Hallo an alle,

habe seit gestern Morgen ein Problem mit meinem Laptop. Er fährt ganz normal hoch, reagiert dann aber auf meine Befehle gar nicht bzw. nur extrem langsam. Wenn ich Firefox starten möchte dauert es ca. 5 Minuten bis sich das Fenster öffnet und weitere 10 Minuten bis ich darauf zugreifen kann.
Nach einer Weile (ca. 30 Minuten) kann ich dann relativ normal arbeiten. Trotzdem reagiert alles noch ein wenig verzögert.
Könnt Ihr mir bitte helfen? Ich habe die Anleitung zum Erstellen eines neuen Themas gelesen und poste nun alle Logs die ich habe.

Vielen Dank!

Defogger:

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 13:37 on 27/01/2014 (Sunny)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

FRST:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-01-2014
Ran by Sunny (administrator) on SUNNY-VAIO on 27-01-2014 13:40:46
Running from C:\Users\Sunny\Downloads
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
() C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
() C:\Users\Sunny\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Dropbox, Inc.) C:\Users\Sunny\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
() C:\Users\Sunny\Downloads\Defogger.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\update.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\updrgui.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775584 2010-05-31] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-05-31] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [212480 2010-05-31] (Alps Electric Co., Ltd.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673136 2010-05-31] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [600928 2010-06-01] (Sony Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [102400 2010-09-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2014-01-11] (APN)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Amazon Cloud Player] - C:\Users\Sunny\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3145536 2013-12-12] ()
Startup: C:\Users\Sunny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Sunny\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=SVEE&bmod=SVEE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {31CF5488-1282-4CE7-BACF-DAC2D6103B66} URL = hxxp://de.shopping.com/?linkin_id=8056363
SearchScopes: HKCU - {4D7AE340-6731-4EE4-B8C1-DD73BA39A597} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {7A28250A-EF45-4C6E-A2D2-9245F92B8167} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-9/4?satitle={searchTerms}
SearchScopes: HKCU - {8A139173-D5C3-4BB4-98C2-927617F6E246} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: DivX HiQ - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO-x32: SwissAcademic.Citavi.Picker.IEPicker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GmbH)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF ProfilePath: C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default
FF SearchEngineOrder.1: Ask Search
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - C:\Windows\system32\TVUAx\npTVUAx.dll No File
FF Plugin-x32: @real.com/nppl3260;version=12.0.1.647 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=12.0.1.647 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=12.0.1.660 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=12.0.1.660 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=12.0.1.660 - c:\program files (x86)\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprjplug.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF SearchPlugin: C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: PC Sync 2 Synchronisation Extension - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\bkmrksync@nokia.com [2011-03-29]
FF Extension: TVU Web Player - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\firefox@tvunetworks.com [2011-08-20]
FF Extension: Move Media Player - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\moveplayer@movenetworks.com [2011-03-29]
FF Extension: Flagfox - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} [2014-01-16]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011-03-29]
FF Extension: Linkification - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a} [2011-03-29]
FF Extension: Yahoo! Toolbar - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2013-04-11]
FF Extension: IE Tab - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9} [2013-05-07]
FF Extension: FireNes - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\firenes@facundo.zaldo.xpi [2011-06-30]
FF Extension: Ask Toolbar - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\toolbar_ORJ-V7C@apn.ask.com.xpi [2013-11-09]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: Adblock Plus - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-08-13]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-11]
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video [2011-04-07]
FF HKLM-x32\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa
FF Extension: DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa [2011-04-07]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-07-15]
FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2012-10-24]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-04-28]

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-06]
CHR Extension: (Google Drive) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-06]
CHR Extension: (YouTube) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-09-25]
CHR Extension: (Google-Suche) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-09-25]
CHR Extension: (DivX HiQ) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnjbmmemklcjgepojigaapkoodmkgbae [2012-09-25]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2012-09-25]
CHR Extension: (Skype Click to Call) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-09-25]
CHR Extension: (Google Wallet) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-06]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2012-09-25]
CHR Extension: (Google Mail) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-09-25]
CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [2011-02-08]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-07-15]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [2011-02-08]

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-17] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-01-11] (APN LLC.)
S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.0.271\McCHSvc.exe [237328 2012-03-30] (McAfee, Inc.)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [80896 2011-03-31] ()
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] ()
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [851824 2010-06-17] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1368624 2013-08-01] (Sony Corporation)

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [254528 2011-03-29] (DT Soft Ltd)
S3 s0017bus; C:\Windows\System32\DRIVERS\s0017bus.sys [113704 2008-10-21] (MCCI Corporation)
S3 s0017mdfl; C:\Windows\System32\DRIVERS\s0017mdfl.sys [19496 2008-10-21] (MCCI Corporation)
S3 s0017mdm; C:\Windows\System32\DRIVERS\s0017mdm.sys [152616 2008-10-21] (MCCI Corporation)
S3 s0017mgmt; C:\Windows\System32\DRIVERS\s0017mgmt.sys [133160 2008-10-21] (MCCI Corporation)
S3 s0017nd5; C:\Windows\System32\DRIVERS\s0017nd5.sys [34856 2008-10-21] (MCCI Corporation)
S3 s0017obex; C:\Windows\System32\DRIVERS\s0017obex.sys [128552 2008-10-21] (MCCI Corporation)
S3 s0017unic; C:\Windows\System32\DRIVERS\s0017unic.sys [145960 2008-10-21] (MCCI Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 massfilter; system32\drivers\massfilter.sys [x]
S3 vpnva; system32\DRIVERS\vpnva64.sys [x]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [x]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [x]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-27 13:40 - 2014-01-27 13:42 - 00023380 _____ C:\Users\Sunny\Downloads\FRST.txt
2014-01-27 13:38 - 2014-01-27 13:38 - 00000000 ____D C:\FRST
2014-01-27 13:37 - 2014-01-27 13:37 - 02078208 _____ (Farbar) C:\Users\Sunny\Downloads\FRST64.exe
2014-01-27 13:37 - 2014-01-27 13:37 - 00000472 _____ C:\Users\Sunny\Downloads\defogger_disable.log
2014-01-27 13:37 - 2014-01-27 13:37 - 00000000 _____ C:\Users\Sunny\defogger_reenable
2014-01-27 13:34 - 2014-01-27 13:36 - 00050477 _____ C:\Users\Sunny\Downloads\Defogger.exe
2014-01-27 08:22 - 2014-01-27 08:22 - 00074703 _____ C:\Windows\SysWOW64\mfc45.dll
2014-01-27 08:22 - 2014-01-27 08:22 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\iolo
2014-01-27 08:22 - 2014-01-27 08:22 - 00000000 ____D C:\ProgramData\iolo
2014-01-27 08:22 - 2012-08-17 17:25 - 00069000 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2014-01-27 08:22 - 2012-08-17 17:25 - 00021176 _____ (iolo technologies, LLC) C:\Windows\system32\iolorgdf64.exe
2014-01-26 19:46 - 2014-01-26 19:46 - 00136097 _____ C:\Users\Sunny\Downloads\l09
2014-01-26 19:45 - 2014-01-26 19:45 - 00055906 _____ C:\Users\Sunny\Downloads\ab09
2014-01-26 12:14 - 2014-01-26 12:14 - 00000000 ___DL C:\Users\Sunny\Desktop\statistik Übungsblätter lösungen mit kommentar
2014-01-26 08:43 - 2014-01-26 08:43 - 00000000 ___DL C:\Users\Sunny\Desktop\klin seminar hausarbeit mbct
2014-01-26 08:33 - 2014-01-26 08:33 - 00000000 ___DL C:\Users\Sunny\Desktop\Literatur Seminar Kognition
2014-01-25 16:57 - 2014-01-25 16:57 - 00105732 _____ C:\Users\Sunny\Downloads\l08
2014-01-25 16:56 - 2014-01-25 16:56 - 00046968 _____ C:\Users\Sunny\Downloads\ab08
2014-01-24 12:31 - 2014-01-14 05:54 - 1202423429 _____ C:\Users\Sunny\Desktop\Hart.of.Dixie.S03E09.720p.HDTV.X264-DIMENSION.mkv
2014-01-24 08:44 - 2014-01-24 08:44 - 00000000 ___DL C:\Users\Sunny\Desktop\MASTER FREIBURG
2014-01-24 08:43 - 2014-01-24 08:43 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\Dropbox Folder Sync
2014-01-24 08:43 - 2014-01-24 08:43 - 00000000 ____D C:\Users\Sunny\AppData\Local\Dropbox_Folder_Sync
2014-01-24 08:43 - 2014-01-24 08:43 - 00000000 ____D C:\Program Files (x86)\Dropbox Folder Sync
2014-01-24 08:41 - 2014-01-24 08:41 - 00874050 _____ (Sowrabh & Satyadeep                                         ) C:\Users\Sunny\Downloads\DropboxFolderSync-2.7-Setup.exe
2014-01-22 14:14 - 2014-01-26 08:23 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\vlc
2014-01-22 09:13 - 2014-01-22 09:13 - 00001066 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-22 09:12 - 2014-01-22 09:12 - 24097311 _____ C:\Users\Sunny\Downloads\vlc-2.1.2-win32.exe
2014-01-22 09:07 - 2014-01-22 09:12 - 00000000 ____D C:\Program Files\VideoLAN
2014-01-22 09:06 - 2014-01-22 09:06 - 00614784 _____ (Chip Digital GmbH) C:\Users\Sunny\Downloads\VLC media player 64 Bit - CHIP-Downloader.exe
2014-01-21 19:46 - 2014-01-21 19:46 - 00232596 _____ C:\Users\Sunny\Downloads\l07
2014-01-21 19:44 - 2014-01-21 19:44 - 00039144 _____ C:\Users\Sunny\Downloads\ab07
2014-01-21 18:19 - 2014-01-21 18:19 - 00058471 _____ C:\Users\Sunny\Downloads\multi01
2014-01-21 16:48 - 2014-01-21 16:48 - 00118293 _____ C:\Users\Sunny\Downloads\l06
2014-01-21 16:44 - 2014-01-21 16:44 - 00038856 _____ C:\Users\Sunny\Downloads\ab06
2014-01-21 16:19 - 2014-01-21 16:19 - 00633802 _____ C:\Users\Sunny\Downloads\multi10(1)
2014-01-20 17:32 - 2014-01-20 17:32 - 00229443 _____ C:\Users\Sunny\Downloads\l05
2014-01-20 17:32 - 2014-01-20 17:32 - 00037275 _____ C:\Users\Sunny\Downloads\ab05
2014-01-19 12:53 - 2014-01-19 12:53 - 00202567 _____ C:\Users\Sunny\Downloads\l04
2014-01-19 12:47 - 2014-01-19 12:47 - 00060298 _____ C:\Users\Sunny\Downloads\ab04
2014-01-19 12:46 - 2014-01-19 12:46 - 02074800 _____ C:\Users\Sunny\Downloads\multi06(1)
2014-01-19 11:34 - 2014-01-19 11:34 - 00202945 _____ C:\Users\Sunny\Downloads\l02(2)
2014-01-19 11:34 - 2014-01-19 11:34 - 00124074 _____ C:\Users\Sunny\Downloads\l03
2014-01-19 11:33 - 2014-01-19 11:33 - 00036600 _____ C:\Users\Sunny\Downloads\ab03
2014-01-18 12:40 - 2014-01-18 12:40 - 00202945 _____ C:\Users\Sunny\Downloads\l02(1)
2014-01-18 12:32 - 2014-01-18 12:32 - 00202945 _____ C:\Users\Sunny\Downloads\l02
2014-01-18 12:30 - 2014-01-18 12:30 - 00034656 _____ C:\Users\Sunny\Downloads\ab02
2014-01-18 09:38 - 2014-01-18 09:38 - 01012390 _____ C:\Users\Sunny\Downloads\multi8
2014-01-18 09:38 - 2014-01-18 09:38 - 00633802 _____ C:\Users\Sunny\Downloads\multi10
2014-01-18 09:38 - 2014-01-18 09:38 - 00616239 _____ C:\Users\Sunny\Downloads\multi04
2014-01-18 09:37 - 2014-01-18 09:37 - 02074800 _____ C:\Users\Sunny\Downloads\multi06
2014-01-18 09:37 - 2014-01-18 09:37 - 01031862 _____ C:\Users\Sunny\Downloads\multi07
2014-01-18 09:37 - 2014-01-18 09:37 - 00795097 _____ C:\Users\Sunny\Downloads\multi08
2014-01-18 09:37 - 2014-01-18 09:37 - 00540666 _____ C:\Users\Sunny\Downloads\multi09
2014-01-18 09:36 - 2014-01-18 09:36 - 00572440 _____ C:\Users\Sunny\Downloads\multi05
2014-01-17 18:24 - 2014-01-17 18:24 - 00131376 _____ C:\Users\Sunny\Downloads\ab01
2014-01-17 18:23 - 2014-01-17 18:23 - 00135520 _____ C:\Users\Sunny\Downloads\l01
2014-01-17 11:15 - 2014-01-17 11:15 - 00094015 _____ C:\Users\Sunny\Downloads\2011-innov-wikid
2014-01-16 15:42 - 2014-01-16 15:42 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2014-01-16 15:42 - 2014-01-16 15:42 - 00000000 ____D C:\ProgramData\APN
2014-01-16 15:42 - 2014-01-16 15:42 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2014-01-16 15:40 - 2014-01-16 15:39 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-16 15:40 - 2014-01-16 15:39 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-16 15:40 - 2014-01-16 15:39 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-16 15:40 - 2014-01-16 15:39 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-16 15:38 - 2014-01-16 15:38 - 00921000 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jxpiinstall(4).exe
2014-01-16 15:27 - 2014-01-16 15:28 - 30796712 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jre-7u51-windows-x64.exe
2014-01-16 15:21 - 2014-01-16 15:21 - 29141928 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jre-7u51-windows-i586.exe
2014-01-16 15:16 - 2014-01-16 15:17 - 00347816 _____ (Microsoft Corporation) C:\Users\Sunny\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.38313308971334608.1.1.Run.exe
2014-01-16 14:59 - 2014-01-16 14:59 - 00921000 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jxpiinstall(3).exe
2014-01-16 08:14 - 2014-01-16 08:14 - 00921000 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jxpiinstall(2).exe
2014-01-16 07:39 - 2014-01-16 07:40 - 00005327 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-16 07:21 - 2014-01-16 07:21 - 00921000 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jxpiinstall(1).exe
2014-01-09 22:54 - 2014-01-13 22:17 - 00000000 ____D C:\Users\Sunny\Desktop\mlp
2014-01-05 18:14 - 2014-01-05 18:14 - 00001210 _____ C:\Users\Sunny\Desktop\Amazon Cloud Player.lnk
2014-01-05 18:14 - 2014-01-05 18:14 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Cloud Player
2014-01-05 18:14 - 2014-01-05 18:14 - 00000000 ____D C:\Users\Sunny\AppData\Local\Amazon Cloud Player
2014-01-05 18:13 - 2014-01-05 18:14 - 36152456 _____ (Amazon) C:\Users\Sunny\Downloads\AmazonCloudPlayerInstaller_399.exe
2014-01-04 10:24 - 2014-01-08 08:28 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\elsterformular
2014-01-04 10:23 - 2014-01-08 08:28 - 00000000 ____D C:\ProgramData\elsterformular
2014-01-04 10:22 - 2014-01-04 10:22 - 69755760 _____ (Landesfinanzdirektion Thüringen) C:\Users\Sunny\Downloads\ElsterFormular-14.4.20130909p.exe


==================== One Month Modified Files and Folders =======

2014-01-27 13:42 - 2014-01-27 13:40 - 00023380 _____ C:\Users\Sunny\Downloads\FRST.txt
2014-01-27 13:42 - 2011-12-30 17:28 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\Dropbox
2014-01-27 13:38 - 2014-01-27 13:38 - 00000000 ____D C:\FRST
2014-01-27 13:37 - 2014-01-27 13:37 - 02078208 _____ (Farbar) C:\Users\Sunny\Downloads\FRST64.exe
2014-01-27 13:37 - 2014-01-27 13:37 - 00000472 _____ C:\Users\Sunny\Downloads\defogger_disable.log
2014-01-27 13:37 - 2014-01-27 13:37 - 00000000 _____ C:\Users\Sunny\defogger_reenable
2014-01-27 13:37 - 2011-03-29 11:22 - 00000000 ____D C:\Users\Sunny
2014-01-27 13:36 - 2014-01-27 13:34 - 00050477 _____ C:\Users\Sunny\Downloads\Defogger.exe
2014-01-27 13:29 - 2013-12-06 21:14 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-27 13:28 - 2011-12-30 17:32 - 00000000 ___RD C:\Users\Sunny\Dropbox
2014-01-27 13:04 - 2012-04-14 18:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-27 13:01 - 2011-03-29 11:21 - 01076187 _____ C:\Windows\WindowsUpdate.log
2014-01-27 13:00 - 2009-07-14 05:45 - 00013664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-27 13:00 - 2009-07-14 05:45 - 00013664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-27 12:55 - 2013-12-06 21:14 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-27 12:52 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-27 12:52 - 2009-07-14 05:51 - 00107996 _____ C:\Windows\setupact.log
2014-01-27 08:22 - 2014-01-27 08:22 - 00074703 _____ C:\Windows\SysWOW64\mfc45.dll
2014-01-27 08:22 - 2014-01-27 08:22 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\iolo
2014-01-27 08:22 - 2014-01-27 08:22 - 00000000 ____D C:\ProgramData\iolo
2014-01-27 08:22 - 2010-11-26 02:46 - 00000000 ____D C:\Program Files (x86)\Sony
2014-01-27 08:17 - 2011-03-29 11:27 - 00000000 ____D C:\Update
2014-01-26 19:46 - 2014-01-26 19:46 - 00136097 _____ C:\Users\Sunny\Downloads\l09
2014-01-26 19:45 - 2014-01-26 19:45 - 00055906 _____ C:\Users\Sunny\Downloads\ab09
2014-01-26 12:14 - 2014-01-26 12:14 - 00000000 ___DL C:\Users\Sunny\Desktop\statistik Übungsblätter lösungen mit kommentar
2014-01-26 08:51 - 2013-10-07 08:07 - 00000000 ____D C:\Users\Sunny\Desktop\Bilder ab 2013
2014-01-26 08:43 - 2014-01-26 08:43 - 00000000 ___DL C:\Users\Sunny\Desktop\klin seminar hausarbeit mbct
2014-01-26 08:33 - 2014-01-26 08:33 - 00000000 ___DL C:\Users\Sunny\Desktop\Literatur Seminar Kognition
2014-01-26 08:23 - 2014-01-22 14:14 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\vlc
2014-01-25 16:57 - 2014-01-25 16:57 - 00105732 _____ C:\Users\Sunny\Downloads\l08
2014-01-25 16:56 - 2014-01-25 16:56 - 00046968 _____ C:\Users\Sunny\Downloads\ab08
2014-01-25 09:35 - 2012-10-27 07:50 - 00148446 _____ C:\test.xml
2014-01-24 08:44 - 2014-01-24 08:44 - 00000000 ___DL C:\Users\Sunny\Desktop\MASTER FREIBURG
2014-01-24 08:43 - 2014-01-24 08:43 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\Dropbox Folder Sync
2014-01-24 08:43 - 2014-01-24 08:43 - 00000000 ____D C:\Users\Sunny\AppData\Local\Dropbox_Folder_Sync
2014-01-24 08:43 - 2014-01-24 08:43 - 00000000 ____D C:\Program Files (x86)\Dropbox Folder Sync
2014-01-24 08:41 - 2014-01-24 08:41 - 00874050 _____ (Sowrabh & Satyadeep                                         ) C:\Users\Sunny\Downloads\DropboxFolderSync-2.7-Setup.exe
2014-01-23 07:36 - 2010-11-26 02:37 - 00278484 _____ C:\Windows\PFRO.log
2014-01-22 09:13 - 2014-01-22 09:13 - 00001066 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-22 09:13 - 2011-04-07 18:36 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2014-01-22 09:12 - 2014-01-22 09:12 - 24097311 _____ C:\Users\Sunny\Downloads\vlc-2.1.2-win32.exe
2014-01-22 09:12 - 2014-01-22 09:07 - 00000000 ____D C:\Program Files\VideoLAN
2014-01-22 09:06 - 2014-01-22 09:06 - 00614784 _____ (Chip Digital GmbH) C:\Users\Sunny\Downloads\VLC media player 64 Bit - CHIP-Downloader.exe
2014-01-21 21:27 - 2011-04-05 21:40 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\Skype
2014-01-21 19:46 - 2014-01-21 19:46 - 00232596 _____ C:\Users\Sunny\Downloads\l07
2014-01-21 19:44 - 2014-01-21 19:44 - 00039144 _____ C:\Users\Sunny\Downloads\ab07
2014-01-21 18:19 - 2014-01-21 18:19 - 00058471 _____ C:\Users\Sunny\Downloads\multi01
2014-01-21 16:48 - 2014-01-21 16:48 - 00118293 _____ C:\Users\Sunny\Downloads\l06
2014-01-21 16:44 - 2014-01-21 16:44 - 00038856 _____ C:\Users\Sunny\Downloads\ab06
2014-01-21 16:19 - 2014-01-21 16:19 - 00633802 _____ C:\Users\Sunny\Downloads\multi10(1)
2014-01-20 17:32 - 2014-01-20 17:32 - 00229443 _____ C:\Users\Sunny\Downloads\l05
2014-01-20 17:32 - 2014-01-20 17:32 - 00037275 _____ C:\Users\Sunny\Downloads\ab05
2014-01-19 12:53 - 2014-01-19 12:53 - 00202567 _____ C:\Users\Sunny\Downloads\l04
2014-01-19 12:47 - 2014-01-19 12:47 - 00060298 _____ C:\Users\Sunny\Downloads\ab04
2014-01-19 12:46 - 2014-01-19 12:46 - 02074800 _____ C:\Users\Sunny\Downloads\multi06(1)
2014-01-19 11:34 - 2014-01-19 11:34 - 00202945 _____ C:\Users\Sunny\Downloads\l02(2)
2014-01-19 11:34 - 2014-01-19 11:34 - 00124074 _____ C:\Users\Sunny\Downloads\l03
2014-01-19 11:33 - 2014-01-19 11:33 - 00036600 _____ C:\Users\Sunny\Downloads\ab03
2014-01-18 12:40 - 2014-01-18 12:40 - 00202945 _____ C:\Users\Sunny\Downloads\l02(1)
2014-01-18 12:32 - 2014-01-18 12:32 - 00202945 _____ C:\Users\Sunny\Downloads\l02
2014-01-18 12:30 - 2014-01-18 12:30 - 00034656 _____ C:\Users\Sunny\Downloads\ab02
2014-01-18 11:00 - 2010-11-26 11:33 - 00697098 _____ C:\Windows\system32\perfh007.dat
2014-01-18 11:00 - 2010-11-26 11:33 - 00148362 _____ C:\Windows\system32\perfc007.dat
2014-01-18 11:00 - 2009-07-14 06:13 - 01613412 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-18 09:38 - 2014-01-18 09:38 - 01012390 _____ C:\Users\Sunny\Downloads\multi8
2014-01-18 09:38 - 2014-01-18 09:38 - 00633802 _____ C:\Users\Sunny\Downloads\multi10
2014-01-18 09:38 - 2014-01-18 09:38 - 00616239 _____ C:\Users\Sunny\Downloads\multi04
2014-01-18 09:37 - 2014-01-18 09:37 - 02074800 _____ C:\Users\Sunny\Downloads\multi06
2014-01-18 09:37 - 2014-01-18 09:37 - 01031862 _____ C:\Users\Sunny\Downloads\multi07
2014-01-18 09:37 - 2014-01-18 09:37 - 00795097 _____ C:\Users\Sunny\Downloads\multi08
2014-01-18 09:37 - 2014-01-18 09:37 - 00540666 _____ C:\Users\Sunny\Downloads\multi09
2014-01-18 09:36 - 2014-01-18 09:36 - 00572440 _____ C:\Users\Sunny\Downloads\multi05
2014-01-17 18:24 - 2014-01-17 18:24 - 00131376 _____ C:\Users\Sunny\Downloads\ab01
2014-01-17 18:23 - 2014-01-17 18:23 - 00135520 _____ C:\Users\Sunny\Downloads\l01
2014-01-17 11:15 - 2014-01-17 11:15 - 00094015 _____ C:\Users\Sunny\Downloads\2011-innov-wikid
2014-01-16 15:42 - 2014-01-16 15:42 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2014-01-16 15:42 - 2014-01-16 15:42 - 00000000 ____D C:\ProgramData\APN
2014-01-16 15:42 - 2014-01-16 15:42 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2014-01-16 15:40 - 2013-10-20 09:46 - 00000000 ____D C:\ProgramData\Oracle
2014-01-16 15:39 - 2014-01-16 15:40 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-16 15:39 - 2014-01-16 15:40 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-16 15:39 - 2014-01-16 15:40 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-16 15:39 - 2014-01-16 15:40 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-16 15:39 - 2010-11-26 03:14 - 00000000 ____D C:\Program Files (x86)\Java
2014-01-16 15:38 - 2014-01-16 15:38 - 00921000 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jxpiinstall(4).exe
2014-01-16 15:36 - 2013-09-29 12:25 - 00000000 ____D C:\Users\Sunny\AppData\Local\CrashDumps
2014-01-16 15:28 - 2014-01-16 15:27 - 30796712 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jre-7u51-windows-x64.exe
2014-01-16 15:21 - 2014-01-16 15:21 - 29141928 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jre-7u51-windows-i586.exe
2014-01-16 15:17 - 2014-01-16 15:16 - 00347816 _____ (Microsoft Corporation) C:\Users\Sunny\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.38313308971334608.1.1.Run.exe
2014-01-16 14:59 - 2014-01-16 14:59 - 00921000 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jxpiinstall(3).exe
2014-01-16 08:14 - 2014-01-16 08:14 - 00921000 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jxpiinstall(2).exe
2014-01-16 07:51 - 2011-12-30 17:32 - 00001019 _____ C:\Users\Sunny\Desktop\Dropbox.lnk
2014-01-16 07:51 - 2011-12-30 17:29 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-16 07:51 - 2011-03-29 11:24 - 00000000 ___RD C:\Users\Sunny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-16 07:40 - 2014-01-16 07:39 - 00005327 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-16 07:21 - 2014-01-16 07:21 - 00921000 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jxpiinstall(1).exe
2014-01-16 00:55 - 2011-03-29 17:10 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-16 00:54 - 2013-08-16 02:03 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 00:50 - 2011-03-29 16:36 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 16:16 - 2013-12-06 21:15 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-13 22:17 - 2014-01-09 22:54 - 00000000 ____D C:\Users\Sunny\Desktop\mlp
2014-01-13 22:17 - 2013-10-07 07:58 - 00000000 ____D C:\Users\Sunny\Desktop\Uni Schatz
2014-01-09 23:11 - 2013-12-12 21:56 - 00000000 ____D C:\Users\Sunny\Desktop\Bewerbung Hiwi Praktikum
2014-01-08 14:34 - 2010-10-12 18:48 - 00000000 ____D C:\ProgramData\Sony Corporation
2014-01-08 14:25 - 2010-11-26 02:46 - 00000000 ____D C:\Program Files\Sony
2014-01-08 08:59 - 2010-11-26 02:46 - 00000000 ____D C:\Windows\System32\Tasks\SONY
2014-01-08 08:59 - 2010-10-12 18:14 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-08 08:47 - 2011-12-12 17:22 - 00000000 ____D C:\ProgramData\TechSmith
2014-01-08 08:47 - 2011-12-12 17:22 - 00000000 ____D C:\Program Files (x86)\TechSmith
2014-01-08 08:37 - 2013-08-15 15:59 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\Tobit
2014-01-08 08:34 - 2013-12-26 18:25 - 00000000 ____D C:\Program Files (x86)\Nike
2014-01-08 08:34 - 2013-04-14 18:58 - 00000000 ____D C:\Windows\SysWOW64\SupportAppCB
2014-01-08 08:33 - 2013-04-14 18:59 - 00000136 _____ C:\GPEapSim.log
2014-01-08 08:32 - 2013-08-23 16:45 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-08 08:28 - 2014-01-04 10:24 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\elsterformular
2014-01-08 08:28 - 2014-01-04 10:23 - 00000000 ____D C:\ProgramData\elsterformular
2014-01-08 08:26 - 2011-03-29 11:22 - 00000000 ____D C:\Windows\pss
2014-01-05 18:14 - 2014-01-05 18:14 - 00001210 _____ C:\Users\Sunny\Desktop\Amazon Cloud Player.lnk
2014-01-05 18:14 - 2014-01-05 18:14 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Cloud Player
2014-01-05 18:14 - 2014-01-05 18:14 - 00000000 ____D C:\Users\Sunny\AppData\Local\Amazon Cloud Player
2014-01-05 18:14 - 2014-01-05 18:13 - 36152456 _____ (Amazon) C:\Users\Sunny\Downloads\AmazonCloudPlayerInstaller_399.exe
2014-01-04 10:22 - 2014-01-04 10:22 - 69755760 _____ (Landesfinanzdirektion Thüringen) C:\Users\Sunny\Downloads\ElsterFormular-14.4.20130909p.exe
2013-12-30 13:47 - 2012-09-14 12:55 - 00000000 ____D C:\Program Files (x86)\JDownloader


Some content of TEMP:
====================
C:\Users\Sunny\AppData\Local\Temp\APNSetup.exe
C:\Users\Sunny\AppData\Local\Temp\avgnt.exe
C:\Users\Sunny\AppData\Local\Temp\DelayInst.exe
C:\Users\Sunny\AppData\Local\Temp\installservice.exe
C:\Users\Sunny\AppData\Local\Temp\TOBITCLT.DLL
C:\Users\Sunny\AppData\Local\Temp\vlc-2.1.2-win32.exe
C:\Users\Sunny\AppData\Local\Temp\vpnclient_setup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-19 19:20

==================== End Of Log ============================
         

Addition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-01-2014
Ran by Sunny at 2014-01-27 13:43:52
Running from C:\Users\Sunny\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (x32 Version:  - Microsoft)
Adobe AIR (x32 Version: 1.5.3.9130 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.3.9130 - Adobe Systems Inc.) Hidden
Adobe Digital Editions (x32 Version:  - )
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Photoshop Elements 8.0 (x32 Version: 8.0 - Adobe Systems Incorporated)
Adobe Photoshop Elements 8.0 (x32 Version: 8.0 - Adobe Systems Incorporated) Hidden
Adobe Premiere Elements 8.0 (x32 Version: 8.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 8.0 (x32 Version: 8.0.1 - Adobe Systems Incorporated) Hidden
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8 - Adobe Systems Incorporated)
Alps Pointing-device for VAIO (Version:  - ALPS ELECTRIC CO., LTD.)
Amazon Cloud Player (HKCU Version: 2.2.0.399 - Amazon Services LLC)
Apple Mobile Device Support (Version: 6.1.0.13 - Apple Inc.)
ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.1.115 - ArcSoft)
ArcSoft WebCam Companion 3 (x32 Version: 3.0.21.368 - ArcSoft)
Ask Toolbar (x32 Version: 12.10.0.19 - APN, LLC) <==== ATTENTION
ATI Catalyst Install Manager (Version: 3.0.769.0 - ATI Technologies, Inc.)
Avanquest update (x32 Version: 1.29 - Avanquest Software)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (x32 Version: 1.7.2.11 - Canon Inc.)
Canon Internet Library for ZoomBrowser EX (x32 Version: 1.6.3.9 - Canon Inc.)
Canon MOV Decoder (x32 Version: 1.5.0.7 - Canon Inc.)
Canon MOV Encoder (x32 Version: 1.3.1.3 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (x32 Version: 3.4.1.9 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.8 (x32 Version: 3.8.1.0 - Canon Inc.)
Canon Utilities EOS Utility (x32 Version: 2.8.1.0 - Canon Inc.)
Canon Utilities PhotoStitch (x32 Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (x32 Version: 1.7.0.0 - Canon Inc.)
Canon Utilities WFT Utility (x32 Version: 3.5.1.1 - Canon Inc.)
Canon Utilities ZoomBrowser EX (x32 Version: 6.5.1.15 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (x32 Version: 1.3.0.4 - Canon Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (x32 Version: 2010.0920.2143.37117 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0920.2143.37117 - ATI) Hidden
Catalyst Control Center Graphics Full New (x32 Version: 2010.0920.2143.37117 - ATI) Hidden
Catalyst Control Center Graphics Light (x32 Version: 2010.0920.2143.37117 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0920.2143.37117 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0920.2143.37117 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0209.16.306 - ATI Technologies, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0920.2143.37117 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0920.2143.37117 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help English (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help French (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help German (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0920.2143.37117 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2010.0920.2143.37117 - ATI) Hidden
CDBurnerXP (Version: 4.3.8.2523 - CDBurnerXP)
Cisco Systems VPN Client 5.0.07.0440 (Version: 5.0.7 - Cisco Systems, Inc.)
Citavi (x32 Version: 3.3.0.0 - Swiss Academic Software)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (x32 Version: 4.40.2.0131 - DT Soft Ltd)
DivX-Setup (x32 Version: 2.4.1.4 - DivX, LLC)
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
Dropbox Folder Sync addon (x32 Version: 2.7 - Sowrabh & Satyadeep)
Duden-Rechtschreibprüfung PLUS (x32 Version: 9.0.0 - Bibliographisches Institut GmbH)
ESET Online Scanner v3 (x32 Version:  - )
Free Audio CD Burner version 1.4.7 (x32 Version:  - DVDVideoSoft Limited.)
Free YouTube to MP3 Converter version 3.11.30.903 (x32 Version: 3.11.30.903 - DVDVideoSoft Ltd.)
GIMP 2.6.11 (x32 Version: 2.6.11 - The GIMP Team)
Google Chrome (x32 Version: 32.0.1700.76 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
HTC Driver Installer (x32 Version: 3.0.0.007 - HTC Corporation)
IBM SPSS Statistics 20 (Version: 20.0.0.0 - IBM Corp)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.02.00.1002 - Intel Corporation)
Janitos Offline-Tarifrechner 3.2.3.2 (x32 Version:  - Fairware24)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (x32 Version: 0.9 - AppWork GmbH)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
KaloMa 5.00beta20100607 (x32 Version:  - Frank Böpple)
K-Lite Codec Pack 6.0.4 (Basic) (x32 Version: 6.0.4 - )
KODAK Create@Home Software (für dm) (x32 Version: 7.3.4392 - Digilabs)
Media Gallery (Version: 1.3.0 - Sony Corporation) Hidden
Media Gallery (x32 Version: 1.3.0.06230 - Sony Corporation) Hidden
Media Go (x32 Version: 1.7.254 - Sony)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
MobileMe Control Panel (Version: 3.1.6.0 - Apple Inc.)
MozBackup 1.5 (x32 Version:  - Pavel Cvrcek)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 24.2.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)
PDF Architect (x32 Version: 1.1.83.9982 - pdfforge GmbH)
PDFCreator (x32 Version: 1.7.0 - pdfforge)
pdfforge Toolbar v6.1 (x32 Version: 6.1 - Spigot, Inc.) <==== ATTENTION
PMB (x32 Version: 5.3.00.06040 - Sony Corporation)
PMB VAIO Edition Guide (x32 Version: 1.3.00.06040 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (Click to Disc) (Version: 3.3.00 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.3.00 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.3.00.06180 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Image Optimizer) (x32 Version: 1.3.00.06110 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Movie Story) (Version: 2.3.00 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.3.00 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.3.00.06180 - Sony Corporation) Hidden
QuickTime (x32 Version: 7.69.80.9 - Apple Inc.)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealPlayer (x32 Version:  - RealNetworks)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6034 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6098 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Skype Click to Call (x32 Version: 5.6.8442 - Skype Technologies S.A.)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
SmartSound Quicktracks for Premiere Elements 8.0 (x32 Version: 3.11.3090 - SmartSound Software Inc)
SmartSound Quicktracks for Premiere Elements 8.0 (x32 Version: 3.11.3090 - SmartSound Software Inc) Hidden
Snagit 11 (x32 Version: 11.1.0 - TechSmith Corporation)
streamWriter (x32 Version:  - )
Sweet Home 3D version 3.3 (x32 Version:  - eTeks)
Uninstall 1.0.0.1 (x32 Version:  - )
Update for 2007 Microsoft Office System (KB967642) (x32 Version:  - Microsoft)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (x32 Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32 Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32 Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (x32 Version:  - Microsoft)
VAIO - Media Gallery (x32 Version: 1.3.0.06230 - Sony Corporation)
VAIO - PMB VAIO Edition Guide (x32 Version: 1.3.00.06040 - Sony Corporation)
VAIO - PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.3.00.06180 - Sony Corporation)
VAIO - PMB VAIO Edition plug-in (VAIO Image Optimizer) (x32 Version: 1.3.00.06110 - Sony Corporation)
VAIO - PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.3.00.06180 - Sony Corporation)
VAIO Care (Version: 8.1.0.10120 - Sony Corporation)
VAIO Control Center (x32 Version: 4.3.0.05310 - Sony Corporation)
VAIO Data Restore Tool (x32 Version: 1.4.0.05240 - Sony Corporation)
VAIO Data Restore Tool (x32 Version: 1.4.0.05240 - Sony Corporation) Hidden
VAIO DVD Menu Data (x32 Version: 2.2.00.05120 - Sony Corporation)
VAIO Gate Default (x32 Version: 2.2.0.07020 - Sony Corporation)
VAIO Hardware Diagnostics (x32 Version: 4.0.0.06230 - Sony Corporation) Hidden
VAIO Media plus (Version: 2.1.0 - Sony Corporation) Hidden
VAIO Media plus (x32 Version: 2.1.0.18210 - Sony Corporation) Hidden
VAIO Media plus Opening Movie (x32 Version: 2.1.0.13220 - Sony Corporation)
VAIO Movie Story Template Data (x32 Version: 2.3.00.06040 - Sony Corporation)
VAIO Movie Story Template Data (x32 Version: 2.3.00.06040 - Sony Corporation) Hidden
VAIO Quick Web Access (x32 Version: 1.3.4.2 - Sony Corporation)
VAIO Quick Web Access (x32 Version: 1.3.4.2 - Sony Corporation) Hidden
VAIO Sample Contents (x32 Version: 1.3.0.06041 - Sony Corporation)
VAIO screensaver (x32 Version: 1.0.0.0 - Sony Europe)
VAIO Smart Network (x32 Version: 3.3.0.06080 - Sony Corporation)
VAIO Update (x32 Version: 6.3.0.08010 - Sony Corporation)
VAIO-Handbuch (x32 Version: 1.1.0.05280 - Sony Corporation)
VAIO-Support für Übertragungen (x32 Version: 1.2.0.06230 - Sony Corporation)
VC80CRTRedist - 8.0.50727.4053 (x32 Version: 1.1.0 - DivX, Inc) Hidden
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden
WIDCOMM Bluetooth Software (Version: 6.3.0.5600 - Broadcom Corporation)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Family Safety (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8 - Microsoft Corp)
Windows Mobile Device Updater Component (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
WinRAR 4.00 (64-Bit) (Version: 4.00.0 - win.rar GmbH)
Zune (Version: 04.08.2345.00 - Microsoft Corporation)
Zune (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (CHS) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (CHT) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (CSY) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (DAN) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (DEU) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (ELL) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (ESP) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (FIN) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (FRA) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (HUN) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (IND) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (ITA) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (JPN) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (KOR) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (MSL) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (NLD) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (NOR) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (PLK) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (PTB) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (PTG) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (RUS) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (SVE) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

27-01-2014 06:59:01 Windows Update
27-01-2014 07:19:58 Entfernt VAIO Care
27-01-2014 07:20:27 Installed VAIO Care.

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0D744001-3D12-4301-97A5-9358835F0739} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation)
Task: {1B06E589-315C-4192-AA1C-F3155169C5BD} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)
Task: {2C43E4FD-23A9-4DD8-9068-AC1652C34638} - System32\Tasks\SONY\SUS-BCF\Level4Month => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-05-31] (Sony Corporation)
Task: {313484B5-1FC5-4B92-B39B-6057E842910B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {34408C35-2606-4DA0-8CBE-28A054ADEA9F} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2895961250-601273062-2787159028-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2011-03-29] (RealNetworks, Inc.)
Task: {3BA1056D-659E-40C7-AC0A-EC26CD6CD062} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2013-08-01] (Sony Corporation)
Task: {456366AB-859D-4909-B5A4-6364BFDD60BC} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)
Task: {47A8752E-7B7C-4E7C-AC09-8262AA12300C} - System32\Tasks\{0B4024D0-07CD-4877-8A1E-DFE7125242D8} => Firefox.exe hxxp://ui.skype.com/ui/0/6.1.0.129.272/de/abandoninstall?page=tsProgressBar
Task: {494BF6C6-7A93-474B-B73A-FA67FDA573E2} - System32\Tasks\Sony Corporation\VAIO Care\CRMReminder => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation)
Task: {7CC377A7-E654-46F0-A369-0EE2F5B3CAC9} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)
Task: {7EC56570-5FBB-4E54-8AFE-122E3B55F2F8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-06] (Google Inc.)
Task: {97B963EB-6E26-413E-9BE5-014FECC5A532} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation)
Task: {A695121A-6688-45B6-A36D-37BFEE56C304} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-06] (Google Inc.)
Task: {BDCEEDF6-893C-48A1-BCA5-5D1BEDF85332} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2895961250-601273062-2787159028-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2011-03-29] (RealNetworks, Inc.)
Task: {C7B4D8FA-BA2C-42EA-A377-0456CF76DBF4} - System32\Tasks\SONY\VAIO Wallpaper Setting Tool\VAIO Wallpaper Setting Tool => C:\Program Files (x86)\Sony\VAIO Wallpaper Setting Tool\VWSet.exe
Task: {C87962ED-2CE3-4BF2-A9F5-4233A5357C3F} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation)
Task: {D78F4902-1D84-4140-989B-E62E91BB0F1B} - System32\Tasks\SONY\SUS-BCF\Level4Daily => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-05-31] (Sony Corporation)
Task: {ECEBEABD-E055-479B-A356-43B4CDCEFD70} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation)
Task: {EF70D49D-3769-4D23-BB8F-DD95BD592AA5} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation)
Task: {FB19DC4A-C3E5-40E3-916A-D7E3015511D6} - System32\Tasks\{57AF0F0A-156D-40A7-93BC-95DFEFE2A308} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.114/de/abandoninstall?page=tsMain
Task: {FFBEADAF-FA33-4540-9695-7281BF17B824} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2013-08-01] (Sony Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-08-12 17:55 - 2013-08-06 09:03 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2011-03-04 12:49 - 2011-03-04 12:49 - 00202752 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll
2010-11-26 02:46 - 2010-05-31 19:18 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll
2010-11-26 02:46 - 2010-05-31 19:18 - 00013312 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll
2013-01-11 17:12 - 2013-01-11 17:12 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\d89f0252d910d617de1de783a812f840\IsdiInterop.ni.dll
2010-10-12 18:14 - 2010-03-04 04:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Sunny\AppData\Roaming\Dropbox\bin\libcef.dll
2013-12-11 12:46 - 2013-12-11 12:46 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Cisco Systems VPN Adapter for 64-bit Windows
Description: Cisco Systems VPN Adapter for 64-bit Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/24/2014 08:30:12 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. "ESENT"-Fehler: -550.

Error: (01/22/2014 08:12:32 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.

Error: (01/22/2014 08:10:13 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (01/22/2014 08:08:07 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (01/22/2014 08:06:48 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (01/21/2014 05:42:54 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.

Error: (01/21/2014 05:40:41 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (01/21/2014 05:38:21 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (01/21/2014 05:37:04 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (01/19/2014 07:27:31 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.


System errors:
=============
Error: (01/27/2014 01:49:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Volumeschattenkopie" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/27/2014 01:49:37 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Volumeschattenkopie erreicht.

Error: (01/27/2014 01:49:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Volumeschattenkopie" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/27/2014 01:49:04 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Volumeschattenkopie erreicht.

Error: (01/27/2014 01:47:43 PM) (Source: DCOM) (User: )
Description: 1053VSS{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}

Error: (01/27/2014 01:47:43 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Volumeschattenkopie" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/27/2014 01:47:43 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Volumeschattenkopie erreicht.

Error: (01/27/2014 00:58:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (01/27/2014 00:52:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Apple Mobile Device" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/27/2014 00:52:24 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Apple Mobile Device erreicht.


Microsoft Office Sessions:
=========================
Error: (04/05/2013 06:49:41 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 35441 seconds with 24060 seconds of active time.  This session ended with a crash.

Error: (03/02/2013 07:05:06 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 30004 seconds with 5760 seconds of active time.  This session ended with a crash.

Error: (03/02/2013 10:44:41 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 56203 seconds with 7620 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 43%
Total physical RAM: 3950.1 MB
Available physical RAM: 2224.45 MB
Total Pagefile: 7898.33 MB
Available Pagefile: 5686.55 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:452.29 GB) (Free:208.7 GB) NTFS
Drive d: () (CDROM) (Total:1.52 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0ACF78C6)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=452 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER:

GMER 2.1.19355 - hxxp://www.gmer.net
Rootkit scan 2014-01-27 14:40:39
Windows 6.1.7600  x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 ST950032 rev.0006 465,76GB
Running: gmer.exe; Driver: C:\Users\Sunny\AppData\Local\Temp\fgtyrpog.sys


---- User code sections - GMER 2.1 ----

.text    C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe[1876] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                             0000000076071465 2 bytes [07, 76]
.text    C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe[1876] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                            00000000760714bb 2 bytes [07, 76]
.text    ...                                                                                                                                                                                                                                                 * 2
.text    C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[2016] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                      0000000076071465 2 bytes [07, 76]
.text    C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[2016] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                     00000000760714bb 2 bytes [07, 76]
.text    ...                                                                                                                                                                                                                                                 * 2
.text    C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe[2256] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                             0000000076071465 2 bytes [07, 76]
.text    C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe[2256] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                            00000000760714bb 2 bytes [07, 76]
.text    ...                                                                                                                                                                                                                                                 * 2
.text    C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe[2664] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                          0000000076071465 2 bytes [07, 76]
.text    C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe[2664] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                         00000000760714bb 2 bytes [07, 76]
.text    ...                                                                                                                                                                                                                                                 * 2
.text    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe[3988] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                        0000000076071465 2 bytes [07, 76]
.text    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe[3988] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                       00000000760714bb 2 bytes [07, 76]
.text    ...                                                                                                                                                                                                                                                 * 2
.text    C:\Users\Sunny\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe[1492] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                              0000000076071465 2 bytes [07, 76]
.text    C:\Users\Sunny\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe[1492] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                             00000000760714bb 2 bytes [07, 76]
.text    ...                                                                                                                                                                                                                                                 * 2
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4172] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                        0000000076071465 2 bytes [07, 76]
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[4172] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                       00000000760714bb 2 bytes [07, 76]
.text    ...                                                                                                                                                                                                                                                 * 2
.text    C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4220] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                               0000000076071465 2 bytes [07, 76]
.text    C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4220] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                              00000000760714bb 2 bytes [07, 76]
.text    ...                                                                                                                                                                                                                                                 * 2
.text    C:\Users\Sunny\AppData\Roaming\Dropbox\bin\Dropbox.exe[4532] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 69                                                                                                                                0000000076071465 2 bytes [07, 76]
.text    C:\Users\Sunny\AppData\Roaming\Dropbox\bin\Dropbox.exe[4532] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 155                                                                                                                               00000000760714bb 2 bytes [07, 76]
.text    ...                                                                                                                                                                                                                                                 * 2
---- Processes - GMER 2.1 ----

Library  \\?\C:\ProgramData\Microsoft\Windows\DRM\Cache\Indiv_SID_S-1-5-20\Indiv01_64.key (*** suspicious ***) @ C:\Program Files\Windows Media Player\wmpnetwk.exe [4044] (Individualized Black Box DLL/Microsoft Corporation SIGNED)(2011-03-30 20:52:02)  000000000ac00000
Library  C:\Users\Sunny\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (*** suspicious ***) @ C:\Windows\Explorer.EXE [1396]                                                                                                                                000007fef2fe0000
Process  C:\Users\Sunny\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe (*** suspicious ***) @ C:\Users\Sunny\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [1492]                                                                     00000000011b0000
Process  C:\Users\Sunny\AppData\Roaming\Dropbox\bin\Dropbox.exe (*** suspicious ***) @ C:\Users\Sunny\AppData\Roaming\Dropbox\bin\Dropbox.exe [4532]                                                                                                         0000000000400000
Library  C:\Users\Sunny\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll (*** suspicious ***) @ C:\Users\Sunny\AppData\Roaming\Dropbox\bin\Dropbox.exe [4532]                                                                                                    00000000040e0000
Library  C:\Users\Sunny\AppData\Roaming\Dropbox\bin\libcef.dll (*** suspicious ***) @ C:\Users\Sunny\AppData\Roaming\Dropbox\bin\Dropbox.exe [4532](2013-10-18 23:55:02)                                                                                     0000000067000000
Library  C:\Users\Sunny\AppData\Roaming\Dropbox\bin\icudt.dll (*** suspicious ***) @ C:\Users\Sunny\AppData\Roaming\Dropbox\bin\Dropbox.exe [4532]                                                                                                           0000000069e70000

---- Registry - GMER 2.1 ----

Reg      HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0c6076a27b11                                                                                                                                                                         
Reg      HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\889ffaddf14e                                                                                                                                                                         
Reg      HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\889ffaddf14e@f8db7ff96252                                                                                                                                                            0xFC 0x76 0xF8 0x1A ...
Reg      HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\889ffaddf14e@6cf373135363                                                                                                                                                            0xA3 0x5E 0x45 0xC9 ...
Reg      HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c0cb38ed02c9                                                                                                                                                                         
Reg      HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0c6076a27b11 (not active ControlSet)                                                                                                                                                     
Reg      HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\889ffaddf14e (not active ControlSet)                                                                                                                                                     
Reg      HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\889ffaddf14e@f8db7ff96252                                                                                                                                                                0xFC 0x76 0xF8 0x1A ...
Reg      HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\889ffaddf14e@6cf373135363                                                                                                                                                                0xA3 0x5E 0x45 0xC9 ...
Reg      HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c0cb38ed02c9 (not active ControlSet)                                                                                                                                                     

---- EOF - GMER 2.1 ----
         

Hi,

Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)

Gewerblich genutzter Rechner? Oder gibt es eine andere Erklärung dafür, dass du eine Enterprise Edition von MS Office installiert hast, die es eigentlich nur Firmenkunden mit teuren Volumenlizenzverträgen gibt?


Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Hi,

Gewerblich genutzter Rechner?

hab die Version von meinem Chef bekommen und installiert. Wusste nicht, dass die Lizenz so teuer ist.

Ich habe einmal AntiVir scannen lassen. Hat aber kein Fund hervor gebracht. Hier der Log:

Avira Free Antivirus
Erstellungsdatum der Reportdatei: Sonntag, 26. Januar 2014  10:04


Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer   : Avira Free Antivirus
Seriennummer   : 0000149996-ADJIE-0000001
Plattform      : Windows 7 Home Premium
Windowsversion : (plain)  [6.1.7600]
Boot Modus     : Normal gebootet
Benutzername   : Sunny
Computername   : SUNNY-VAIO

Versionsinformationen:
BUILD.DAT      : 14.0.2.286           Bytes  09.12.2013 11:37:00
AVSCAN.EXE     : 14.0.2.254   1032760 Bytes  17.12.2013 12:38:47
AVSCANRC.DLL   : 14.0.2.180     62008 Bytes  17.12.2013 12:38:47
LUKE.DLL       : 14.0.2.234     65592 Bytes  17.12.2013 12:39:36
AVSCPLR.DLL    : 14.0.2.254    124472 Bytes  17.12.2013 12:38:47
AVREG.DLL      : 14.0.2.212    250424 Bytes  17.12.2013 12:38:47
avlode.dll     : 14.0.2.254    540216 Bytes  17.12.2013 12:38:46
avlode.rdf     : 13.0.1.66      56973 Bytes  15.01.2014 15:11:51
VBASE000.VDF   : 7.11.70.0   66736640 Bytes  04.04.2013 13:46:57
VBASE001.VDF   : 7.11.74.226  2201600 Bytes  30.04.2013 09:02:41
VBASE002.VDF   : 7.11.80.60   2751488 Bytes  28.05.2013 14:42:09
VBASE003.VDF   : 7.11.85.214  2162688 Bytes  21.06.2013 19:00:58
VBASE004.VDF   : 7.11.91.176  3903488 Bytes  23.07.2013 18:04:54
VBASE005.VDF   : 7.11.98.186  6822912 Bytes  29.08.2013 11:19:43
VBASE006.VDF   : 7.11.103.230  2293248 Bytes  24.09.2013 11:19:45
VBASE007.VDF   : 7.11.116.38  5485568 Bytes  28.11.2013 22:06:03
VBASE008.VDF   : 7.11.126.50  3615744 Bytes  22.01.2014 13:46:33
VBASE009.VDF   : 7.11.126.51     2048 Bytes  22.01.2014 13:46:33
VBASE010.VDF   : 7.11.126.52     2048 Bytes  22.01.2014 13:46:33
VBASE011.VDF   : 7.11.126.53     2048 Bytes  22.01.2014 13:46:33
VBASE012.VDF   : 7.11.126.54     2048 Bytes  22.01.2014 13:46:33
VBASE013.VDF   : 7.11.126.55     2048 Bytes  22.01.2014 13:46:33
VBASE014.VDF   : 7.11.126.251   188928 Bytes  25.01.2014 13:34:31
VBASE015.VDF   : 7.11.126.252     2048 Bytes  25.01.2014 13:34:31
VBASE016.VDF   : 7.11.126.253     2048 Bytes  25.01.2014 13:34:31
VBASE017.VDF   : 7.11.126.254     2048 Bytes  25.01.2014 13:34:31
VBASE018.VDF   : 7.11.126.255     2048 Bytes  25.01.2014 13:34:31
VBASE019.VDF   : 7.11.127.0      2048 Bytes  25.01.2014 13:34:31
VBASE020.VDF   : 7.11.127.1      2048 Bytes  25.01.2014 13:34:31
VBASE021.VDF   : 7.11.127.2      2048 Bytes  25.01.2014 13:34:31
VBASE022.VDF   : 7.11.127.3      2048 Bytes  25.01.2014 13:34:31
VBASE023.VDF   : 7.11.127.4      2048 Bytes  25.01.2014 13:34:31
VBASE024.VDF   : 7.11.127.5      2048 Bytes  25.01.2014 13:34:31
VBASE025.VDF   : 7.11.127.6      2048 Bytes  25.01.2014 13:34:31
VBASE026.VDF   : 7.11.127.7      2048 Bytes  25.01.2014 13:34:31
VBASE027.VDF   : 7.11.127.8      2048 Bytes  25.01.2014 13:34:31
VBASE028.VDF   : 7.11.127.9      2048 Bytes  25.01.2014 13:34:31
VBASE029.VDF   : 7.11.127.10     2048 Bytes  25.01.2014 13:34:31
VBASE030.VDF   : 7.11.127.11     2048 Bytes  25.01.2014 13:34:31
VBASE031.VDF   : 7.11.127.54    72704 Bytes  25.01.2014 19:45:21
Engineversion  : 8.2.12.180
AEVDF.DLL      : 8.1.3.4       102774 Bytes  13.06.2013 13:22:14
AESCRIPT.DLL   : 8.1.4.182     520574 Bytes  23.01.2014 13:55:10
AESCN.DLL      : 8.1.10.6      131447 Bytes  11.12.2013 15:08:52
AESBX.DLL      : 8.2.20.6     1331575 Bytes  13.01.2014 14:32:44
AERDL.DLL      : 8.2.0.138     704888 Bytes  02.12.2013 15:01:03
AEPACK.DLL     : 8.3.3.12      774521 Bytes  23.01.2014 13:55:09
AEOFFICE.DLL   : 8.1.2.76      205181 Bytes  12.08.2013 16:57:21
AEHEUR.DLL     : 8.1.4.882    6451578 Bytes  23.01.2014 13:55:08
AEHELP.DLL     : 8.1.27.10     266618 Bytes  24.11.2013 13:47:01
AEGEN.DLL      : 8.1.7.22      446839 Bytes  15.01.2014 15:11:51
AEEXP.DLL      : 8.4.1.176     418168 Bytes  23.01.2014 13:55:11
AEEMU.DLL      : 8.1.3.2       393587 Bytes  07.09.2012 18:25:49
AECORE.DLL     : 8.1.33.0      225657 Bytes  11.12.2013 15:08:51
AEBB.DLL       : 8.1.1.4        53619 Bytes  05.11.2012 15:38:33
AVWINLL.DLL    : 14.0.2.180     23608 Bytes  17.12.2013 12:38:41
AVPREF.DLL     : 14.0.2.180     48696 Bytes  17.12.2013 12:38:46
AVREP.DLL      : 14.0.2.180    175672 Bytes  17.12.2013 12:38:47
AVARKT.DLL     : 14.0.2.254    256056 Bytes  17.12.2013 12:38:42
AVEVTLOG.DLL   : 14.0.2.180    165944 Bytes  17.12.2013 12:38:43
SQLITE3.DLL    : 3.7.0.1       394824 Bytes  06.08.2013 08:03:19
AVSMTP.DLL     : 14.0.2.180     60472 Bytes  17.12.2013 12:38:47
NETNT.DLL      : 14.0.2.180     13368 Bytes  17.12.2013 12:39:37
RCIMAGE.DLL    : 14.0.2.180   4786744 Bytes  17.12.2013 12:38:41
RCTEXT.DLL     : 14.0.2.270     73272 Bytes  17.12.2013 12:38:41

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: ShlExt
Konfigurationsdatei...................: C:\Users\Sunny\AppData\Local\Temp\6c743eae.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, 
Durchsuche aktive Programme...........: aus
Durchsuche Registrierung..............: aus
Suche nach Rootkits...................: aus
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Intelligente Dateiauswahl
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert

Beginn des Suchlaufs: Sonntag, 26. Januar 2014  10:04

Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\'


Ende des Suchlaufs: Sonntag, 26. Januar 2014  15:56
Benötigte Zeit:  5:52:06 Stunde(n)

Der Suchlauf wurde vollständig durchgeführt.

  38936 Verzeichnisse wurden überprüft
 2202940 Dateien wurden geprüft
      0 Viren bzw. unerwünschte Programme wurden gefunden
      0 Dateien wurden als verdächtig eingestuft
      0 Dateien wurden gelöscht
      0 Viren bzw. unerwünschte Programme wurden repariert
      0 Dateien wurden in die Quarantäne verschoben
      0 Dateien wurden umbenannt
      0 Dateien konnten nicht durchsucht werden
 2202940 Dateien ohne Befall
  13379 Archive wurden durchsucht
      0 Warnungen
      0 Hinweise
         

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

• Starte bitte die mbar.exe.
• Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
• Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
• Klicke auf den CleanUp Button und erlaube den Neustart.
• Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
• Nach dem Neustart starte die mbar.exe erneut.
• Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

nichts gefunden...

Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.01.27.06

Windows 7 x64 NTFS
Internet Explorer 8.0.7600.16385
Sunny :: SUNNY-VAIO [administrator]

27.01.2014 15:52:40
mbar-log-2014-01-27 (15-52-40).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 253330
Time elapsed: 1 hour(s), 13 minute(s), 24 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         

Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

danke schonmal für deine Hilfe! Hier die Logs:

AdwCleaner:

# AdwCleaner v3.017 - Bericht erstellt am 28/01/2014 um 10:45:19
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium  (64 bits)
# Benutzername : Sunny - SUNNY-VAIO
# Gestartet von : C:\Users\Sunny\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\Users\Sunny\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\Sunny\AppData\Roaming\pdfforge
Ordner Gelöscht : C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
Datei Gelöscht : C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\searchplugins\ask-search.xml

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\Software\DeviceVM
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DeviceVM

***** [ Browser ] *****

-\\ Internet Explorer v8.0.7600.17267


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\prefs.js ]


-\\ Google Chrome v32.0.1700.76

[ Datei : C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2791 octets] - [28/01/2014 10:42:27]
AdwCleaner[S0].txt - [2606 octets] - [28/01/2014 10:45:19]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2666 octets] ##########
         

JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Home Premium x64
Ran by Sunny on 28.01.2014 at 11:54:58,18
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\caphyon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\caphyon



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{010275D6-525C-4650-BD63-7D0CEDB20C3C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{02D72F0D-B6C7-4D24-92B9-177DF102463B}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{044E072A-E90E-4594-9ECB-B75EDDEC1E38}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{056C8280-2342-48DB-9FA2-D4D7EAD7D2DE}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{0964A3BF-ABEA-4968-A343-6459F7FAB219}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{09DCCAB5-7247-41B4-B92C-7039FE9DABD1}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{0AE605B3-FC5F-4C37-96D6-FC46DF06D613}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{0B141BCD-548C-4AD7-99F3-6DB7DC96D4EB}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{0CC85AF2-E8A2-4AB5-A202-F080CD9C9E65}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{0D69C86F-E9E5-4FDF-A472-457CDF5D1ADC}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{0D759AEF-A550-475F-B4AD-4B93EE7AA720}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{0E8ACDB4-2807-4F07-84B1-2469DB30EF31}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{0EA15DA7-8C6A-483F-B679-D92E95BA7A9F}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{0F97FAE6-5160-4E1B-A232-CA43286B8C3C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{0FFE8D33-56DD-47E5-98BB-DD889511188E}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{1081FE3B-B973-4092-A0C0-2A3BA977E06A}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{12411C9A-5442-425A-B866-B35CF50A010A}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{128546D9-4B9E-4BAB-AAB6-7DFF247F1EDA}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{1295FB50-D4AC-4BF1-AA71-26FCBFF61D53}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{12B6F112-D2A1-40D9-9D8A-92073016C41C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{1381AB7B-35E6-4B72-A0AA-D0176A7E1553}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{139E4E2B-DAC6-4DA0-99B9-CEE488379D67}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{14BD49CB-C200-4E64-8EE0-0346B221FA74}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{155BDCBC-0BC9-470A-AA9D-827427D1DB4C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{15EC051B-8BB7-415F-AA44-DD4B350A99D9}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{162ADB48-9033-4E30-B3C0-5BA476D4E491}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{1674BFDB-9FE4-4886-9DFF-D6AA8E8E46E1}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{16E87E4F-F8D7-4457-A0E7-5D7378B75ACC}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{17C159F2-3DF6-414B-813D-B2AF2D30DE04}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{181CD04C-D5E0-4C62-BECF-4E21D377AC1E}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{185785B5-CB64-46A6-83F4-06AF6A7BF3DB}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{18AFDEE6-EA35-4CD4-92DD-E365A611C8AF}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{18F0CC46-049C-4DC0-BDFD-93009FFEA487}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{191B7726-2493-48C4-823F-0E4F51FD3A94}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{1A0676B9-577B-4174-8408-6F26A10DB3F8}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{1B8E4229-A962-4905-A8C3-5C43FC80D9D7}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{1B9B80B3-97F8-417C-B02B-8B8E2D081EDB}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{1C00AC6F-9923-4EB7-BB8C-CA63F79F41FB}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{1D875B8A-B6B9-46B2-B369-2BA7BFC8A6F1}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{1DB0DFA2-8C52-461A-92B9-44866E720EFD}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{1F255DEF-5595-432A-9B83-FA24E8429A6F}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{1F27357B-FFF4-49B5-A121-80AF528D2348}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{1F2FEE96-89D4-48A7-8E2D-5D7BAE99450D}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{1FD45465-5CCC-41C6-A3E6-B67A5C5153E8}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{208E9627-2D21-4740-B170-4BEBF4A87D66}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{20E627C0-0F5F-44AA-B318-2F8AD5044061}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{21D3506B-3EB3-40CE-8945-416E993C5F69}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{22F3C7F2-49D0-4DFD-9016-C34432B95D20}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{249A40D1-53EC-4B1E-A304-B6CBB80CEF05}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{25E0C4E4-7F25-487D-97D6-A716E549BD6F}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{273F3E58-C9D1-47C1-AF7D-687BCC6EA704}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{288E2C73-75BD-48BB-96A3-92BFE5FEBCBD}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{28BA668A-1F7F-40B2-81E8-B859E42A55A4}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{2B6D712C-D837-41E7-A52E-05566E6A1ADE}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{2D8BF028-AA2E-4A38-8053-AF16DF0B2757}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{2E468B63-47AE-4424-80E9-79F5539AD033}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{31E63968-4415-4EDA-83F8-3F233781E1BF}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{328EBC8E-FB40-4161-BE45-C4F0BCB7DC70}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{33DE0992-E2C7-4882-AE25-2F1CCCC6A6B0}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{35A3ABF8-B7EC-4A60-AD77-D6271975BC71}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{35D8E42E-56D2-4E1B-8112-FB49FF5A8ECA}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{36349245-C28B-4486-9664-363B4C09805E}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{3634B63C-D455-486A-BE5A-696FBDE95F8D}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{364BBAA2-1197-4A22-9473-981F0605BA40}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{37B2E026-EB82-4967-8979-10DD2797A1BA}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{39B6D3A8-B208-4D82-B82F-9E528FD7AAC5}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{3CD7CD36-D5D7-4220-A5F5-B6BF478C741E}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{3DAD1845-43AD-402E-85C6-42DB3802E5C8}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{3E643D24-33C7-471D-AB33-0F51100B30F9}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{3EEE8A51-C7AA-449D-B68A-C64FD54DEB42}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{3F57E8C8-73FF-491C-9287-6C17FC0C4C44}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{3F5F12D2-4967-42F0-83CA-0E657FA9F03B}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{3FC2F4E0-1CC1-432E-92F5-B406C6AC1400}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{406ABAA0-6678-457D-B0CE-A438C95ABFAD}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{429EBCC5-4E09-4CC4-BB7A-A8FA8BB398DB}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{4348D143-B437-4DB7-BAFC-66847E1153BD}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{43A63FF2-6AF3-4E96-AA73-20EE873B8DC7}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{456B4BEA-092C-4D4B-9561-BD7D1BD17161}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{47F99306-96B1-471A-8D2F-648E384A07D1}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{490C7568-9B1F-4254-9ECF-95179C78A8BD}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{4C071FD7-1CF3-4443-8257-FF937B66B401}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{4D9B0C86-0D52-4353-8FE2-E13A56416FFA}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{4DA33EF3-03B5-409A-B79B-0DFB441B12BC}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{4E48425B-AD2E-48E1-84B4-7D8438BFCFB2}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{4F2E7D66-5991-45B2-BF9A-8645B3B75C43}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{4FBDE0A2-1229-4EBB-B9B4-7DA4891D4EB0}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{50F7EA2F-1562-45C7-AC8F-776066A68250}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{5121922F-92D4-4B43-90E0-451AB8E659F0}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{5371A5B5-CCBE-487E-9E1A-37324179C283}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{543BA92F-31BA-4DA7-9C37-A26AB43F8282}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{55422373-A598-4BB6-89BA-CAD1A760CF3B}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{5627D506-6BFE-41BD-B49C-C6C34DF39CEA}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{57AE3585-6462-428F-BBB7-01F851FB43B7}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{5871A9D1-D0A0-4864-9124-36C5C576ACE3}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{59C240CB-C1E3-4CF6-91E6-FA394027CA27}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{5AA0ECB0-D532-4CB7-8739-5632655F6D7C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{5AD3B894-974E-4664-9A48-C0A6DE09DFF8}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{5B2B3D4E-FE75-4F1F-BE77-A81338AFE8B3}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{5CBB6CBE-C58D-449E-B2BB-0D50732EA2C9}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{5DA2BA2E-F139-409C-A7DA-F0A2560F5E8A}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{5EDB3CF3-5821-49C9-8A52-86496FB2142D}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{5F014B18-C101-44EA-9332-EE39BADAB502}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{5F88B4C2-DBFC-4238-9A4E-9E7C40DFA1FC}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{60E30396-61BD-4DE9-852C-CA6B04340927}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{60FD41DE-94DB-4661-B345-88D424A3FFE3}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{62C3A390-6578-49B4-8189-D58B8333471D}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{63AF6F02-BF2D-40F4-B612-200274146DE2}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{64263B73-8AEB-4964-A537-F2C6BE708D02}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{65950BDB-FCCA-4767-838A-1FFA9AC5C1E1}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{665C63B1-47E0-4E0D-9ED2-0263EC4FA45F}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{673EEC28-F4A2-4C20-9E71-81C76818AC9C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{6958DCEC-665D-42B3-AA1C-83E5A1BB4F74}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{6A89177D-BD86-4735-8428-7105D1B9409C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{6AA5FEE3-3BEF-447C-95BE-61E22FB5CD5C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{6C5F72EA-ED53-4C41-97D6-52ED959D0126}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{6C9D5646-DB95-43EB-9551-6D7E3AF8F8A2}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{6D992BBD-BBE0-4257-B3FC-54A77EA0899D}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{70605959-88ED-4B45-8B82-909860D96AEA}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{7233B89A-B8C9-4489-9B8E-F3E91427D679}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{725FC31F-34E3-45E7-9546-77367A25C6CB}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{72D8AAC3-8E7D-430B-AE42-A79287FA5065}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{72EBDE4A-2991-4814-A025-87E29A7DA0F5}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{72F73320-0C1F-41D0-9C09-0BFC101027C1}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{7392C3E8-CD39-4BCE-AE2B-E46397E522FC}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{73ABA7C5-8995-46E7-9C8D-0677D6AAE022}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{748B313A-9928-4C76-9685-C5935A779749}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{75998803-48FF-44AC-AA2E-02D9B2D23679}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{769591E1-EE7C-4885-B93B-B051FB63B4F7}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{76DD89EA-8F5D-46ED-B6E5-F5A44AB19263}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{77AD47B7-EB30-468C-B0AD-76DA2ACC3BD7}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{7A424ED2-9A9D-4936-8937-91B4CB75FACB}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{7A87DF5F-E718-419E-A0CB-1121B17EF775}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{7ABC3699-CB3E-467B-B0D0-7B087DB87326}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{7AE4DF59-CA56-477E-812B-C5188E6D0EB4}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{7EE35365-8BFE-4875-B0AF-0906F5A541D3}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{7F612047-8BBD-4B4B-8AC3-66FE770ACABB}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{7F62A97E-1B4B-4BE9-96F4-D48872A6D94F}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{7FF28D9D-651F-4E80-BE02-126F8D996AE4}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{83B1E2AE-1359-45E9-B79B-906A4557A390}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{83F5257C-F91F-42B2-B1BF-CF0C4152845F}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{84627F80-13C9-476D-9663-3647B2AF642C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{85FCB68C-DBB2-41D6-AE6F-0CAE76BDC756}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{881214BA-8AE2-484E-A042-F90EF85D5AE2}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{895A4249-688F-4B3F-B585-48FD89E97237}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{8B925282-78A4-4279-88D0-650B73CD7A22}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{8C1B9CB1-B5FD-4C7D-B3D3-D0213A4DBCBE}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{8D4656C6-D7D8-4DBE-8ABE-DC1DFFA7ACC0}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{8DD01C3E-A777-4F64-8425-AD82C72EE33E}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{8E34616C-511D-43C8-A78B-6C33FAC3C912}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{8E612A43-3878-4AB1-96E9-71BF8E37D3BC}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{903FD541-FD3C-4C34-B420-17A0018D871D}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{911E6C22-7910-45A2-AE86-D31E1EB005A5}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{939477F2-A639-485D-80A2-4415F84D8D5B}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{93E8413A-810C-4CF0-B9A0-ACD848BF230C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{954AA091-48A0-43EB-8B70-E74BD09CCAA7}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{958F4CA8-A584-4026-A12A-C1FA3920ACEB}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{95BF12C9-656B-4659-AB41-7083AF5402BF}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{96B67D32-BEF3-4BEA-9992-2C740EBDF4FD}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{97571EF0-76A6-405B-B0F4-C5BABA2DD486}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{978472A7-840D-4BC6-A0F6-1DFC8317440A}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{97BDC986-A7DB-474C-B57A-5F565C1A2DE3}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{97FA56B8-562E-4B8D-968E-A454FC24FF1F}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{98AAA798-F236-4EF2-B535-E9ECBF8EE541}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{9A3A06E9-BF66-4504-886C-48BA32E111A4}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{9A5DA2EB-7625-4325-AA92-3ADC61B307A7}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{9AD86416-7646-4406-8732-9686D68B81E9}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{9B09BEBD-FEEE-45D1-8DF2-8EEFA81CF5F8}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{9B0B1042-FF14-4844-A429-8C56311B1F0A}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{9B277E8E-DDC9-47ED-871B-4FED992251D6}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{9D56B994-86ED-4434-AE7E-E0A44BF67771}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{9FB77670-E0B5-436B-B4EC-CDAA1DC274CB}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{A0DC58E0-FE78-49D4-B2B3-6A6D0F75BE42}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{A130BDB5-C1FF-4BAF-8FA9-5A8E6D1F11CD}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{A1D60D9B-EFC9-4B5F-A087-874193903E34}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{A2876E0F-C532-4419-8381-C73FC51CA715}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{A2B3280B-861E-4CF3-8511-C886BBA579D2}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{A2C1C09C-D574-4BDF-AA55-BE6D3B23535C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{A3C246E4-D01D-413E-ACD9-A345EC2F082B}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{A86F2A0A-424B-4402-84BE-6786C70159BD}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{AB7F8E8D-70C5-44B8-BCC6-51EA8BC775AC}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{AD2C2AD4-0E80-496F-BC9F-C535985F27C9}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{AF15076F-E9BD-4AAA-A610-78105CD3E5E1}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B0057EC0-2F48-4BBC-9930-10E378EED28A}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B031B38F-FF3F-4BD4-80F4-FAD9FAB6F056}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B06AC797-62C2-4614-9663-1C1D4B271640}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B1A06257-E214-4E94-8E77-4C91F3D5D86F}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B2E59D00-544D-4321-BB28-16F6521CD87C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B371AD86-CDE8-41EB-B734-A5DA4713D7BE}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B3C86949-D38B-421D-838E-944090AD563C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B3D1E310-83D3-4B72-BF73-BE3C2ED2DA04}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B53EFA69-9A70-48F3-8E2D-6F2CFA8148EE}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B588BA68-2575-4879-AEB7-6BCE2295DE28}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B604A9D9-2046-4AA4-828E-8794ADAEA789}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B61B6AAE-9A47-4674-94F5-69096A287414}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B69D3EC6-2591-4E11-8DF2-98AE5CE05E7F}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B6C57C38-A5A2-4C5E-8202-0D2D9D4C1E9A}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B91D05C6-3DB9-4D21-9B48-D58E17AC4956}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B94207FE-FD96-4132-B749-D743EE961271}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{B998B436-AC44-4CA8-963D-F5A563A37BAA}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{BACF1BD6-3986-4A2A-927F-ECC733719C9B}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{BDF8887A-8FD3-4DCC-B1C0-BFA208B3469A}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{C0F18B05-D956-455C-BDAC-E2EF64FDDAAB}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{C0F53E33-7B06-40B0-9E2E-AE8F951E1AB6}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{C21A5B5C-E92D-416B-AB69-5CAFE71C4B8C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{C226B71A-FC81-4582-AA0E-FC8379E797A9}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{C2AB65A9-C745-4966-8340-ECEE9BDA90F3}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{C2D0FF7E-F278-4274-A61D-B632651D34A9}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{C421F66A-8D72-42CD-A43C-11E5FFE93381}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{C4388510-3AD3-467A-80FD-23BA300FDF2C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{C4E21456-3BB1-40E6-8D49-8E1B09906FBE}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{C5208509-3481-43BC-B366-2E6D65CEB611}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{C59543B0-43F9-4C00-98E0-EA44C604158F}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{C5ACF762-F5BF-4B1F-BDCF-6DD37A40E5C4}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{C6A98F2E-96A2-4DB1-AD71-380D142F3966}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{C7B12CC0-BCBB-49AB-A51F-8A0922079D42}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{CA206D74-A4E9-4F1C-95A4-A1CB1425D49F}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{CA49659B-5018-4859-AC25-4A37A54D1B0E}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{CB7EB5E1-60CA-48FA-954E-75126D4B841B}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{CCA775A3-C4D2-45A4-9AF6-D34F6B59D85F}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{CCF832DD-ACD3-498D-B4DB-A4EC1A9B66FA}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{CD564E70-F57A-4566-B385-DF8C3EF4F09C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D0CD107C-84AE-490D-9D2B-2A7C71194866}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D0FE2C2E-1809-4F8C-AC7F-E7F2E590E969}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D12E4A9F-6C7C-4FCA-AD4E-6597B7EAD936}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D281B4F6-7AA5-4A49-9616-106AFFF34780}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D2BC6536-E82A-4F33-B23D-1BA50A28286D}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D31A6BDE-0354-42CD-A4BA-FA08E5C470DD}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D35D9FC7-A42B-4290-8544-CA3DAC02BF08}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D424E9C5-0BAE-42C5-87C3-D640ED1DE110}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D588A8B9-5B9F-4BC4-84FC-B65A3027BF7B}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D678E473-B7B7-45B0-B3A3-EAED37D2EFB0}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D7B959C2-E880-4557-9903-F3F829AC0506}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D7F49F18-F56E-4133-8BC4-4E4B9D6C6B9B}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D8E85C89-6049-4138-94AF-B933B18E8715}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D970F179-EE29-4425-80F6-5AA982478716}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D9923D00-2C74-4F20-A5D5-BEB758FE60DA}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D99FC1C0-1E12-4F51-BFE4-D831CCE282F0}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{D9D63AD0-C8E6-4869-8BE8-97B0E0037BDA}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{DA5CE39F-FDFC-4902-BAB3-7DCCD251EDA5}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{DA925325-2302-4B33-B774-683F60FA2E17}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{DC131AF8-6D3C-45DC-8D9A-D38F07895D91}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{DDC9EB2E-6617-4623-999E-DC399331BE10}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{DF6BD5CB-30C6-4B0D-8415-951C45E739C5}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{E0B7884C-E528-4A10-A2CC-55CCBA4AEBB5}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{E2BF0574-17E1-44E4-906B-A5BEE5C4754C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{E327705E-FD84-4741-9466-9E2F5BC38EF8}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{E4558F25-47CD-4463-88DF-2143ED666392}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{E4B0A7C7-BD2F-4CAC-98E3-C28FC54B1999}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{E543400E-585A-4A2E-85A6-43AE16FB0262}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{E6178C62-A6CD-4079-AA42-E0BFA7A10FE3}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{E6BDDEC5-6041-4F4B-9A2A-B949DD1BCA16}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{E6E8117D-9376-466A-A256-48943DB72AA3}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{E746D4B2-5873-4C0C-B4CE-A7C4F5671FC8}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{E7A30355-265A-4F2C-9D43-16D5D0B00A62}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{EAA46BB5-3096-41C5-887D-B148C23FD49F}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{EAF4C9F9-750B-49F7-A99E-38BAED9A5EFC}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{ECBF07BF-312A-4C4E-AADD-7EF84DFF90AD}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{EDE5D46F-FC81-40B7-86A8-B710C1514709}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{EE218A8D-B1D9-4CF4-877E-3BC64F35008D}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{EEAD4AB4-6079-44F3-8B0D-12A303DD1375}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{F2B3E0A8-1A45-44D4-A60F-F2116887709C}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{F3077E4D-8209-47F3-A492-C203D57C0131}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{F3D4D9BE-D3C9-4508-8997-EF92EE237F3A}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{F3DD1F82-E9FD-47D4-93FB-8C2FF166124E}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{F469D573-18BF-4060-9905-F482C853BDEB}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{F47458B6-5811-4991-B2DA-2E9384536C54}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{F49F7E12-B046-46F6-9718-F3A57C5199E8}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{F4E69768-1D11-40A0-A65A-F688F4069C96}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{F798C89A-0BF4-4607-A3E7-E1D93DFDBCD5}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{F8CE4902-58C4-4D02-93AF-CA882467EFF0}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{F9212D38-F49E-46AD-B2FD-1711C30034A3}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{F963321B-6F29-4AC8-BE99-F7F44B80D3CF}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{F9782FB1-EDDE-423A-8F11-0A4B8C3EB076}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{FA4F9FF7-8DAB-4EB7-B4EB-275A6C58FA3F}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{FBB86D8F-2594-439B-B815-AAF1C3B1D009}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{FC0E7BFC-ACD5-4C8F-8B69-A72AA151F995}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{FD31BD7E-5300-4DE7-8763-976B66EA34A7}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{FD3B9950-2575-4C65-9473-F12C06F1EED3}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{FDE259AC-845E-4BF8-BC07-92A9D8DDCCAB}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{FDF4CED6-33E7-40E3-8A08-949AFAD3DC5D}
Successfully deleted: [Empty Folder] C:\Users\Sunny\appdata\local\{FF03944C-4233-4410-A1E9-F785D385B7B8}



~~~ FireFox

Emptied folder: C:\Users\Sunny\AppData\Roaming\mozilla\firefox\profiles\ilpb9bwh.default\minidumps [120 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.01.2014 at 12:07:53,91
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST:


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-01-2014 02
Ran by Sunny (administrator) on SUNNY-VAIO on 28-01-2014 12:11:01
Running from C:\Users\Sunny\Downloads
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
() C:\Users\Sunny\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Dropbox, Inc.) C:\Users\Sunny\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
() C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775584 2010-05-31] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-05-31] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [212480 2010-05-31] (Alps Electric Co., Ltd.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673136 2010-05-31] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [600928 2010-06-01] (Sony Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [102400 2010-09-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Amazon Cloud Player] - C:\Users\Sunny\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3145536 2013-12-12] ()
Startup: C:\Users\Sunny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Sunny\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=SVEE&bmod=SVEE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {31CF5488-1282-4CE7-BACF-DAC2D6103B66} URL = hxxp://de.shopping.com/?linkin_id=8056363
SearchScopes: HKCU - {4D7AE340-6731-4EE4-B8C1-DD73BA39A597} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {7A28250A-EF45-4C6E-A2D2-9245F92B8167} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-9/4?satitle={searchTerms}
SearchScopes: HKCU - {8A139173-D5C3-4BB4-98C2-927617F6E246} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: DivX HiQ - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO-x32: SwissAcademic.Citavi.Picker.IEPicker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF ProfilePath: C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default
FF SearchEngineOrder.1: Ask Search
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - C:\Windows\system32\TVUAx\npTVUAx.dll No File
FF Plugin-x32: @real.com/nppl3260;version=12.0.1.647 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=12.0.1.647 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=12.0.1.660 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=12.0.1.660 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=12.0.1.660 - c:\program files (x86)\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprjplug.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: PC Sync 2 Synchronisation Extension - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\bkmrksync@nokia.com [2011-03-29]
FF Extension: TVU Web Player - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\firefox@tvunetworks.com [2011-08-20]
FF Extension: Move Media Player - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\moveplayer@movenetworks.com [2011-03-29]
FF Extension: Flagfox - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} [2014-01-16]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011-03-29]
FF Extension: Linkification - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a} [2011-03-29]
FF Extension: IE Tab - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9} [2013-05-07]
FF Extension: FireNes - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\firenes@facundo.zaldo.xpi [2011-06-30]
FF Extension: Ask Toolbar - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\toolbar_ORJ-V7C@apn.ask.com.xpi [2013-11-09]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: Adblock Plus - C:\Users\Sunny\AppData\Roaming\Mozilla\Firefox\Profiles\ilpb9bwh.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-08-13]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-11]
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video [2011-04-07]
FF HKLM-x32\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa
FF Extension: DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa [2011-04-07]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-07-15]
FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2012-10-24]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-04-28]

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-06]
CHR Extension: (Google Drive) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-06]
CHR Extension: (YouTube) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-09-25]
CHR Extension: (Google-Suche) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-09-25]
CHR Extension: (DivX HiQ) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnjbmmemklcjgepojigaapkoodmkgbae [2012-09-25]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2012-09-25]
CHR Extension: (Skype Click to Call) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-09-25]
CHR Extension: (Google Wallet) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-06]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2012-09-25]
CHR Extension: (Google Mail) - C:\Users\Sunny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-09-25]
CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [2011-02-08]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-07-15]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [2011-02-08]

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-17] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-01-11] (APN LLC.)
S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.0.271\McCHSvc.exe [237328 2012-03-30] (McAfee, Inc.)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [80896 2011-03-31] ()
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] ()
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [851824 2010-06-17] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1368624 2013-08-01] (Sony Corporation)

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [254528 2011-03-29] (DT Soft Ltd)
S3 s0017bus; C:\Windows\System32\DRIVERS\s0017bus.sys [113704 2008-10-21] (MCCI Corporation)
S3 s0017mdfl; C:\Windows\System32\DRIVERS\s0017mdfl.sys [19496 2008-10-21] (MCCI Corporation)
S3 s0017mdm; C:\Windows\System32\DRIVERS\s0017mdm.sys [152616 2008-10-21] (MCCI Corporation)
S3 s0017mgmt; C:\Windows\System32\DRIVERS\s0017mgmt.sys [133160 2008-10-21] (MCCI Corporation)
S3 s0017nd5; C:\Windows\System32\DRIVERS\s0017nd5.sys [34856 2008-10-21] (MCCI Corporation)
S3 s0017obex; C:\Windows\System32\DRIVERS\s0017obex.sys [128552 2008-10-21] (MCCI Corporation)
S3 s0017unic; C:\Windows\System32\DRIVERS\s0017unic.sys [145960 2008-10-21] (MCCI Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 massfilter; system32\drivers\massfilter.sys [x]
S3 vpnva; system32\DRIVERS\vpnva64.sys [x]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [x]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [x]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-28 12:10 - 2014-01-28 12:10 - 00000000 ____D C:\Users\Sunny\Downloads\FRST-OlderVersion
2014-01-28 12:07 - 2014-01-28 12:07 - 00030865 _____ C:\Users\Sunny\Desktop\JRT.txt
2014-01-28 11:52 - 2014-01-28 11:52 - 01037068 _____ (Thisisu) C:\Users\Sunny\Downloads\JRT.exe
2014-01-28 10:42 - 2014-01-28 10:45 - 00000000 ____D C:\AdwCleaner
2014-01-28 10:41 - 2014-01-28 10:41 - 01236282 _____ C:\Users\Sunny\Downloads\adwcleaner.exe
2014-01-27 15:52 - 2014-01-27 17:30 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 15:52 - 2014-01-27 15:52 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-01-27 15:51 - 2014-01-27 17:29 - 00000000 ____D C:\Users\Sunny\Desktop\mbar
2014-01-27 15:51 - 2014-01-27 15:51 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-27 15:50 - 2014-01-27 15:50 - 12589848 _____ (Malwarebytes Corp.) C:\Users\Sunny\Downloads\mbar-1.07.0.1009.exe
2014-01-27 14:40 - 2014-01-27 14:40 - 00012442 _____ C:\Users\Sunny\Desktop\gmer.log
2014-01-27 14:13 - 2014-01-21 21:56 - 00380416 _____ C:\Users\Sunny\Desktop\gmer.exe
2014-01-27 13:43 - 2014-01-27 13:51 - 00038738 _____ C:\Users\Sunny\Downloads\Addition.txt
2014-01-27 13:40 - 2014-01-28 12:11 - 00022473 _____ C:\Users\Sunny\Downloads\FRST.txt
2014-01-27 13:38 - 2014-01-28 12:10 - 00000000 ____D C:\FRST
2014-01-27 13:37 - 2014-01-28 12:10 - 02079232 _____ (Farbar) C:\Users\Sunny\Downloads\FRST64.exe
2014-01-27 13:37 - 2014-01-27 13:37 - 00000472 _____ C:\Users\Sunny\Downloads\defogger_disable.log
2014-01-27 13:37 - 2014-01-27 13:37 - 00000000 _____ C:\Users\Sunny\defogger_reenable
2014-01-27 13:34 - 2014-01-27 13:36 - 00050477 _____ C:\Users\Sunny\Downloads\Defogger.exe
2014-01-27 08:22 - 2014-01-27 08:22 - 00074703 _____ C:\Windows\SysWOW64\mfc45.dll
2014-01-27 08:22 - 2014-01-27 08:22 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\iolo
2014-01-27 08:22 - 2014-01-27 08:22 - 00000000 ____D C:\ProgramData\iolo
2014-01-27 08:22 - 2012-08-17 17:25 - 00069000 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2014-01-27 08:22 - 2012-08-17 17:25 - 00021176 _____ (iolo technologies, LLC) C:\Windows\system32\iolorgdf64.exe
2014-01-26 19:46 - 2014-01-26 19:46 - 00136097 _____ C:\Users\Sunny\Downloads\l09
2014-01-26 19:45 - 2014-01-26 19:45 - 00055906 _____ C:\Users\Sunny\Downloads\ab09
2014-01-26 12:14 - 2014-01-26 12:14 - 00000000 ___DL C:\Users\Sunny\Desktop\statistik Übungsblätter lösungen mit kommentar
2014-01-26 08:43 - 2014-01-26 08:43 - 00000000 ___DL C:\Users\Sunny\Desktop\klin seminar hausarbeit mbct
2014-01-26 08:33 - 2014-01-26 08:33 - 00000000 ___DL C:\Users\Sunny\Desktop\Literatur Seminar Kognition
2014-01-25 16:57 - 2014-01-25 16:57 - 00105732 _____ C:\Users\Sunny\Downloads\l08
2014-01-25 16:56 - 2014-01-25 16:56 - 00046968 _____ C:\Users\Sunny\Downloads\ab08
2014-01-24 08:44 - 2014-01-24 08:44 - 00000000 ___DL C:\Users\Sunny\Desktop\MASTER FREIBURG
2014-01-24 08:43 - 2014-01-24 08:43 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\Dropbox Folder Sync
2014-01-24 08:43 - 2014-01-24 08:43 - 00000000 ____D C:\Users\Sunny\AppData\Local\Dropbox_Folder_Sync
2014-01-24 08:43 - 2014-01-24 08:43 - 00000000 ____D C:\Program Files (x86)\Dropbox Folder Sync
2014-01-24 08:41 - 2014-01-24 08:41 - 00874050 _____ (Sowrabh & Satyadeep                                         ) C:\Users\Sunny\Downloads\DropboxFolderSync-2.7-Setup.exe
2014-01-22 14:14 - 2014-01-26 08:23 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\vlc
2014-01-22 09:13 - 2014-01-22 09:13 - 00001066 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-22 09:12 - 2014-01-22 09:12 - 24097311 _____ C:\Users\Sunny\Downloads\vlc-2.1.2-win32.exe
2014-01-22 09:07 - 2014-01-22 09:12 - 00000000 ____D C:\Program Files\VideoLAN
2014-01-22 09:06 - 2014-01-22 09:06 - 00614784 _____ (Chip Digital GmbH) C:\Users\Sunny\Downloads\VLC media player 64 Bit - CHIP-Downloader.exe
2014-01-21 19:46 - 2014-01-21 19:46 - 00232596 _____ C:\Users\Sunny\Downloads\l07
2014-01-21 19:44 - 2014-01-21 19:44 - 00039144 _____ C:\Users\Sunny\Downloads\ab07
2014-01-21 18:19 - 2014-01-21 18:19 - 00058471 _____ C:\Users\Sunny\Downloads\multi01
2014-01-21 16:48 - 2014-01-21 16:48 - 00118293 _____ C:\Users\Sunny\Downloads\l06
2014-01-21 16:44 - 2014-01-21 16:44 - 00038856 _____ C:\Users\Sunny\Downloads\ab06
2014-01-21 16:19 - 2014-01-21 16:19 - 00633802 _____ C:\Users\Sunny\Downloads\multi10(1)
2014-01-20 17:32 - 2014-01-20 17:32 - 00229443 _____ C:\Users\Sunny\Downloads\l05
2014-01-20 17:32 - 2014-01-20 17:32 - 00037275 _____ C:\Users\Sunny\Downloads\ab05
2014-01-19 12:53 - 2014-01-19 12:53 - 00202567 _____ C:\Users\Sunny\Downloads\l04
2014-01-19 12:47 - 2014-01-19 12:47 - 00060298 _____ C:\Users\Sunny\Downloads\ab04
2014-01-19 12:46 - 2014-01-19 12:46 - 02074800 _____ C:\Users\Sunny\Downloads\multi06(1)
2014-01-19 11:34 - 2014-01-19 11:34 - 00202945 _____ C:\Users\Sunny\Downloads\l02(2)
2014-01-19 11:34 - 2014-01-19 11:34 - 00124074 _____ C:\Users\Sunny\Downloads\l03
2014-01-19 11:33 - 2014-01-19 11:33 - 00036600 _____ C:\Users\Sunny\Downloads\ab03
2014-01-18 12:40 - 2014-01-18 12:40 - 00202945 _____ C:\Users\Sunny\Downloads\l02(1)
2014-01-18 12:32 - 2014-01-18 12:32 - 00202945 _____ C:\Users\Sunny\Downloads\l02
2014-01-18 12:30 - 2014-01-18 12:30 - 00034656 _____ C:\Users\Sunny\Downloads\ab02
2014-01-18 09:38 - 2014-01-18 09:38 - 01012390 _____ C:\Users\Sunny\Downloads\multi8
2014-01-18 09:38 - 2014-01-18 09:38 - 00633802 _____ C:\Users\Sunny\Downloads\multi10
2014-01-18 09:38 - 2014-01-18 09:38 - 00616239 _____ C:\Users\Sunny\Downloads\multi04
2014-01-18 09:37 - 2014-01-18 09:37 - 02074800 _____ C:\Users\Sunny\Downloads\multi06
2014-01-18 09:37 - 2014-01-18 09:37 - 01031862 _____ C:\Users\Sunny\Downloads\multi07
2014-01-18 09:37 - 2014-01-18 09:37 - 00795097 _____ C:\Users\Sunny\Downloads\multi08
2014-01-18 09:37 - 2014-01-18 09:37 - 00540666 _____ C:\Users\Sunny\Downloads\multi09
2014-01-18 09:36 - 2014-01-18 09:36 - 00572440 _____ C:\Users\Sunny\Downloads\multi05
2014-01-17 18:24 - 2014-01-17 18:24 - 00131376 _____ C:\Users\Sunny\Downloads\ab01
2014-01-17 18:23 - 2014-01-17 18:23 - 00135520 _____ C:\Users\Sunny\Downloads\l01
2014-01-17 11:15 - 2014-01-17 11:15 - 00094015 _____ C:\Users\Sunny\Downloads\2011-innov-wikid
2014-01-16 15:42 - 2014-01-16 15:42 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2014-01-16 15:42 - 2014-01-16 15:42 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2014-01-16 15:40 - 2014-01-16 15:39 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-16 15:40 - 2014-01-16 15:39 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-16 15:40 - 2014-01-16 15:39 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-16 15:40 - 2014-01-16 15:39 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-16 15:38 - 2014-01-16 15:38 - 00921000 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jxpiinstall(4).exe
2014-01-16 15:27 - 2014-01-16 15:28 - 30796712 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jre-7u51-windows-x64.exe
2014-01-16 15:21 - 2014-01-16 15:21 - 29141928 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jre-7u51-windows-i586.exe
2014-01-16 15:16 - 2014-01-16 15:17 - 00347816 _____ (Microsoft Corporation) C:\Users\Sunny\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.38313308971334608.1.1.Run.exe
2014-01-16 14:59 - 2014-01-16 14:59 - 00921000 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jxpiinstall(3).exe
2014-01-16 08:14 - 2014-01-16 08:14 - 00921000 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jxpiinstall(2).exe
2014-01-16 07:39 - 2014-01-16 07:40 - 00005327 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-16 07:21 - 2014-01-16 07:21 - 00921000 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jxpiinstall(1).exe
2014-01-09 22:54 - 2014-01-13 22:17 - 00000000 ____D C:\Users\Sunny\Desktop\mlp
2014-01-05 18:14 - 2014-01-05 18:14 - 00001210 _____ C:\Users\Sunny\Desktop\Amazon Cloud Player.lnk
2014-01-05 18:14 - 2014-01-05 18:14 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Cloud Player
2014-01-05 18:14 - 2014-01-05 18:14 - 00000000 ____D C:\Users\Sunny\AppData\Local\Amazon Cloud Player
2014-01-05 18:13 - 2014-01-05 18:14 - 36152456 _____ (Amazon) C:\Users\Sunny\Downloads\AmazonCloudPlayerInstaller_399.exe
2014-01-04 10:28 - 2014-01-04 10:29 - 00039913 _____ C:\Users\Sunny\Desktop\ESt2012_Koker_Sascha.elfo
2014-01-04 10:24 - 2014-01-08 08:28 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\elsterformular
2014-01-04 10:23 - 2014-01-08 08:28 - 00000000 ____D C:\ProgramData\elsterformular
2014-01-04 10:22 - 2014-01-04 10:22 - 69755760 _____ (Landesfinanzdirektion Thüringen) C:\Users\Sunny\Downloads\ElsterFormular-14.4.20130909p.exe


==================== One Month Modified Files and Folders =======

2014-01-28 12:12 - 2014-01-27 13:40 - 00022473 _____ C:\Users\Sunny\Downloads\FRST.txt
2014-01-28 12:10 - 2014-01-28 12:10 - 00000000 ____D C:\Users\Sunny\Downloads\FRST-OlderVersion
2014-01-28 12:10 - 2014-01-27 13:38 - 00000000 ____D C:\FRST
2014-01-28 12:10 - 2014-01-27 13:37 - 02079232 _____ (Farbar) C:\Users\Sunny\Downloads\FRST64.exe
2014-01-28 12:10 - 2013-12-06 21:14 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-28 12:10 - 2011-12-30 17:28 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\Dropbox
2014-01-28 12:07 - 2014-01-28 12:07 - 00030865 _____ C:\Users\Sunny\Desktop\JRT.txt
2014-01-28 12:04 - 2012-04-14 18:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-28 11:52 - 2014-01-28 11:52 - 01037068 _____ (Thisisu) C:\Users\Sunny\Downloads\JRT.exe
2014-01-28 11:28 - 2013-12-06 21:14 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-28 11:23 - 2009-07-14 05:45 - 00013664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-28 11:23 - 2009-07-14 05:45 - 00013664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-28 10:47 - 2011-12-30 17:32 - 00000000 ___RD C:\Users\Sunny\Dropbox
2014-01-28 10:46 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-28 10:46 - 2009-07-14 05:51 - 00108108 _____ C:\Windows\setupact.log
2014-01-28 10:45 - 2014-01-28 10:42 - 00000000 ____D C:\AdwCleaner
2014-01-28 10:45 - 2011-03-29 11:21 - 01095270 _____ C:\Windows\WindowsUpdate.log
2014-01-28 10:41 - 2014-01-28 10:41 - 01236282 _____ C:\Users\Sunny\Downloads\adwcleaner.exe
2014-01-27 17:30 - 2014-01-27 15:52 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 17:29 - 2014-01-27 15:51 - 00000000 ____D C:\Users\Sunny\Desktop\mbar
2014-01-27 15:52 - 2014-01-27 15:52 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-01-27 15:51 - 2014-01-27 15:51 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-27 15:50 - 2014-01-27 15:50 - 12589848 _____ (Malwarebytes Corp.) C:\Users\Sunny\Downloads\mbar-1.07.0.1009.exe
2014-01-27 14:40 - 2014-01-27 14:40 - 00012442 _____ C:\Users\Sunny\Desktop\gmer.log
2014-01-27 13:51 - 2014-01-27 13:43 - 00038738 _____ C:\Users\Sunny\Downloads\Addition.txt
2014-01-27 13:37 - 2014-01-27 13:37 - 00000472 _____ C:\Users\Sunny\Downloads\defogger_disable.log
2014-01-27 13:37 - 2014-01-27 13:37 - 00000000 _____ C:\Users\Sunny\defogger_reenable
2014-01-27 13:37 - 2011-03-29 11:22 - 00000000 ____D C:\Users\Sunny
2014-01-27 13:36 - 2014-01-27 13:34 - 00050477 _____ C:\Users\Sunny\Downloads\Defogger.exe
2014-01-27 08:22 - 2014-01-27 08:22 - 00074703 _____ C:\Windows\SysWOW64\mfc45.dll
2014-01-27 08:22 - 2014-01-27 08:22 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\iolo
2014-01-27 08:22 - 2014-01-27 08:22 - 00000000 ____D C:\ProgramData\iolo
2014-01-27 08:22 - 2010-11-26 02:46 - 00000000 ____D C:\Program Files (x86)\Sony
2014-01-27 08:17 - 2011-03-29 11:27 - 00000000 ____D C:\Update
2014-01-26 19:46 - 2014-01-26 19:46 - 00136097 _____ C:\Users\Sunny\Downloads\l09
2014-01-26 19:45 - 2014-01-26 19:45 - 00055906 _____ C:\Users\Sunny\Downloads\ab09
2014-01-26 12:14 - 2014-01-26 12:14 - 00000000 ___DL C:\Users\Sunny\Desktop\statistik Übungsblätter lösungen mit kommentar
2014-01-26 08:51 - 2013-10-07 08:07 - 00000000 ____D C:\Users\Sunny\Desktop\Bilder ab 2013
2014-01-26 08:43 - 2014-01-26 08:43 - 00000000 ___DL C:\Users\Sunny\Desktop\klin seminar hausarbeit mbct
2014-01-26 08:33 - 2014-01-26 08:33 - 00000000 ___DL C:\Users\Sunny\Desktop\Literatur Seminar Kognition
2014-01-26 08:23 - 2014-01-22 14:14 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\vlc
2014-01-25 16:57 - 2014-01-25 16:57 - 00105732 _____ C:\Users\Sunny\Downloads\l08
2014-01-25 16:56 - 2014-01-25 16:56 - 00046968 _____ C:\Users\Sunny\Downloads\ab08
2014-01-25 09:35 - 2012-10-27 07:50 - 00148446 _____ C:\test.xml
2014-01-24 08:44 - 2014-01-24 08:44 - 00000000 ___DL C:\Users\Sunny\Desktop\MASTER FREIBURG
2014-01-24 08:43 - 2014-01-24 08:43 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\Dropbox Folder Sync
2014-01-24 08:43 - 2014-01-24 08:43 - 00000000 ____D C:\Users\Sunny\AppData\Local\Dropbox_Folder_Sync
2014-01-24 08:43 - 2014-01-24 08:43 - 00000000 ____D C:\Program Files (x86)\Dropbox Folder Sync
2014-01-24 08:41 - 2014-01-24 08:41 - 00874050 _____ (Sowrabh & Satyadeep                                         ) C:\Users\Sunny\Downloads\DropboxFolderSync-2.7-Setup.exe
2014-01-23 07:36 - 2010-11-26 02:37 - 00278484 _____ C:\Windows\PFRO.log
2014-01-22 09:13 - 2014-01-22 09:13 - 00001066 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-22 09:13 - 2011-04-07 18:36 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2014-01-22 09:12 - 2014-01-22 09:12 - 24097311 _____ C:\Users\Sunny\Downloads\vlc-2.1.2-win32.exe
2014-01-22 09:12 - 2014-01-22 09:07 - 00000000 ____D C:\Program Files\VideoLAN
2014-01-22 09:06 - 2014-01-22 09:06 - 00614784 _____ (Chip Digital GmbH) C:\Users\Sunny\Downloads\VLC media player 64 Bit - CHIP-Downloader.exe
2014-01-21 21:56 - 2014-01-27 14:13 - 00380416 _____ C:\Users\Sunny\Desktop\gmer.exe
2014-01-21 21:27 - 2011-04-05 21:40 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\Skype
2014-01-21 19:46 - 2014-01-21 19:46 - 00232596 _____ C:\Users\Sunny\Downloads\l07
2014-01-21 19:44 - 2014-01-21 19:44 - 00039144 _____ C:\Users\Sunny\Downloads\ab07
2014-01-21 18:19 - 2014-01-21 18:19 - 00058471 _____ C:\Users\Sunny\Downloads\multi01
2014-01-21 16:48 - 2014-01-21 16:48 - 00118293 _____ C:\Users\Sunny\Downloads\l06
2014-01-21 16:44 - 2014-01-21 16:44 - 00038856 _____ C:\Users\Sunny\Downloads\ab06
2014-01-21 16:19 - 2014-01-21 16:19 - 00633802 _____ C:\Users\Sunny\Downloads\multi10(1)
2014-01-20 17:32 - 2014-01-20 17:32 - 00229443 _____ C:\Users\Sunny\Downloads\l05
2014-01-20 17:32 - 2014-01-20 17:32 - 00037275 _____ C:\Users\Sunny\Downloads\ab05
2014-01-19 12:53 - 2014-01-19 12:53 - 00202567 _____ C:\Users\Sunny\Downloads\l04
2014-01-19 12:47 - 2014-01-19 12:47 - 00060298 _____ C:\Users\Sunny\Downloads\ab04
2014-01-19 12:46 - 2014-01-19 12:46 - 02074800 _____ C:\Users\Sunny\Downloads\multi06(1)
2014-01-19 11:34 - 2014-01-19 11:34 - 00202945 _____ C:\Users\Sunny\Downloads\l02(2)
2014-01-19 11:34 - 2014-01-19 11:34 - 00124074 _____ C:\Users\Sunny\Downloads\l03
2014-01-19 11:33 - 2014-01-19 11:33 - 00036600 _____ C:\Users\Sunny\Downloads\ab03
2014-01-18 12:40 - 2014-01-18 12:40 - 00202945 _____ C:\Users\Sunny\Downloads\l02(1)
2014-01-18 12:32 - 2014-01-18 12:32 - 00202945 _____ C:\Users\Sunny\Downloads\l02
2014-01-18 12:30 - 2014-01-18 12:30 - 00034656 _____ C:\Users\Sunny\Downloads\ab02
2014-01-18 11:00 - 2010-11-26 11:33 - 00697098 _____ C:\Windows\system32\perfh007.dat
2014-01-18 11:00 - 2010-11-26 11:33 - 00148362 _____ C:\Windows\system32\perfc007.dat
2014-01-18 11:00 - 2009-07-14 06:13 - 01613412 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-18 09:38 - 2014-01-18 09:38 - 01012390 _____ C:\Users\Sunny\Downloads\multi8
2014-01-18 09:38 - 2014-01-18 09:38 - 00633802 _____ C:\Users\Sunny\Downloads\multi10
2014-01-18 09:38 - 2014-01-18 09:38 - 00616239 _____ C:\Users\Sunny\Downloads\multi04
2014-01-18 09:37 - 2014-01-18 09:37 - 02074800 _____ C:\Users\Sunny\Downloads\multi06
2014-01-18 09:37 - 2014-01-18 09:37 - 01031862 _____ C:\Users\Sunny\Downloads\multi07
2014-01-18 09:37 - 2014-01-18 09:37 - 00795097 _____ C:\Users\Sunny\Downloads\multi08
2014-01-18 09:37 - 2014-01-18 09:37 - 00540666 _____ C:\Users\Sunny\Downloads\multi09
2014-01-18 09:36 - 2014-01-18 09:36 - 00572440 _____ C:\Users\Sunny\Downloads\multi05
2014-01-17 18:24 - 2014-01-17 18:24 - 00131376 _____ C:\Users\Sunny\Downloads\ab01
2014-01-17 18:23 - 2014-01-17 18:23 - 00135520 _____ C:\Users\Sunny\Downloads\l01
2014-01-17 11:15 - 2014-01-17 11:15 - 00094015 _____ C:\Users\Sunny\Downloads\2011-innov-wikid
2014-01-16 15:42 - 2014-01-16 15:42 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2014-01-16 15:42 - 2014-01-16 15:42 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2014-01-16 15:40 - 2013-10-20 09:46 - 00000000 ____D C:\ProgramData\Oracle
2014-01-16 15:39 - 2014-01-16 15:40 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-16 15:39 - 2014-01-16 15:40 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-16 15:39 - 2014-01-16 15:40 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-16 15:39 - 2014-01-16 15:40 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-16 15:39 - 2010-11-26 03:14 - 00000000 ____D C:\Program Files (x86)\Java
2014-01-16 15:38 - 2014-01-16 15:38 - 00921000 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jxpiinstall(4).exe
2014-01-16 15:36 - 2013-09-29 12:25 - 00000000 ____D C:\Users\Sunny\AppData\Local\CrashDumps
2014-01-16 15:28 - 2014-01-16 15:27 - 30796712 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jre-7u51-windows-x64.exe
2014-01-16 15:21 - 2014-01-16 15:21 - 29141928 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jre-7u51-windows-i586.exe
2014-01-16 15:17 - 2014-01-16 15:16 - 00347816 _____ (Microsoft Corporation) C:\Users\Sunny\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.38313308971334608.1.1.Run.exe
2014-01-16 14:59 - 2014-01-16 14:59 - 00921000 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jxpiinstall(3).exe
2014-01-16 08:14 - 2014-01-16 08:14 - 00921000 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jxpiinstall(2).exe
2014-01-16 07:51 - 2011-12-30 17:32 - 00001019 _____ C:\Users\Sunny\Desktop\Dropbox.lnk
2014-01-16 07:51 - 2011-12-30 17:29 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-16 07:51 - 2011-03-29 11:24 - 00000000 ___RD C:\Users\Sunny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-16 07:40 - 2014-01-16 07:39 - 00005327 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-16 07:21 - 2014-01-16 07:21 - 00921000 _____ (Oracle Corporation) C:\Users\Sunny\Downloads\jxpiinstall(1).exe
2014-01-16 00:55 - 2011-03-29 17:10 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-16 00:54 - 2013-08-16 02:03 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 00:50 - 2011-03-29 16:36 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 16:16 - 2013-12-06 21:15 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-13 22:17 - 2014-01-09 22:54 - 00000000 ____D C:\Users\Sunny\Desktop\mlp
2014-01-13 22:17 - 2013-10-07 07:58 - 00000000 ____D C:\Users\Sunny\Desktop\Uni Schatz
2014-01-09 23:11 - 2013-12-12 21:56 - 00000000 ____D C:\Users\Sunny\Desktop\Bewerbung Hiwi Praktikum
2014-01-08 14:34 - 2010-10-12 18:48 - 00000000 ____D C:\ProgramData\Sony Corporation
2014-01-08 14:25 - 2010-11-26 02:46 - 00000000 ____D C:\Program Files\Sony
2014-01-08 08:59 - 2010-11-26 02:46 - 00000000 ____D C:\Windows\System32\Tasks\SONY
2014-01-08 08:59 - 2010-10-12 18:14 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-08 08:47 - 2011-12-12 17:22 - 00000000 ____D C:\ProgramData\TechSmith
2014-01-08 08:47 - 2011-12-12 17:22 - 00000000 ____D C:\Program Files (x86)\TechSmith
2014-01-08 08:37 - 2013-08-15 15:59 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\Tobit
2014-01-08 08:34 - 2013-12-26 18:25 - 00000000 ____D C:\Program Files (x86)\Nike
2014-01-08 08:34 - 2013-04-14 18:58 - 00000000 ____D C:\Windows\SysWOW64\SupportAppCB
2014-01-08 08:33 - 2013-04-14 18:59 - 00000136 _____ C:\GPEapSim.log
2014-01-08 08:32 - 2013-08-23 16:45 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-08 08:28 - 2014-01-04 10:24 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\elsterformular
2014-01-08 08:28 - 2014-01-04 10:23 - 00000000 ____D C:\ProgramData\elsterformular
2014-01-08 08:26 - 2011-03-29 11:22 - 00000000 ____D C:\Windows\pss
2014-01-05 18:14 - 2014-01-05 18:14 - 00001210 _____ C:\Users\Sunny\Desktop\Amazon Cloud Player.lnk
2014-01-05 18:14 - 2014-01-05 18:14 - 00000000 ____D C:\Users\Sunny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Cloud Player
2014-01-05 18:14 - 2014-01-05 18:14 - 00000000 ____D C:\Users\Sunny\AppData\Local\Amazon Cloud Player
2014-01-05 18:14 - 2014-01-05 18:13 - 36152456 _____ (Amazon) C:\Users\Sunny\Downloads\AmazonCloudPlayerInstaller_399.exe
2014-01-04 10:22 - 2014-01-04 10:22 - 69755760 _____ (Landesfinanzdirektion Thüringen) C:\Users\Sunny\Downloads\ElsterFormular-14.4.20130909p.exe
2013-12-30 13:47 - 2012-09-14 12:55 - 00000000 ____D C:\Program Files (x86)\JDownloader


Some content of TEMP:
====================
C:\Users\Sunny\AppData\Local\Temp\APNSetup.exe
C:\Users\Sunny\AppData\Local\Temp\avgnt.exe
C:\Users\Sunny\AppData\Local\Temp\DelayInst.exe
C:\Users\Sunny\AppData\Local\Temp\installservice.exe
C:\Users\Sunny\AppData\Local\Temp\Quarantine.exe
C:\Users\Sunny\AppData\Local\Temp\TOBITCLT.DLL
C:\Users\Sunny\AppData\Local\Temp\vlc-2.1.2-win32.exe
C:\Users\Sunny\AppData\Local\Temp\vpnclient_setup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-19 19:20

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM)

Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

so jetzt meine Antwort. MBAM hat nichts gefunden:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.28.06

Windows 7 x64 NTFS
Internet Explorer 8.0.7600.16385
Sunny :: SUNNY-VAIO [Administrator]

28.01.2014 16:06:28
mbam-log-2014-01-28 (16-06-28).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 218180
Laufzeit: 34 Minute(n), 18 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         

Der ESET Scan hat sich nach 8 Stunden bei 87 % aufgehängt hatte aber auch nichts gefunden bis zu dem Zeitpunkt.

Wenn es kein Virus oder keine Malware ist, was kann es denn dann sein?

Der Rechner ist immer noch extrem langsam und es dauert mindestens 30 Minuten bis ich halbwegs normal damit arbeiten kann..

http://www.trojaner-board.de/71631-p...tml#post425616

Hi,

danke aber das hat auch alles nicht geholfen... kann es sein dass der Laptop kaputt ist oder sollte man ihn jetzt erstmal komplett neu aufsetzen?

Mach dazu mal nen neuen Thread im Windows-bereich auf, denn an Schädlingen liegt es ja offensichtlich nicht.