Unerwünschte werbung

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04
Ran by tce (administrator) on TCE-PC on 03-02-2014 13:22:21
Running from C:\Users\tce\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(DATA BECKER GmbH & Co KG) C:\Program Files (x86)\Common Files\DATA BECKER Shared\DBService.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Acer Group) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
() C:\OEM\USBDECTION\USBS3S4Detection.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files (x86)\Visagesoft\eXPert PDF 6\vspdfprsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ZTE) C:\Program Files (x86)\congstar\Internetmanager\Bin\mcserver.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
() C:\Program Files (x86)\congstar\Internetmanager\Bin\dbus-daemon.exe
() C:\Program Files (x86)\congstar\Internetmanager\Bin\gconfd-2.exe
() C:\Program Files (x86)\congstar\Internetmanager\Bin\db_daemon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [vspdfprsrv.exe] - C:\Program Files (x86)\Visagesoft\eXPert PDF 6\vspdfprsrv.exe [1195008 2008-09-22] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-2634336733-3951264793-2692642557-1001\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [249856 2005-06-10] (InstallShield Software Corporation)
HKU\S-1-5-21-2634336733-3951264793-2692642557-1001\...\Run: [Google Update] - C:\Users\tce\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-07-12] (Google Inc.)
HKU\S-1-5-21-2634336733-3951264793-2692642557-1001\...\MountPoints2: K - K:\Data\setup.exe
HKU\S-1-5-21-2634336733-3951264793-2692642557-1001\...\MountPoints2: {06796c20-fce0-11e1-9cc5-4487fcfa3217} - K:\pushinst.exe
HKU\S-1-5-21-2634336733-3951264793-2692642557-1003\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKU\S-1-5-21-2634336733-3951264793-2692642557-1003\...\Run: [Software Suite SE] - C:\Program Files (x86)\Packard Bell\Software Suite SE\SoftSuiteSE.exe [2275360 2009-09-29] (Acer Incorporated)
HKU\S-1-5-21-2634336733-3951264793-2692642557-1003\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [249856 2005-06-10] (InstallShield Software Corporation)
HKU\S-1-5-21-2634336733-3951264793-2692642557-1003\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2634336733-3951264793-2692642557-1003\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162336 2009-07-22] ()
HKU\S-1-5-21-2634336733-3951264793-2692642557-1003\...\MountPoints2: K - K:\Data\setup.exe
HKU\S-1-5-21-2634336733-3951264793-2692642557-1003\...\MountPoints2: {06796c20-fce0-11e1-9cc5-4487fcfa3217} - K:\pushinst.exe
HKU\S-1-5-21-2634336733-3951264793-2692642557-1003\...\MountPoints2: {53998c41-b656-11e1-b3fd-806e6f6e6963} - E:\AutoRun.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=ipower_g5800&r=17360612h306pe495v115y5711271n
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
BHO: SNT - {4EEF4763-33D7-7166-39F6-4FD4A5F6358E} - C:\Program Files (x86)\SNT\y.x64.dll ()
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: YoutubeAdblocker - {C09616C3-6DAE-C126-41DA-53C809265478} - C:\Program Files (x86)\YoutubeAdblocker\WF4F0GPjCB.x64.dll ()
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO: greaTsaver - {EFEAB6B5-8FDF-EBC2-B47C-6508F573A127} - C:\Program Files (x86)\greaTsaver\Tt6Ad.x64.dll ()
BHO-x32: SNT - {4EEF4763-33D7-7166-39F6-4FD4A5F6358E} - C:\Program Files (x86)\SNT\y.dll ()
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: YoutubeAdblocker - {C09616C3-6DAE-C126-41DA-53C809265478} - C:\Program Files (x86)\YoutubeAdblocker\WF4F0GPjCB.dll ()
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: greaTsaver - {EFEAB6B5-8FDF-EBC2-B47C-6508F573A127} - C:\Program Files (x86)\greaTsaver\Tt6Ad.dll ()
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\tce\AppData\Roaming\Mozilla\Firefox\Profiles\isodycb8.default-1378338383939
FF Homepage: google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @protectdisc.com/NPPDLicenseHelper - C:\Program Files (x86)\ProtectDisc\License Helper\NPPDLicenseHelper.dll ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\tce\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\tce\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\tce\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\tce\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\tce\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\tce\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\tce\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin ProgramFiles/Appdata: C:\Users\tce\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: SNT - C:\Users\tce\AppData\Roaming\Mozilla\Firefox\Profiles\isodycb8.default-1378338383939\Extensions\iouaaoio@zsueye.net [2014-01-31]
FF Extension: YoutubeAdblocker - C:\Users\tce\AppData\Roaming\Mozilla\Firefox\Profiles\isodycb8.default-1378338383939\Extensions\kb7qm@rzklla-.com [2014-01-31]
FF Extension: websave - C:\Users\tce\AppData\Roaming\Mozilla\Firefox\Profiles\isodycb8.default-1378338383939\Extensions\oiowd@wayuo.co.uk [2014-01-31]
FF Extension: WOT - C:\Users\tce\AppData\Roaming\Mozilla\Firefox\Profiles\isodycb8.default-1378338383939\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-29]
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2013-12-12]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2013-12-12]
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files (x86)\congstar\Internetmanager\Bin\addon
FF Extension: Bytemobile Optimization Client - C:\Program Files (x86)\congstar\Internetmanager\Bin\addon [2013-10-14]
FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\
FF Extension: Default Manager - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ []
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2013-09-30]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2013-09-30]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2013-09-30]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2013-09-30]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2013-09-30]

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-02] (Kaspersky Lab ZAO)
R2 DBService; C:\Program Files (x86)\Common Files\DATA BECKER Shared\DBService.exe [187456 2009-01-08] (DATA BECKER GmbH & Co KG)
R2 Greg_Service; C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [821720 2012-11-25] (Mister Group)
R2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)
R2 USBS3S4Detection; C:\OEM\USBDECTION\USBS3S4Detection.exe [76320 2009-12-09] ()

==================== Drivers (Whitelisted) ====================

S1 acedrv07; C:\Windows\system32\drivers\acedrv07.sys [125440 2012-07-18] ()
R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.)
S3 BrSerIf; C:\Windows\System32\DRIVERS\BrSerIf.sys [97280 2006-09-02] (Brother Industries Ltd.)
S3 HSPADataCardusbmdm; C:\Windows\System32\DRIVERS\HSPADataCardusbmdm.sys [122752 2010-02-11] (HSPADataCard Incorporated)
S3 HSPADataCardusbnmea; C:\Windows\System32\DRIVERS\HSPADataCardusbnmea.sys [122752 2010-02-11] (HSPADataCard Incorporated)
S3 HSPADataCardusbser; C:\Windows\System32\DRIVERS\HSPADataCardusbser.sys [122752 2010-02-11] (HSPADataCard Incorporated)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-11-07] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [112224 2013-06-08] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620640 2013-12-22] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-02] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-02] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2013-12-22] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.)
U3 aswMBR; \??\C:\Users\tce\AppData\Local\Temp\aswMBR.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-03 13:11 - 2014-02-03 13:11 - 02347384 _____ (ESET) C:\Users\tce\Downloads\esetsmartinstaller_enu(1).exe
2014-02-03 12:59 - 2014-02-03 12:59 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-02-03 12:58 - 2014-02-03 12:58 - 02347384 _____ (ESET) C:\Users\tce\Downloads\esetsmartinstaller_enu.exe
2014-02-03 12:41 - 2014-02-03 12:41 - 00001085 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-03 12:41 - 2014-02-03 12:41 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Malwarebytes
2014-02-03 12:41 - 2014-02-03 12:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-03 12:41 - 2014-02-03 12:41 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-03 12:41 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-03 12:40 - 2014-02-03 12:40 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\tce\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-03 12:08 - 2014-02-03 12:50 - 00000280 _____ () C:\Windows\setupact.log
2014-02-03 12:08 - 2014-02-03 12:08 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-03 11:55 - 2014-02-03 11:55 - 00000000 ____D () C:\Windows\ERUNT
2014-02-03 11:53 - 2014-02-03 12:25 - 00034479 _____ () C:\Users\tce\Desktop\Addition.txt
2014-02-03 11:53 - 2014-02-03 11:53 - 01037068 _____ (Thisisu) C:\Users\tce\Desktop\JRT.exe
2014-02-03 11:45 - 2014-02-03 13:22 - 00018858 _____ () C:\Users\tce\Desktop\FRST.txt
2014-02-03 11:37 - 2014-02-03 11:37 - 00034256 _____ () C:\Users\tce\Downloads\Addition.txt
2014-02-03 11:36 - 2014-02-03 13:22 - 00000000 ____D () C:\FRST
2014-02-03 11:36 - 2014-02-03 11:37 - 00058315 _____ () C:\Users\tce\Downloads\FRST.txt
2014-02-03 11:35 - 2014-02-03 11:36 - 02080256 _____ (Farbar) C:\Users\tce\Desktop\FRST64.exe
2014-02-03 11:21 - 2014-02-03 11:21 - 00725770 _____ () C:\Users\tce\Documents\copy_agent2[1].exe
2014-02-03 11:17 - 2014-02-03 12:03 - 00006861 _____ () C:\Users\tce\Documents\aswMBR.txt
2014-02-03 11:17 - 2014-02-03 12:03 - 00000512 _____ () C:\Users\tce\Documents\MBR.dat
2014-02-03 10:57 - 2014-02-03 10:57 - 04745728 _____ (AVAST Software) C:\Users\tce\Desktop\aswMBR.exe
2014-02-03 00:10 - 2014-02-03 00:10 - 00000000 ____D () C:\Users\tce\AppData\Local\{0076DD7B-057A-4456-9F59-09072BA395F7}
2014-02-02 12:09 - 2014-02-02 12:09 - 00000000 ____D () C:\Users\tce\AppData\Local\{26D4C4C2-5239-4E9E-B87C-B3DC49E8FDCF}
2014-02-02 04:15 - 2014-02-02 04:15 - 00000000 ____D () C:\Users\tce\AppData\Local\Microsoft Corporation
2014-02-02 04:14 - 2014-02-02 04:14 - 00002087 _____ () C:\Users\Public\Desktop\Windows 7 Upgrade Advisor.lnk
2014-02-02 04:14 - 2014-02-02 04:14 - 00000000 ____D () C:\Program Files (x86)\Microsoft Windows 7 Upgrade Advisor
2014-02-02 04:13 - 2014-02-02 04:13 - 08676128 _____ (Microsoft Corporation) C:\Users\tce\Downloads\Windows7UpgradeAdvisorSetup.exe
2014-02-02 00:14 - 2014-02-02 00:16 - 24394803 _____ () C:\Users\tce\Desktop\torbrowser-install-3.5.1_de.exe
2014-02-01 17:33 - 2014-02-01 17:34 - 00000000 ____D () C:\Users\tce\AppData\Local\{19A5D0F7-7DE2-4FB0-8A79-F6E66E54BB5D}
2014-02-01 05:33 - 2014-02-01 05:33 - 00000000 ____D () C:\Users\tce\AppData\Local\{C00E03B3-6675-47AE-983C-0A294BA5CC7A}
2014-01-31 19:43 - 2014-01-31 19:43 - 00000000 ____D () C:\ProgramData\SNT
2014-01-31 19:43 - 2014-01-31 19:43 - 00000000 ____D () C:\ProgramData\SetApp
2014-01-31 19:43 - 2014-01-31 19:43 - 00000000 ____D () C:\Program Files (x86)\SNT
2014-01-31 19:42 - 2014-01-31 19:42 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 19:41 - 2014-01-31 19:43 - 00000000 ____D () C:\ProgramData\f664f9ea7cf0e39e
2014-01-31 19:41 - 2014-01-31 19:42 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Google
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\tce\AppData\Local\Packages
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\tce\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Gast
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Administrator
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\ProgramData\greaTsaver
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Program Files (x86)\YoutubeAdblocker
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Program Files (x86)\greaTsaver
2014-01-31 19:40 - 2014-01-31 19:43 - 00000000 ____D () C:\ProgramData\InstallMate
2014-01-31 18:14 - 2014-01-31 18:14 - 00593920 _____ (UpMyRank.com) C:\Users\tce\Downloads\upmyrank.exe
2014-01-31 17:33 - 2014-01-31 17:33 - 00000000 ____D () C:\Users\tce\AppData\Local\{41A280A9-EA15-4A95-8746-5C77F7270E21}
2014-01-30 22:25 - 2014-01-30 22:25 - 00000000 ____D () C:\Users\tce\AppData\Local\{F404833B-E474-4BE9-B224-8BD6798F8E55}
2014-01-30 10:25 - 2014-01-30 10:25 - 00000000 ____D () C:\Users\tce\AppData\Local\{5394E0D6-2B40-4DB3-9EBC-E4398A13831A}
2014-01-29 16:38 - 2014-01-29 16:38 - 00000000 ____D () C:\Users\tce\AppData\Local\{CEE9ACAF-AC3D-4AEB-B01C-1DABA017678D}
2014-01-28 21:39 - 2014-01-28 21:39 - 00000000 ____D () C:\Users\tce\AppData\Local\{60E1B840-440F-45A9-A401-DFDC3DA6D083}
2014-01-28 16:35 - 2014-01-28 16:35 - 00046735 _____ () C:\Users\tce\Downloads\akeebabackup-de-DE-j25(4).zip
2014-01-28 09:38 - 2014-01-28 09:38 - 00000000 ____D () C:\Users\tce\AppData\Local\{47E8D966-09E8-4FCD-A694-8F571A90DFDE}
2014-01-27 22:38 - 2014-01-28 01:31 - 00000000 ____D () C:\Users\tce\Documents\ws
2014-01-27 22:33 - 2014-01-27 22:33 - 00000048 _____ () C:\Users\tce\Documents\redirectMatch 301.txt
2014-01-27 16:26 - 2014-01-27 16:27 - 00000000 ____D () C:\Users\tce\AppData\Local\{84821FF8-85F9-4C93-9ED4-F0396EBCDC70}
2014-01-27 13:26 - 2014-01-27 13:26 - 00000032 _____ () C:\Users\tce\Downloads\mywotb97cbeae237e1a373b40.html
2014-01-27 13:24 - 2014-01-27 13:24 - 00000032 _____ () C:\Users\tce\Downloads\mywot91fc61000da8ff2552cd(1).html
2014-01-27 13:21 - 2014-01-27 13:21 - 00000032 _____ () C:\Users\tce\Downloads\mywot91fc61000da8ff2552cd.html
2014-01-27 13:20 - 2014-01-27 13:20 - 00000032 _____ () C:\Users\tce\Downloads\mywot81b4811265d92e7695b8.html
2014-01-27 13:14 - 2014-01-27 13:14 - 00000032 _____ () C:\Users\tce\Downloads\mywote0d1c035b8bd39a7685c(1).html
2014-01-27 13:03 - 2014-01-27 13:03 - 00000032 _____ () C:\Users\tce\Downloads\mywote0d1c035b8bd39a7685c.html
2014-01-27 03:41 - 2014-01-27 03:42 - 00000000 ____D () C:\Users\tce\AppData\Local\{CBBF711F-5E15-4348-95BE-F197FC2992F8}
2014-01-26 11:20 - 2014-01-26 11:20 - 00000000 ____D () C:\Users\tce\AppData\Local\{EFDE82EC-729E-4E39-AC62-FC9931D38518}
2014-01-25 22:53 - 2014-01-25 22:54 - 00000000 ____D () C:\Users\tce\AppData\Local\{D3AEE9C3-4B7C-4882-80CE-9A91F0EB4A1C}
2014-01-25 10:53 - 2014-01-25 10:53 - 00000000 ____D () C:\Users\tce\AppData\Local\{8051F8C4-2590-4C53-BC03-A2D2066A4CA1}
2014-01-24 22:52 - 2014-01-24 22:53 - 00000000 ____D () C:\Users\tce\AppData\Local\{FEFBE3EB-B727-4881-BFC3-2C1AD23D5950}
2014-01-24 10:52 - 2014-01-24 10:52 - 00000000 ____D () C:\Users\tce\AppData\Local\{AF5D803B-37E4-448C-8EC5-1E54C44700F0}
2014-01-23 22:52 - 2014-01-23 22:52 - 00000000 ____D () C:\Users\tce\AppData\Local\{846A37B2-AF60-49DF-BDAA-843FB21588D8}
2014-01-23 10:51 - 2014-01-23 10:52 - 00000000 ____D () C:\Users\tce\AppData\Local\{5B471AA8-1BA2-4D7B-A760-2A5B62467D68}
2014-01-22 22:51 - 2014-01-22 22:51 - 00000000 ____D () C:\Users\tce\AppData\Local\{AE0145E4-CA32-4C85-BD3F-9803374460DD}
2014-01-22 10:51 - 2014-01-22 10:51 - 00000000 ____D () C:\Users\tce\AppData\Local\{6D152136-C7BA-4666-9C86-0A24D271F9FF}
2014-01-21 21:42 - 2014-01-21 21:45 - 00000000 ____D () C:\Users\tce\pdf
2014-01-21 20:56 - 2014-01-22 00:07 - 00002491 _____ () C:\Users\Public\Desktop\Safari.lnk
2014-01-21 20:56 - 2014-01-21 20:56 - 00000000 ____D () C:\Program Files (x86)\Safari
2014-01-21 13:07 - 2014-01-21 13:07 - 00000000 ____D () C:\Users\tce\AppData\Local\{3C85DE14-8C90-47B4-9FB3-C80A4EACDCAA}
2014-01-21 01:06 - 2014-01-21 01:07 - 00000000 ____D () C:\Users\tce\AppData\Local\{C3F9D655-5126-40F3-AD28-0338ED1E2023}
2014-01-20 18:10 - 2014-01-22 00:18 - 00000000 ____D () C:\Users\tce\kopie_vddh
2014-01-20 13:06 - 2014-01-20 13:06 - 00000000 ____D () C:\Users\tce\AppData\Local\{3A11E87B-0729-4D3E-8F55-4A8856EF918F}
2014-01-20 11:35 - 2014-01-20 11:35 - 00002768 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-20 11:35 - 2014-01-20 11:35 - 00000834 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-01-20 11:35 - 2014-01-20 11:35 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-20 11:34 - 2014-01-20 11:34 - 03571656 _____ (Piriform Ltd) C:\Users\tce\Downloads\ccsetup409_slim.exe
2014-01-20 10:58 - 2014-01-20 10:58 - 00000053 _____ () C:\Users\tce\Documents\googlef2dfc86b5fd1e0fa.html
2014-01-20 00:25 - 2014-01-20 00:26 - 00000000 ____D () C:\Users\tce\AppData\Local\{FC2EDD28-5FB0-44A5-8703-AE2AA68E7AB5}
2014-01-19 23:45 - 2014-01-19 23:45 - 00001062 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-01-19 18:22 - 2014-01-19 18:22 - 00000162 ____H () C:\Users\tce\Documents\~$htt.txt
2014-01-19 18:21 - 2014-01-19 18:22 - 00000002 _____ () C:\Users\tce\Documents\htt.txt
2014-01-19 15:43 - 2014-01-19 15:43 - 00001282 _____ () C:\Users\tce\Documents\mein.txt
2014-01-19 15:43 - 2014-01-19 15:43 - 00000162 ____H () C:\Users\tce\Documents\~$mein.txt
2014-01-19 15:42 - 2014-01-19 15:42 - 00000069 _____ () C:\Users\tce\Documents\link href.txt
2014-01-19 14:44 - 2014-01-19 14:44 - 00001388 _____ () C:\Users\tce\Downloads\template_css.zip
2014-01-19 12:25 - 2014-01-19 12:25 - 00000000 ____D () C:\Users\tce\AppData\Local\{D044E9C3-B00A-40F8-A2E3-BB0358868368}
2014-01-18 14:34 - 2014-01-18 14:34 - 00000000 ____D () C:\Users\tce\AppData\Local\{CCC2931F-E9A3-4FDA-8476-8F535AB7968A}
2014-01-18 13:09 - 2014-01-18 13:23 - 00000070 _____ () C:\Users\tce\Downloads\NeueDatei.js
2014-01-18 13:09 - 2014-01-18 13:09 - 00000000 _____ () C:\Users\tce\Downloads\NeueDatei(1).js
2014-01-18 12:23 - 2014-01-18 14:32 - 00000000 ____D () C:\Users\tce\Desktop\auslagern
2014-01-18 12:19 - 2014-01-18 12:19 - 00096888 _____ () C:\Users\tce\Desktop\mein.js
2014-01-17 14:16 - 2014-01-17 14:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{BD0C3046-2D4D-436F-B2EB-94A11BAD9DDD}
2014-01-17 02:16 - 2014-01-17 02:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{0DB754C2-AA2F-425F-B0C1-EB9F7F0A8620}
2014-01-16 12:31 - 2014-01-16 13:24 - 00000046 _____ () C:\Windows\hmview.ini
2014-01-16 02:09 - 2014-01-16 02:09 - 00005452 _____ () C:\Users\tce\Desktop\index.php
2014-01-16 01:36 - 2014-01-16 02:08 - 00000064 _____ () C:\Users\tce\Desktop\main.js
2014-01-15 23:01 - 2014-01-15 23:02 - 00000000 ____D () C:\Users\tce\AppData\Local\{1CDE988A-0F21-4B9F-8366-BCE392B12831}
2014-01-15 21:16 - 2014-01-15 21:16 - 00139674 _____ () C:\Users\tce\Documents\Tassi, 15.01.14anwalt
2014-01-15 11:01 - 2014-01-15 11:01 - 00000000 ____D () C:\Users\tce\AppData\Local\{9FCC3157-E4B8-4BA1-9B4E-239D34456F05}
2014-01-15 07:19 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 07:19 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 07:19 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 07:19 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 07:19 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 07:19 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 07:19 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 07:19 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 07:19 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 23:01 - 2014-01-14 23:01 - 00000000 ____D () C:\Users\tce\AppData\Local\{5FB63EEA-0203-4178-857F-1A14494E8916}
2014-01-14 22:40 - 2014-01-14 22:40 - 00000000 ____D () C:\Users\tce\Downloads\impresscms_1.3.5_final_de
2014-01-14 22:31 - 2014-01-14 22:31 - 12545683 _____ () C:\Users\tce\Downloads\impresscms_1.3.5_final_de.zip
2014-01-14 21:42 - 2014-01-14 21:42 - 00568764 _____ () C:\Users\tce\Downloads\pt_lacuanda_free.zip
2014-01-14 21:42 - 2014-01-14 21:42 - 00000000 ____D () C:\Users\tce\Downloads\pt_lacuanda_free
2014-01-14 18:50 - 2014-01-14 18:54 - 00000000 ____D () C:\Users\tce\Documents\Zeta Producer 11
2014-01-14 18:47 - 2014-01-14 18:48 - 46280072 _____ (Zeta Software GmbH) C:\Users\tce\Downloads\zp11-setup-de.exe
2014-01-14 18:19 - 2014-01-14 18:19 - 00091227 _____ () C:\Users\tce\Downloads\facebooklikeboxgeniuspro_unzip1st_v1.3(1).zip
2014-01-14 18:16 - 2014-01-14 18:16 - 00000000 ____D () C:\Users\tce\Downloads\mod_fblikeboxslider
2014-01-14 18:15 - 2014-01-14 18:15 - 00016362 _____ () C:\Users\tce\Downloads\mod_fblikeboxslider.zip
2014-01-14 18:08 - 2014-01-14 18:12 - 00000000 ____D () C:\Users\tce\Downloads\facebooklikeboxgeniuspro_unzip1st_v1.3
2014-01-14 18:08 - 2014-01-14 18:08 - 00091227 _____ () C:\Users\tce\Downloads\facebooklikeboxgeniuspro_unzip1st_v1.3.zip
2014-01-14 18:02 - 2014-01-14 18:02 - 00009671 _____ () C:\Users\tce\Downloads\mod_fbslider_j2.5.zip
2014-01-14 18:02 - 2014-01-14 18:02 - 00000000 ____D () C:\Users\tce\Downloads\mod_google_profile_card
2014-01-14 18:02 - 2014-01-14 18:02 - 00000000 ____D () C:\Users\tce\Downloads\mod_fbslider_j2.5
2014-01-14 18:01 - 2014-01-14 18:01 - 00002840 _____ () C:\Users\tce\Downloads\mod_google_profile_card.zip
2014-01-14 17:09 - 2014-01-14 17:09 - 00027757 _____ () C:\Users\tce\Downloads\plg_asyncsocialbuttons_1.5_UNZIPFIRST.zip
2014-01-14 17:09 - 2014-01-14 17:09 - 00000000 ____D () C:\Users\tce\Downloads\plg_asyncsocialbuttons_1.5_UNZIPFIRST
2014-01-14 11:00 - 2014-01-14 11:01 - 00000000 ____D () C:\Users\tce\AppData\Local\{366EAF48-B265-4C07-8521-8B6E768FF159}
2014-01-13 21:07 - 2014-01-13 21:07 - 00006568 _____ () C:\Users\tce\index.html
2014-01-13 20:47 - 2014-01-13 20:48 - 00000000 ____D () C:\Users\tce\AppData\Local\{A84CB12A-CB5E-4215-9B1E-FC6338E56AA5}
2014-01-13 08:47 - 2014-01-13 08:47 - 00000000 ____D () C:\Users\tce\AppData\Local\{4516647E-F9BC-42E0-B5B8-5CCDF3C8C665}
2014-01-12 13:15 - 2014-01-20 10:22 - 00000000 ____D () C:\Users\tce\Documents\Neu_VDDH_duesseldorf
2014-01-12 13:05 - 2014-01-12 13:05 - 00000000 ____D () C:\Users\tce\AppData\Local\{FFC86E59-C6FA-451A-B169-D804FA5A7659}
2014-01-12 02:23 - 2014-01-27 12:15 - 00000000 ____D () C:\Users\tce\Documents\VDDH_EV
2014-01-11 12:16 - 2014-01-11 12:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{FCB36050-7420-46B6-AA6A-E64DDDC8C589}
2014-01-11 00:15 - 2014-01-11 00:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{924F24E2-D6E4-49B3-9BA9-3586C16C9A1F}
2014-01-10 12:15 - 2014-01-10 12:15 - 00000000 ____D () C:\Users\tce\AppData\Local\{D6D8B26D-1619-45DD-825D-A8D5AB696ABC}
2014-01-09 21:36 - 2014-01-09 21:37 - 00000000 ____D () C:\Users\tce\Downloads\direkhosting123
2014-01-09 20:17 - 2014-01-09 20:18 - 00000000 ____D () C:\Users\tce\AppData\Local\{E6972426-0CA6-4E92-BA8D-4E48A8C9A234}
2014-01-09 08:17 - 2014-01-09 08:17 - 00000000 ____D () C:\Users\tce\AppData\Local\{3C98300A-FD04-4556-9BFD-D3B42FA99493}
2014-01-08 20:16 - 2014-01-08 20:17 - 00000000 ____D () C:\Users\tce\AppData\Local\{3D455830-9467-4ACB-B54D-BB9B3D1C0829}
2014-01-08 08:16 - 2014-01-08 08:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{37D0DF06-1EB0-40E2-A4F7-4584A77178CD}
2014-01-07 20:16 - 2014-01-07 20:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{2F8CFCAB-4B83-413C-A5E2-D2D2E379F70E}
2014-01-06 22:43 - 2014-01-06 22:44 - 00000000 ____D () C:\Users\tce\Downloads\Joomla_2.5.17-Stable-Full_Package_German
2014-01-06 22:42 - 2014-01-06 22:43 - 08249873 _____ () C:\Users\tce\Downloads\Joomla_2.5.17-Stable-Full_Package_German.zip
2014-01-06 09:08 - 2014-01-06 09:09 - 00000000 ____D () C:\Users\tce\AppData\Local\{4387E77E-72CC-4E23-8CA0-AA722E9229D1}
2014-01-05 21:08 - 2014-01-05 21:08 - 00000000 ____D () C:\Users\tce\AppData\Local\{75C31A5C-869A-4D76-B306-502F0D2F9958}
2014-01-05 08:56 - 2014-01-05 08:56 - 00000000 ____D () C:\Users\tce\AppData\Local\{07A406D7-771C-4987-9FCD-C5F882382BB2}
2014-01-04 20:55 - 2014-01-04 20:56 - 00000000 ____D () C:\Users\tce\AppData\Local\{42FA1417-7139-40F8-B535-9619ED3D6EC1}
2014-01-04 20:24 - 2014-01-04 20:40 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Ahnenblatt
2014-01-04 20:24 - 2014-01-04 20:24 - 00001901 _____ () C:\Users\tce\Desktop\Ahnenblatt.lnk
2014-01-04 20:24 - 2014-01-04 20:24 - 00000000 ____D () C:\Users\tce\Documents\Ahnenblatt
2014-01-04 20:24 - 2014-01-04 20:24 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ahnenblatt
2014-01-04 20:24 - 2014-01-04 20:24 - 00000000 ____D () C:\Program Files (x86)\Ahnenblatt
2014-01-04 20:23 - 2014-01-04 20:23 - 04707624 _____ (Dirk Boettcher ) C:\Users\tce\Downloads\absetup_2.74.exe
2014-01-04 08:55 - 2014-01-04 08:55 - 00000000 ____D () C:\Users\tce\AppData\Local\{77110533-F3A9-46FA-A2F2-4BFCD56841D2}

==================== One Month Modified Files and Folders =======

2014-02-03 13:22 - 2014-02-03 11:45 - 00018858 _____ () C:\Users\tce\Desktop\FRST.txt
2014-02-03 13:22 - 2014-02-03 11:36 - 00000000 ____D () C:\FRST
2014-02-03 13:19 - 2013-08-20 11:03 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2634336733-3951264793-2692642557-1001UA.job
2014-02-03 13:12 - 2012-06-14 22:37 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-03 13:11 - 2014-02-03 13:11 - 02347384 _____ (ESET) C:\Users\tce\Downloads\esetsmartinstaller_enu(1).exe
2014-02-03 13:07 - 2012-10-12 12:26 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-02-03 12:59 - 2014-02-03 12:59 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-02-03 12:58 - 2014-02-03 12:58 - 02347384 _____ (ESET) C:\Users\tce\Downloads\esetsmartinstaller_enu.exe
2014-02-03 12:58 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-03 12:58 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-03 12:51 - 2012-06-14 21:38 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-03 12:51 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-03 12:50 - 2014-02-03 12:08 - 00000280 _____ () C:\Windows\setupact.log
2014-02-03 12:50 - 2012-06-14 20:34 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-03 12:41 - 2014-02-03 12:41 - 00001085 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-03 12:41 - 2014-02-03 12:41 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Malwarebytes
2014-02-03 12:41 - 2014-02-03 12:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-03 12:41 - 2014-02-03 12:41 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-03 12:40 - 2014-02-03 12:40 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\tce\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-03 12:35 - 2012-06-14 20:25 - 01807598 _____ () C:\Windows\WindowsUpdate.log
2014-02-03 12:31 - 2012-06-14 21:38 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-03 12:25 - 2014-02-03 11:53 - 00034479 _____ () C:\Users\tce\Desktop\Addition.txt
2014-02-03 12:08 - 2014-02-03 12:08 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-03 12:07 - 2012-07-14 16:53 - 00000000 ____D () C:\Windows\Minidump
2014-02-03 12:03 - 2014-02-03 11:17 - 00006861 _____ () C:\Users\tce\Documents\aswMBR.txt
2014-02-03 12:03 - 2014-02-03 11:17 - 00000512 _____ () C:\Users\tce\Documents\MBR.dat
2014-02-03 11:55 - 2014-02-03 11:55 - 00000000 ____D () C:\Windows\ERUNT
2014-02-03 11:53 - 2014-02-03 11:53 - 01037068 _____ (Thisisu) C:\Users\tce\Desktop\JRT.exe
2014-02-03 11:37 - 2014-02-03 11:37 - 00034256 _____ () C:\Users\tce\Downloads\Addition.txt
2014-02-03 11:37 - 2014-02-03 11:36 - 00058315 _____ () C:\Users\tce\Downloads\FRST.txt
2014-02-03 11:36 - 2014-02-03 11:35 - 02080256 _____ (Farbar) C:\Users\tce\Desktop\FRST64.exe
2014-02-03 11:21 - 2014-02-03 11:21 - 00725770 _____ () C:\Users\tce\Documents\copy_agent2[1].exe
2014-02-03 10:57 - 2014-02-03 10:57 - 04745728 _____ (AVAST Software) C:\Users\tce\Desktop\aswMBR.exe
2014-02-03 02:24 - 2012-06-15 13:53 - 00000000 ____D () C:\Users\tce\AppData\Roaming\FileZilla
2014-02-03 01:19 - 2013-08-20 11:03 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2634336733-3951264793-2692642557-1001Core.job
2014-02-03 00:10 - 2014-02-03 00:10 - 00000000 ____D () C:\Users\tce\AppData\Local\{0076DD7B-057A-4456-9F59-09072BA395F7}
2014-02-02 12:09 - 2014-02-02 12:09 - 00000000 ____D () C:\Users\tce\AppData\Local\{26D4C4C2-5239-4E9E-B87C-B3DC49E8FDCF}
2014-02-02 04:15 - 2014-02-02 04:15 - 00000000 ____D () C:\Users\tce\AppData\Local\Microsoft Corporation
2014-02-02 04:14 - 2014-02-02 04:14 - 00002087 _____ () C:\Users\Public\Desktop\Windows 7 Upgrade Advisor.lnk
2014-02-02 04:14 - 2014-02-02 04:14 - 00000000 ____D () C:\Program Files (x86)\Microsoft Windows 7 Upgrade Advisor
2014-02-02 04:13 - 2014-02-02 04:13 - 08676128 _____ (Microsoft Corporation) C:\Users\tce\Downloads\Windows7UpgradeAdvisorSetup.exe
2014-02-02 00:16 - 2014-02-02 00:14 - 24394803 _____ () C:\Users\tce\Desktop\torbrowser-install-3.5.1_de.exe
2014-02-01 17:34 - 2014-02-01 17:33 - 00000000 ____D () C:\Users\tce\AppData\Local\{19A5D0F7-7DE2-4FB0-8A79-F6E66E54BB5D}
2014-02-01 05:33 - 2014-02-01 05:33 - 00000000 ____D () C:\Users\tce\AppData\Local\{C00E03B3-6675-47AE-983C-0A294BA5CC7A}
2014-01-31 19:43 - 2014-01-31 19:43 - 00000000 ____D () C:\ProgramData\SNT
2014-01-31 19:43 - 2014-01-31 19:43 - 00000000 ____D () C:\ProgramData\SetApp
2014-01-31 19:43 - 2014-01-31 19:43 - 00000000 ____D () C:\Program Files (x86)\SNT
2014-01-31 19:43 - 2014-01-31 19:41 - 00000000 ____D () C:\ProgramData\f664f9ea7cf0e39e
2014-01-31 19:43 - 2014-01-31 19:40 - 00000000 ____D () C:\ProgramData\InstallMate
2014-01-31 19:42 - 2014-01-31 19:42 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 19:42 - 2014-01-31 19:41 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-01-31 19:42 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-01-31 19:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Google
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\tce\AppData\Local\Packages
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\tce\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Gast
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Users\Administrator
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\ProgramData\greaTsaver
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Program Files (x86)\YoutubeAdblocker
2014-01-31 19:41 - 2014-01-31 19:41 - 00000000 ____D () C:\Program Files (x86)\greaTsaver
2014-01-31 19:41 - 2012-06-14 21:21 - 00000000 ____D () C:\Users\tce\AppData\Local\Google
2014-01-31 19:38 - 2010-05-11 01:34 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-31 18:14 - 2014-01-31 18:14 - 00593920 _____ (UpMyRank.com) C:\Users\tce\Downloads\upmyrank.exe
2014-01-31 17:33 - 2014-01-31 17:33 - 00000000 ____D () C:\Users\tce\AppData\Local\{41A280A9-EA15-4A95-8746-5C77F7270E21}
2014-01-30 23:00 - 2012-06-14 22:22 - 00000563 _____ () C:\Windows\ulead32.ini
2014-01-30 22:25 - 2014-01-30 22:25 - 00000000 ____D () C:\Users\tce\AppData\Local\{F404833B-E474-4BE9-B224-8BD6798F8E55}
2014-01-30 10:25 - 2014-01-30 10:25 - 00000000 ____D () C:\Users\tce\AppData\Local\{5394E0D6-2B40-4DB3-9EBC-E4398A13831A}
2014-01-29 16:38 - 2014-01-29 16:38 - 00000000 ____D () C:\Users\tce\AppData\Local\{CEE9ACAF-AC3D-4AEB-B01C-1DABA017678D}
2014-01-29 08:33 - 2013-03-15 08:50 - 00002147 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-28 21:39 - 2014-01-28 21:39 - 00000000 ____D () C:\Users\tce\AppData\Local\{60E1B840-440F-45A9-A401-DFDC3DA6D083}
2014-01-28 16:35 - 2014-01-28 16:35 - 00046735 _____ () C:\Users\tce\Downloads\akeebabackup-de-DE-j25(4).zip
2014-01-28 15:15 - 2012-06-17 17:23 - 00000030 _____ () C:\Windows\Iedit_.INI
2014-01-28 15:09 - 2013-03-03 17:29 - 01643520 ___SH () C:\Users\tce\Thumbs.db
2014-01-28 12:46 - 2012-06-14 20:35 - 00000000 ____D () C:\Users\tce
2014-01-28 09:38 - 2014-01-28 09:38 - 00000000 ____D () C:\Users\tce\AppData\Local\{47E8D966-09E8-4FCD-A694-8F571A90DFDE}
2014-01-28 01:31 - 2014-01-27 22:38 - 00000000 ____D () C:\Users\tce\Documents\ws
2014-01-27 22:33 - 2014-01-27 22:33 - 00000048 _____ () C:\Users\tce\Documents\redirectMatch 301.txt
2014-01-27 19:29 - 2012-06-19 20:21 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Skype
2014-01-27 16:27 - 2014-01-27 16:26 - 00000000 ____D () C:\Users\tce\AppData\Local\{84821FF8-85F9-4C93-9ED4-F0396EBCDC70}
2014-01-27 13:26 - 2014-01-27 13:26 - 00000032 _____ () C:\Users\tce\Downloads\mywotb97cbeae237e1a373b40.html
2014-01-27 13:24 - 2014-01-27 13:24 - 00000032 _____ () C:\Users\tce\Downloads\mywot91fc61000da8ff2552cd(1).html
2014-01-27 13:21 - 2014-01-27 13:21 - 00000032 _____ () C:\Users\tce\Downloads\mywot91fc61000da8ff2552cd.html
2014-01-27 13:20 - 2014-01-27 13:20 - 00000032 _____ () C:\Users\tce\Downloads\mywot81b4811265d92e7695b8.html
2014-01-27 13:14 - 2014-01-27 13:14 - 00000032 _____ () C:\Users\tce\Downloads\mywote0d1c035b8bd39a7685c(1).html
2014-01-27 13:03 - 2014-01-27 13:03 - 00000032 _____ () C:\Users\tce\Downloads\mywote0d1c035b8bd39a7685c.html
2014-01-27 12:15 - 2014-01-12 02:23 - 00000000 ____D () C:\Users\tce\Documents\VDDH_EV
2014-01-27 03:42 - 2014-01-27 03:41 - 00000000 ____D () C:\Users\tce\AppData\Local\{CBBF711F-5E15-4348-95BE-F197FC2992F8}
2014-01-26 11:20 - 2014-01-26 11:20 - 00000000 ____D () C:\Users\tce\AppData\Local\{EFDE82EC-729E-4E39-AC62-FC9931D38518}
2014-01-26 00:31 - 2012-06-15 09:11 - 00000000 ____D () C:\Users\tce\AppData\Local\Adobe
2014-01-26 00:31 - 2012-06-14 22:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-26 00:31 - 2012-06-14 22:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-26 00:31 - 2012-06-14 22:37 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-26 00:18 - 2013-07-11 21:41 - 00000000 ____D () C:\Users\tce\Documents\vddh
2014-01-25 22:54 - 2014-01-25 22:53 - 00000000 ____D () C:\Users\tce\AppData\Local\{D3AEE9C3-4B7C-4882-80CE-9A91F0EB4A1C}
2014-01-25 10:53 - 2014-01-25 10:53 - 00000000 ____D () C:\Users\tce\AppData\Local\{8051F8C4-2590-4C53-BC03-A2D2066A4CA1}
2014-01-24 22:53 - 2014-01-24 22:52 - 00000000 ____D () C:\Users\tce\AppData\Local\{FEFBE3EB-B727-4881-BFC3-2C1AD23D5950}
2014-01-24 21:21 - 2012-06-14 21:38 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Mozilla
2014-01-24 12:47 - 2013-07-29 12:54 - 00000000 ____D () C:\Unbenannte Site 2
2014-01-24 11:12 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-01-24 11:08 - 2013-01-06 19:48 - 00000000 ____D () C:\Users\tce\AppData\Roaming\EurekaLog
2014-01-24 10:52 - 2014-01-24 10:52 - 00000000 ____D () C:\Users\tce\AppData\Local\{AF5D803B-37E4-448C-8EC5-1E54C44700F0}
2014-01-23 22:52 - 2014-01-23 22:52 - 00000000 ____D () C:\Users\tce\AppData\Local\{846A37B2-AF60-49DF-BDAA-843FB21588D8}
2014-01-23 10:52 - 2014-01-23 10:51 - 00000000 ____D () C:\Users\tce\AppData\Local\{5B471AA8-1BA2-4D7B-A760-2A5B62467D68}
2014-01-22 22:51 - 2014-01-22 22:51 - 00000000 ____D () C:\Users\tce\AppData\Local\{AE0145E4-CA32-4C85-BD3F-9803374460DD}
2014-01-22 10:51 - 2014-01-22 10:51 - 00000000 ____D () C:\Users\tce\AppData\Local\{6D152136-C7BA-4666-9C86-0A24D271F9FF}
2014-01-22 00:18 - 2014-01-20 18:10 - 00000000 ____D () C:\Users\tce\kopie_vddh
2014-01-22 00:07 - 2014-01-21 20:56 - 00002491 _____ () C:\Users\Public\Desktop\Safari.lnk
2014-01-21 21:45 - 2014-01-21 21:42 - 00000000 ____D () C:\Users\tce\pdf
2014-01-21 21:26 - 2012-12-30 15:55 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Apple Computer
2014-01-21 21:00 - 2012-12-30 15:55 - 00000000 ____D () C:\Users\tce\AppData\Local\Apple Computer
2014-01-21 20:56 - 2014-01-21 20:56 - 00000000 ____D () C:\Program Files (x86)\Safari
2014-01-21 13:07 - 2014-01-21 13:07 - 00000000 ____D () C:\Users\tce\AppData\Local\{3C85DE14-8C90-47B4-9FB3-C80A4EACDCAA}
2014-01-21 01:07 - 2014-01-21 01:06 - 00000000 ____D () C:\Users\tce\AppData\Local\{C3F9D655-5126-40F3-AD28-0338ED1E2023}
2014-01-20 16:57 - 2009-07-14 05:45 - 00483784 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-20 14:10 - 2012-06-14 20:36 - 00161160 _____ () C:\Users\tce\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-20 13:06 - 2014-01-20 13:06 - 00000000 ____D () C:\Users\tce\AppData\Local\{3A11E87B-0729-4D3E-8F55-4A8856EF918F}
2014-01-20 12:23 - 2012-06-20 16:03 - 00000000 ____D () C:\Users\tce\Tracing
2014-01-20 12:22 - 2010-05-11 02:14 - 00000000 ____D () C:\Windows\Panther
2014-01-20 11:35 - 2014-01-20 11:35 - 00002768 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-20 11:35 - 2014-01-20 11:35 - 00000834 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-01-20 11:35 - 2014-01-20 11:35 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-20 11:34 - 2014-01-20 11:34 - 03571656 _____ (Piriform Ltd) C:\Users\tce\Downloads\ccsetup409_slim.exe
2014-01-20 10:58 - 2014-01-20 10:58 - 00000053 _____ () C:\Users\tce\Documents\googlef2dfc86b5fd1e0fa.html
2014-01-20 10:22 - 2014-01-12 13:15 - 00000000 ____D () C:\Users\tce\Documents\Neu_VDDH_duesseldorf
2014-01-20 00:26 - 2014-01-20 00:25 - 00000000 ____D () C:\Users\tce\AppData\Local\{FC2EDD28-5FB0-44A5-8703-AE2AA68E7AB5}
2014-01-19 23:45 - 2014-01-19 23:45 - 00001062 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-01-19 23:44 - 2013-10-16 17:29 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-01-19 18:22 - 2014-01-19 18:22 - 00000162 ____H () C:\Users\tce\Documents\~$htt.txt
2014-01-19 18:22 - 2014-01-19 18:21 - 00000002 _____ () C:\Users\tce\Documents\htt.txt
2014-01-19 15:43 - 2014-01-19 15:43 - 00001282 _____ () C:\Users\tce\Documents\mein.txt
2014-01-19 15:43 - 2014-01-19 15:43 - 00000162 ____H () C:\Users\tce\Documents\~$mein.txt
2014-01-19 15:42 - 2014-01-19 15:42 - 00000069 _____ () C:\Users\tce\Documents\link href.txt
2014-01-19 14:44 - 2014-01-19 14:44 - 00001388 _____ () C:\Users\tce\Downloads\template_css.zip
2014-01-19 12:25 - 2014-01-19 12:25 - 00000000 ____D () C:\Users\tce\AppData\Local\{D044E9C3-B00A-40F8-A2E3-BB0358868368}
2014-01-18 14:34 - 2014-01-18 14:34 - 00000000 ____D () C:\Users\tce\AppData\Local\{CCC2931F-E9A3-4FDA-8476-8F535AB7968A}
2014-01-18 14:32 - 2014-01-18 12:23 - 00000000 ____D () C:\Users\tce\Desktop\auslagern
2014-01-18 13:23 - 2014-01-18 13:09 - 00000070 _____ () C:\Users\tce\Downloads\NeueDatei.js
2014-01-18 13:09 - 2014-01-18 13:09 - 00000000 _____ () C:\Users\tce\Downloads\NeueDatei(1).js
2014-01-18 12:19 - 2014-01-18 12:19 - 00096888 _____ () C:\Users\tce\Desktop\mein.js
2014-01-17 14:16 - 2014-01-17 14:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{BD0C3046-2D4D-436F-B2EB-94A11BAD9DDD}
2014-01-17 02:16 - 2014-01-17 02:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{0DB754C2-AA2F-425F-B0C1-EB9F7F0A8620}
2014-01-16 13:24 - 2014-01-16 12:31 - 00000046 _____ () C:\Windows\hmview.ini
2014-01-16 02:37 - 2012-06-14 22:06 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-16 02:36 - 2013-07-14 09:34 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-16 02:34 - 2012-06-18 07:38 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-16 02:09 - 2014-01-16 02:09 - 00005452 _____ () C:\Users\tce\Desktop\index.php
2014-01-16 02:08 - 2014-01-16 01:36 - 00000064 _____ () C:\Users\tce\Desktop\main.js
2014-01-15 23:02 - 2014-01-15 23:01 - 00000000 ____D () C:\Users\tce\AppData\Local\{1CDE988A-0F21-4B9F-8366-BCE392B12831}
2014-01-15 21:16 - 2014-01-15 21:16 - 00139674 _____ () C:\Users\tce\Documents\Tassi, 15.01.14anwalt
2014-01-15 11:01 - 2014-01-15 11:01 - 00000000 ____D () C:\Users\tce\AppData\Local\{9FCC3157-E4B8-4BA1-9B4E-239D34456F05}
2014-01-14 23:01 - 2014-01-14 23:01 - 00000000 ____D () C:\Users\tce\AppData\Local\{5FB63EEA-0203-4178-857F-1A14494E8916}
2014-01-14 22:40 - 2014-01-14 22:40 - 00000000 ____D () C:\Users\tce\Downloads\impresscms_1.3.5_final_de
2014-01-14 22:31 - 2014-01-14 22:31 - 12545683 _____ () C:\Users\tce\Downloads\impresscms_1.3.5_final_de.zip
2014-01-14 21:42 - 2014-01-14 21:42 - 00568764 _____ () C:\Users\tce\Downloads\pt_lacuanda_free.zip
2014-01-14 21:42 - 2014-01-14 21:42 - 00000000 ____D () C:\Users\tce\Downloads\pt_lacuanda_free
2014-01-14 18:54 - 2014-01-14 18:50 - 00000000 ____D () C:\Users\tce\Documents\Zeta Producer 11
2014-01-14 18:48 - 2014-01-14 18:47 - 46280072 _____ (Zeta Software GmbH) C:\Users\tce\Downloads\zp11-setup-de.exe
2014-01-14 18:19 - 2014-01-14 18:19 - 00091227 _____ () C:\Users\tce\Downloads\facebooklikeboxgeniuspro_unzip1st_v1.3(1).zip
2014-01-14 18:16 - 2014-01-14 18:16 - 00000000 ____D () C:\Users\tce\Downloads\mod_fblikeboxslider
2014-01-14 18:15 - 2014-01-14 18:15 - 00016362 _____ () C:\Users\tce\Downloads\mod_fblikeboxslider.zip
2014-01-14 18:12 - 2014-01-14 18:08 - 00000000 ____D () C:\Users\tce\Downloads\facebooklikeboxgeniuspro_unzip1st_v1.3
2014-01-14 18:08 - 2014-01-14 18:08 - 00091227 _____ () C:\Users\tce\Downloads\facebooklikeboxgeniuspro_unzip1st_v1.3.zip
2014-01-14 18:02 - 2014-01-14 18:02 - 00009671 _____ () C:\Users\tce\Downloads\mod_fbslider_j2.5.zip
2014-01-14 18:02 - 2014-01-14 18:02 - 00000000 ____D () C:\Users\tce\Downloads\mod_google_profile_card
2014-01-14 18:02 - 2014-01-14 18:02 - 00000000 ____D () C:\Users\tce\Downloads\mod_fbslider_j2.5
2014-01-14 18:01 - 2014-01-14 18:01 - 00002840 _____ () C:\Users\tce\Downloads\mod_google_profile_card.zip
2014-01-14 17:09 - 2014-01-14 17:09 - 00027757 _____ () C:\Users\tce\Downloads\plg_asyncsocialbuttons_1.5_UNZIPFIRST.zip
2014-01-14 17:09 - 2014-01-14 17:09 - 00000000 ____D () C:\Users\tce\Downloads\plg_asyncsocialbuttons_1.5_UNZIPFIRST
2014-01-14 11:01 - 2014-01-14 11:00 - 00000000 ____D () C:\Users\tce\AppData\Local\{366EAF48-B265-4C07-8521-8B6E768FF159}
2014-01-13 21:07 - 2014-01-13 21:07 - 00006568 _____ () C:\Users\tce\index.html
2014-01-13 20:48 - 2014-01-13 20:47 - 00000000 ____D () C:\Users\tce\AppData\Local\{A84CB12A-CB5E-4215-9B1E-FC6338E56AA5}
2014-01-13 08:47 - 2014-01-13 08:47 - 00000000 ____D () C:\Users\tce\AppData\Local\{4516647E-F9BC-42E0-B5B8-5CCDF3C8C665}
2014-01-12 21:14 - 2013-06-26 21:28 - 00000000 ____D () C:\Users\tce\Documents\DDH-eV
2014-01-12 13:05 - 2014-01-12 13:05 - 00000000 ____D () C:\Users\tce\AppData\Local\{FFC86E59-C6FA-451A-B169-D804FA5A7659}
2014-01-11 12:16 - 2014-01-11 12:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{FCB36050-7420-46B6-AA6A-E64DDDC8C589}
2014-01-11 00:16 - 2014-01-11 00:15 - 00000000 ____D () C:\Users\tce\AppData\Local\{924F24E2-D6E4-49B3-9BA9-3586C16C9A1F}
2014-01-10 12:15 - 2014-01-10 12:15 - 00000000 ____D () C:\Users\tce\AppData\Local\{D6D8B26D-1619-45DD-825D-A8D5AB696ABC}
2014-01-09 21:37 - 2014-01-09 21:36 - 00000000 ____D () C:\Users\tce\Downloads\direkhosting123
2014-01-09 20:18 - 2014-01-09 20:17 - 00000000 ____D () C:\Users\tce\AppData\Local\{E6972426-0CA6-4E92-BA8D-4E48A8C9A234}
2014-01-09 08:17 - 2014-01-09 08:17 - 00000000 ____D () C:\Users\tce\AppData\Local\{3C98300A-FD04-4556-9BFD-D3B42FA99493}
2014-01-09 01:13 - 2012-06-14 20:40 - 00000000 _____ () C:\Windows\system32\Drivers\lvuvc.hs
2014-01-08 20:17 - 2014-01-08 20:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{3D455830-9467-4ACB-B54D-BB9B3D1C0829}
2014-01-08 16:33 - 2013-02-01 18:55 - 00000000 ____D () C:\Users\tce\Downloads\black
2014-01-08 08:16 - 2014-01-08 08:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{37D0DF06-1EB0-40E2-A4F7-4584A77178CD}
2014-01-07 20:16 - 2014-01-07 20:16 - 00000000 ____D () C:\Users\tce\AppData\Local\{2F8CFCAB-4B83-413C-A5E2-D2D2E379F70E}
2014-01-06 22:44 - 2014-01-06 22:43 - 00000000 ____D () C:\Users\tce\Downloads\Joomla_2.5.17-Stable-Full_Package_German
2014-01-06 22:43 - 2014-01-06 22:42 - 08249873 _____ () C:\Users\tce\Downloads\Joomla_2.5.17-Stable-Full_Package_German.zip
2014-01-06 09:09 - 2014-01-06 09:08 - 00000000 ____D () C:\Users\tce\AppData\Local\{4387E77E-72CC-4E23-8CA0-AA722E9229D1}
2014-01-05 21:08 - 2014-01-05 21:08 - 00000000 ____D () C:\Users\tce\AppData\Local\{75C31A5C-869A-4D76-B306-502F0D2F9958}
2014-01-05 08:56 - 2014-01-05 08:56 - 00000000 ____D () C:\Users\tce\AppData\Local\{07A406D7-771C-4987-9FCD-C5F882382BB2}
2014-01-04 20:56 - 2014-01-04 20:55 - 00000000 ____D () C:\Users\tce\AppData\Local\{42FA1417-7139-40F8-B535-9619ED3D6EC1}
2014-01-04 20:40 - 2014-01-04 20:24 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Ahnenblatt
2014-01-04 20:24 - 2014-01-04 20:24 - 00001901 _____ () C:\Users\tce\Desktop\Ahnenblatt.lnk
2014-01-04 20:24 - 2014-01-04 20:24 - 00000000 ____D () C:\Users\tce\Documents\Ahnenblatt
2014-01-04 20:24 - 2014-01-04 20:24 - 00000000 ____D () C:\Users\tce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ahnenblatt
2014-01-04 20:24 - 2014-01-04 20:24 - 00000000 ____D () C:\Program Files (x86)\Ahnenblatt
2014-01-04 20:23 - 2014-01-04 20:23 - 04707624 _____ (Dirk Boettcher ) C:\Users\tce\Downloads\absetup_2.74.exe
2014-01-04 08:55 - 2014-01-04 08:55 - 00000000 ____D () C:\Users\tce\AppData\Local\{77110533-F3A9-46FA-A2F2-4BFCD56841D2}

Some content of TEMP:
====================
C:\Users\tce\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-29 20:48

==================== End Of Log ============================