Trojaner OCS

# AdwCleaner v3.018 - Bericht erstellt am 31/01/2014 

um 00:08:25
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service 

Pack 1 (64 bits)
# Benutzername : Jane - ASSUNTA-PC
# Gestartet von : C:\Users\Jane\AppData\Local\Temp

\OCS\Downloads

\fc14996dfa99adfc7baae624196888c5\f8b34e3b5e6e337aa6

491ee3f713f8f5\adwcleaner_3.017.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Jane\AppData\Local\Temp

\OCS

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Jane\AppData\Roaming\Mozilla

\Firefox\Profiles\1ycs7ioo.default\prefs.js ]


[ Datei : C:\Users\Arbeit\AppData\Roaming\Mozilla

\Firefox\Profiles\5agx8cuw.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [1135 octets] - [31/01/2014 

00:08:00]
AdwCleaner[S0].txt - [1013 octets] - [31/01/2014 

00:08:25]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - 

[1073 octets] ##########
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014 01
Ran by Jane (administrator) on ASSUNTA-PC on 31-01-2014 00:42:16
Running from D:\User\Jane\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Gainward Co.) C:\Program Files (x86)\EXPERTool\TBPANEL.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKCU\...\Run: [GAINWARD] - C:\Program Files (x86)\EXPERTool\TBPanel.exe [2259568 2010-12-23] (Gainward Co.)
HKCU\...\Run: [Facebook Update] - C:\Users\Jane\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-11-24] (Facebook Inc.)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
MountPoints2: {0540d4ad-5088-11e3-bc12-806e6f6e6963} - F:\autorun.exe
MountPoints2: {567d4151-504d-11e3-bb99-806e6f6e6963} - F:\CDSETUP.EXE
MountPoints2: {782bf7d4-5050-11e3-aa3f-806e6f6e6963} - F:\Run.exe
HKU\Arbeit\...\Policies\system: [LogonHoursAction] 2
HKU\Arbeit\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\Jane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Magician.lnk
ShortcutTarget: Samsung Magician.lnk -> C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe (Samsung Electronics.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.bing.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1DB82A9A5DE4CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} hxxp://download.gigabyte.com.tw/object/Dldrv.ocx
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 131.114.21.25 131.114.21.15

FireFox:
========
FF ProfilePath: C:\Users\Jane\AppData\Roaming\Mozilla\Firefox\Profiles\1ycs7ioo.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Jane\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\Jane\AppData\Roaming\Mozilla\Firefox\Profiles\1ycs7ioo.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-27]
FF Extension: Reddit Enhancement Suite - C:\Users\Jane\AppData\Roaming\Mozilla\Firefox\Profiles\1ycs7ioo.default\Extensions\jid1-xUfzOsOFlzSOXg@jetpack.xpi [2013-11-27]
FF Extension: Adblock Plus - C:\Users\Jane\AppData\Roaming\Mozilla\Firefox\Profiles\1ycs7ioo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-11-18]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-10-31] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)

==================== Drivers (Whitelisted) ====================

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [31136 2013-11-21] (REALiX(tm))
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-09-01] (Intel Corporation)
S3 TBPanel; No ImagePath
S3 gdrv; \??\C:\Windows\gdrv.sys [x]
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [x]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-31 00:07 - 2014-01-31 00:08 - 00000000 ____D C:\AdwCleaner
2014-01-30 23:43 - 2014-01-30 23:43 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-30 23:43 - 2014-01-30 23:43 - 00000000 ____D C:\Users\Jane\AppData\Roaming\Malwarebytes
2014-01-30 23:43 - 2014-01-30 23:43 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-30 23:43 - 2014-01-30 23:43 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-30 23:43 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-30 22:44 - 2014-01-30 22:44 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-30 22:31 - 2014-01-31 00:12 - 00031415 ____N C:\Windows\WindowsUpdate.log
2014-01-30 22:19 - 2014-01-31 00:42 - 00000000 ____D C:\FRST
2014-01-27 14:29 - 2014-01-27 14:29 - 00002770 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-27 14:29 - 2014-01-27 14:29 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2014-01-27 14:29 - 2014-01-27 14:29 - 00000000 ____D C:\Program Files\CCleaner
2014-01-26 13:56 - 2014-01-30 14:20 - 00032208 _____ C:\Users\Arbeit\Downloads\Sicca Second Essay.odt
2014-01-25 16:39 - 2014-01-25 21:24 - 00016753 _____ C:\Users\Arbeit\Desktop\hausarbeit sicca 2.odt
2014-01-25 16:35 - 2014-01-26 12:22 - 00026297 _____ C:\Users\Arbeit\Desktop\Referat fertig Sicca.odt
2014-01-23 11:43 - 2014-01-23 11:43 - 00000943 _____ C:\Users\Public\Desktop\Die Sims™ 3 Supernatural.lnk
2014-01-23 11:17 - 2014-01-23 11:17 - 00000887 _____ C:\Users\Public\Desktop\Die Sims™ 3 Einfach tierisch.lnk
2014-01-22 14:00 - 2014-01-22 14:00 - 00000000 ____D C:\Users\Jane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2014-01-22 13:59 - 2014-01-22 14:00 - 00000000 ____D C:\Users\Jane\AppData\Local\Amazon
2014-01-21 18:14 - 2014-01-21 18:14 - 00000000 ____D C:\Program Files\McAfee Security Scan
2014-01-21 18:13 - 2014-01-21 18:13 - 00000975 _____ C:\Users\Public\Desktop\Die Sims™ 3 Luxus-Accessoires.lnk
2014-01-20 20:39 - 2014-01-20 20:39 - 00000000 __RHD C:\Users\Jane\AppData\Roaming\SecuROM
2014-01-20 20:37 - 2014-01-20 20:37 - 00000965 _____ C:\Users\Public\Desktop\Die Sims™ 3 Stadt-Accessoires.lnk
2014-01-20 20:35 - 2014-01-20 20:35 - 00000923 _____ C:\Users\Public\Desktop\Die Sims™ 3 Traumkarrieren.lnk
2014-01-20 20:22 - 2014-01-20 20:22 - 00000937 _____ C:\Users\Public\Desktop\Die Sims™ 3 Lebensfreude.lnk
2014-01-20 20:14 - 2014-01-20 20:14 - 00000000 ____D C:\ProgramData\EA Core
2014-01-20 20:13 - 2014-01-20 20:13 - 00003150 _____ C:\Windows\System32\Tasks\{8F7FE841-7335-4F2F-8F3D-7D1D2FC29C66}
2014-01-20 19:57 - 2014-01-20 19:57 - 00000827 _____ C:\Users\Public\Desktop\Die*Sims™*3.lnk
2014-01-20 19:57 - 2014-01-20 19:57 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE
2014-01-20 19:57 - 2014-01-20 19:55 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll
2014-01-19 19:41 - 2014-01-27 14:30 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-19 19:41 - 2014-01-19 19:41 - 00000967 _____ C:\Users\Public\Desktop\Steam.lnk
2014-01-17 00:34 - 2014-01-17 00:34 - 00003969 _____ C:\Users\Jane\AppData\Local\recently-used.xbel
2014-01-16 20:17 - 2014-01-16 20:17 - 00000000 ____D C:\ProgramData\Oracle
2014-01-16 20:16 - 2014-01-16 20:16 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-16 20:16 - 2014-01-16 20:16 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-16 20:16 - 2014-01-16 20:16 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-16 20:16 - 2014-01-16 20:16 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-16 20:16 - 2014-01-16 20:16 - 00000000 ____D C:\ProgramData\Sun
2014-01-16 20:16 - 2014-01-16 20:16 - 00000000 ____D C:\Program Files (x86)\Java
2014-01-16 20:14 - 2014-01-16 20:14 - 00000000 ____D C:\Program Files\PDF Split And Merge Basic
2014-01-16 20:12 - 2014-01-16 20:15 - 00013063 _____ C:\Users\Arbeit\Desktop\titelblatt.odt
2014-01-16 19:58 - 2014-01-16 19:59 - 00011953 _____ C:\Users\Arbeit\Desktop\Table of contents.odt
2014-01-16 18:14 - 2014-01-21 18:14 - 00001931 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-01-16 18:14 - 2014-01-16 18:14 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2014-01-16 18:14 - 2014-01-16 18:14 - 00000000 ____D C:\ProgramData\McAfee
2014-01-16 14:39 - 2014-01-27 16:35 - 13018546 _____ C:\Users\Arbeit\Desktop\PPT Sicca.odp
2014-01-16 13:46 - 2014-01-24 22:17 - 00026282 _____ C:\Users\Arbeit\Desktop\Sicca Referat Gliederung.odt
2014-01-15 15:16 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 15:16 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 15:16 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 15:16 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 15:16 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 15:16 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 15:16 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 15:16 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 15:16 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-13 13:22 - 2014-01-13 13:22 - 00000000 ____D C:\Users\Arbeit\AppData\Local\Adobe
2014-01-08 09:22 - 2014-01-08 09:22 - 00000000 ____D C:\Users\Arbeit\AppData\Roaming\OpenOffice
2014-01-08 09:18 - 2014-01-15 14:09 - 00032565 _____ C:\Users\Arbeit\Downloads\Sicca First Essay.odt
2014-01-08 09:18 - 2014-01-08 09:18 - 00025022 _____ C:\Users\Arbeit\Downloads\Riello Zusammenfassung.odt
2014-01-08 09:18 - 2014-01-08 09:18 - 00000000 ____D C:\Users\Arbeit\AppData\Roaming\Avira
2014-01-08 09:15 - 2014-01-08 09:15 - 00000000 ____D C:\Users\Arbeit\AppData\Roaming\Macromedia
2014-01-08 09:15 - 2014-01-08 09:15 - 00000000 ____D C:\Users\Arbeit\AppData\Local\Macromedia
2014-01-08 09:14 - 2014-01-08 09:14 - 00064024 _____ C:\Users\Arbeit\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-08 09:14 - 2014-01-08 09:14 - 00000000 ____D C:\Users\Arbeit\AppData\Roaming\Mozilla
2014-01-08 09:14 - 2014-01-08 09:14 - 00000000 ____D C:\Users\Arbeit\AppData\Roaming\Intel Corporation
2014-01-08 09:14 - 2014-01-08 09:14 - 00000000 ____D C:\Users\Arbeit\AppData\Local\Mozilla
2014-01-08 09:13 - 2014-01-13 13:22 - 00000000 ____D C:\Users\Arbeit\AppData\Roaming\Adobe
2014-01-08 09:13 - 2014-01-08 09:17 - 00576574 __RSH C:\Users\Arbeit\ntuser.pol
2014-01-08 09:13 - 2014-01-08 09:17 - 00000000 ____D C:\Users\Arbeit
2014-01-08 09:13 - 2014-01-08 09:13 - 00001425 _____ C:\Users\Arbeit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-08 09:13 - 2014-01-08 09:13 - 00000020 ___SH C:\Users\Arbeit\ntuser.ini
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\Vorlagen
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\Startmenü
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\Netzwerkumgebung
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\Lokale Einstellungen
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\Eigene Dateien
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\Druckumgebung
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\AppData\Local\Verlauf
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\AppData\Local\Anwendungsdaten
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\Anwendungsdaten
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 ___RD C:\Users\Arbeit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 ___RD C:\Users\Arbeit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 ____D C:\Users\Arbeit\AppData\Local\VirtualStore
2014-01-08 09:13 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\Arbeit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-08 09:13 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\Arbeit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-01-07 15:39 - 2014-01-08 11:41 - 00000680 __RSH C:\Users\Jane\ntuser.pol
2014-01-06 20:36 - 2014-01-17 00:34 - 00000000 ____D C:\Users\Jane\AppData\Local\gtk-2.0
2014-01-06 19:32 - 2014-01-06 19:32 - 00000000 ____D C:\Users\Jane\.thumbnails
2014-01-06 19:25 - 2014-01-17 00:37 - 00000000 ____D C:\Users\Jane\.gimp-2.8
2014-01-06 19:25 - 2014-01-06 19:25 - 00000000 ____D C:\Users\Jane\AppData\Local\gegl-0.2
2014-01-06 19:23 - 2014-01-06 19:24 - 00000000 ____D C:\Program Files\GIMP 2

==================== One Month Modified Files and Folders =======

2014-01-31 00:42 - 2014-01-30 22:19 - 00000000 ____D C:\FRST
2014-01-31 00:22 - 2013-11-18 18:50 - 00000000 ____D C:\Users\Jane\AppData\Roaming\Skype
2014-01-31 00:20 - 2013-11-18 15:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-31 00:16 - 2009-07-14 05:45 - 00015808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-31 00:16 - 2009-07-14 05:45 - 00015808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-31 00:13 - 2009-07-14 18:58 - 00697658 _____ C:\Windows\system32\perfh007.dat
2014-01-31 00:13 - 2009-07-14 18:58 - 00148452 _____ C:\Windows\system32\perfc007.dat
2014-01-31 00:13 - 2009-07-14 06:13 - 01615906 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-31 00:12 - 2014-01-30 22:31 - 00031415 ____N C:\Windows\WindowsUpdate.log
2014-01-31 00:09 - 2013-11-21 15:41 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-31 00:09 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-31 00:08 - 2014-01-31 00:07 - 00000000 ____D C:\AdwCleaner
2014-01-30 23:44 - 2013-11-24 23:39 - 00000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1956929518-3918672675-1206063416-1000UA.job
2014-01-30 23:44 - 2013-11-24 23:39 - 00000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1956929518-3918672675-1206063416-1000Core.job
2014-01-30 23:43 - 2014-01-30 23:43 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-30 23:43 - 2014-01-30 23:43 - 00000000 ____D C:\Users\Jane\AppData\Roaming\Malwarebytes
2014-01-30 23:43 - 2014-01-30 23:43 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-30 23:43 - 2014-01-30 23:43 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-30 22:44 - 2014-01-30 22:44 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-30 22:15 - 2013-11-18 14:06 - 00000000 ____D C:\Users\Jane\AppData\Roaming\TS3Client
2014-01-30 15:40 - 2013-11-18 14:02 - 00000000 ____D C:\Users\Jane\AppData\Local\PMB Files
2014-01-30 15:40 - 2013-11-18 14:02 - 00000000 ____D C:\ProgramData\PMB Files
2014-01-30 14:20 - 2014-01-26 13:56 - 00032208 _____ C:\Users\Arbeit\Downloads\Sicca Second Essay.odt
2014-01-27 16:35 - 2014-01-16 14:39 - 13018546 _____ C:\Users\Arbeit\Desktop\PPT Sicca.odp
2014-01-27 14:30 - 2014-01-19 19:41 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-27 14:30 - 2013-11-22 00:03 - 00000000 ____D C:\Windows\Minidump
2014-01-27 14:30 - 2013-11-18 13:30 - 00000000 ____D C:\Windows\Panther
2014-01-27 14:29 - 2014-01-27 14:29 - 00002770 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-27 14:29 - 2014-01-27 14:29 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2014-01-27 14:29 - 2014-01-27 14:29 - 00000000 ____D C:\Program Files\CCleaner
2014-01-26 12:22 - 2014-01-25 16:35 - 00026297 _____ C:\Users\Arbeit\Desktop\Referat fertig Sicca.odt
2014-01-25 21:24 - 2014-01-25 16:39 - 00016753 _____ C:\Users\Arbeit\Desktop\hausarbeit sicca 2.odt
2014-01-24 22:17 - 2014-01-16 13:46 - 00026282 _____ C:\Users\Arbeit\Desktop\Sicca Referat Gliederung.odt
2014-01-23 11:43 - 2014-01-23 11:43 - 00000943 _____ C:\Users\Public\Desktop\Die Sims™ 3 Supernatural.lnk
2014-01-23 11:43 - 2013-11-18 13:39 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-23 11:17 - 2014-01-23 11:17 - 00000887 _____ C:\Users\Public\Desktop\Die Sims™ 3 Einfach tierisch.lnk
2014-01-23 11:10 - 2013-11-18 14:56 - 00000000 ____D C:\Program Files (x86)\Origin
2014-01-22 14:00 - 2014-01-22 14:00 - 00000000 ____D C:\Users\Jane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2014-01-22 14:00 - 2014-01-22 13:59 - 00000000 ____D C:\Users\Jane\AppData\Local\Amazon
2014-01-21 18:14 - 2014-01-21 18:14 - 00000000 ____D C:\Program Files\McAfee Security Scan
2014-01-21 18:14 - 2014-01-16 18:14 - 00001931 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-01-21 18:13 - 2014-01-21 18:13 - 00000975 _____ C:\Users\Public\Desktop\Die Sims™ 3 Luxus-Accessoires.lnk
2014-01-20 20:39 - 2014-01-20 20:39 - 00000000 __RHD C:\Users\Jane\AppData\Roaming\SecuROM
2014-01-20 20:37 - 2014-01-20 20:37 - 00000965 _____ C:\Users\Public\Desktop\Die Sims™ 3 Stadt-Accessoires.lnk
2014-01-20 20:35 - 2014-01-20 20:35 - 00000923 _____ C:\Users\Public\Desktop\Die Sims™ 3 Traumkarrieren.lnk
2014-01-20 20:22 - 2014-01-20 20:22 - 00000937 _____ C:\Users\Public\Desktop\Die Sims™ 3 Lebensfreude.lnk
2014-01-20 20:14 - 2014-01-20 20:14 - 00000000 ____D C:\ProgramData\EA Core
2014-01-20 20:13 - 2014-01-20 20:13 - 00003150 _____ C:\Windows\System32\Tasks\{8F7FE841-7335-4F2F-8F3D-7D1D2FC29C66}
2014-01-20 19:57 - 2014-01-20 19:57 - 00000827 _____ C:\Users\Public\Desktop\Die*Sims™*3.lnk
2014-01-20 19:57 - 2014-01-20 19:57 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE
2014-01-20 19:55 - 2014-01-20 19:57 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll
2014-01-19 19:41 - 2014-01-19 19:41 - 00000967 _____ C:\Users\Public\Desktop\Steam.lnk
2014-01-17 00:37 - 2014-01-06 19:25 - 00000000 ____D C:\Users\Jane\.gimp-2.8
2014-01-17 00:34 - 2014-01-17 00:34 - 00003969 _____ C:\Users\Jane\AppData\Local\recently-used.xbel
2014-01-17 00:34 - 2014-01-06 20:36 - 00000000 ____D C:\Users\Jane\AppData\Local\gtk-2.0
2014-01-16 20:17 - 2014-01-16 20:17 - 00000000 ____D C:\ProgramData\Oracle
2014-01-16 20:16 - 2014-01-16 20:16 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-16 20:16 - 2014-01-16 20:16 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-16 20:16 - 2014-01-16 20:16 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-16 20:16 - 2014-01-16 20:16 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-16 20:16 - 2014-01-16 20:16 - 00000000 ____D C:\ProgramData\Sun
2014-01-16 20:16 - 2014-01-16 20:16 - 00000000 ____D C:\Program Files (x86)\Java
2014-01-16 20:15 - 2014-01-16 20:12 - 00013063 _____ C:\Users\Arbeit\Desktop\titelblatt.odt
2014-01-16 20:14 - 2014-01-16 20:14 - 00000000 ____D C:\Program Files\PDF Split And Merge Basic
2014-01-16 19:59 - 2014-01-16 19:58 - 00011953 _____ C:\Users\Arbeit\Desktop\Table of contents.odt
2014-01-16 18:14 - 2014-01-16 18:14 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2014-01-16 18:14 - 2014-01-16 18:14 - 00000000 ____D C:\ProgramData\McAfee
2014-01-16 18:14 - 2013-11-18 15:16 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-16 18:14 - 2013-11-18 15:16 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-16 18:14 - 2013-11-18 15:16 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-16 18:14 - 2013-11-18 14:32 - 00000000 ____D C:\Users\Jane\AppData\Local\Adobe
2014-01-16 10:58 - 2009-07-14 05:45 - 00294752 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-16 01:54 - 2013-11-18 19:40 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-16 01:54 - 2013-11-18 19:40 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 14:09 - 2014-01-08 09:18 - 00032565 _____ C:\Users\Arbeit\Downloads\Sicca First Essay.odt
2014-01-13 13:22 - 2014-01-13 13:22 - 00000000 ____D C:\Users\Arbeit\AppData\Local\Adobe
2014-01-13 13:22 - 2014-01-08 09:13 - 00000000 ____D C:\Users\Arbeit\AppData\Roaming\Adobe
2014-01-08 11:41 - 2014-01-07 15:39 - 00000680 __RSH C:\Users\Jane\ntuser.pol
2014-01-08 11:41 - 2013-11-18 13:36 - 00000000 ____D C:\Users\Jane
2014-01-08 09:22 - 2014-01-08 09:22 - 00000000 ____D C:\Users\Arbeit\AppData\Roaming\OpenOffice
2014-01-08 09:18 - 2014-01-08 09:18 - 00025022 _____ C:\Users\Arbeit\Downloads\Riello Zusammenfassung.odt
2014-01-08 09:18 - 2014-01-08 09:18 - 00000000 ____D C:\Users\Arbeit\AppData\Roaming\Avira
2014-01-08 09:17 - 2014-01-08 09:13 - 00576574 __RSH C:\Users\Arbeit\ntuser.pol
2014-01-08 09:17 - 2014-01-08 09:13 - 00000000 ____D C:\Users\Arbeit
2014-01-08 09:15 - 2014-01-08 09:15 - 00000000 ____D C:\Users\Arbeit\AppData\Roaming\Macromedia
2014-01-08 09:15 - 2014-01-08 09:15 - 00000000 ____D C:\Users\Arbeit\AppData\Local\Macromedia
2014-01-08 09:14 - 2014-01-08 09:14 - 00064024 _____ C:\Users\Arbeit\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-08 09:14 - 2014-01-08 09:14 - 00000000 ____D C:\Users\Arbeit\AppData\Roaming\Mozilla
2014-01-08 09:14 - 2014-01-08 09:14 - 00000000 ____D C:\Users\Arbeit\AppData\Roaming\Intel Corporation
2014-01-08 09:14 - 2014-01-08 09:14 - 00000000 ____D C:\Users\Arbeit\AppData\Local\Mozilla
2014-01-08 09:13 - 2014-01-08 09:13 - 00001425 _____ C:\Users\Arbeit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-08 09:13 - 2014-01-08 09:13 - 00000020 ___SH C:\Users\Arbeit\ntuser.ini
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\Vorlagen
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\Startmenü
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\Netzwerkumgebung
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\Lokale Einstellungen
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\Eigene Dateien
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\Druckumgebung
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\AppData\Local\Verlauf
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\AppData\Local\Anwendungsdaten
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 _SHDL C:\Users\Arbeit\Anwendungsdaten
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 ___RD C:\Users\Arbeit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 ___RD C:\Users\Arbeit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-08 09:13 - 2014-01-08 09:13 - 00000000 ____D C:\Users\Arbeit\AppData\Local\VirtualStore
2014-01-07 15:39 - 2009-07-14 04:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2014-01-07 09:32 - 2013-11-18 13:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-06 19:32 - 2014-01-06 19:32 - 00000000 ____D C:\Users\Jane\.thumbnails
2014-01-06 19:25 - 2014-01-06 19:25 - 00000000 ____D C:\Users\Jane\AppData\Local\gegl-0.2
2014-01-06 19:24 - 2014-01-06 19:23 - 00000000 ____D C:\Program Files\GIMP 2

Some content of TEMP:
====================
C:\Users\Arbeit\AppData\Local\Temp\avgnt.exe
C:\Users\Jane\AppData\Local\Temp\avgnt.exe
C:\Users\Jane\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-29 19:27

==================== End Of Log ============================
         

(x64) Version: 29-01-2014 01
Ran by Jane at 2014-01-31 00:49:49
Running from D:\User\Jane\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Amazon Kindle (HKCU Version:  - Amazon)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
CCleaner (Version: 4.10 - Piriform)
CrystalDiskInfo 6.0.1 (x32 Version: 6.0.1 - Crystal Dew World)
Die Sims™ 3 (x32 Version: 1.67.2 - Electronic Arts)
Die Sims™ 3 Einfach tierisch (x32 Version: 10.0.96 - Electronic Arts)
Die Sims™ 3 Lebensfreude (x32 Version: 8.0.152 - Electronic Arts)
Die Sims™ 3 Luxus-Accessoires (x32 Version: 3.0.38 - Electronic Arts)
Die Sims™ 3 Stadt-Accessoires (x32 Version: 9.0.73 - Electronic Arts)
Die Sims™ 3 Supernatural (x32 Version: 15.0.135 - Electronic Arts)
Die Sims™ 3 Traumkarrieren (x32 Version: 4.0.87 - Electronic Arts)
Driver Fusion (x32 Version: 1.8 - Treexy)
ESET Online Scanner v3 (x32 Version:  - )
EXPERTool 7.16 (x32 Version:  - Gainward Co., Ltd)
Facebook Video Calling 2.0.0.447 (x32 Version: 2.0.447 - Skype Limited)
GIMP 2.8.10 (Version: 2.8.10 - The GIMP Team)
HWiNFO32 Version 4.26 (x32 Version: 4.26 - Martin Malík - REALiX)
HWiNFO64 Version 4.26 (Version: 4.26 - Martin Malík - REALiX)
Intel(R) Control Center (x32 Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1118 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 11.6.0.1030 - Intel Corporation)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
League of Legends (x32 Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
McAfee Security Scan Plus (Version: 3.8.130.10 - McAfee, Inc.)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 314.22 (Version: 314.22 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 314.22 (Version: 314.22 - NVIDIA Corporation)
NVIDIA Grafiktreiber 314.22 (Version: 314.22 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.23.1 (Version: 1.3.23.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.140.952 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1422 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 314.22 (Version: 314.22 - NVIDIA Corporation) Hidden
NVIDIA Update 1.12.12 (Version: 1.12.12 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.12.12 - NVIDIA Corporation) Hidden
ON_OFF Charge B11.0110.1 (x32 Version: 1.00.0001 - GIGABYTE)
ooVoo (x32 Version: 3.6.1008 - ooVoo LLC.)
OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation)
Origin (x32 Version: 9.3.10.4710 - Electronic Arts, Inc.)
Pando Media Booster (x32 Version: 2.6.0.7 - Pando Networks Inc.)
PDF Split And Merge Basic (Version: 2.2.2 - Andrea Vacondio)
Realtek Ethernet Controller Driver (x32 Version: 7.36.1224.2010 - Realtek)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0 - Renesas Electronics Corporation) Hidden
Samsung Magician (x32 Version: 4.2.1 - Samsung Electronics)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
SleepTimer Ultimate 1.2 (x32 Version:  - Christian Handorf)
Steam (x32 Version:  - Valve Corporation)
TeamSpeak 3 Client (Version: 3.0.13 - TeamSpeak Systems GmbH)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Zoo Tycoon 2 - Zoodirektor-Sammlung (x32 Version: 1.00.0000 - Microsoft Game Studios)
Zoo Tycoon 2 - Zoodirektor-Sammlung (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden

==================== Restore Points  =========================

20-01-2014 19:37:26 Installiert The Sims 3 Town Life Stuff
21-01-2014 17:13:20 Installiert The Sims 3 High-End Loft Stuff
23-01-2014 10:16:47 Installiert TheSims3EP5
23-01-2014 10:42:51 Installiert TheSims3EP7
26-01-2014 10:32:56 Installiert The Sims 3
26-01-2014 22:50:19 Windows-Sicherung

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1970A872-36F5-4145-AC1B-3A329DC31737} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {945EE236-382F-4BCD-8F78-359F6C91BFB3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-16] (Adobe Systems Incorporated)
Task: {969973C3-B149-4ABA-978A-FF80C9528B9B} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {A2981528-3220-4AA2-BD5F-BFB14259B03E} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1956929518-3918672675-1206063416-1000Core => C:\Users\Jane\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-11-24] (Facebook Inc.)
Task: {B2DF659A-3DC6-4D5F-BDBB-B3839AC73CB8} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1956929518-3918672675-1206063416-1000UA => C:\Users\Jane\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-11-24] (Facebook Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1956929518-3918672675-1206063416-1000Core.job => C:\Users\Jane\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1956929518-3918672675-1206063416-1000UA.job => C:\Users\Jane\AppData\Local\Facebook\Update\FacebookUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-11-18 13:43 - 1998-10-31 10:55 - 00005120 _____ () C:\Program Files (x86)\EXPERTool\TBManage.dll
2013-12-20 10:18 - 2013-12-20 10:18 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-01-16 18:14 - 2014-01-16 18:14 - 16287624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 22%
Total physical RAM: 8175.42 MB
Available physical RAM: 6326.15 MB
Total Pagefile: 16349.02 MB
Available Pagefile: 14354.86 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.69 GB) (Free:69.03 GB) NTFS
Drive d: () (Fixed) (Total:465.76 GB) (Free:393.58 GB) NTFS
Drive f: (ZT2ZCD1) (CDROM) (Total:0.52 GB) (Free:0 GB) CDFS
Drive g: (TOSHIBA) (Removable) (Total:3.65 GB) (Free:1.47 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: F5620DD9)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=112 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 7931739E)
Partition 1: (Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 4 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=4 GB) - (Type=0C)

==================== End Of Log ============================