Windows 7, Beamrise lässt sich nicht deinstallieren

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-02-2014
Ran by Judith (administrator) on JUDITH-TOSH on 07-02-2014 14:47:55
Running from C:\Users\Judith\Downloads
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(iWin Inc.) C:\Program Files (x86)\iWin Games\iWinTrusted.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Online Games Manager\ogmservice.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TEco.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Toshiba TEMPRO] - C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1050000 2009-08-06] (Toshiba Europe GmbH)
HKLM\...\Run: [TosNC] - C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [596328 2009-08-06] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] - C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [35160 2009-08-06] (TOSHIBA Corporation)
HKLM\...\Run: [SmoothView] - C:\Program Files\Toshiba\SmoothView\SmoothView.exe [570680 2009-08-13] (TOSHIBA Corporation)
HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [497504 2009-08-05] (TOSHIBA Corporation)
HKLM\...\Run: [HSON] - C:\Program Files\TOSHIBA\TBS\HSON.exe [52600 2009-03-09] (TOSHIBA Corporation)
HKLM\...\Run: [00TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [909624 2009-08-05] (TOSHIBA Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7982112 2009-07-28] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1815848 2009-07-20] (Synaptics Incorporated)
HKLM\...\Run: [SmartFaceVWatcher] - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [238080 2009-07-29] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2009-08-03] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1481568 2009-08-26] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [711000 2009-08-04] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba Registration] - C:\Program Files\Toshiba\Registration\ToshibaReminder.exe [134032 2009-07-30] (Toshiba Europe GmbH)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1271168 2012-03-26] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-07-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SVPWUTIL] - C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe [352256 2009-07-09] (TOSHIBA)
HKLM-x32\...\Run: [HWSetup] - C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [423936 2009-06-02] (TOSHIBA Electronics, Inc.)
HKLM-x32\...\Run: [KeNotify] - C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34088 2009-01-13] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [74752 2011-03-17] (Nullsoft, Inc.)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-09-17] (Apple Inc.)
HKU\.DEFAULT\...\Run: [TOSHIBA Online Product Information] - C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe [6203296 2009-08-12] (TOSHIBA)
HKU\S-1-5-21-345695969-1144621063-2055876365-1000\...\Run: [EPSON SX218 Series] - C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGDE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-345695969-1144621063-2055876365-1000\...\Run: [BrowserUid] - C:\Users\Judith\AppData\Local\PlayFree Browser\Application\PlayFreeBrowser.exe
HKU\S-1-5-21-345695969-1144621063-2055876365-1000\...\Run: [Beamrise] - C:\Users\Judith\AppData\Local\Beamrise\Application\beamrise.exe [1569600 2014-01-16] (The Beamrise Authors)
HKU\S-1-5-21-345695969-1144621063-2055876365-1000\...\MountPoints2: F - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-345695969-1144621063-2055876365-1000\...\MountPoints2: {aab09317-757c-11e0-aabf-705ab6893a8b} - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-345695969-1144621063-2055876365-1000\...\MountPoints2: {bc200b39-7950-11e0-9a3d-705ab6893a8b} - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-345695969-1144621063-2055876365-1000\...\MountPoints2: {e56031b2-e069-11e1-a3b1-705ab6893a8b} - F:\setup_vmc_lite.exe /checkApplicationPresence
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

==================== Internet (Whitelisted) ====================

URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - DefaultScope Yahoo URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=iwin
SearchScopes: HKCU - Yahoo URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=iwin
SearchScopes: HKCU - {0F2F9ADA-5F6F-45C9-ADAF-A926FAFC47A4} URL = hxxp://rover.ebay.com/rover/1/707-44556-9400-9/4?satitle={searchTerms}
SearchScopes: HKCU - {B718F79F-BA20-4620-B808-E03AC48B434E} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibade-win7-ie-search-21&index=blended&linkCode=ur2
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: No Name - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -  No File
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: IEHlprObj Class - {8CA5ED52-F3FB-4414-A105-2E3491156990} - C:\Program Files (x86)\iWin Games\iWinGamesHookIE.dll (iWin Inc.)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: No Name - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} -  No File
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM-x32 - No Name - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} -  No File
Toolbar: HKCU - No Name - {5FC86FB3-A8B1-400B-8BE7-0EAF0D857F5D} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash/cabs/swflash.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} -  No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\rcyztdqr.default
FF DefaultSearchEngine: user_pref("browser.search.defaultenginename", "");
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\Ask.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\rcyztdqr.default\Extensions\2020Player_IKEA@2020Technologies.com [2013-11-16]
FF Extension: WebConnect - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\rcyztdqr.default\Extensions\firefox@webconnect.co [2013-09-11]
FF Extension: FT Downloader - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\rcyztdqr.default\Extensions\ftd@ftd.com [2013-09-11]
FF Extension: Torntv 3 - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\rcyztdqr.default\Extensions\trtv3@trtv.com [2013-09-11]
FF Extension: FT Downloader - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\rcyztdqr.default\Extensions\ftd@ftd.com.xpi [2013-06-26]
FF Extension: Torntv 3 - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\rcyztdqr.default\Extensions\trtv3@trtv.com.xpi [2013-06-30]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\rcyztdqr.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2014-02-06]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2014-02-06]
FF HKLM-x32\...\Firefox\Extensions: [{B7082FAA-CB62-4872-9106-E42DD88EDE45}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Optimization Client\addon\
FF HKLM-x32\...\Firefox\Extensions: [{98e34367-8df7-42b4-837b-20b892ff0849}] - C:\ProgramData\iWin Games\firefox
FF Extension: iWinGames Plugin - C:\ProgramData\iWin Games\firefox [2013-05-22]

==================== Services (Whitelisted) =================

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [12600 2012-03-26] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [291696 2012-03-26] (Microsoft Corporation)
R2 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [559552 2013-08-08] (RealNetworks, Inc.)
R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116104 2009-08-06] (Toshiba Europe GmbH)

==================== Drivers (Whitelisted) ====================

S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [419840 2010-12-31] (Huawei Technologies Co., Ltd.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [203888 2012-03-20] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [98688 2012-03-20] (Microsoft Corporation)
S3 RTL8187Se; C:\Windows\System32\DRIVERS\RTL8187Se.sys [427008 2009-06-10] (Realtek Semiconductor Corporation                           )
S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]
U3 fwloifod; \??\C:\Users\Judith\AppData\Local\Temp\fwloifod.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-07 14:44 - 2014-02-07 14:44 - 00380416 _____ () C:\Users\Judith\Downloads\Gmer-19357.exe
2014-02-07 14:43 - 2014-02-07 14:43 - 00000000 ____D () C:\Users\Judith\Downloads\FRST-OlderVersion
2014-02-07 14:42 - 2014-02-07 14:42 - 00000474 _____ () C:\Users\Judith\Downloads\defogger_disable.log
2014-02-07 14:42 - 2014-02-07 14:42 - 00000000 _____ () C:\Users\Judith\defogger_reenable
2014-02-07 14:41 - 2014-02-07 14:41 - 00050477 _____ () C:\Users\Judith\Downloads\Defogger.exe
2014-02-06 18:44 - 2014-02-06 18:44 - 00001985 _____ () C:\Users\Public\Desktop\Lottso! Deluxe.lnk
2014-02-06 18:44 - 2014-02-06 18:44 - 00000000 ____D () C:\Users\Judith\AppData\Roaming\Pogo Games
2014-02-06 18:42 - 2014-02-06 18:42 - 00078064 _____ (iWin inc.) C:\Users\Judith\Downloads\lottso-deluxe-setup.exe
2014-02-06 18:22 - 2014-02-06 18:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-05 08:04 - 2014-02-05 08:04 - 01037530 _____ (Thisisu) C:\Users\Judith\Downloads\JRT(1).exe
2014-02-05 08:01 - 2014-02-05 08:01 - 01037530 _____ (Thisisu) C:\Users\Judith\Downloads\JRT.exe
2014-02-05 07:34 - 2014-02-05 07:34 - 00001076 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-05 07:34 - 2014-02-05 07:34 - 00000000 ____D () C:\Users\Judith\AppData\Roaming\Malwarebytes
2014-02-05 07:34 - 2014-02-05 07:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-05 07:34 - 2014-02-05 07:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-05 07:34 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-05 07:33 - 2014-02-05 07:33 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Judith\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-05 07:30 - 2014-02-05 07:31 - 00029487 _____ () C:\Users\Judith\Downloads\Addition.txt
2014-02-05 07:29 - 2014-02-07 14:47 - 00017032 _____ () C:\Users\Judith\Downloads\FRST.txt
2014-02-05 07:29 - 2014-02-07 14:47 - 00000000 ____D () C:\FRST
2014-02-05 07:28 - 2014-02-07 14:43 - 02079744 _____ (Farbar) C:\Users\Judith\Downloads\FRST64.exe
2014-02-05 07:10 - 2014-02-05 07:58 - 00000000 ____D () C:\AdwCleaner
2014-02-05 07:09 - 2014-02-05 07:09 - 01166132 _____ () C:\Users\Judith\Downloads\adwcleaner-3.018.exe
2014-02-04 11:15 - 2014-02-06 14:28 - 00000000 ____D () C:\Users\Judith\AppData\Roaming\Farm Mania 2
2014-02-04 11:15 - 2014-02-04 11:15 - 00001973 _____ () C:\Users\Public\Desktop\Farm Mania 2.lnk
2014-02-04 11:15 - 2014-02-04 11:15 - 00000000 ____D () C:\Users\Public\Documents\Farm2
2014-02-04 10:44 - 2014-02-04 10:44 - 01059584 _____ () C:\Users\Judith\Downloads\Harvest-Moon_-Baum-der-Stille-Setup.exe
2014-02-04 10:44 - 2014-02-04 10:44 - 00000000 ____D () C:\Users\Judith\AppData\Local\BeamriseUninstall
2014-02-04 10:43 - 2014-02-04 10:44 - 00000000 ____D () C:\Users\Judith\AppData\Local\Beamrise

==================== One Month Modified Files and Folders =======

2014-02-07 14:48 - 2014-02-05 07:29 - 00017032 _____ () C:\Users\Judith\Downloads\FRST.txt
2014-02-07 14:47 - 2014-02-05 07:29 - 00000000 ____D () C:\FRST
2014-02-07 14:44 - 2014-02-07 14:44 - 00380416 _____ () C:\Users\Judith\Downloads\Gmer-19357.exe
2014-02-07 14:43 - 2014-02-07 14:43 - 00000000 ____D () C:\Users\Judith\Downloads\FRST-OlderVersion
2014-02-07 14:43 - 2014-02-05 07:28 - 02079744 _____ (Farbar) C:\Users\Judith\Downloads\FRST64.exe
2014-02-07 14:42 - 2014-02-07 14:42 - 00000474 _____ () C:\Users\Judith\Downloads\defogger_disable.log
2014-02-07 14:42 - 2014-02-07 14:42 - 00000000 _____ () C:\Users\Judith\defogger_reenable
2014-02-07 14:42 - 2011-05-03 12:42 - 00000000 ____D () C:\Users\Judith
2014-02-07 14:41 - 2014-02-07 14:41 - 00050477 _____ () C:\Users\Judith\Downloads\Defogger.exe
2014-02-07 14:31 - 2013-10-30 16:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-07 14:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-07 11:16 - 2011-05-03 12:13 - 01960484 _____ () C:\Windows\WindowsUpdate.log
2014-02-07 09:32 - 2011-05-03 14:13 - 00004314 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{1D3801B2-B79D-45B3-8127-51A101A66952}
2014-02-07 09:02 - 2009-07-14 05:45 - 00016080 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-07 09:02 - 2009-07-14 05:45 - 00016080 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-07 09:01 - 2009-07-14 18:58 - 00645966 _____ () C:\Windows\system32\perfh007.dat
2014-02-07 09:01 - 2009-07-14 18:58 - 00127394 _____ () C:\Windows\system32\perfc007.dat
2014-02-07 09:01 - 2009-07-14 06:13 - 01478530 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-07 08:55 - 2012-05-06 05:34 - 00057309 _____ () C:\Windows\setupact.log
2014-02-07 08:55 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-07 08:54 - 2012-06-12 23:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-06 18:44 - 2014-02-06 18:44 - 00001985 _____ () C:\Users\Public\Desktop\Lottso! Deluxe.lnk
2014-02-06 18:44 - 2014-02-06 18:44 - 00000000 ____D () C:\Users\Judith\AppData\Roaming\Pogo Games
2014-02-06 18:43 - 2011-05-11 20:44 - 00003416 _____ () C:\Windows\System32\Tasks\RunAsStdUser Task
2014-02-06 18:42 - 2014-02-06 18:42 - 00078064 _____ (iWin inc.) C:\Users\Judith\Downloads\lottso-deluxe-setup.exe
2014-02-06 18:31 - 2013-10-30 16:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-06 18:31 - 2012-11-16 14:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-06 18:31 - 2011-05-18 13:16 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-06 18:22 - 2014-02-06 18:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-06 14:28 - 2014-02-04 11:15 - 00000000 ____D () C:\Users\Judith\AppData\Roaming\Farm Mania 2
2014-02-05 08:04 - 2014-02-05 08:04 - 01037530 _____ (Thisisu) C:\Users\Judith\Downloads\JRT(1).exe
2014-02-05 08:01 - 2014-02-05 08:01 - 01037530 _____ (Thisisu) C:\Users\Judith\Downloads\JRT.exe
2014-02-05 07:58 - 2014-02-05 07:10 - 00000000 ____D () C:\AdwCleaner
2014-02-05 07:53 - 2012-06-20 17:30 - 00058688 _____ () C:\Windows\PFRO.log
2014-02-05 07:34 - 2014-02-05 07:34 - 00001076 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-05 07:34 - 2014-02-05 07:34 - 00000000 ____D () C:\Users\Judith\AppData\Roaming\Malwarebytes
2014-02-05 07:34 - 2014-02-05 07:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-05 07:34 - 2014-02-05 07:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-05 07:33 - 2014-02-05 07:33 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Judith\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-05 07:31 - 2014-02-05 07:30 - 00029487 _____ () C:\Users\Judith\Downloads\Addition.txt
2014-02-05 07:13 - 2011-11-04 16:32 - 00000763 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-05 07:13 - 2011-05-21 19:35 - 00000849 _____ () C:\Users\Judith\Desktop\Internet Explorer.lnk
2014-02-05 07:13 - 2011-05-03 12:45 - 00000879 _____ () C:\Users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-05 07:09 - 2014-02-05 07:09 - 01166132 _____ () C:\Users\Judith\Downloads\adwcleaner-3.018.exe
2014-02-04 11:15 - 2014-02-04 11:15 - 00001973 _____ () C:\Users\Public\Desktop\Farm Mania 2.lnk
2014-02-04 11:15 - 2014-02-04 11:15 - 00000000 ____D () C:\Users\Public\Documents\Farm2
2014-02-04 10:44 - 2014-02-04 10:44 - 01059584 _____ () C:\Users\Judith\Downloads\Harvest-Moon_-Baum-der-Stille-Setup.exe
2014-02-04 10:44 - 2014-02-04 10:44 - 00000000 ____D () C:\Users\Judith\AppData\Local\BeamriseUninstall
2014-02-04 10:44 - 2014-02-04 10:43 - 00000000 ____D () C:\Users\Judith\AppData\Local\Beamrise
2014-01-30 18:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-01-19 08:33 - 2012-03-14 13:54 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-12 11:34 - 2011-12-11 11:28 - 00000000 ____D () C:\Users\Judith\Documents\Arbeit

Some content of TEMP:
====================
C:\Users\Judith\AppData\Local\Temp\7z920.exe
C:\Users\Judith\AppData\Local\Temp\bfguni.exe
C:\Users\Judith\AppData\Local\Temp\binary.exe
C:\Users\Judith\AppData\Local\Temp\bi_cleaner.exe
C:\Users\Judith\AppData\Local\Temp\bstrapInstall.exe
C:\Users\Judith\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Judith\AppData\Local\Temp\drm_dyndata_7370014.dll
C:\Users\Judith\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe
C:\Users\Judith\AppData\Local\Temp\Quarantine.exe
C:\Users\Judith\AppData\Local\Temp\sdanircmdc.exe
C:\Users\Judith\AppData\Local\Temp\sdapskill.exe
C:\Users\Judith\AppData\Local\Temp\sdaspwn.exe
C:\Users\Judith\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-30 18:44

==================== End Of Log ============================