration 1und1 Task
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\ProgramData\UUdb
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\ProgramData\1&1 Mail & Media GmbH
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\Program Files\GMX MailCheck
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\Program Files (x86)\GMX MailCheck
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\Program Files (x86)\1und1Softwareaktualisierung
2014-01-24 13:53 - 2014-01-25 13:24 - 00002158 _____ C:\Users\Udo\Desktop\Amazon.lnk
2014-01-24 13:53 - 2014-01-25 13:24 - 00002154 _____ C:\Users\Udo\Desktop\eBay.lnk
2014-01-24 13:53 - 2014-01-25 13:24 - 00002152 _____ C:\Users\Udo\Desktop\GMX.lnk
2014-01-24 13:53 - 2014-01-24 13:53 - 00000000 ____D C:\ProgramData\DesktopIcons
2014-01-24 13:14 - 2014-01-26 12:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-24 13:14 - 2014-01-25 01:42 - 00000000 ____D C:\Users\Udo\AppData\Local\Thunderbird
2014-01-24 13:14 - 2014-01-24 14:56 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2014-01-24 13:14 - 2014-01-24 13:14 - 00002110 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-01-24 13:14 - 2014-01-24 13:14 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Thunderbird
2014-01-24 13:14 - 2014-01-24 13:14 - 00000000 ____D C:\ProgramData\Mozilla
2014-01-24 13:13 - 2014-01-27 13:52 - 00002152 _____ C:\Windows\Tasks\Plus-HD-3.8-firefoxinstaller.job
2014-01-24 13:13 - 2014-01-27 13:52 - 00002024 _____ C:\Windows\Tasks\Plus-HD-3.8-chromeinstaller.job
2014-01-24 13:13 - 2014-01-27 13:52 - 00001354 _____ C:\Windows\Tasks\Plus-HD-3.8-updater.job
2014-01-24 13:13 - 2014-01-27 13:52 - 00001306 _____ C:\Windows\Tasks\Plus-HD-3.8-codedownloader.job
2014-01-24 13:13 - 2014-01-27 13:52 - 00001178 _____ C:\Windows\Tasks\Plus-HD-3.8-enabler.job
2014-01-24 13:13 - 2014-01-24 13:13 - 00125440 _____ C:\Windows\system32\DlProtectSvc.exe
2014-01-24 13:13 - 2014-01-24 13:13 - 00118784 _____ C:\Windows\system32\NlsLexjcons0026.exe
2014-01-24 13:13 - 2014-01-24 13:13 - 00012800 _____ C:\ProgramData\dlprotect.exe
2014-01-24 13:13 - 2014-01-24 13:13 - 00004358 _____ C:\Windows\System32\Tasks\Plus-HD-3.8-updater
2014-01-24 13:13 - 2014-01-24 13:13 - 00004310 _____ C:\Windows\System32\Tasks\Plus-HD-3.8-codedownloader
2014-01-24 13:13 - 2014-01-24 13:13 - 00004182 _____ C:\Windows\System32\Tasks\Plus-HD-3.8-enabler
2014-01-24 13:13 - 2014-01-24 13:13 - 00000000 ____D C:\Program Files (x86)\Plus-HD-3.8
2014-01-24 13:12 - 2014-01-24 13:12 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Windows Net Data
2014-01-24 13:11 - 2014-01-24 13:12 - 00000000 ____D C:\Users\Udo\AppData\Local\SearchProtect
2014-01-24 13:11 - 2014-01-24 13:12 - 00000000 ____D C:\Program Files (x86)\SearchProtect
2014-01-24 13:11 - 2014-01-24 13:11 - 00000000 ____D C:\Users\Udo\AppData\Local\DownloadGuide
2014-01-24 13:11 - 2014-01-24 13:11 - 00000000 _____ C:\END
2014-01-24 12:33 - 2014-01-24 12:33 - 00000000 ____D C:\Users\Udo\AppData\Local\Acer Aspire R7 Tutorial
2014-01-24 12:09 - 2014-01-24 12:09 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Avira
2014-01-24 12:07 - 2014-01-24 12:07 - 00002094 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-24 12:07 - 2014-01-24 12:07 - 00000000 ____D C:\ProgramData\Avira
2014-01-24 12:07 - 2014-01-24 12:07 - 00000000 ____D C:\Program Files (x86)\Avira
2014-01-24 12:07 - 2014-01-24 12:03 - 00141376 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys
2014-01-24 12:07 - 2014-01-24 12:03 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-24 12:07 - 2014-01-24 12:03 - 00114608 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys
2014-01-24 12:07 - 2014-01-24 12:03 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-24 12:07 - 2014-01-24 12:03 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-24 12:07 - 2014-01-24 12:03 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-24 11:44 - 2014-01-27 13:59 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4256228738-1010575952-893814640-1001
2014-01-24 11:43 - 2014-01-24 11:43 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Macromedia
2014-01-24 11:42 - 2014-01-24 11:42 - 00000000 ____D C:\Users\Public\Pokki
2014-01-24 11:40 - 2014-01-27 13:55 - 00000000 __RDO C:\Users\Udo\SkyDrive
2014-01-24 11:39 - 2014-01-25 09:51 - 00000000 ____D C:\Users\Udo\AppData\Local\clear.fi
2014-01-24 11:39 - 2014-01-24 11:39 - 00001284 _____ C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk
2014-01-24 11:39 - 2014-01-24 11:39 - 00000000 ____D C:\Users\Udo\PicStream
2014-01-24 11:39 - 2014-01-24 11:39 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Atheros
2014-01-24 11:38 - 2014-01-27 11:36 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-24 11:38 - 2014-01-27 11:36 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-24 11:38 - 2014-01-24 11:38 - 00002625 _____ C:\Users\Public\Desktop\eBay.lnk
2014-01-24 11:38 - 2014-01-24 11:38 - 00000000 ____D C:\ProgramData\OEM_YAHOO
2014-01-24 11:38 - 2014-01-24 11:38 - 00000000 ____D C:\Program Files (x86)\OEM
2014-01-24 11:37 - 2014-01-27 11:37 - 00000000 ____D C:\Users\Udo\AppData\Local\Packages
2014-01-24 11:37 - 2014-01-25 13:24 - 00001682 _____ C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-24 11:37 - 2014-01-24 11:37 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Adobe
2014-01-24 11:37 - 2014-01-24 11:37 - 00000000 ____D C:\Users\Udo\AppData\Local\VirtualStore
2014-01-24 11:35 - 2014-01-27 13:52 - 00000000 ____D C:\Users\Udo
2014-01-24 11:35 - 2014-01-24 11:35 - 00000020 ___SH C:\Users\Udo\ntuser.ini
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Vorlagen
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Startmenü
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Netzwerkumgebung
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Lokale Einstellungen
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Eigene Dateien
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Druckumgebung
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Documents\Eigene Musik
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Documents\Eigene Bilder
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\AppData\Local\Verlauf
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\AppData\Local\Anwendungsdaten
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Anwendungsdaten
2014-01-24 11:35 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-01-24 11:35 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-24 11:35 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-01-24 11:35 - 2013-08-22 16:36 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

2014-01-27 14:12 - 2014-01-27 14:12 - 00025726 _____ C:\Users\Udo\Downloads\FRST.txt
2014-01-27 14:12 - 2014-01-27 14:12 - 00000000 ____D C:\FRST
2014-01-27 14:09 - 2014-01-27 14:09 - 02078208 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2014-01-27 14:06 - 2013-11-27 21:20 - 02020427 _____ C:\Windows\WindowsUpdate.log
2014-01-27 14:04 - 2014-01-26 12:59 - 00000956 _____ C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job
2014-01-27 14:00 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\sru
2014-01-27 13:59 - 2014-01-24 11:44 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4256228738-1010575952-893814640-1001
2014-01-27 13:59 - 2013-11-28 06:12 - 00765582 _____ C:\Windows\system32\perfh007.dat
2014-01-27 13:59 - 2013-11-28 06:12 - 00159366 _____ C:\Windows\system32\perfc007.dat
2014-01-27 13:59 - 2013-09-06 05:58 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-27 13:58 - 2014-01-26 12:58 - 00000314 _____ C:\Windows\Tasks\SaveSense.job
2014-01-27 13:55 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\AppData\Roaming\newnext.me
2014-01-27 13:55 - 2014-01-24 11:40 - 00000000 __RDO C:\Users\Udo\SkyDrive
2014-01-27 13:53 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness
2014-01-27 13:52 - 2014-01-26 12:59 - 00000952 _____ C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job
2014-01-27 13:52 - 2014-01-24 13:13 - 00002152 _____ C:\Windows\Tasks\Plus-HD-3.8-firefoxinstaller.job
2014-01-27 13:52 - 2014-01-24 13:13 - 00002024 _____ C:\Windows\Tasks\Plus-HD-3.8-chromeinstaller.job
2014-01-27 13:52 - 2014-01-24 13:13 - 00001354 _____ C:\Windows\Tasks\Plus-HD-3.8-updater.job
2014-01-27 13:52 - 2014-01-24 13:13 - 00001306 _____ C:\Windows\Tasks\Plus-HD-3.8-codedownloader.job
2014-01-27 13:52 - 2014-01-24 13:13 - 00001178 _____ C:\Windows\Tasks\Plus-HD-3.8-enabler.job
2014-01-27 13:52 - 2014-01-24 11:35 - 00000000 ____D C:\Users\Udo
2014-01-27 13:52 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-27 11:37 - 2014-01-26 22:03 - 00000000 ___RD C:\Windows\BrowserChoice
2014-01-27 11:37 - 2014-01-24 11:37 - 00000000 ____D C:\Users\Udo\AppData\Local\Packages
2014-01-27 11:36 - 2014-01-24 11:38 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-27 11:36 - 2014-01-24 11:38 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-26 22:04 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2014-01-26 22:03 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ToastData
2014-01-26 22:03 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\WinStore
2014-01-26 22:02 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\migwiz
2014-01-26 22:02 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2014-01-26 22:02 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\MediaViewer
2014-01-26 22:02 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\FileManager
2014-01-26 22:02 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\Camera
2014-01-26 22:01 - 2014-01-26 13:42 - 00000000 ____D C:\ProgramData\Spyware Terminator
2014-01-26 21:31 - 2014-01-25 14:32 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-26 21:13 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2014-01-26 13:42 - 2014-01-26 13:42 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-01-26 13:42 - 2014-01-26 13:42 - 00001022 _____ C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-01-26 13:42 - 2014-01-26 13:42 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Spyware Terminator
2014-01-26 13:42 - 2014-01-26 13:42 - 00000000 ____D C:\Program Files (x86)\Spyware Terminator
2014-01-26 13:40 - 2014-01-26 13:40 - 05049344 _____ (Crawler.com ) C:\Users\Udo\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2014-01-26 13:28 - 2013-08-22 15:44 - 00360464 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-26 13:26 - 2014-01-26 13:24 - 00000000 ____D C:\Windows\system32\MRT
2014-01-26 13:26 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2014-01-26 13:26 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Defender
2014-01-26 13:26 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2014-01-26 13:26 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\SysWOW64\Dism
2014-01-26 13:26 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\system32\oobe
2014-01-26 13:26 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\system32\Dism
2014-01-26 13:07 - 2014-01-25 00:37 - 00000000 ____D C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-01-26 13:04 - 2014-01-26 12:58 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro
2014-01-26 13:00 - 2014-01-26 13:00 - 00000000 ____D C:\Users\Udo\Documents\Optimizer Pro
2014-01-26 12:59 - 2014-01-26 12:59 - 00003928 _____ C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineUA
2014-01-26 12:59 - 2014-01-26 12:59 - 00003692 _____ C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineCore
2014-01-26 12:58 - 2014-01-26 12:58 - 00002652 _____ C:\Windows\System32\Tasks\SaveSense
2014-01-26 12:58 - 2014-01-26 12:58 - 00000000 ____D C:\Users\Udo\AppData\Roaming\SaveSense
2014-01-26 12:58 - 2014-01-26 12:58 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense
2014-01-26 12:58 - 2014-01-26 12:58 - 00000000 ____D C:\Users\Udo\AppData\Local\SaveSenseLive
2014-01-26 12:58 - 2014-01-26 12:58 - 00000000 ____D C:\Users\Udo\AppData\Local\SaveSense
2014-01-26 12:58 - 2014-01-26 12:58 - 00000000 ____D C:\ProgramData\SaveSenseLive
2014-01-26 12:58 - 2014-01-26 12:58 - 00000000 ____D C:\Program Files (x86)\SaveSenseLive
2014-01-26 12:36 - 2014-01-26 09:25 - 00000000 ____D C:\Program Files (x86)\RightSurf
2014-01-26 12:35 - 2014-01-24 13:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-26 12:35 - 2013-09-06 05:51 - 00933018 _____ C:\Windows\PFRO.log
2014-01-26 10:20 - 2013-11-27 21:26 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2014-01-26 09:50 - 2014-01-26 08:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2014-01-26 09:38 - 2014-01-25 01:50 - 00000000 ___RD C:\Users\Udo\Desktop\Fotos
2014-01-26 09:35 - 2013-08-22 15:46 - 00019372 _____ C:\Windows\setupact.log
2014-01-26 09:25 - 2014-01-26 09:25 - 00000057 _____ C:\Users\Udo\AppData\Roaming\WB.CFG
2014-01-26 09:25 - 2014-01-26 09:25 - 00000000 ____D C:\Users\Udo\AppData\Local\Google
2014-01-26 09:24 - 2014-01-26 09:24 - 00608840 _____ C:\Users\Udo\Downloads\adblock-plus.xpi
2014-01-26 09:23 - 2014-01-26 09:23 - 00675736 _____ ( ) C:\Users\Udo\Downloads\adblock-plus.exe
2014-01-26 09:19 - 2014-01-25 10:27 - 00001131 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-26 09:19 - 2014-01-24 14:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-26 09:18 - 2014-01-25 10:04 - 24260744 _____ (Mozilla) C:\Users\Udo\Downloads\GMX_Firefox_Setup.exe
2014-01-26 09:17 - 2014-01-24 17:50 - 00000000 ____D C:\Users\Udo\AppData\Local\CrashDumps
2014-01-26 08:26 - 2013-11-27 22:11 - 00000000 ____D C:\Users\Public\CyberLink
2014-01-26 08:24 - 2014-01-26 08:24 - 00000000 ____D C:\Users\Udo\AppData\Local\MediaShow
2014-01-26 08:23 - 2014-01-26 08:22 - 00000000 ____D C:\Users\Udo\Documents\CyberLink
2014-01-26 08:23 - 2013-11-27 22:11 - 00000000 ____D C:\ProgramData\CyberLink
2014-01-26 08:22 - 2014-01-26 08:22 - 00000000 ____D C:\Users\Udo\AppData\Roaming\CyberLink
2014-01-26 08:22 - 2014-01-26 08:22 - 00000000 ____D C:\Users\Udo\AppData\Local\CyberLink
2014-01-26 08:19 - 2014-01-26 08:19 - 00816320 _____ C:\Windows\Minidump\012614-37703-01.dmp
2014-01-26 08:19 - 2014-01-25 13:01 - 629508090 _____ C:\Windows\MEMORY.DMP
2014-01-26 08:19 - 2014-01-25 13:01 - 00000000 ____D C:\Windows\Minidump
2014-01-26 01:33 - 2014-01-26 01:33 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WildTangent
2014-01-26 01:33 - 2013-09-06 06:00 - 00000000 ____D C:\ProgramData\WildTangent
2014-01-26 01:33 - 2013-09-06 06:00 - 00000000 ____D C:\Program Files (x86)\WildTangent Games
2014-01-26 01:11 - 2013-09-06 06:08 - 00000000 ____D C:\ProgramData\Packard Bell
2014-01-26 01:11 - 2013-09-06 06:08 - 00000000 ____D C:\Program Files (x86)\Packard Bell
2014-01-25 15:01 - 2014-01-24 18:04 - 00000302 _____ C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2014-01-25 14:32 - 2014-01-25 14:32 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-25 14:32 - 2014-01-25 14:32 - 00000000 ____D C:\Users\Udo\AppData\Local\Macromedia
2014-01-25 14:32 - 2014-01-25 14:32 - 00000000 ____D C:\ProgramData\McAfee
2014-01-25 14:32 - 2014-01-25 14:31 - 00000000 ____D C:\Users\Udo\AppData\Local\Adobe
2014-01-25 14:01 - 2014-01-25 14:01 - 00001132 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-01-25 14:01 - 2014-01-25 14:01 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2014-01-25 13:58 - 2014-01-25 13:58 - 00624120 _____ ( ) C:\Users\Udo\Downloads\Open-Office.exe
2014-01-25 13:55 - 2014-01-25 13:51 - 163606685 _____ C:\Users\Udo\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de(1).exe
2014-01-25 13:51 - 2014-01-25 13:48 - 163606685 _____ C:\Users\Udo\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-25 13:42 - 2014-01-25 13:42 - 00606080 _____ C:\Users\Udo\Downloads\openoffice setup.exe
2014-01-25 13:37 - 2014-01-25 13:36 - 00000000 ____D C:\Users\Udo\AppData\Roaming\FreeCDRipper
2014-01-25 13:36 - 2014-01-25 13:36 - 00001093 _____ C:\Users\Udo\Desktop\Free CD Ripper.lnk
2014-01-25 13:36 - 2014-01-25 13:27 - 00000000 ____D C:\Program Files (x86)\Free CD Ripper
2014-01-25 13:36 - 2013-11-27 22:09 - 00000000 ____D C:\ProgramData\boost_interprocess
2014-01-25 13:29 - 2014-01-25 13:29 - 00000000 ____D C:\Users\Udo\Documents\PC Speed Maximizer
2014-01-25 13:26 - 2014-01-25 13:25 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-25 13:26 - 2014-01-25 13:25 - 00000000 ____D C:\Program Files (x86)\SupTab
2014-01-25 13:25 - 2014-01-25 13:25 - 00000000 ____D C:\ProgramData\WPM
2014-01-25 13:24 - 2014-01-24 13:53 - 00002158 _____ C:\Users\Udo\Desktop\Amazon.lnk
2014-01-25 13:24 - 2014-01-24 13:53 - 00002154 _____ C:\Users\Udo\Desktop\eBay.lnk
2014-01-25 13:24 - 2014-01-24 13:53 - 00002152 _____ C:\Users\Udo\Desktop\GMX.lnk
2014-01-25 13:24 - 2014-01-24 11:37 - 00001682 _____ C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-25 13:17 - 2014-01-25 13:17 - 00675736 _____ ( ) C:\Users\Udo\Downloads\free-cd-ripper.exe
2014-01-25 13:11 - 2014-01-25 01:47 - 00000000 ___RD C:\Users\Udo\Desktop\Udo
2014-01-25 13:04 - 2014-01-25 13:04 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-01-25 13:01 - 2014-01-25 13:01 - 00816288 _____ C:\Windows\Minidump\012514-27109-01.dmp
2014-01-25 10:27 - 2014-01-25 10:27 - 00000000 ____D C:\Users\Udo\AppData\Local\Mozilla
2014-01-25 09:57 - 2014-01-25 09:57 - 24039048 _____ (Mozilla) C:\Users\Udo\Downloads\Firefox_Setup.exe
2014-01-25 09:51 - 2014-01-24 11:39 - 00000000 ____D C:\Users\Udo\AppData\Local\clear.fi
2014-01-25 09:50 - 2014-01-25 09:50 - 00000000 ____D C:\Users\Udo\Documents\clear.fi
2014-01-25 09:50 - 2014-01-25 09:50 - 00000000 ____D C:\Users\Public\OEM
2014-01-25 01:42 - 2014-01-24 13:14 - 00000000 ____D C:\Users\Udo\AppData\Local\Thunderbird
2014-01-25 01:25 - 2014-01-24 18:04 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2014-01-25 00:38 - 2014-01-25 00:38 - 00000000 _____ C:\autoexec.bat
2014-01-25 00:37 - 2014-01-25 00:37 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-25 00:11 - 2014-01-24 18:04 - 00000310 _____ C:\Windows\Tasks\RegClean Pro_UPDATES.job
2014-01-24 18:04 - 2014-01-24 18:04 - 00003040 _____ C:\Windows\System32\Tasks\RegClean Pro_UPDATES
2014-01-24 18:04 - 2014-01-24 18:04 - 00002884 _____ C:\Windows\System32\Tasks\RegClean Pro_DEFAULT
2014-01-24 18:04 - 2014-01-24 18:04 - 00000000 ____D C:\Users\Udo\AppData\Roaming\systweak
2014-01-24 14:56 - 2014-01-24 14:56 - 00000000 ____D C:\ProgramData\Websteroids
2014-01-24 14:56 - 2014-01-24 14:56 - 00000000 ____D C:\ProgramData\Updater
2014-01-24 14:56 - 2014-01-24 14:56 - 00000000 ____D C:\ProgramData\RHelpers
2014-01-24 14:56 - 2014-01-24 13:14 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2014-01-24 14:14 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\AppData\Local\Mobogenie
2014-01-24 14:11 - 2014-01-24 14:11 - 00000000 ____D C:\Users\Udo\AppData\Roaming\OpenOffice
2014-01-24 14:08 - 2014-01-24 14:05 - 143485940 _____ C:\Users\Udo\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_enUS.exe
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\Documents\Mobogenie
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\AppData\Local\genienext
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\AppData\Local\cache
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\.android
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 _____ C:\Users\Udo\daemonprocess.txt
2014-01-24 14:05 - 2014-01-24 14:05 - 00000000 ____D C:\Program Files (x86)\weDownload Ltd
2014-01-24 13:54 - 2014-01-24 13:54 - 00003880 _____ C:\Windows\System32\Tasks\Registration 1und1 Task
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\ProgramData\UUdb
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\ProgramData\1&1 Mail & Media GmbH
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\Program Files\GMX MailCheck
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\Program Files (x86)\GMX MailCheck
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\Program Files (x86)\1und1Softwareaktualisierung
2014-01-24 13:53 - 2014-01-24 13:53 - 00000000 ____D C:\ProgramData\DesktopIcons
2014-01-24 13:14 - 2014-01-24 13:14 - 00002110 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-01-24 13:14 - 2014-01-24 13:14 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Thunderbird
2014-01-24 13:14 - 2014-01-24 13:14 - 00000000 ____D C:\ProgramData\Mozilla
2014-01-24 13:13 - 2014-01-24 13:13 - 00125440 _____ C:\Windows\system32\DlProtectSvc.exe
2014-01-24 13:13 - 2014-01-24 13:13 - 00118784 _____ C:\Windows\system32\NlsLexjcons0026.exe
2014-01-24 13:13 - 2014-01-24 13:13 - 00012800 _____ C:\ProgramData\dlprotect.exe
2014-01-24 13:13 - 2014-01-24 13:13 - 00004358 _____ C:\Windows\System32\Tasks\Plus-HD-3.8-updater
2014-01-24 13:13 - 2014-01-24 13:13 - 00004310 _____ C:\Windows\System32\Tasks\Plus-HD-3.8-codedownloader
2014-01-24 13:13 - 2014-01-24 13:13 - 00004182 _____ C:\Windows\System32\Tasks\Plus-HD-3.8-enabler
2014-01-24 13:13 - 2014-01-24 13:13 - 00000000 ____D C:\Program Files (x86)\Plus-HD-3.8
2014-01-24 13:12 - 2014-01-24 13:12 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Windows Net Data
2014-01-24 13:12 - 2014-01-24 13:11 - 00000000 ____D C:\Users\Udo\AppData\Local\SearchProtect
2014-01-24 13:12 - 2014-01-24 13:11 - 00000000 ____D C:\Program Files (x86)\SearchProtect
2014-01-24 13:11 - 2014-01-24 13:11 - 00000000 ____D C:\Users\Udo\AppData\Local\DownloadGuide
2014-01-24 13:11 - 2014-01-24 13:11 - 00000000 _____ C:\END
2014-01-24 12:33 - 2014-01-24 12:33 - 00000000 ____D C:\Users\Udo\AppData\Local\Acer Aspire R7 Tutorial
2014-01-24 12:20 - 2013-09-06 06:11 - 00000000 ____D C:\ProgramData\Norton
2014-01-24 12:19 - 2013-08-22 16:36 - 00000000 ___HD C:\Windows\ELAMBKUP
2014-01-24 12:19 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2014-01-24 12:09 - 2014-01-24 12:09 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Avira
2014-01-24 12:07 - 2014-01-24 12:07 - 00002094 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-24 12:07 - 2014-01-24 12:07 - 00000000 ____D C:\ProgramData\Avira
2014-01-24 12:07 - 2014-01-24 12:07 - 00000000 ____D C:\Program Files (x86)\Avira
2014-01-24 12:03 - 2014-01-24 12:07 - 00141376 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys
2014-01-24 12:03 - 2014-01-24 12:07 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-24 12:03 - 2014-01-24 12:07 - 00114608 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys
2014-01-24 12:03 - 2014-01-24 12:07 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-24 12:03 - 2014-01-24 12:07 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-24 12:03 - 2014-01-24 12:07 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-24 11:43 - 2014-01-24 11:43 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Macromedia
2014-01-24 11:42 - 2014-01-24 11:42 - 00000000 ____D C:\Users\Public\Pokki
2014-01-24 11:39 - 2014-01-24 11:39 - 00001284 _____ C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk
2014-01-24 11:39 - 2014-01-24 11:39 - 00000000 ____D C:\Users\Udo\PicStream
2014-01-24 11:39 - 2014-01-24 11:39 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Atheros
2014-01-24 11:38 - 2014-01-24 11:38 - 00002625 _____ C:\Users\Public\Desktop\eBay.lnk
2014-01-24 11:38 - 2014-01-24 11:38 - 00000000 ____D C:\ProgramData\OEM_YAHOO
2014-01-24 11:38 - 2014-01-24 11:38 - 00000000 ____D C:\Program Files (x86)\OEM
2014-01-24 11:38 - 2013-09-06 06:50 - 00000000 ____D C:\Windows\Panther
2014-01-24 11:38 - 2013-09-06 06:39 - 00000000 ___HD C:\OEM
2014-01-24 11:37 - 2014-01-24 11:37 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Adobe
2014-01-24 11:37 - 2014-01-24 11:37 - 00000000 ____D C:\Users\Udo\AppData\Local\VirtualStore
2014-01-24 11:35 - 2014-01-24 11:35 - 00000020 ___SH C:\Users\Udo\ntuser.ini
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Vorlagen
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Startmenü
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Netzwerkumgebung
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Lokale Einstellungen
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Eigene Dateien
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Druckumgebung
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Documents\Eigene Musik
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Documents\Eigene Bilder
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\AppData\Local\Verlauf
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\AppData\Local\Anwendungsdaten
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Anwendungsdaten
2014-01-21 17:28 - 2014-01-24 18:04 - 00020312 _____ (Systweak Inc., (Systweak - Download Software utilities for Windows optimization, Scan & Clean Spyware for Free)) C:\Windows\system32\roboot64.exe
2014-01-06 23:31 - 2014-01-26 13:30 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-06 23:31 - 2014-01-26 13:30 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-06 16:20 - 2014-01-26 13:24 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Files to move or delete:
====================
C:\ProgramData\dlprotect.exe


Some content of TEMP:
====================
C:\Users\Udo\AppData\Local\Temp\1381919518_ominent_1.8.26.12.exe
C:\Users\Udo\AppData\Local\Temp\89106uninstall.exe
C:\Users\Udo\AppData\Local\Temp\avgnt.exe
C:\Users\Udo\AppData\Local\Temp\COMAP.EXE
C:\Users\Udo\AppData\Local\Temp\ICReinstall_Firefox_Setup.exe
C:\Users\Udo\AppData\Local\Temp\installhelper.dll
C:\Users\Udo\AppData\Local\Temp\Mobogenie_Setup_2.1.37_122100041.exe
C:\Users\Udo\AppData\Local\Temp\nsg3920.exe
C:\Users\Udo\AppData\Local\Temp\nsh6D70.exe
C:\Users\Udo\AppData\Local\Temp\nsr6F1B.exe
C:\Users\Udo\AppData\Local\Temp\nsy7F49.exe
C:\Users\Udo\AppData\Local\Temp\octD16A.tmp.exe
C:\Users\Udo\AppData\Local\Temp\SetupDataMngr_Searchqu.exe
C:\Users\Udo\AppData\Local\Temp\setup{16175276-3F20-483F-BD7B-4958AFA5ACBB}.exe
C:\Users\Udo\AppData\Local\Temp\SHSetup.exe
C:\Users\Udo\AppData\Local\Temp\Sqlite3.dll
C:\Users\Udo\AppData\Local\Temp\SRAssetsHelper.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-06 05:51

==================== End Of Log ============================

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hallo Schrauber,

erst einmal vielen Dank das Du Dir soviel Mühe gibst. Mein Problem bestand aber darin ob jemand weiß wie ich die Zahlung für spyhunter rückgängig machen konnte und aus dem Abo rauskomme.
Tatsächlich hat sich paypal darum gekümmert und ich habe mein Geld wieder. Jetzt warte ich noch ein paar Tage ob noch etwas in der Hinsicht kommt und dann gibt es 10% dieses Betrages als Spende.
Mein einziges Problem sind gerade die nervigen Werbebanner die ich nicht wegbekommen.

Nochmals vielen Dank und bis demnächst,
U. Amberg

Mein einziges Problem sind gerade die nervigen Werbebanner die ich nicht wegbekommen.

Dann mach mal meine obige Anleitung

Zitat von schrauber

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

JRT Logfile:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 8.1 x64
Ran by Udo on 30.01.2014 at  9:39:37,88
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] cltmngsvc 
Failed to delete: [Service] cltmngsvc 
Successfully stopped: [Service] savesenselive 
Failed to delete: [Service] savesenselive 
Successfully stopped: [Service] savesenselivem 
Failed to delete: [Service] savesenselivem 



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
Failed to delete: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{99079a25-328f-4bd4-be04-00955acaa0a7}
Failed to delete: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{99079a25-328f-4bd4-be04-00955acaa0a7}
Failed to delete: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{99079a25-328f-4bd4-be04-00955acaa0a7}
Failed to delete: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{99079a25-328f-4bd4-be04-00955acaa0a7}
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\AboutURLs\\Tabs
Suspicious HKCU\..\Run entries found. Trojan:JS/Medfos.B?

    Value Name          Type                             Value Data                     
========================================================================================
    NextLive    REG_SZ    C:\Windows\SysWOW64\rundll32.exe "C:\Users\Udo\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l




~~~ Registry Keys

Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\dynconie.dynconieobject
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\dynconie.dynconieobject.1
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\escort.escortiepane
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\escort.escortiepane.1
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{998745A3-2AE4-488D-8092-B98FB20A00C2}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A18D16ED-27B2-4B83-B70C-15E73F099546}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{C1424421-D274-491E-9D47-11C8D8CB5F9A}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Interface\{2830488C-079B-45C2-88B6-AFE4EAA2DF85}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{781CA792-9B6E-400B-B36F-15C097D2CA54}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{998745A3-2AE4-488D-8092-B98FB20A00C2}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{A18D16ED-27B2-4B83-B70C-15E73F099546}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{C1424421-D274-491E-9D47-11C8D8CB5F9A}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{2830488C-079B-45C2-88B6-AFE4EAA2DF85}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{781CA792-9B6E-400B-B36F-15C097D2CA54}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\im
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installcore
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\dynconie
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\plus-hd-3.8
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\searchqutoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\dealplylive
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\searchprotect
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\systweak
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\escort.escortiepane
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\escort.escortiepane.1
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{998745A3-2AE4-488D-8092-B98FB20A00C2}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{A18D16ED-27B2-4B83-B70C-15E73F099546}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{C1424421-D274-491E-9D47-11C8D8CB5F9A}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{2830488C-079B-45C2-88B6-AFE4EAA2DF85}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{781CA792-9B6E-400B-B36F-15C097D2CA54}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{998745A3-2AE4-488D-8092-B98FB20A00C2}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{A18D16ED-27B2-4B83-B70C-15E73F099546}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{C1424421-D274-491E-9D47-11C8D8CB5F9A}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{2830488C-079B-45C2-88B6-AFE4EAA2DF85}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{781CA792-9B6E-400B-B36F-15C097D2CA54}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\searchprotect
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\searchprotect
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\systweak
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0039030.BHO
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0039030.BHO.1
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0039030.Sandbox
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0039030.Sandbox.1
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110311901130}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220322902230}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550355905530}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660366906630}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440344904430}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311901130}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322902230}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550355905530}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660366906630}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440344904430}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0039030.BHO
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0039030.BHO.1
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0039030.Sandbox
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0039030.Sandbox.1
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550355905530}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660366906630}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440344904430}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110311901130}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311901130}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550355905530}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660366906630}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440344904430}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311901130}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2412}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2412}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311901130}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110311901130}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{71e129ff-6c2a-4984-818c-7e2c998b8d99}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{71e129ff-6c2a-4984-818c-7e2c998b8d99}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2412}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2412}



~~~ Files

Failed to delete: [File] C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job
Failed to delete: [File] C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job
Failed to delete: [File] C:\Windows\Tasks\Plus-HD-3.8-chromeinstaller.job
Failed to delete: [File] C:\Windows\Tasks\Plus-HD-3.8-codedownloader.job
Failed to delete: [File] C:\Windows\Tasks\Plus-HD-3.8-enabler.job
Failed to delete: [File] C:\Windows\Tasks\Plus-HD-3.8-firefoxinstaller.job
Failed to delete: [File] C:\Windows\Tasks\Plus-HD-3.8-updater.job
Failed to delete: [File] "C:\end"
Successfully deleted: [File] "C:\Users\Udo\AppData\Local\Temp\searchqu.ini"
Successfully deleted: [File] "C:\Users\Udo\AppData\Local\Temp\searchqutoolbar-manifest.xml"
Successfully deleted: [File] "C:\Users\Udo\AppData\Local\Temp\setupdatamngr_searchqu.exe"



~~~ Folders

Failed to delete: [Folder] "C:\ProgramData\boost_interprocess"
Failed to delete: [Folder] "C:\ProgramData\savesenselive"
Successfully deleted: [Folder] "C:\Users\Udo\AppData\Roaming\savesense"
Successfully deleted: [Folder] "C:\Users\Udo\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\Udo\appdata\local\downloadguide"
Successfully deleted: [Folder] "C:\Users\Udo\appdata\local\savesense"
Successfully deleted: [Folder] "C:\Users\Udo\appdata\local\savesenselive"
Successfully deleted: [Folder] "C:\Users\Udo\appdata\local\searchprotect"
Successfully deleted: [Folder] "C:\Users\Udo\appdata\locallow\datamngr"
Successfully deleted: [Folder] "C:\Users\Udo\appdata\locallow\searchquband"
Successfully deleted: [Folder] "C:\Users\Udo\appdata\locallow\wedownload ltd"
Failed to delete: [Folder] "C:\Program Files (x86)\pc speed maximizer"
Failed to delete: [Folder] "C:\Program Files (x86)\plus-hd-3.8"
Failed to delete: [Folder] "C:\Program Files (x86)\regclean pro"
Failed to delete: [Folder] "C:\Program Files (x86)\savesenselive"
Failed to delete: [Folder] "C:\Program Files (x86)\searchprotect"
Failed to delete: [Folder] "C:\Program Files (x86)\sweetpacks bundle uninstaller"
Failed to delete: [Folder] "C:\Program Files (x86)\wedownload ltd"
Successfully deleted: [Folder] "C:\Users\Udo\documents\optimizer pro"



~~~ FireFox

Failed to delete: [File] "C:\Program Files (x86)\Mozilla Firefox\searchplugins\search_results.xml"
Failed to delete: [File] "C:\Program Files (x86)\Mozilla Firefox\searchplugins\search_results.xml"
Successfully deleted: [File] C:\Users\Udo\AppData\Roaming\mozilla\firefox\profiles\6aa1v2u8.default\user.js
Successfully deleted: [File] C:\Users\Udo\AppData\Roaming\mozilla\firefox\profiles\6aa1v2u8.default\searchplugins\mysearchdial.xml
Successfully deleted: [File] C:\Users\Udo\AppData\Roaming\mozilla\firefox\profiles\6aa1v2u8.default\searchplugins\search_results.xml
Successfully deleted: [Folder] C:\Users\Udo\AppData\Roaming\mozilla\firefox\profiles\6aa1v2u8.default\extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com
Successfully deleted: [Folder] C:\Users\Udo\AppData\Roaming\mozilla\firefox\profiles\6aa1v2u8.default\extensions\toolbar@gmx.net
Successfully deleted: [Folder] C:\Users\Udo\AppData\Roaming\mozilla\firefox\profiles\6aa1v2u8.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}
Successfully deleted the following from C:\Users\Udo\AppData\Roaming\mozilla\firefox\profiles\6aa1v2u8.default\prefs.js

user_pref("browser.search.defaultenginename", "Mysearchdial");
user_pref("browser.search.order.1", "Mysearchdial");
user_pref("browser.search.selectedEngine", "Mysearchdial");
user_pref("browser.startup.homepage", "hxxp://start.mysearchdial.com/?f=1&a=irmsd0103aw&cd=2XzuyEtN2Y1L1QzuyCtDtDtB0ByEyEzy0DyDyByC0FtA0F0EtN0D0Tzu0SyByDyCtN1L2XzutBtFtBtFtCyD
user_pref("extensions.crossrider.bic", "143c95497cb38018ec6e09cb75975130");
user_pref("extensions.mysearchdial.AL", 2);
user_pref("extensions.mysearchdial.aflt", "irmsd0103aw");
user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzuyCtDtDtB0ByEyEzy0DyDyByC0FtA0F0EtN0D0Tzu0SyByDyCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R");
user_pref("extensions.mysearchdial.cntry", "DE");
user_pref("extensions.mysearchdial.cr", "328300638");
user_pref("extensions.mysearchdial.dfltLng", "");
user_pref("extensions.mysearchdial.dfltSrch", true);
user_pref("extensions.mysearchdial.dnsErr", true);
user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,3046281807,752626116,1657571787,32
user_pref("extensions.mysearchdial.excTlbr", false);
user_pref("extensions.mysearchdial.hdrMd5", "CC062F56342CD855DA62EC2180EACC1A");
user_pref("extensions.mysearchdial.hmpg", true);
user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=irmsd0103aw&cd=2XzuyEtN2Y1L1QzuyCtDtDtB0ByEyEzy0DyDyByC0FtA0F0EtN0D0Tzu0SyByDyCtN1L2XzutBtFt
user_pref("extensions.mysearchdial.id", "6002B449D576F3FE");
user_pref("extensions.mysearchdial.instlDay", "16096");
user_pref("extensions.mysearchdial.instlRef", "");
user_pref("extensions.mysearchdial.lastB", "hxxp://start.mysearchdial.com/?f=1&a=irmsd0103aw&cd=2XzuyEtN2Y1L1QzuyCtDtDtB0ByEyEzy0DyDyByC0FtA0F0EtN0D0Tzu0SyByDyCtN1L2XzutBtFtBt
user_pref("extensions.mysearchdial.lastVrsnTs", "1.8.21.09:24:45");
user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=irmsd0103aw&cd=2XzuyEtN2Y1L1QzuyCtDtDtB0ByEyEzy0DyDyByC0FtA0F0EtN0D0Tzu0SyByDyCtN1L2XzutBt
user_pref("extensions.mysearchdial.pnu_base", "{\"newVrsn\":\"90\",\"lastVrsn\":\"90\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"false\",\"msgTs\":0,\"lstMsgTs\
user_pref("extensions.mysearchdial.prdct", "mysearchdial");
user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
user_pref("extensions.mysearchdial.sg", "none");
user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
user_pref("extensions.mysearchdial.tlbrId", "base");
user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=irmsd0103aw&cd=2XzuyEtN2Y1L1QzuyCtDtDtB0ByEyEzy0DyDyByC0FtA0F0EtN0D0Tzu0SyByDyCtN1L2Xzut
user_pref("extensions.mysearchdial.vrsn", "1.8.21.0");
user_pref("extensions.mysearchdial.vrsni", "1.8.21.0");
user_pref("extensions.mysearchdial_i.hmpg", true);
user_pref("extensions.mysearchdial_i.newTab", false);
user_pref("extensions.mysearchdial_i.smplGrp", "none");
user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.09:24:45");
Emptied folder: C:\Users\Udo\AppData\Roaming\mozilla\firefox\profiles\6aa1v2u8.default\minidumps [4 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30.01.2014 at  9:59:53,28
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

--- --- ---


Malwarebytes Anti-Malware (Test) 1.75.0.1300
Malwarebytes : Free Anti-Malware

Datenbank Version: v2014.01.30.02

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16476
Udo :: SCHOFSCHEISS-2 [Administrator]

Schutz: Aktiviert

30.01.2014 10:49:15
mbam-log-2014-01-30 (10-49-15).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 206768
Laufzeit: 8 Minute(n), 51 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

und weiter

Sorry, das mit # funktioniert nicht, da kommt kein . Oder meinst Du einen speziellen Editor?
Nochmals sorry für´s nerven
UA


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-01-2014
Ran by Udo (administrator) on SCHOFSCHEISS-2 on 31-01-2014 11:43:09
Running from C:\Users\Udo\Downloads
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe
() C:\Windows\System32\NlsLexjcons0026.exe
() C:\Windows\System32\DlProtectSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Quick Access\RMSvc.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Quick Access\QuickAccess.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMTray.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\ProgramData\dlprotect.exe
(1und1 Mail und Media GmbH) C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck_Broker.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-09-06] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-09-25] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2014-01-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Download Protect] - C:\ProgramData\dlprotect.exe [12800 2014-01-24] ()
HKLM-x32\...\Run: [MailCheck IE Broker] - C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck_Broker.exe [1731136 2013-12-10] (1und1 Mail und Media GmbH)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20473504 2013-10-02] (Skype Technologies S.A.)
MountPoints2: {0b779113-57a1-11e3-8250-806e6f6e6963} - "D:\setup.exe" 
HKU\Default\...\Run: [Pokki] - C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1390652679&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX31E73AUZD5AUZD5&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1390652679&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX31E73AUZD5AUZD5
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=irmsd0103aw&cd=2XzuyEtN2Y1L1QzuyCtDtDtB0ByEyEzy0DyDyByC0FtA0F0EtN0D0Tzu0SyByDyCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=328300638&ir=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1390652679&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX31E73AUZD5AUZD5&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1390652679&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX31E73AUZD5AUZD5&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2412} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=412&sr=0&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1390652679&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX31E73AUZD5AUZD5&q={searchTerms}
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2412} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=412&sr=0&q={searchTerms}
SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM - {E07BBD64-EFE3-4833-B77E-0E1BBF6226F5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=APJB
SearchScopes: HKLM-x32 - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2412} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=412&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2412} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=412&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 - {E07BBD64-EFE3-4833-B77E-0E1BBF6226F5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=APJB
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKCU - {83189651-2B7B-40A4-92A3-242EA3DF789B} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {85E81BD9-6B5D-45D3-B9AF-0A8010A29929} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {8ECA4943-0424-4B75-BB74-EB88AF3BB586} URL = hxxp://search.ominent.com/ws/?source=9f1d0980&tbp=rbox&toolbarid=base&u=ca6df3fe0000000000005202b449d576&q={searchTerms}
SearchScopes: HKCU - {9428C694-C5B6-4657-974C-A0FCFE79A58B} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKCU - {D9960DA7-0064-489A-AC68-43B72FE6C1C0} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {E07BBD64-EFE3-4833-B77E-0E1BBF6226F5} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
BHO: Plus-HD-3.8 - {11111111-1111-1111-1111-110311901130} - C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-bho64.dll No File
BHO: GMX MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: SaveSense - {71e129ff-6c2a-4984-818c-7e2c998b8d99} - C:\Users\Udo\AppData\Local\SaveSense\SaveSenseIE.dll No File
BHO-x32: GMX MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Toolbar: HKLM - GMX MailCheck - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Toolbar: HKLM-x32 - GMX MailCheck - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Toolbar: HKCU - GMX MailCheck - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
DPF: HKLM-x32 {55A2C0CD-3DE8-4264-9637-A0B40B05714E} https://col0-sec.mail.live.com/mail/MailMigrationCabFileHolder.aspx?n=24362135
Handler: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Handler-x32: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default
FF user.js: detected! => C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\user.js
FF Keyword.URL: user_pref("keyword.URL", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\sweet-page.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Websteroids - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\Extensions\support@websteroidsapp.com [2014-01-25]
FF Extension: SaveSense - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\Extensions\{2d7886a0-85bb-4bf2-b684-ba92b4b21d23} [2014-01-26]
FF Extension: Foxtab Speed Dial - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\Extensions\{5ebdca98-43b3-45bb-87e0-716029fb42ab} [2014-01-30]
FF Extension: Extension_Protected - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\Extensions\jid0-O6MIff3eO5dIGf5Tcv8RsJDKxrs@jetpack.xpi [2014-01-25]
FF Extension: Lightning Speed Dial - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\Extensions\lightningnewtab@gmail.com.xpi [2014-01-25]
FF Extension: RightSurf - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\Extensions\{b9a19c25-a741-47e5-91a2-0b62bef307ff}.xpi [2014-01-25]
FF HKLM-x32\...\Firefox\Extensions: [lightningnewtab@gmail.com] - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\extensions\lightningnewtab@gmail.com.xpi
FF Extension: No Name - C:\Users\Udo\AppData\Roaming\Mozilla\Firefox\Profiles\6aa1v2u8.default\extensions\lightningnewtab@gmail.com.xpi [2014-01-25]

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

U2 AntiVirFirewallService; C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [1012280 2014-01-24] (Avira Operations GmbH & Co. KG)
U2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [908856 2014-01-24] (Avira Operations GmbH & Co. KG)
U2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2014-01-24] (Avira Operations GmbH & Co. KG)
U2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2014-01-24] (Avira Operations GmbH & Co. KG)
U2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2014-01-24] (Avira Operations GmbH & Co. KG)
U2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
U2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2650696 2013-07-26] (Acer Incorporated)
U2 dfrgui64; C:\Windows\system32\NlsLexjcons0026.exe [118784 2014-01-24] ()
U2 DlProtectSvc; C:\Windows\System32\DlProtectSvc.exe [125440 2014-01-24] ()
U3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)
U2 ETDService; C:\Program Files\Elantech\ETDService.exe [101192 2013-09-06] (ELAN Microelectronics Corp.)
U2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [508016 2014-01-14] (Cherished Technololgy LIMITED)
U2 LMSvc; C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
U2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
U2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
U3 QASvc; C:\Program Files\Packard Bell\Packard Bell Quick Access\QASvc.exe [457768 2013-08-02] (Acer Incorporate)
U3 RMSvc; C:\Program Files\Packard Bell\Packard Bell Quick Access\RMSvc.exe [448040 2013-08-02] (Acer Incorporate)
U2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)
U3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
U3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

U0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
U3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
U3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [138240 2013-06-22] (Advanced Micro Devices)
U3 avfwim; C:\Windows\system32\DRIVERS\avfwim.sys [114608 2014-01-24] (Avira GmbH)
U1 avfwot; C:\Windows\system32\DRIVERS\avfwot.sys [141376 2014-01-24] (Avira GmbH)
U2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-01-24] (Avira Operations GmbH & Co. KG)
U1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2014-01-24] (Avira Operations GmbH & Co. KG)
U1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-01-24] (Avira Operations GmbH & Co. KG)
U2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [84720 2014-01-24] (Avira Operations GmbH & Co. KG)
U3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
U3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
U3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
U3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
U3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
U3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
U0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
U0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
U3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
U0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
U3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
U3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
U3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
U3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
U3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
U3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
U2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2014-01-26] (Windows (R) Win 7 DDK provider)
U0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
U3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
U3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
U3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-30 14:01 - 2014-01-31 11:40 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Skype
2014-01-30 14:00 - 2014-01-31 10:02 - 00000310 _____ C:\Windows\Tasks\FoxTab.job
2014-01-30 14:00 - 2014-01-30 14:00 - 00002648 _____ C:\Windows\System32\Tasks\FoxTab
2014-01-30 14:00 - 2014-01-30 14:00 - 00002531 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-30 14:00 - 2014-01-30 14:00 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-30 14:00 - 2014-01-30 14:00 - 00000000 ____D C:\Users\Udo\AppData\Roaming\FoxTab
2014-01-30 14:00 - 2014-01-30 14:00 - 00000000 ____D C:\ProgramData\Skype
2014-01-30 13:59 - 2014-01-30 14:00 - 00000000 ____D C:\Program Files (x86)\Foxtab
2014-01-30 13:56 - 2014-01-30 13:56 - 01107024 _____ (                                                            ) C:\Users\Udo\Downloads\SkypeSetup.exe
2014-01-30 13:50 - 2014-01-30 13:50 - 00280864 _____ C:\Windows\Minidump\013014-23859-01.dmp
2014-01-30 13:36 - 2014-01-30 13:36 - 00280864 _____ C:\Windows\Minidump\013014-31062-01.dmp
2014-01-30 13:30 - 2014-01-30 13:30 - 00280864 _____ C:\Windows\Minidump\013014-30375-01.dmp
2014-01-30 09:59 - 2014-01-30 09:59 - 00021355 _____ C:\Users\Udo\Desktop\JRT.txt
2014-01-30 09:39 - 2014-01-30 09:39 - 00000000 ____D C:\Windows\ERUNT
2014-01-30 09:38 - 2014-01-30 09:38 - 01037068 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2014-01-29 18:38 - 2014-01-29 18:38 - 00280864 _____ C:\Windows\Minidump\012914-25125-01.dmp
2014-01-29 18:27 - 2014-01-29 18:27 - 00280864 _____ C:\Windows\Minidump\012914-27515-01.dmp
2014-01-29 09:07 - 2014-01-29 09:07 - 00001093 _____ C:\Users\Public\Desktop\  Malwarebytes Anti-Malware  .lnk
2014-01-29 09:07 - 2014-01-29 09:07 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2014-01-29 09:07 - 2014-01-29 09:07 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-29 09:07 - 2014-01-29 09:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-29 09:07 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-29 09:05 - 2014-01-29 09:05 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-28 12:04 - 2014-01-28 12:04 - 00001129 _____ C:\Users\Public\Desktop\ScanWise.lnk
2014-01-28 12:04 - 2014-01-28 12:04 - 00000000 ____D C:\Program Files (x86)\Agfa
2014-01-28 12:04 - 2000-11-15 14:10 - 00032768 _____ C:\Windows\SysWOW64\snape20.bin
2014-01-28 12:04 - 2000-06-29 09:00 - 00036864 _____ (Agfa-Gevaert N.V.) C:\Windows\SysWOW64\agusbsti.dll
2014-01-28 12:04 - 1998-11-17 12:44 - 00328704 _____ (InstallShield Software Corporation ) C:\Windows\IsUn0407.exe
2014-01-28 12:04 - 1998-06-22 16:37 - 00069632 ____N (Twain Working Group) C:\Windows\TWUNK_32.EXE
2014-01-28 12:04 - 1998-06-22 16:37 - 00048560 ____N (Twain Working Group) C:\Windows\TWUNK_16.EXE
2014-01-28 12:04 - 1998-06-22 16:36 - 00087392 ____N (Twain Working Group) C:\Windows\TWAIN.DLL
2014-01-28 11:28 - 2014-01-28 12:18 - 00015515 _____ C:\Users\Udo\Desktop\Susanne 1.odt
2014-01-28 11:28 - 2014-01-28 12:18 - 00012800 ___SH C:\Users\Udo\Desktop\Thumbs.db
2014-01-27 17:48 - 2014-01-28 10:12 - 00000000 ____D C:\Program Files (x86)\PC Speed Maximizer
2014-01-27 14:14 - 2014-01-27 14:15 - 00019871 _____ C:\Users\Udo\Downloads\Addition.txt
2014-01-27 14:12 - 2014-01-31 11:43 - 00019995 _____ C:\Users\Udo\Downloads\FRST.txt
2014-01-27 14:12 - 2014-01-27 14:12 - 00000000 ____D C:\FRST
2014-01-27 14:09 - 2014-01-27 14:09 - 02078208 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2014-01-26 22:03 - 2014-01-27 11:37 - 00000000 ___RD C:\Windows\BrowserChoice
2014-01-26 13:42 - 2014-01-30 17:36 - 00000000 ____D C:\ProgramData\Spyware Terminator
2014-01-26 13:42 - 2014-01-26 13:42 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-01-26 13:42 - 2014-01-26 13:42 - 00001022 _____ C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-01-26 13:42 - 2014-01-26 13:42 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Spyware Terminator
2014-01-26 13:42 - 2014-01-26 13:42 - 00000000 ____D C:\Program Files (x86)\Spyware Terminator
2014-01-26 13:40 - 2014-01-26 13:40 - 05049344 _____ (Crawler.com                                                 ) C:\Users\Udo\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2014-01-26 13:30 - 2014-01-06 23:31 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-26 13:30 - 2014-01-06 23:31 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-26 13:24 - 2014-01-26 13:26 - 00000000 ____D C:\Windows\system32\MRT
2014-01-26 13:24 - 2014-01-06 16:20 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-26 12:58 - 2014-01-31 09:58 - 00000314 _____ C:\Windows\Tasks\SaveSense.job
2014-01-26 12:58 - 2014-01-26 12:58 - 00002652 _____ C:\Windows\System32\Tasks\SaveSense
2014-01-26 09:25 - 2014-01-29 08:58 - 00000085 _____ C:\Users\Udo\AppData\Roaming\WB.CFG
2014-01-26 09:25 - 2014-01-26 09:25 - 00000000 ____D C:\Users\Udo\AppData\Local\Google
2014-01-26 09:24 - 2014-01-26 09:24 - 00608840 _____ C:\Users\Udo\Downloads\adblock-plus.xpi
2014-01-26 09:01 - 2013-09-26 07:51 - 00669184 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-01-26 09:01 - 2013-09-26 07:34 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\MrmIndexer.dll
2014-01-26 09:01 - 2013-09-26 07:34 - 00515072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmIndexer.dll
2014-01-26 08:59 - 2013-10-22 08:55 - 02328872 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-01-26 08:59 - 2013-10-08 11:13 - 02551640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-01-26 08:59 - 2013-10-07 03:13 - 03532288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-01-26 08:59 - 2013-10-04 09:10 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2014-01-26 08:58 - 2013-10-23 12:29 - 00044936 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll
2014-01-26 08:58 - 2013-10-23 12:21 - 00155480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-26 08:58 - 2013-10-23 12:13 - 00171864 _____ (Microsoft Corporation) C:\Windows\system32\kd_02_8086.dll
2014-01-26 08:58 - 2013-10-22 09:18 - 01287064 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-01-26 08:58 - 2013-10-22 07:03 - 02065448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-01-26 08:58 - 2013-10-22 06:15 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2014-01-26 08:58 - 2013-10-22 05:04 - 00618496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2014-01-26 08:58 - 2013-10-22 05:02 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-01-26 08:58 - 2013-10-22 04:56 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-01-26 08:58 - 2013-10-22 04:44 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-01-26 08:58 - 2013-10-22 03:38 - 01362944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-01-26 08:58 - 2013-10-22 03:22 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-01-26 08:58 - 2013-10-22 03:13 - 01704448 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-01-26 08:58 - 2013-10-22 03:07 - 02617344 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-01-26 08:58 - 2013-10-22 02:53 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-01-26 08:58 - 2013-10-22 02:47 - 02295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-01-26 08:58 - 2013-10-19 09:51 - 00481392 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2014-01-26 08:58 - 2013-10-19 08:12 - 00380656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2014-01-26 08:58 - 2013-10-19 05:48 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2014-01-26 08:58 - 2013-10-19 05:03 - 00531968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2014-01-26 08:58 - 2013-10-19 04:26 - 01231360 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-01-26 08:58 - 2013-10-19 04:14 - 00888832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-01-26 08:58 - 2013-10-17 16:42 - 01399176 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2014-01-26 08:58 - 2013-10-17 16:42 - 01373872 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-01-26 08:58 - 2013-10-17 15:04 - 01204968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2014-01-26 08:58 - 2013-10-16 10:34 - 00518656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2014-01-26 08:58 - 2013-10-16 10:33 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2014-01-26 08:58 - 2013-10-13 04:06 - 00258904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2014-01-26 08:58 - 2013-10-13 03:43 - 00708616 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2014-01-26 08:58 - 2013-10-10 17:44 - 00031064 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2014-01-26 08:58 - 2013-10-10 17:26 - 00317616 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-01-26 08:58 - 2013-10-10 17:26 - 00104320 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2014-01-26 08:58 - 2013-10-10 15:53 - 00235960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-01-26 08:58 - 2013-10-10 15:53 - 00088272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2014-01-26 08:58 - 2013-10-10 12:38 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-01-26 08:58 - 2013-10-09 06:40 - 00385528 _____ C:\Windows\system32\ApnDatabase.xml
2014-01-26 08:58 - 2013-10-08 11:28 - 00523096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2014-01-26 08:58 - 2013-10-08 07:46 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2014-01-26 08:58 - 2013-10-08 06:58 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll
2014-01-26 08:58 - 2013-10-08 06:50 - 00656384 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-01-26 08:58 - 2013-10-08 06:48 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-01-26 08:58 - 2013-10-08 06:15 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-01-26 08:58 - 2013-10-08 06:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2014-01-26 08:58 - 2013-10-08 05:50 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-01-26 08:58 - 2013-10-08 05:50 - 00762368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2014-01-26 08:58 - 2013-10-07 08:21 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-01-26 08:58 - 2013-10-05 16:25 - 00057176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2014-01-26 08:58 - 2013-10-05 15:21 - 00699840 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-01-26 08:58 - 2013-10-05 13:05 - 00578952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-01-26 08:58 - 2013-10-05 12:01 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-01-26 08:58 - 2013-10-05 12:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2014-01-26 08:58 - 2013-10-05 12:00 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-01-26 08:58 - 2013-10-05 10:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-01-26 08:58 - 2013-10-05 10:18 - 01011712 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-01-26 08:58 - 2013-10-05 10:07 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2014-01-26 08:58 - 2013-10-05 09:56 - 01147904 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2014-01-26 08:58 - 2013-10-05 09:55 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\miutils.dll
2014-01-26 08:58 - 2013-10-05 09:40 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-01-26 08:58 - 2013-10-05 09:24 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\miutils.dll
2014-01-26 08:58 - 2013-10-05 09:21 - 00920064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2014-01-26 08:58 - 2013-10-05 09:15 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2014-01-26 08:58 - 2013-10-05 08:43 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2014-01-26 08:58 - 2013-10-05 08:39 - 06639616 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-01-26 08:58 - 2013-10-05 08:35 - 00411648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2014-01-26 08:58 - 2013-10-05 08:32 - 05769728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-01-26 08:58 - 2013-09-19 06:04 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2014-01-26 08:58 - 2013-09-17 10:06 - 01067080 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2014-01-26 08:58 - 2013-09-17 10:06 - 00465960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-01-26 08:58 - 2013-09-17 07:31 - 00883184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2014-01-26 08:58 - 2013-09-17 07:31 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-01-26 08:58 - 2013-09-17 05:37 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2014-01-26 08:58 - 2013-09-14 15:07 - 02134120 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-01-26 08:58 - 2013-09-14 15:00 - 00391512 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2014-01-26 08:58 - 2013-09-14 13:39 - 01799944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2014-01-26 08:58 - 2013-09-14 13:33 - 00345552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2014-01-26 08:58 - 2013-09-14 11:05 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2014-01-26 08:58 - 2013-09-14 10:11 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2014-01-26 08:58 - 2013-09-13 09:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
2014-01-26 08:58 - 2013-09-13 08:47 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ftp.exe
2014-01-26 08:58 - 2013-09-12 09:45 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2014-01-26 08:58 - 2013-09-12 09:08 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2014-01-26 08:58 - 2013-09-12 09:08 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2014-01-26 08:58 - 2013-09-12 09:02 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2014-01-26 08:58 - 2013-09-12 08:44 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2014-01-26 08:58 - 2013-09-12 08:37 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2014-01-26 08:58 - 2013-09-12 08:37 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll
2014-01-26 08:58 - 2013-09-12 08:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2014-01-26 08:58 - 2013-09-12 08:16 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2014-01-26 08:58 - 2013-09-12 08:01 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
2014-01-26 08:58 - 2013-09-10 06:26 - 04599808 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-01-26 08:58 - 2013-09-10 05:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\msched.dll
2014-01-26 08:58 - 2013-09-10 05:34 - 03934208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-01-26 08:55 - 2013-11-05 21:21 - 21196664 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-01-26 08:55 - 2013-11-05 17:20 - 13925888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-01-26 08:55 - 2013-11-05 17:11 - 18577408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-01-26 08:55 - 2013-10-10 12:26 - 02801664 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-01-26 08:55 - 2013-10-10 12:05 - 01019392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-01-26 08:55 - 2013-10-10 11:34 - 01085952 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-01-26 08:55 - 2013-10-10 11:27 - 00869888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-01-26 08:54 - 2013-11-11 03:48 - 00039768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2014-01-26 08:54 - 2013-11-09 12:55 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2014-01-26 08:54 - 2013-11-09 07:37 - 01756160 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2014-01-26 08:54 - 2013-11-09 06:56 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2014-01-26 08:54 - 2013-11-08 11:26 - 00358896 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2014-01-26 08:54 - 2013-11-08 05:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2014-01-26 08:54 - 2013-11-08 05:28 - 13177344 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-01-26 08:54 - 2013-11-08 05:26 - 11674624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-01-26 08:54 - 2013-11-08 05:16 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2014-01-26 08:54 - 2013-11-08 05:15 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2014-01-26 08:54 - 2013-11-08 05:07 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2014-01-26 08:54 - 2013-11-08 04:41 - 01302528 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2014-01-26 08:54 - 2013-11-08 04:14 - 00922624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2014-01-26 08:54 - 2013-11-05 19:51 - 18642504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-01-26 08:54 - 2013-11-05 15:19 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2014-01-26 08:54 - 2013-11-05 15:03 - 00637952 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2014-01-26 08:54 - 2013-11-05 14:57 - 00479744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2014-01-26 08:54 - 2013-11-05 14:33 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2014-01-26 08:54 - 2013-11-05 14:32 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2014-01-26 08:54 - 2013-11-04 18:13 - 01530200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-01-26 08:54 - 2013-11-04 18:13 - 00382808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-01-26 08:54 - 2013-11-04 14:07 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2014-01-26 08:54 - 2013-11-04 12:50 - 02143744 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-01-26 08:54 - 2013-11-04 11:32 - 02570240 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-01-26 08:54 - 2013-11-04 03:28 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2014-01-26 08:54 - 2013-11-04 02:30 - 01765376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2014-01-26 08:54 - 2013-11-01 12:39 - 00086872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2014-01-26 08:54 - 2013-11-01 07:08 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll
2014-01-26 08:54 - 2013-11-01 06:57 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2014-01-26 08:54 - 2013-10-31 01:58 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-01-26 08:54 - 2013-10-31 01:42 - 07399256 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-01-26 08:54 - 2013-10-31 01:33 - 01642016 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-01-26 08:54 - 2013-10-31 01:33 - 01506680 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-01-26 08:54 - 2013-10-31 01:33 - 01476184 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-01-26 08:54 - 2013-10-31 01:33 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-01-26 08:54 - 2013-10-26 02:54 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SerCx2.sys
2014-01-26 08:54 - 2013-10-24 10:31 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll
2014-01-26 08:54 - 2013-10-24 10:12 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2014-01-26 08:54 - 2013-10-17 12:21 - 02896896 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2014-01-26 08:54 - 2013-10-17 11:36 - 02266624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2014-01-26 08:54 - 2013-10-11 14:24 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-01-26 08:54 - 2013-10-11 14:03 - 00621056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-01-26 08:54 - 2013-10-10 12:53 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2014-01-26 08:54 - 2013-10-10 12:21 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2014-01-26 08:54 - 2013-10-05 15:21 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-01-26 08:54 - 2013-10-05 15:21 - 00516496 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-01-26 08:54 - 2013-10-05 13:05 - 01765384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-01-26 08:54 - 2013-10-05 13:05 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-01-26 08:51 - 2013-09-21 05:48 - 07544320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-01-26 08:50 - 2013-09-25 11:25 - 00783504 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2014-01-26 08:50 - 2013-09-25 09:58 - 00648648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2014-01-26 08:50 - 2013-09-24 06:05 - 01245696 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2014-01-26 08:50 - 2013-09-21 12:18 - 01109936 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-01-26 08:50 - 2013-09-21 11:53 - 02131120 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-01-26 08:50 - 2013-09-21 11:53 - 01928656 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2014-01-26 08:50 - 2013-09-21 11:53 - 01534504 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2014-01-26 08:50 - 2013-09-21 11:51 - 01720552 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-01-26 08:50 - 2013-09-21 10:12 - 01370800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2014-01-26 08:50 - 2013-09-21 10:09 - 02142424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-01-26 08:50 - 2013-09-21 10:09 - 01472048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-01-26 08:50 - 2013-09-21 10:09 - 00796928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2014-01-26 08:50 - 2013-09-21 07:33 - 11366912 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2014-01-26 08:50 - 2013-09-21 07:06 - 01415168 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-01-26 08:50 - 2013-09-21 06:59 - 00940544 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-01-26 08:50 - 2013-09-21 06:56 - 08712704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2014-01-26 08:50 - 2013-09-21 06:34 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2014-01-26 08:50 - 2013-09-21 06:10 - 12028416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2014-01-26 08:50 - 2013-09-21 06:05 - 08875008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2014-01-26 08:50 - 2013-09-21 05:49 - 04975104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-01-26 08:50 - 2013-09-21 05:45 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-01-26 08:50 - 2013-09-21 05:44 - 01662464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2014-01-26 08:50 - 2013-09-21 05:42 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-01-26 08:50 - 2013-09-21 05:39 - 01455616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2014-01-26 08:50 - 2013-09-19 05:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2014-01-26 08:49 - 2013-09-26 10:20 - 00556032 _____ (Microsoft Corporation) C:\Windows\system32\recimg.exe
2014-01-26 08:49 - 2013-09-26 08:32 - 00638464 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2014-01-26 08:49 - 2013-09-26 08:14 - 00528896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2014-01-26 08:49 - 2013-09-25 08:32 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
2014-01-26 08:49 - 2013-09-25 06:40 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\windows.immersiveshell.serviceprovider.dll
2014-01-26 08:49 - 2013-09-24 06:59 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe
2014-01-26 08:49 - 2013-09-24 06:54 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2014-01-26 08:49 - 2013-09-24 06:10 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2014-01-26 08:49 - 2013-09-24 04:56 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.ContentPrefetchTask.dll
2014-01-26 08:49 - 2013-09-21 13:10 - 00579416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-01-26 08:49 - 2013-09-21 13:10 - 00236376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2014-01-26 08:49 - 2013-09-21 13:10 - 00151384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2014-01-26 08:49 - 2013-09-21 12:50 - 00528048 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2014-01-26 08:49 - 2013-09-21 12:48 - 00534048 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-01-26 08:49 - 2013-09-21 12:48 - 00123480 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-01-26 08:49 - 2013-09-21 12:04 - 00419160 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2014-01-26 08:49 - 2013-09-21 11:56 - 01119576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-01-26 08:49 - 2013-09-21 11:56 - 00101208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-01-26 08:49 - 2013-09-21 11:53 - 00996320 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2014-01-26 08:49 - 2013-09-21 11:53 - 00934856 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2014-01-26 08:49 - 2013-09-21 11:53 - 00366688 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2014-01-26 08:49 - 2013-09-21 11:53 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-01-26 08:49 - 2013-09-21 11:45 - 00171968 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-01-26 08:49 - 2013-09-21 10:23 - 00427096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-01-26 08:49 - 2013-09-21 10:23 - 00098104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-01-26 08:49 - 2013-09-21 10:12 - 01092896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2014-01-26 08:49 - 2013-09-21 10:09 - 00312936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2014-01-26 08:49 - 2013-09-21 08:58 - 00675328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-01-26 08:49 - 2013-09-21 08:57 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-01-26 08:49 - 2013-09-21 08:56 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-01-26 08:49 - 2013-09-21 08:55 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys
2014-01-26 08:49 - 2013-09-21 08:50 - 00240128 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2014-01-26 08:49 - 2013-09-21 08:17 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe
2014-01-26 08:49 - 2013-09-21 08:05 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-01-26 08:49 - 2013-09-21 07:55 - 00168448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2014-01-26 08:49 - 2013-09-21 07:27 - 00911872 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2014-01-26 08:49 - 2013-09-21 07:00 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2014-01-26 08:49 - 2013-09-21 06:57 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\livessp.dll
2014-01-26 08:49 - 2013-09-21 06:50 - 00767488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2014-01-26 08:49 - 2013-09-21 06:43 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2014-01-26 08:49 - 2013-09-21 06:38 - 00365568 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2014-01-26 08:49 - 2013-09-21 06:36 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2014-01-26 08:49 - 2013-09-21 06:31 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-01-26 08:49 - 2013-09-21 06:26 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2014-01-26 08:49 - 2013-09-21 06:20 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-01-26 08:49 - 2013-09-21 06:16 - 01503232 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-01-26 08:49 - 2013-09-21 06:09 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-01-26 08:49 - 2013-09-21 06:08 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-01-26 08:49 - 2013-09-21 06:02 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2014-01-26 08:49 - 2013-09-21 05:58 - 00803328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-01-26 08:49 - 2013-09-21 05:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2014-01-26 08:49 - 2013-09-21 05:38 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2014-01-26 08:49 - 2013-09-21 05:38 - 00102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
2014-01-26 08:49 - 2013-09-21 05:37 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2014-01-26 08:49 - 2013-09-21 05:36 - 01185280 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2014-01-26 08:49 - 2013-09-19 08:19 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersRes.dll
2014-01-26 08:49 - 2013-09-19 07:39 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.dll
2014-01-26 08:49 - 2013-09-19 07:27 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\WorkFolders.exe
2014-01-26 08:49 - 2013-09-19 07:23 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WorkFoldersRes.dll
2014-01-26 08:49 - 2013-09-19 07:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2014-01-26 08:49 - 2013-09-19 06:47 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.dll
2014-01-26 08:49 - 2013-09-19 06:29 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2014-01-26 08:49 - 2013-09-19 06:08 - 01150976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2014-01-26 08:49 - 2013-09-19 06:01 - 00401920 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
2014-01-26 08:49 - 2013-09-19 05:37 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2014-01-26 08:49 - 2013-09-19 05:32 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll
2014-01-26 08:49 - 2013-09-19 05:27 - 01730560 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll
2014-01-26 08:49 - 2013-09-19 05:25 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2014-01-26 08:49 - 2013-09-19 05:11 - 01344000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dui70.dll
2014-01-26 08:49 - 2013-09-19 05:10 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2014-01-26 08:49 - 2013-09-19 04:59 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2014-01-26 08:49 - 2013-09-19 04:55 - 00552448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2014-01-26 08:49 - 2013-09-19 04:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2014-01-26 08:49 - 2013-09-19 04:32 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2014-01-26 08:49 - 2013-09-17 10:18 - 00467800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-01-26 08:49 - 2013-09-17 07:58 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-01-26 08:49 - 2013-09-17 06:15 - 01225728 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2014-01-26 08:49 - 2013-09-17 06:00 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2014-01-26 08:49 - 2013-09-17 05:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2014-01-26 08:49 - 2013-09-17 05:08 - 00738304 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll
2014-01-26 08:49 - 2013-09-17 04:28 - 00695808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll
2014-01-26 08:49 - 2013-09-14 15:06 - 00175960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VerifierExt.sys
2014-01-26 08:49 - 2013-09-14 15:06 - 00066904 _____ (Microsoft Corporation) C:\Windows\system32\PSHED.DLL
2014-01-26 08:49 - 2013-09-14 12:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2014-01-26 08:49 - 2013-09-14 12:38 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipnat.sys
2014-01-26 08:49 - 2013-09-13 10:52 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\SensorsClassExtension.dll
2014-01-26 08:49 - 2013-09-13 09:54 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2014-01-26 08:49 - 2013-09-13 09:10 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll
2014-01-26 08:49 - 2013-09-13 08:55 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2014-01-26 08:49 - 2013-09-13 08:30 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2014-01-26 08:49 - 2013-09-12 13:33 - 06353952 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2014-01-26 08:49 - 2013-09-12 08:37 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2014-01-26 08:49 - 2013-09-11 10:32 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys
2014-01-26 08:49 - 2013-09-11 10:31 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-01-26 08:49 - 2013-09-11 10:31 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-01-26 08:49 - 2013-09-11 08:41 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2014-01-26 08:49 - 2013-09-11 08:09 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
2014-01-26 08:49 - 2013-09-07 17:12 - 00458616 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2014-01-26 08:49 - 2013-09-07 17:12 - 00407016 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2014-01-26 08:49 - 2013-09-07 15:45 - 00408480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2014-01-26 08:49 - 2013-09-07 15:45 - 00368736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2014-01-26 08:49 - 2013-09-07 13:44 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\fdprint.dll
2014-01-26 08:49 - 2013-09-07 13:29 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll
2014-01-26 08:49 - 2013-09-07 13:00 - 00256000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdprint.dll
2014-01-26 08:49 - 2013-09-07 12:50 - 00482816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceCenter.dll
2014-01-26 08:49 - 2013-09-07 12:45 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
2014-01-26 08:49 - 2013-09-07 12:30 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2014-01-26 08:49 - 2013-09-07 12:22 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CryptoWinRT.dll
2014-01-26 08:49 - 2013-09-07 12:13 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2014-01-26 08:49 - 2013-09-07 12:07 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\TetheringMgr.dll
2014-01-26 08:49 - 2013-09-07 11:51 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2014-01-26 08:49 - 2013-09-07 11:51 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2014-01-26 08:49 - 2013-09-05 08:39 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-01-26 08:49 - 2013-09-05 07:42 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\Utilman.exe
2014-01-26 08:49 - 2013-09-04 08:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll
2014-01-26 08:49 - 2013-09-04 07:16 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
2014-01-26 08:49 - 2013-09-04 06:47 - 00492032 _____ (Microsoft Corporation) C:\Windows\system32\tpmvsc.dll
2014-01-26 08:49 - 2013-09-04 06:12 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\DscCoreConfProv.dll
2014-01-26 08:49 - 2013-09-04 05:57 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
2014-01-26 08:49 - 2013-09-04 05:48 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2014-01-26 08:49 - 2013-09-04 05:35 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2014-01-26 08:49 - 2013-08-31 15:18 - 00205024 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll
2014-01-26 08:49 - 2013-08-31 13:15 - 00180232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2014-01-26 08:49 - 2013-08-30 08:31 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll
2014-01-26 08:49 - 2013-08-28 08:55 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2014-01-26 08:49 - 2013-08-28 08:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe
2014-01-26 08:49 - 2013-08-28 08:09 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\rdsdwmdr.dll
2014-01-26 08:49 - 2013-08-27 08:44 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BtaMPM.sys
2014-01-26 08:49 - 2013-08-27 07:09 - 00970752 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2014-01-26 08:49 - 2013-08-27 06:24 - 00813568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
2014-01-26 08:48 - 2013-09-26 09:24 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-01-26 08:48 - 2013-09-24 07:55 - 00284160 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
2014-01-26 08:48 - 2013-09-21 07:01 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll
2014-01-26 08:48 - 2013-09-21 06:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-01-26 08:48 - 2013-09-17 06:26 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-01-26 08:48 - 2013-09-05 06:40 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Utilman.exe
2014-01-26 08:48 - 2013-08-31 11:00 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2014-01-26 08:48 - 2013-08-31 10:25 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2014-01-26 08:48 - 2013-08-28 09:03 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-01-26 08:48 - 2013-08-28 08:04 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2014-01-26 08:42 - 2013-10-03 10:16 - 00294400 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2014-01-26 08:42 - 2013-10-03 10:02 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2014-01-26 08:42 - 2013-10-02 12:00 - 01286552 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2014-01-26 08:42 - 2013-10-02 10:47 - 01018960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2014-01-26 08:42 - 2013-10-01 04:42 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2014-01-26 08:42 - 2013-10-01 04:36 - 00977408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2014-01-26 08:41 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2014-01-26 08:41 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe
2014-01-26 08:41 - 2013-11-27 11:34 - 00138240 _____ C:\Windows\system32\OEMLicense.dll
2014-01-26 08:41 - 2013-11-27 10:54 - 00103936 _____ C:\Windows\SysWOW64\OEMLicense.dll
2014-01-26 08:41 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-26 08:41 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2014-01-26 08:41 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-26 08:41 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2014-01-26 08:41 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-01-26 08:41 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-01-26 08:41 - 2013-11-23 05:34 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-01-26 08:41 - 2013-11-23 05:13 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-01-26 08:41 - 2013-11-23 04:32 - 04105728 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-01-26 08:41 - 2013-11-23 04:10 - 00568832 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-01-26 08:41 - 2013-10-23 12:01 - 00872840 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-01-26 08:41 - 2013-10-23 09:59 - 00698232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-01-26 08:41 - 2013-10-19 09:53 - 00075360 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-01-26 08:41 - 2013-10-19 08:14 - 00070680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-01-26 08:41 - 2013-10-13 03:48 - 00136536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2014-01-26 08:41 - 2013-10-12 22:48 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-01-26 08:41 - 2013-10-12 22:34 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-01-26 08:41 - 2013-10-05 15:21 - 01341288 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-01-26 08:41 - 2013-10-05 09:39 - 01067008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-01-26 08:35 - 2014-01-26 09:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2014-01-26 08:32 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-26 08:32 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-01-26 08:32 - 2013-10-15 09:54 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-01-26 08:32 - 2013-10-15 09:03 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-01-26 08:31 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-26 08:31 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-26 08:31 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-01-26 08:31 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-26 08:31 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-01-26 08:31 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-26 08:31 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-26 08:31 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-01-26 08:31 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-01-26 08:31 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-26 08:31 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-26 08:31 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-26 08:31 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-01-26 08:31 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-01-26 08:31 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-01-26 08:31 - 2013-10-19 06:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-01-26 08:29 - 2013-11-08 08:21 - 04191744 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-26 08:29 - 2013-10-16 16:58 - 01943536 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-01-26 08:29 - 2013-10-16 14:54 - 01581968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-01-26 08:28 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2014-01-26 08:27 - 2013-11-09 07:34 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-01-26 08:27 - 2013-11-09 07:34 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2014-01-26 08:27 - 2013-11-09 06:52 - 00240128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2014-01-26 08:24 - 2014-01-26 08:24 - 00000000 ____D C:\Users\Udo\AppData\Local\MediaShow
2014-01-26 08:22 - 2014-01-26 08:23 - 00000000 ____D C:\Users\Udo\Documents\CyberLink
2014-01-26 08:22 - 2014-01-26 08:22 - 00000000 ____D C:\Users\Udo\AppData\Roaming\CyberLink
2014-01-26 08:22 - 2014-01-26 08:22 - 00000000 ____D C:\Users\Udo\AppData\Local\CyberLink
2014-01-26 08:19 - 2014-01-26 08:19 - 00816320 _____ C:\Windows\Minidump\012614-37703-01.dmp
2014-01-26 01:33 - 2014-01-26 01:33 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WildTangent
2014-01-25 14:32 - 2014-01-30 15:31 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-25 14:32 - 2014-01-25 14:32 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-25 14:32 - 2014-01-25 14:32 - 00000000 ____D C:\Users\Udo\AppData\Local\Macromedia
2014-01-25 14:32 - 2014-01-25 14:32 - 00000000 ____D C:\ProgramData\McAfee
2014-01-25 14:31 - 2014-01-25 14:32 - 00000000 ____D C:\Users\Udo\AppData\Local\Adobe
2014-01-25 14:01 - 2014-01-25 14:01 - 00001132 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-01-25 14:01 - 2014-01-25 14:01 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2014-01-25 13:51 - 2014-01-25 13:55 - 163606685 _____ C:\Users\Udo\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de(1).exe
2014-01-25 13:48 - 2014-01-25 13:51 - 163606685 _____ C:\Users\Udo\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-25 13:36 - 2014-01-25 13:37 - 00000000 ____D C:\Users\Udo\AppData\Roaming\FreeCDRipper
2014-01-25 13:36 - 2014-01-25 13:36 - 00001093 _____ C:\Users\Udo\Desktop\Free CD Ripper.lnk
2014-01-25 13:29 - 2014-01-25 13:29 - 00000000 ____D C:\Users\Udo\Documents\PC Speed Maximizer
2014-01-25 13:27 - 2014-01-25 13:36 - 00000000 ____D C:\Program Files (x86)\Free CD Ripper
2014-01-25 13:25 - 2014-01-30 10:44 - 00000000 ____D C:\ProgramData\WPM
2014-01-25 13:25 - 2014-01-25 13:26 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-25 13:25 - 2014-01-25 13:26 - 00000000 ____D C:\Program Files (x86)\SupTab
2014-01-25 13:04 - 2014-01-25 13:04 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-01-25 13:01 - 2014-01-30 13:50 - 400693242 _____ C:\Windows\MEMORY.DMP
2014-01-25 13:01 - 2014-01-30 13:50 - 00000000 ____D C:\Windows\Minidump
2014-01-25 13:01 - 2014-01-25 13:01 - 00816288 _____ C:\Windows\Minidump\012514-27109-01.dmp
2014-01-25 10:27 - 2014-01-26 09:19 - 00001131 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-25 10:27 - 2014-01-25 10:27 - 00000000 ____D C:\Users\Udo\AppData\Local\Mozilla
2014-01-25 10:04 - 2014-01-26 09:18 - 24260744 _____ (Mozilla) C:\Users\Udo\Downloads\GMX_Firefox_Setup.exe
2014-01-25 09:57 - 2014-01-25 09:57 - 24039048 _____ (Mozilla) C:\Users\Udo\Downloads\Firefox_Setup.exe
2014-01-25 09:50 - 2014-01-25 09:50 - 00000000 ____D C:\Users\Udo\Documents\clear.fi
2014-01-25 09:50 - 2014-01-25 09:50 - 00000000 ____D C:\Users\Public\OEM
2014-01-25 01:50 - 2014-01-26 09:38 - 00000000 ___RD C:\Users\Udo\Desktop\Fotos
2014-01-25 01:47 - 2014-01-25 13:11 - 00000000 ___RD C:\Users\Udo\Desktop\Udo
2014-01-25 00:38 - 2014-01-25 00:38 - 00000000 _____ C:\autoexec.bat
2014-01-25 00:37 - 2014-01-26 13:07 - 00000000 ____D C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-01-25 00:37 - 2014-01-25 00:37 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-24 18:04 - 2014-01-21 17:28 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2014-01-24 17:50 - 2014-01-28 10:13 - 00000000 ____D C:\Users\Udo\AppData\Local\CrashDumps
2014-01-24 14:56 - 2014-01-29 09:22 - 00000000 ____D C:\ProgramData\Updater
2014-01-24 14:11 - 2014-01-24 14:11 - 00000000 ____D C:\Users\Udo\AppData\Roaming\OpenOffice
2014-01-24 14:06 - 2014-01-24 14:14 - 00000000 ____D C:\Users\Udo\AppData\Local\Mobogenie
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\Documents\Mobogenie
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\AppData\Local\genienext
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\AppData\Local\cache
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\.android
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 _____ C:\Users\Udo\daemonprocess.txt
2014-01-24 14:05 - 2014-01-26 09:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-24 14:05 - 2014-01-24 14:08 - 143485940 _____ C:\Users\Udo\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_enUS.exe
2014-01-24 13:54 - 2014-01-24 13:54 - 00003880 _____ C:\Windows\System32\Tasks\Registration 1und1 Task
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\ProgramData\UUdb
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\ProgramData\1&1 Mail & Media GmbH
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\Program Files\GMX MailCheck
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\Program Files (x86)\GMX MailCheck
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\Program Files (x86)\1und1Softwareaktualisierung
2014-01-24 13:53 - 2014-01-25 13:24 - 00002158 _____ C:\Users\Udo\Desktop\Amazon.lnk
2014-01-24 13:53 - 2014-01-25 13:24 - 00002154 _____ C:\Users\Udo\Desktop\eBay.lnk
2014-01-24 13:53 - 2014-01-25 13:24 - 00002152 _____ C:\Users\Udo\Desktop\GMX.lnk
2014-01-24 13:53 - 2014-01-24 13:53 - 00000000 ____D C:\ProgramData\DesktopIcons
2014-01-24 13:14 - 2014-01-26 12:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-24 13:14 - 2014-01-25 01:42 - 00000000 ____D C:\Users\Udo\AppData\Local\Thunderbird
2014-01-24 13:14 - 2014-01-24 14:56 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2014-01-24 13:14 - 2014-01-24 13:14 - 00002110 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-01-24 13:14 - 2014-01-24 13:14 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Thunderbird
2014-01-24 13:14 - 2014-01-24 13:14 - 00000000 ____D C:\ProgramData\Mozilla
2014-01-24 13:13 - 2014-01-24 13:13 - 00125440 _____ C:\Windows\system32\DlProtectSvc.exe
2014-01-24 13:13 - 2014-01-24 13:13 - 00118784 _____ C:\Windows\system32\NlsLexjcons0026.exe
2014-01-24 13:13 - 2014-01-24 13:13 - 00012800 _____ C:\ProgramData\dlprotect.exe
2014-01-24 13:12 - 2014-01-24 13:12 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Windows Net Data
2014-01-24 13:11 - 2014-01-24 13:11 - 00000000 _____ C:\END
2014-01-24 12:33 - 2014-01-24 12:33 - 00000000 ____D C:\Users\Udo\AppData\Local\Acer Aspire R7 Tutorial
2014-01-24 12:09 - 2014-01-24 12:09 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Avira
2014-01-24 12:07 - 2014-01-24 12:07 - 00002094 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-24 12:07 - 2014-01-24 12:07 - 00000000 ____D C:\ProgramData\Avira
2014-01-24 12:07 - 2014-01-24 12:07 - 00000000 ____D C:\Program Files (x86)\Avira
2014-01-24 12:07 - 2014-01-24 12:03 - 00141376 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys
2014-01-24 12:07 - 2014-01-24 12:03 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-24 12:07 - 2014-01-24 12:03 - 00114608 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys
2014-01-24 12:07 - 2014-01-24 12:03 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-24 12:07 - 2014-01-24 12:03 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-24 12:07 - 2014-01-24 12:03 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-24 11:44 - 2014-01-31 11:44 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4256228738-1010575952-893814640-1001
2014-01-24 11:43 - 2014-01-24 11:43 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Macromedia
2014-01-24 11:42 - 2014-01-24 11:42 - 00000000 ____D C:\Users\Public\Pokki
2014-01-24 11:40 - 2014-01-31 11:39 - 00000000 __RDO C:\Users\Udo\SkyDrive
2014-01-24 11:39 - 2014-01-25 09:51 - 00000000 ____D C:\Users\Udo\AppData\Local\clear.fi
2014-01-24 11:39 - 2014-01-24 11:39 - 00001284 _____ C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk
2014-01-24 11:39 - 2014-01-24 11:39 - 00000000 ____D C:\Users\Udo\PicStream
2014-01-24 11:39 - 2014-01-24 11:39 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Atheros
2014-01-24 11:38 - 2014-01-27 11:36 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-24 11:38 - 2014-01-27 11:36 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-24 11:38 - 2014-01-24 11:38 - 00002625 _____ C:\Users\Public\Desktop\eBay.lnk
2014-01-24 11:38 - 2014-01-24 11:38 - 00000000 ____D C:\ProgramData\OEM_YAHOO
2014-01-24 11:38 - 2014-01-24 11:38 - 00000000 ____D C:\Program Files (x86)\OEM
2014-01-24 11:37 - 2014-01-30 13:53 - 00000000 ____D C:\Users\Udo\AppData\Local\Packages
2014-01-24 11:37 - 2014-01-28 12:05 - 00000000 ____D C:\Users\Udo\AppData\Local\VirtualStore
2014-01-24 11:37 - 2014-01-25 13:24 - 00001682 _____ C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-24 11:37 - 2014-01-24 11:37 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Adobe
2014-01-24 11:35 - 2014-01-30 14:07 - 00000000 ____D C:\Users\Udo
2014-01-24 11:35 - 2014-01-24 11:35 - 00000020 ___SH C:\Users\Udo\ntuser.ini
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Vorlagen
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Startmenü
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Netzwerkumgebung
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Lokale Einstellungen
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Eigene Dateien
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Druckumgebung
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Documents\Eigene Musik
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Documents\Eigene Bilder
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\AppData\Local\Verlauf
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\AppData\Local\Anwendungsdaten
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Anwendungsdaten
2014-01-24 11:35 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-01-24 11:35 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-24 11:35 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-01-24 11:35 - 2013-08-22 16:36 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

2014-01-31 11:44 - 2014-01-24 11:44 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4256228738-1010575952-893814640-1001
2014-01-31 11:43 - 2014-01-27 14:12 - 00019995 _____ C:\Users\Udo\Downloads\FRST.txt
2014-01-31 11:43 - 2013-08-22 14:36 - 00000000 __RHD C:\Users\Default
2014-01-31 11:40 - 2014-01-30 14:01 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Skype
2014-01-31 11:39 - 2014-01-24 11:40 - 00000000 __RDO C:\Users\Udo\SkyDrive
2014-01-31 11:18 - 2013-11-27 21:26 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2014-01-31 11:02 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\sru
2014-01-31 10:06 - 2013-11-27 21:20 - 01865011 _____ C:\Windows\WindowsUpdate.log
2014-01-31 10:02 - 2014-01-30 14:00 - 00000310 _____ C:\Windows\Tasks\FoxTab.job
2014-01-31 09:58 - 2014-01-26 12:58 - 00000314 _____ C:\Windows\Tasks\SaveSense.job
2014-01-30 17:36 - 2014-01-26 13:42 - 00000000 ____D C:\ProgramData\Spyware Terminator
2014-01-30 15:31 - 2014-01-25 14:32 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-30 15:23 - 2013-11-28 06:12 - 00765582 _____ C:\Windows\system32\perfh007.dat
2014-01-30 15:23 - 2013-11-28 06:12 - 00159366 _____ C:\Windows\system32\perfc007.dat
2014-01-30 15:23 - 2013-09-06 05:58 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-30 15:18 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-30 14:07 - 2014-01-24 11:35 - 00000000 ____D C:\Users\Udo
2014-01-30 14:00 - 2014-01-30 14:00 - 00002648 _____ C:\Windows\System32\Tasks\FoxTab
2014-01-30 14:00 - 2014-01-30 14:00 - 00002531 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-30 14:00 - 2014-01-30 14:00 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-30 14:00 - 2014-01-30 14:00 - 00000000 ____D C:\Users\Udo\AppData\Roaming\FoxTab
2014-01-30 14:00 - 2014-01-30 14:00 - 00000000 ____D C:\ProgramData\Skype
2014-01-30 14:00 - 2014-01-30 13:59 - 00000000 ____D C:\Program Files (x86)\Foxtab
2014-01-30 13:56 - 2014-01-30 13:56 - 01107024 _____ (                                                            ) C:\Users\Udo\Downloads\SkypeSetup.exe
2014-01-30 13:53 - 2014-01-24 11:37 - 00000000 ____D C:\Users\Udo\AppData\Local\Packages
2014-01-30 13:53 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness
2014-01-30 13:50 - 2014-01-30 13:50 - 00280864 _____ C:\Windows\Minidump\013014-23859-01.dmp
2014-01-30 13:50 - 2014-01-25 13:01 - 400693242 _____ C:\Windows\MEMORY.DMP
2014-01-30 13:50 - 2014-01-25 13:01 - 00000000 ____D C:\Windows\Minidump
2014-01-30 13:36 - 2014-01-30 13:36 - 00280864 _____ C:\Windows\Minidump\013014-31062-01.dmp
2014-01-30 13:30 - 2014-01-30 13:30 - 00280864 _____ C:\Windows\Minidump\013014-30375-01.dmp
2014-01-30 11:08 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache
2014-01-30 10:44 - 2014-01-25 13:25 - 00000000 ____D C:\ProgramData\WPM
2014-01-30 10:44 - 2013-09-06 05:51 - 01048694 _____ C:\Windows\PFRO.log
2014-01-30 10:43 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2014-01-30 09:59 - 2014-01-30 09:59 - 00021355 _____ C:\Users\Udo\Desktop\JRT.txt
2014-01-30 09:39 - 2014-01-30 09:39 - 00000000 ____D C:\Windows\ERUNT
2014-01-30 09:38 - 2014-01-30 09:38 - 01037068 _____ (Thisisu) C:\Users\Udo\Downloads\JRT.exe
2014-01-29 18:38 - 2014-01-29 18:38 - 00280864 _____ C:\Windows\Minidump\012914-25125-01.dmp
2014-01-29 18:27 - 2014-01-29 18:27 - 00280864 _____ C:\Windows\Minidump\012914-27515-01.dmp
2014-01-29 09:22 - 2014-01-24 14:56 - 00000000 ____D C:\ProgramData\Updater
2014-01-29 09:07 - 2014-01-29 09:07 - 00001093 _____ C:\Users\Public\Desktop\  Malwarebytes Anti-Malware  .lnk
2014-01-29 09:07 - 2014-01-29 09:07 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Malwarebytes
2014-01-29 09:07 - 2014-01-29 09:07 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-29 09:07 - 2014-01-29 09:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-29 09:05 - 2014-01-29 09:05 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Udo\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-29 08:58 - 2014-01-26 09:25 - 00000085 _____ C:\Users\Udo\AppData\Roaming\WB.CFG
2014-01-28 12:18 - 2014-01-28 11:28 - 00015515 _____ C:\Users\Udo\Desktop\Susanne 1.odt
2014-01-28 12:18 - 2014-01-28 11:28 - 00012800 ___SH C:\Users\Udo\Desktop\Thumbs.db
2014-01-28 12:05 - 2014-01-24 11:37 - 00000000 ____D C:\Users\Udo\AppData\Local\VirtualStore
2014-01-28 12:04 - 2014-01-28 12:04 - 00001129 _____ C:\Users\Public\Desktop\ScanWise.lnk
2014-01-28 12:04 - 2014-01-28 12:04 - 00000000 ____D C:\Program Files (x86)\Agfa
2014-01-28 10:13 - 2014-01-24 17:50 - 00000000 ____D C:\Users\Udo\AppData\Local\CrashDumps
2014-01-28 10:12 - 2014-01-27 17:48 - 00000000 ____D C:\Program Files (x86)\PC Speed Maximizer
2014-01-27 14:15 - 2014-01-27 14:14 - 00019871 _____ C:\Users\Udo\Downloads\Addition.txt
2014-01-27 14:12 - 2014-01-27 14:12 - 00000000 ____D C:\FRST
2014-01-27 14:09 - 2014-01-27 14:09 - 02078208 _____ (Farbar) C:\Users\Udo\Downloads\FRST64.exe
2014-01-27 11:37 - 2014-01-26 22:03 - 00000000 ___RD C:\Windows\BrowserChoice
2014-01-27 11:36 - 2014-01-24 11:38 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-27 11:36 - 2014-01-24 11:38 - 00000000 ___RD C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-26 22:03 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ToastData
2014-01-26 22:03 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\WinStore
2014-01-26 22:02 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\migwiz
2014-01-26 22:02 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2014-01-26 22:02 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\MediaViewer
2014-01-26 22:02 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\FileManager
2014-01-26 22:02 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\Camera
2014-01-26 21:13 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2014-01-26 13:42 - 2014-01-26 13:42 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-01-26 13:42 - 2014-01-26 13:42 - 00001022 _____ C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-01-26 13:42 - 2014-01-26 13:42 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Spyware Terminator
2014-01-26 13:42 - 2014-01-26 13:42 - 00000000 ____D C:\Program Files (x86)\Spyware Terminator
2014-01-26 13:40 - 2014-01-26 13:40 - 05049344 _____ (Crawler.com                                                 ) C:\Users\Udo\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2014-01-26 13:28 - 2013-08-22 15:44 - 00360464 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-26 13:26 - 2014-01-26 13:24 - 00000000 ____D C:\Windows\system32\MRT
2014-01-26 13:26 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2014-01-26 13:26 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Defender
2014-01-26 13:26 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2014-01-26 13:26 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\SysWOW64\Dism
2014-01-26 13:26 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\system32\oobe
2014-01-26 13:26 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\system32\Dism
2014-01-26 13:07 - 2014-01-25 00:37 - 00000000 ____D C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-01-26 12:58 - 2014-01-26 12:58 - 00002652 _____ C:\Windows\System32\Tasks\SaveSense
2014-01-26 12:35 - 2014-01-24 13:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-26 09:50 - 2014-01-26 08:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2014-01-26 09:38 - 2014-01-25 01:50 - 00000000 ___RD C:\Users\Udo\Desktop\Fotos
2014-01-26 09:35 - 2013-08-22 15:46 - 00019372 _____ C:\Windows\setupact.log
2014-01-26 09:25 - 2014-01-26 09:25 - 00000000 ____D C:\Users\Udo\AppData\Local\Google
2014-01-26 09:24 - 2014-01-26 09:24 - 00608840 _____ C:\Users\Udo\Downloads\adblock-plus.xpi
2014-01-26 09:19 - 2014-01-25 10:27 - 00001131 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-26 09:19 - 2014-01-24 14:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-26 09:18 - 2014-01-25 10:04 - 24260744 _____ (Mozilla) C:\Users\Udo\Downloads\GMX_Firefox_Setup.exe
2014-01-26 08:26 - 2013-11-27 22:11 - 00000000 ____D C:\Users\Public\CyberLink
2014-01-26 08:24 - 2014-01-26 08:24 - 00000000 ____D C:\Users\Udo\AppData\Local\MediaShow
2014-01-26 08:23 - 2014-01-26 08:22 - 00000000 ____D C:\Users\Udo\Documents\CyberLink
2014-01-26 08:23 - 2013-11-27 22:11 - 00000000 ____D C:\ProgramData\CyberLink
2014-01-26 08:22 - 2014-01-26 08:22 - 00000000 ____D C:\Users\Udo\AppData\Roaming\CyberLink
2014-01-26 08:22 - 2014-01-26 08:22 - 00000000 ____D C:\Users\Udo\AppData\Local\CyberLink
2014-01-26 08:19 - 2014-01-26 08:19 - 00816320 _____ C:\Windows\Minidump\012614-37703-01.dmp
2014-01-26 01:33 - 2014-01-26 01:33 - 00000000 ____D C:\Users\Udo\AppData\Roaming\WildTangent
2014-01-26 01:33 - 2013-09-06 06:00 - 00000000 ____D C:\ProgramData\WildTangent
2014-01-26 01:33 - 2013-09-06 06:00 - 00000000 ____D C:\Program Files (x86)\WildTangent Games
2014-01-26 01:11 - 2013-09-06 06:08 - 00000000 ____D C:\ProgramData\Packard Bell
2014-01-26 01:11 - 2013-09-06 06:08 - 00000000 ____D C:\Program Files (x86)\Packard Bell
2014-01-25 14:32 - 2014-01-25 14:32 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-25 14:32 - 2014-01-25 14:32 - 00000000 ____D C:\Users\Udo\AppData\Local\Macromedia
2014-01-25 14:32 - 2014-01-25 14:32 - 00000000 ____D C:\ProgramData\McAfee
2014-01-25 14:32 - 2014-01-25 14:31 - 00000000 ____D C:\Users\Udo\AppData\Local\Adobe
2014-01-25 14:01 - 2014-01-25 14:01 - 00001132 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-01-25 14:01 - 2014-01-25 14:01 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2014-01-25 13:55 - 2014-01-25 13:51 - 163606685 _____ C:\Users\Udo\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de(1).exe
2014-01-25 13:51 - 2014-01-25 13:48 - 163606685 _____ C:\Users\Udo\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-25 13:37 - 2014-01-25 13:36 - 00000000 ____D C:\Users\Udo\AppData\Roaming\FreeCDRipper
2014-01-25 13:36 - 2014-01-25 13:36 - 00001093 _____ C:\Users\Udo\Desktop\Free CD Ripper.lnk
2014-01-25 13:36 - 2014-01-25 13:27 - 00000000 ____D C:\Program Files (x86)\Free CD Ripper
2014-01-25 13:36 - 2013-11-27 22:09 - 00000000 ____D C:\ProgramData\boost_interprocess
2014-01-25 13:29 - 2014-01-25 13:29 - 00000000 ____D C:\Users\Udo\Documents\PC Speed Maximizer
2014-01-25 13:26 - 2014-01-25 13:25 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-25 13:26 - 2014-01-25 13:25 - 00000000 ____D C:\Program Files (x86)\SupTab
2014-01-25 13:24 - 2014-01-24 13:53 - 00002158 _____ C:\Users\Udo\Desktop\Amazon.lnk
2014-01-25 13:24 - 2014-01-24 13:53 - 00002154 _____ C:\Users\Udo\Desktop\eBay.lnk
2014-01-25 13:24 - 2014-01-24 13:53 - 00002152 _____ C:\Users\Udo\Desktop\GMX.lnk
2014-01-25 13:24 - 2014-01-24 11:37 - 00001682 _____ C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-25 13:11 - 2014-01-25 01:47 - 00000000 ___RD C:\Users\Udo\Desktop\Udo
2014-01-25 13:04 - 2014-01-25 13:04 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-01-25 13:01 - 2014-01-25 13:01 - 00816288 _____ C:\Windows\Minidump\012514-27109-01.dmp
2014-01-25 10:27 - 2014-01-25 10:27 - 00000000 ____D C:\Users\Udo\AppData\Local\Mozilla
2014-01-25 09:57 - 2014-01-25 09:57 - 24039048 _____ (Mozilla) C:\Users\Udo\Downloads\Firefox_Setup.exe
2014-01-25 09:51 - 2014-01-24 11:39 - 00000000 ____D C:\Users\Udo\AppData\Local\clear.fi
2014-01-25 09:50 - 2014-01-25 09:50 - 00000000 ____D C:\Users\Udo\Documents\clear.fi
2014-01-25 09:50 - 2014-01-25 09:50 - 00000000 ____D C:\Users\Public\OEM
2014-01-25 01:42 - 2014-01-24 13:14 - 00000000 ____D C:\Users\Udo\AppData\Local\Thunderbird
2014-01-25 00:38 - 2014-01-25 00:38 - 00000000 _____ C:\autoexec.bat
2014-01-25 00:37 - 2014-01-25 00:37 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-24 14:56 - 2014-01-24 13:14 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Mozilla
2014-01-24 14:14 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\AppData\Local\Mobogenie
2014-01-24 14:11 - 2014-01-24 14:11 - 00000000 ____D C:\Users\Udo\AppData\Roaming\OpenOffice
2014-01-24 14:08 - 2014-01-24 14:05 - 143485940 _____ C:\Users\Udo\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_enUS.exe
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\Documents\Mobogenie
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\AppData\Local\genienext
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\AppData\Local\cache
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 ____D C:\Users\Udo\.android
2014-01-24 14:06 - 2014-01-24 14:06 - 00000000 _____ C:\Users\Udo\daemonprocess.txt
2014-01-24 13:54 - 2014-01-24 13:54 - 00003880 _____ C:\Windows\System32\Tasks\Registration 1und1 Task
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\ProgramData\UUdb
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\ProgramData\1&1 Mail & Media GmbH
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\Program Files\GMX MailCheck
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\Program Files (x86)\GMX MailCheck
2014-01-24 13:54 - 2014-01-24 13:54 - 00000000 ____D C:\Program Files (x86)\1und1Softwareaktualisierung
2014-01-24 13:53 - 2014-01-24 13:53 - 00000000 ____D C:\ProgramData\DesktopIcons
2014-01-24 13:14 - 2014-01-24 13:14 - 00002110 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-01-24 13:14 - 2014-01-24 13:14 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Thunderbird
2014-01-24 13:14 - 2014-01-24 13:14 - 00000000 ____D C:\ProgramData\Mozilla
2014-01-24 13:13 - 2014-01-24 13:13 - 00125440 _____ C:\Windows\system32\DlProtectSvc.exe
2014-01-24 13:13 - 2014-01-24 13:13 - 00118784 _____ C:\Windows\system32\NlsLexjcons0026.exe
2014-01-24 13:13 - 2014-01-24 13:13 - 00012800 _____ C:\ProgramData\dlprotect.exe
2014-01-24 13:12 - 2014-01-24 13:12 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Windows Net Data
2014-01-24 13:11 - 2014-01-24 13:11 - 00000000 _____ C:\END
2014-01-24 12:33 - 2014-01-24 12:33 - 00000000 ____D C:\Users\Udo\AppData\Local\Acer Aspire R7 Tutorial
2014-01-24 12:20 - 2013-09-06 06:11 - 00000000 ____D C:\ProgramData\Norton
2014-01-24 12:19 - 2013-08-22 16:36 - 00000000 ___HD C:\Windows\ELAMBKUP
2014-01-24 12:19 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2014-01-24 12:09 - 2014-01-24 12:09 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Avira
2014-01-24 12:07 - 2014-01-24 12:07 - 00002094 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-24 12:07 - 2014-01-24 12:07 - 00000000 ____D C:\ProgramData\Avira
2014-01-24 12:07 - 2014-01-24 12:07 - 00000000 ____D C:\Program Files (x86)\Avira
2014-01-24 12:03 - 2014-01-24 12:07 - 00141376 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys
2014-01-24 12:03 - 2014-01-24 12:07 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-24 12:03 - 2014-01-24 12:07 - 00114608 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys
2014-01-24 12:03 - 2014-01-24 12:07 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-24 12:03 - 2014-01-24 12:07 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-24 12:03 - 2014-01-24 12:07 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-24 11:43 - 2014-01-24 11:43 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Macromedia
2014-01-24 11:42 - 2014-01-24 11:42 - 00000000 ____D C:\Users\Public\Pokki
2014-01-24 11:39 - 2014-01-24 11:39 - 00001284 _____ C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk
2014-01-24 11:39 - 2014-01-24 11:39 - 00000000 ____D C:\Users\Udo\PicStream
2014-01-24 11:39 - 2014-01-24 11:39 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Atheros
2014-01-24 11:38 - 2014-01-24 11:38 - 00002625 _____ C:\Users\Public\Desktop\eBay.lnk
2014-01-24 11:38 - 2014-01-24 11:38 - 00000000 ____D C:\ProgramData\OEM_YAHOO
2014-01-24 11:38 - 2014-01-24 11:38 - 00000000 ____D C:\Program Files (x86)\OEM
2014-01-24 11:38 - 2013-09-06 06:50 - 00000000 ____D C:\Windows\Panther
2014-01-24 11:38 - 2013-09-06 06:39 - 00000000 ___HD C:\OEM
2014-01-24 11:37 - 2014-01-24 11:37 - 00000000 ____D C:\Users\Udo\AppData\Roaming\Adobe
2014-01-24 11:35 - 2014-01-24 11:35 - 00000020 ___SH C:\Users\Udo\ntuser.ini
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Vorlagen
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Startmenü
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Netzwerkumgebung
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Lokale Einstellungen
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Eigene Dateien
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Druckumgebung
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Documents\Eigene Musik
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Documents\Eigene Bilder
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\AppData\Local\Verlauf
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\AppData\Local\Anwendungsdaten
2014-01-24 11:35 - 2014-01-24 11:35 - 00000000 _SHDL C:\Users\Udo\Anwendungsdaten
2014-01-21 17:28 - 2014-01-24 18:04 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2014-01-06 23:31 - 2014-01-26 13:30 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-06 23:31 - 2014-01-26 13:30 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-06 16:20 - 2014-01-26 13:24 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Files to move or delete:
====================
C:\ProgramData\dlprotect.exe


Some content of TEMP:
====================
C:\Users\Udo\AppData\Local\Temp\89106uninstall.exe
C:\Users\Udo\AppData\Local\Temp\avgnt.exe
C:\Users\Udo\AppData\Local\Temp\COMAP.EXE
C:\Users\Udo\AppData\Local\Temp\ICReinstall_Firefox_Setup.exe
C:\Users\Udo\AppData\Local\Temp\installhelper.dll
C:\Users\Udo\AppData\Local\Temp\Mobogenie_Setup_2.1.37_122100041.exe
C:\Users\Udo\AppData\Local\Temp\octD16A.tmp.exe
C:\Users\Udo\AppData\Local\Temp\setup{16175276-3F20-483F-BD7B-4958AFA5ACBB}.exe
C:\Users\Udo\AppData\Local\Temp\SHSetup.exe
C:\Users\Udo\AppData\Local\Temp\Sqlite3.dll
C:\Users\Udo\AppData\Local\Temp\SRAssetsHelper.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-06 05:51

==================== End Of Log ============================
         

--- --- ---

--- --- ---
[/CODE]

Das # findest Du hier im Forum in der Schnell Antworten Box unten, wo Du deinen Text erin schreibst



ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?