Hallo,

bin neu hier und hab ein problem was wohl nirgends gelöst wird laut den ganzen foren

also seit neuesten deaktiviert sich einfach das fenster egal was ich mache selbst im game minimiert sich dann das game richtig ätzend, und wenn ich so schreibe auch muss ich bestimmt 10mal mit der maus das fenster anklicken damit ich weiter schreiben kann.

hablles probiert wie es in vielen foren stand alles nix gebracht, dann hab ich hier ein beitrag gesehen darauf konnte ich aber nicht antworten was dort steht hab ich mal gemacht hoffe mir kann jetzt endlich einer helfen

http://www.trojaner-board.de/123916-...ogramm-ab.html
das ist der beitrag hier meine ergebnisse:

OTL:

OTL logfile created on: 04.03.2014 11:50:06 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Chris\Downloads
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16518)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,17 Gb Available Physical Memory | 72,45% Memory free
6,00 Gb Paging File | 4,91 Gb Available in Paging File | 81,92% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 931,51 Gb Total Space | 287,57 Gb Free Space | 30,87% Space Free | Partition Type: NTFS
 
Computer Name: CHRIS-PC | User Name: Chris | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2014.03.04 11:48:50 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Chris\Downloads\OTL.exe
PRC - [2014.02.18 10:38:24 | 000,996,544 | ---- | M] (Kaspersky Lab ZAO) -- C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
PRC - [2014.02.17 14:09:48 | 004,915,040 | ---- | M] (TeamViewer GmbH) -- C:\Programme\TeamViewer\Version9\TeamViewer_Service.exe
PRC - [2013.12.21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013.12.20 20:04:27 | 001,496,576 | ---- | M] (Microsoft ® Windows ® Operating System) -- C:\Windows\System32\WinSecurity.exe
PRC - [2013.11.14 20:15:36 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2013.10.17 15:47:28 | 000,214,512 | ---- | M] (Kaspersky Lab ZAO) -- C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
PRC - [2013.07.11 11:41:14 | 004,927,280 | ---- | M] (Native Instruments GmbH) -- C:\Programme\Common Files\Native Instruments\Hardware\NIHardwareService.exe
PRC - [2013.05.13 15:33:02 | 001,693,904 | ---- | M] (Microsoft Corporation) -- c:\Programme\Microsoft Mouse and Keyboard Center\ipoint.exe
PRC - [2013.05.13 15:33:02 | 001,113,296 | ---- | M] (Microsoft Corporation) -- c:\Programme\Microsoft Mouse and Keyboard Center\itype.exe
PRC - [2013.04.30 04:53:00 | 000,453,632 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2013.04.30 04:52:26 | 000,217,088 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2013.04.29 23:24:04 | 000,291,840 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Programme\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
PRC - [2013.03.19 11:02:54 | 000,098,304 | ---- | M] (Firebird Project) -- C:\Programme\Firebird\Firebird_2_5\bin\fbguard.exe
PRC - [2013.03.19 11:02:32 | 003,784,704 | ---- | M] (Firebird Project) -- C:\Programme\Firebird\Firebird_2_5\bin\fbserver.exe
PRC - [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010.11.20 22:29:49 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2014.02.12 03:13:50 | 000,260,096 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsForm0b574481#\1ab52f8951c2ab97592ec25830dd5165\WindowsFormsIntegration.ni.dll
MOD - [2014.02.12 03:12:25 | 019,693,056 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\24bf0c88c0465485f4b842df043b3f45\System.ServiceModel.ni.dll
MOD - [2014.02.12 03:11:21 | 000,190,976 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\75b6a68103e1b76063d9f69b8275ae61\UIAutomationTypes.ni.dll
MOD - [2014.02.12 03:11:18 | 000,018,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio49d6fefe#\47e7fc401facd4a5d3f2237f16948f36\PresentationFramework-SystemXml.ni.dll
MOD - [2014.02.12 03:06:42 | 001,889,792 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\3fe705796c6a41d4889d9001d1c56af8\System.Xaml.ni.dll
MOD - [2014.02.12 03:06:33 | 018,813,440 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\a4b45c44490c75bc2fb22780e7ef087d\PresentationFramework.ni.dll
MOD - [2014.02.12 03:06:18 | 011,025,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\a74542efbeb46445949a39026c501132\PresentationCore.ni.dll
MOD - [2014.02.12 03:06:08 | 003,950,080 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\acf97bfe2a931d4a47253b26b7218991\WindowsBase.ni.dll
MOD - [2014.02.12 03:06:08 | 000,470,528 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio1c9175f8#\75f8bc4cf08030c4a53b6d5e0ae20046\PresentationFramework.Aero.ni.dll
MOD - [2014.02.12 03:05:02 | 006,990,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\dce99d8de14d8a015313db98c72552ee\System.Core.ni.dll
MOD - [2014.02.12 03:05:01 | 007,662,080 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\bada32953bb6b16a53d653eae23d78dc\System.Xml.ni.dll
MOD - [2014.02.12 03:04:55 | 000,976,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\bbc48ec4245e502ae19b0601d3799c9e\System.Configuration.ni.dll
MOD - [2014.02.12 03:04:53 | 010,060,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ff26cc03e6d57d8abd13b990332e67c6\System.ni.dll
MOD - [2014.02.12 03:04:45 | 016,953,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\ce5f61c5754789df97be8dc991c47d07\mscorlib.ni.dll
MOD - [2013.10.16 18:01:34 | 002,601,328 | ---- | M] () -- C:\Programme\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll
MOD - [2013.08.07 20:25:24 | 000,093,696 | ---- | M] () -- C:\Programme\FileZilla FTP Client\fzshellext.dll
MOD - [2013.06.17 12:35:10 | 000,478,400 | ---- | M] () -- C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll
 
 
========== Services (SafeList) ==========
 
SRV - [2014.03.03 21:44:41 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014.02.17 14:09:48 | 004,915,040 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Programme\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)
SRV - [2014.02.15 07:47:14 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014.02.06 10:47:18 | 000,108,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV - [2013.12.21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013.12.20 20:04:27 | 001,496,576 | ---- | M] (Microsoft ® Windows ® Operating System) [Auto | Running] -- C:\Windows\System32\WinSecurity.exe -- (WindowsSecurity)
SRV - [2013.12.11 20:40:36 | 000,569,768 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013.10.23 11:53:56 | 000,018,360 | ---- | M] (Overwolf Ltd) [On_Demand | Stopped] -- C:\Programme\Overwolf\OverwolfUpdater.exe -- (OverwolfUpdaterService)
SRV - [2013.10.17 15:47:28 | 000,214,512 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe -- (AVP)
SRV - [2013.08.22 14:10:14 | 000,032,568 | ---- | M] (The OpenVPN Project) [On_Demand | Stopped] -- C:\Programme\OpenVPN\bin\openvpnserv.exe -- (OpenVPNService)
SRV - [2013.07.11 11:41:14 | 004,927,280 | ---- | M] (Native Instruments GmbH) [Auto | Running] -- C:\Programme\Common Files\Native Instruments\Hardware\NIHardwareService.exe -- (NIHardwareService)
SRV - [2013.05.27 05:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2013.04.30 04:52:26 | 000,217,088 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2013.04.29 23:24:04 | 000,291,840 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV - [2013.03.19 11:02:54 | 000,098,304 | ---- | M] (Firebird Project) [Auto | Running] -- C:\Programme\Firebird\Firebird_2_5\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance)
SRV - [2013.03.19 11:02:32 | 003,784,704 | ---- | M] (Firebird Project) [On_Demand | Running] -- C:\Programme\Firebird\Firebird_2_5\bin\fbserver.exe -- (FirebirdServerDefaultInstance)
SRV - [2010.11.20 22:29:49 | 001,121,792 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2010.02.19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Programme\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009.07.14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009.07.14 02:15:33 | 000,029,696 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\iprip.dll -- (iprip)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\RTKVHDA.sys -- (IntcAzAudAddService)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
DRV - [2014.03.01 16:18:37 | 000,050,728 | ---- | M] (Eugene V. Muzychenko) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vrtaucbl.sys -- (EuMusDesignVirtualAudioCableWdm)
DRV - [2014.02.18 10:38:43 | 000,025,184 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klkbdflt.sys -- (klkbdflt)
DRV - [2014.02.18 10:38:42 | 000,576,096 | ---- | M] (Kaspersky Lab ZAO) [File_System | System | Running] -- C:\Windows\System32\drivers\klif.sys -- (KLIF)
DRV - [2014.02.18 10:38:42 | 000,094,304 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\klflt.sys -- (klflt)
DRV - [2014.01.04 11:55:05 | 000,243,128 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2013.12.19 12:47:51 | 000,144,992 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\kneps.sys -- (kneps)
DRV - [2013.11.14 22:31:28 | 000,135,776 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\kl1.sys -- (kl1)
DRV - [2013.10.28 01:12:12 | 000,182,680 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudmdm.sys -- (ssudmdm)
DRV - [2013.10.28 01:12:12 | 000,087,064 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus)
DRV - [2013.10.17 15:47:26 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klmouflt.sys -- (klmouflt)
DRV - [2013.10.17 15:47:26 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\klim6.sys -- (KLIM6)
DRV - [2013.10.02 01:42:31 | 000,049,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2013.08.22 13:40:22 | 000,035,288 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tap0901.sys -- (tap0901)
DRV - [2013.05.14 17:34:44 | 000,045,024 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\kltdi.sys -- (kltdi)
DRV - [2013.04.30 05:14:44 | 010,070,016 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2013.04.30 05:14:44 | 010,070,016 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2013.04.30 03:47:52 | 000,290,304 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2013.04.12 15:34:48 | 000,014,432 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\klpd.sys -- (klpd)
DRV - [2012.08.23 15:46:55 | 000,024,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt)
DRV - [2012.08.23 15:44:32 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2012.08.23 15:41:34 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2012.05.14 07:12:28 | 000,086,656 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtihdW73.sys -- (AtiHDAudioService)
DRV - [2010.11.20 22:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010.11.20 22:29:03 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - [2010.11.20 22:29:03 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV - [2010.11.20 22:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010.11.20 22:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010.11.20 22:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010.11.20 22:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010.11.20 22:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010.11.20 22:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010.08.12 12:07:48 | 000,298,216 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvmf6232.sys -- (NVNET)
DRV - [2010.02.18 09:18:22 | 000,037,944 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\amdiox86.sys -- (amdiox86)
DRV - [2009.07.13 23:02:52 | 000,347,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvm62x32.sys -- (NVENETFD)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.dell.com
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
========== FireFox ==========
 
FF - prefs.js..CT3312807.browser.search.defaultthis.engineName: "true"
FF - prefs.js..browser.search.defaultenginename: "Conduit Search"
FF - prefs.js..browser.search.defaultthis.engineName: "Fun Media Bar V11 Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3312807&CUI=UN93255172636127723&UM=1&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask Search"
FF - prefs.js..browser.search.selectedEngine: "Conduit Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "https://www.google.de/"
FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.21
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1
FF - prefs.js..keyword.URL: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3312807&SearchSource=2&CUI=UN93255172636127723&UM=1&q="
FF - prefs.js..network.proxy.autoconfig_url: "file:///C:/Users/Chris/Desktop/putty.exe%20-N%20-L%201234:localhost:1234%20proxy@cs-sys.de"
FF - prefs.js..network.proxy.backup.ftp: "localhost"
FF - prefs.js..network.proxy.backup.ftp_port: 1234
FF - prefs.js..network.proxy.backup.socks: "localhost"
FF - prefs.js..network.proxy.backup.socks_port: 1234
FF - prefs.js..network.proxy.backup.ssl: "localhost"
FF - prefs.js..network.proxy.backup.ssl_port: 1234
FF - prefs.js..network.proxy.ftp: "localhost"
FF - prefs.js..network.proxy.ftp_port: 1234
FF - prefs.js..network.proxy.http: "localhost"
FF - prefs.js..network.proxy.http_port: 1234
FF - prefs.js..network.proxy.no_proxies_on: "C:\\Users\\CS-SYS\\Desktop\\putty.exe -N -L 1234:localhost:1234 proxy@cs-sys.de"
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "localhost"
FF - prefs.js..network.proxy.socks_port: 1234
FF - prefs.js..network.proxy.ssl: "localhost"
FF - prefs.js..network.proxy.ssl_port: 1234
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.3.2: C:\Program Files\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014.02.18 10:39:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014.02.18 10:39:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014.02.18 10:39:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014.02.18 10:39:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014.02.18 10:39:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.3.0\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.3.0\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 24.3.0\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 24.3.0\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
 
[2013.11.14 19:31:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\mozilla\Extensions
[2014.01.30 17:40:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\mozilla\Firefox\Profiles\v5p5rn11.default\extensions
[2013.12.20 21:52:24 | 000,000,000 | ---D | M] (Fun Media Bar V11) -- C:\Users\Chris\AppData\Roaming\mozilla\Firefox\Profiles\v5p5rn11.default\extensions\{21bd831c-5f59-432d-9c58-c3162b161816}
[2013.11.21 16:25:07 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Chris\AppData\Roaming\mozilla\Firefox\Profiles\v5p5rn11.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2014.01.30 17:40:36 | 000,000,000 | ---D | M] ("Plus-HD-1.3") -- C:\Users\Chris\AppData\Roaming\mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com
[2014.01.30 17:40:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData
[2014.01.30 17:40:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins
[2014.01.30 17:40:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\userCode
[2013.12.16 18:31:15 | 000,002,661 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\mozilla\firefox\profiles\v5p5rn11.default\searchplugins\ask-search.xml
[2014.02.20 16:23:40 | 000,000,969 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\mozilla\firefox\profiles\v5p5rn11.default\searchplugins\conduit-search.xml
[2013.12.17 14:35:04 | 000,001,011 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\mozilla\firefox\profiles\v5p5rn11.default\searchplugins\conduit.xml
[2014.02.15 07:47:10 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\browser\extensions
[2014.02.15 07:47:14 | 000,000,000 | ---D | M] (Default) -- C:\Programme\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: 
CHR - plugin: Error reading preferences file
CHR - Extension: Google Docs = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Drive = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google-Suche = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Modul zur Link-Untersuchung = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\14.0.0.4651_0\
CHR - Extension: Beach in the Maldives = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddicfadfciaeikknlkcldgockejldhek\1_0\
CHR - Extension: Sicherer Zahlungsverkehr = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\14.0.0.4651_0\
CHR - Extension: Modul zum Sperren von gefährlichen Webseiten = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\14.0.0.4651_0\
CHR - Extension: Plus-HD-1.3 = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\crossrider
CHR - Extension: Plus-HD-1.3 = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\
CHR - Extension: Virtuelle Tastatur = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\14.0.0.4873_0\
CHR - Extension: Google Wallet = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: Google Mail = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
CHR - Extension: Anti-Banner = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\14.0.0.4651_0\
 
O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Content Blocker Plugin) - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Virtual Keyboard Plugin) - {73455575-E40C-433C-9784-C78DC7761455} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Safe Money Plugin) - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
O2 - BHO: (URL Advisor Plugin) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: Zu Anti-Banner hinzufügen - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ie_banner_deny.htm ()
O9 - Extra Button: Virtuelle Tastatur - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O9 - Extra Button: Link-Untersuchung - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2F0F6FB5-ACF4-4FC0-9D8A-A85ED5CC34F5}: DhcpNameServer = 192.168.2.1 192.168.2.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{92e28e6b-74e1-11e3-996e-002185194ef1}\Shell - "" = AutoRun
O33 - MountPoints2\{92e28e6b-74e1-11e3-996e-002185194ef1}\Shell\AutoRun\command - "" = E:\Autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4903D172-DCCB-392F-93A3-34CA9D47FE3D} - .NET Framework
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files\Google\Chrome\Application\33.0.1750.146\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
 
NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: SRService -  File not found
NetSvcs: WmdmPmSp -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found
 
MsConfig - StartUpFolder: C:^Users^Chris^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk - C:\Users\Chris\AppData\Roaming\Dropbox\bin\Dropbox.exe - (Dropbox, Inc.)
MsConfig - StartUpReg: Adobe ARM - hkey= - key= - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: AdobeAAMUpdater-1.0 - hkey= - key= - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: AdobeBridge - hkey= - key= -  File not found
MsConfig - StartUpReg: AdobeCS6ServiceManager - hkey= - key= - C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: AMD AVT - hkey= - key= -  File not found
MsConfig - StartUpReg: APSDaemon - hkey= - key= - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
MsConfig - StartUpReg: DAEMON Tools Lite - hkey= - key= - C:\Program Files\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
MsConfig - StartUpReg: icq - hkey= - key= - C:\Users\Chris\AppData\Roaming\ICQM\icq.exe (ICQ)
MsConfig - StartUpReg: KPeerNexonEU - hkey= - key= - C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe (NEXON Inc.)
MsConfig - StartUpReg: LiveZilla - hkey= - key= - C:\Program Files\LiveZilla\LiveZilla.exe (LiveZilla GmbH)
MsConfig - StartUpReg: Overwolf - hkey= - key= - C:\Program Files\Overwolf\Overwolf.exe (Overwolf)
MsConfig - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
MsConfig - StartUpReg: Sidebar - hkey= - key= - C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
MsConfig - StartUpReg: Spotify - hkey= - key= - C:\Users\Chris\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)
MsConfig - StartUpReg: Spotify Web Helper - hkey= - key= - C:\Users\Chris\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
MsConfig - StartUpReg: StartCCC - hkey= - key= - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
MsConfig - StartUpReg: SwitchBoard - hkey= - key= - C:\Programme\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2014.03.03 22:16:18 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2014.03.01 19:11:01 | 1967,289,647 | ---- | C] (Nexon) -- C:\Users\Chris\Documents\Combatarms_eu.exe
[2014.03.01 18:31:38 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Diagnostics
[2014.03.01 16:18:37 | 000,050,728 | ---- | C] (Eugene V. Muzychenko) -- C:\Windows\System32\drivers\vrtaucbl.sys
[2014.03.01 16:18:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual Audio Cable
[2014.03.01 16:18:36 | 000,000,000 | ---D | C] -- C:\Program Files\Virtual Audio Cable
[2014.03.01 16:15:49 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\Virtual Audio Cable 4.10
[2014.02.27 16:13:55 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\ILS-SimV4
[2014.02.26 14:15:39 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\CAE_Report_Generator
[2014.02.26 14:15:39 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\CAE_Report_Generator
[2014.02.26 14:15:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CAE Report Generator
[2014.02.26 14:15:26 | 000,000,000 | ---D | C] -- C:\Program Files\BandiMPEG1
[2014.02.26 14:15:22 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
[2014.02.26 14:15:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
[2014.02.26 14:15:22 | 000,000,000 | ---D | C] -- C:\Program Files\AviSynth 2.5
[2014.02.26 14:15:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\x264vfw
[2014.02.26 14:15:04 | 000,000,000 | ---D | C] -- C:\Program Files\CAE Report Generator
[2014.02.24 22:55:38 | 000,000,000 | ---D | C] -- C:\ProgramData\MVH
[2014.02.24 22:48:44 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\MVH
[2014.02.21 18:08:22 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\CB-Desings
[2014.02.20 20:51:58 | 000,000,000 | R--D | C] -- C:\Users\Chris\Dropbox
[2014.02.20 20:50:49 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\DropboxMaster
[2014.02.20 20:50:23 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
[2014.02.20 20:49:00 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Dropbox
[2014.02.20 16:21:16 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\TuneUp Software
[2014.02.20 16:19:24 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2014.02.20 16:19:11 | 000,000,000 | -HSD | C] -- C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
[2014.02.20 16:19:11 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2014.02.20 16:15:19 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\OpenCandy
[2014.02.18 17:28:00 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\Filme Download
[2014.02.15 07:47:08 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2014.02.15 06:30:01 | 000,000,000 | ---D | C] -- C:\Program Files\Scanner Recorder
[2014.02.13 22:59:09 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\Filme Dome
[2014.02.13 18:25:22 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Thunderbird
[2014.02.11 17:14:28 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\SD-Karte
[2014.02.09 17:58:29 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\TeamViewer
[2014.02.08 10:06:27 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\Native Instruments
[2014.02.08 10:06:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\{E54DB1D4-CC7D-414E-8BED-584C447836EA}
[2014.02.08 10:00:36 | 000,000,000 | -H-D | C] -- C:\ProgramData\{9477ED15-E4A3-4984-9B76-31F573D8EAAF}
[2014.02.08 09:59:43 | 000,000,000 | -H-D | C] -- C:\ProgramData\{F2610326-6A40-4BBC-9FBC-7F05356A912A}
[2014.02.08 09:59:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments
[2014.02.08 09:59:40 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Native Instruments
[2014.02.08 09:59:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Native Instruments
[2014.02.08 09:59:39 | 000,000,000 | ---D | C] -- C:\Program Files\Native Instruments
[2014.02.08 09:45:25 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\Native Instruments Traktor Scratch Pro 2.v2.6.3
[2014.02.07 23:50:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Serato
[2014.02.07 23:50:21 | 000,000,000 | ---D | C] -- C:\Program Files\Serato
[2014.02.07 23:50:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
[2014.02.07 23:29:51 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\Bild 2
[2014.02.04 18:03:49 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp
[2014.02.03 18:55:35 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SAM Broadcaster
[2014.02.03 18:20:08 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\SpacialAudio
[2014.02.03 18:20:08 | 000,000,000 | ---D | C] -- C:\ProgramData\firebird
[2014.02.03 18:17:28 | 000,552,960 | ---- | C] (Firebird Project) -- C:\Windows\System32\GDS32.DLL
[2014.02.03 18:17:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firebird 2.5 (Win32)
[2014.02.03 18:16:56 | 000,000,000 | ---D | C] -- C:\Program Files\Firebird
[2014.02.03 18:16:11 | 000,000,000 | ---D | C] -- C:\Program Files\SpacialAudio
[2014.02.03 17:18:57 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\IsolatedStorage
[2014.02.03 17:18:44 | 000,000,000 | ---D | C] -- C:\Program Files\OpenPlsInWMP
[2014.02.03 17:00:25 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SHOUTcast DNAS
[2014.02.03 17:00:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SHOUTcast DNAS
[2014.02.03 17:00:25 | 000,000,000 | ---D | C] -- C:\Program Files\SHOUTcast
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2014.03.04 11:45:00 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014.03.04 11:44:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014.03.04 11:41:16 | 000,025,648 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014.03.04 11:41:16 | 000,025,648 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014.03.04 11:34:14 | 000,002,080 | ---- | M] () -- C:\Windows\tasks\Plus-HD-1.3-firefoxinstaller.job
[2014.03.04 11:34:14 | 000,001,952 | ---- | M] () -- C:\Windows\tasks\Plus-HD-1.3-chromeinstaller.job
[2014.03.04 11:34:14 | 000,001,316 | ---- | M] () -- C:\Windows\tasks\Plus-HD-1.3-updater.job
[2014.03.04 11:34:14 | 000,001,218 | ---- | M] () -- C:\Windows\tasks\Plus-HD-1.3-codedownloader.job
[2014.03.04 11:34:14 | 000,001,118 | ---- | M] () -- C:\Windows\tasks\Plus-HD-1.3-enabler.job
[2014.03.04 11:34:14 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014.03.04 11:33:50 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014.03.04 11:33:45 | 2415,419,392 | -HS- | M] () -- C:\hiberfil.sys
[2014.03.04 11:31:57 | 000,001,094 | ---- | M] () -- C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
[2014.03.04 11:25:44 | 257,813,336 | ---- | M] () -- C:\Users\Chris\Documents\kis14.0.0.4651de-de.exe
[2014.03.04 09:53:09 | 000,002,121 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014.03.03 21:25:06 | 000,000,965 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2014.03.02 02:08:04 | 000,001,630 | ---- | M] () -- C:\Users\Public\Desktop\Combat Arms EU.lnk
[2014.03.01 19:47:05 | 1967,289,647 | ---- | M] (Nexon) -- C:\Users\Chris\Documents\Combatarms_eu.exe
[2014.03.01 16:18:37 | 000,050,728 | ---- | M] (Eugene V. Muzychenko) -- C:\Windows\System32\drivers\vrtaucbl.sys
[2014.03.01 16:13:41 | 001,323,708 | ---- | M] () -- C:\Users\Chris\Documents\VIRTUAL_AUDIO_CABLE_4.10.RAR
[2014.03.01 15:28:49 | 000,976,332 | ---- | M] () -- C:\Users\Chris\Desktop\Unbenannt.png
[2014.02.26 14:45:06 | 000,699,416 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2014.02.26 14:45:06 | 000,654,254 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2014.02.26 14:45:06 | 000,149,556 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2014.02.26 14:45:06 | 000,122,126 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2014.02.26 14:15:30 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\CAE Report Generator.lnk
[2014.02.25 17:08:17 | 001,369,088 | ---- | M] () -- C:\Users\Chris\Desktop\MVH Loader.exe
[2014.02.24 22:45:03 | 001,106,766 | ---- | M] () -- C:\Users\Chris\Desktop\MVH Loader.zip
[2014.02.20 20:51:58 | 000,001,039 | ---- | M] () -- C:\Users\Chris\Desktop\Dropbox.lnk
[2014.02.20 17:57:42 | 000,000,132 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
[2014.02.20 16:16:17 | 000,000,000 | ---- | M] () -- C:\END
[2014.02.18 10:38:43 | 000,025,184 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klkbdflt.sys
[2014.02.18 10:38:42 | 000,576,096 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klif.sys
[2014.02.18 10:38:42 | 000,094,304 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klflt.sys
[2014.02.09 11:47:34 | 003,771,384 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2014.02.08 13:33:50 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2014.02.08 13:33:50 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2014.02.08 10:05:48 | 000,001,002 | ---- | M] () -- C:\Users\Public\Desktop\Traktor 2.lnk
[2014.02.08 10:00:33 | 000,001,094 | ---- | M] () -- C:\Users\Public\Desktop\Controller Editor.lnk
[2014.02.08 09:59:42 | 000,001,059 | ---- | M] () -- C:\Users\Public\Desktop\Service Center.lnk
[2014.02.05 20:45:06 | 000,000,600 | ---- | M] () -- C:\Users\Chris\AppData\Local\PUTTY.RND
[2014.02.04 18:05:47 | 000,000,000 | -H-- | M] () -- C:\ProgramData\DP45977C.lfl
[2014.02.03 18:55:35 | 000,001,974 | ---- | M] () -- C:\Users\Chris\Desktop\SAM Broadcaster.lnk
[2014.02.03 18:18:07 | 000,004,988 | ---- | M] () -- C:\ProgramData\qiwmnyln.lsb
[2014.02.02 15:48:16 | 000,001,253 | ---- | M] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2014.02.02 13:03:25 | 000,001,361 | ---- | M] () -- C:\Users\Chris\Desktop\ILS-SimV4.lnk
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2014.03.04 11:20:23 | 257,813,336 | ---- | C] () -- C:\Users\Chris\Documents\kis14.0.0.4651de-de.exe
[2014.03.02 02:08:04 | 000,001,630 | ---- | C] () -- C:\Users\Public\Desktop\Combat Arms EU.lnk
[2014.03.01 16:13:39 | 001,323,708 | ---- | C] () -- C:\Users\Chris\Documents\VIRTUAL_AUDIO_CABLE_4.10.RAR
[2014.03.01 15:28:31 | 000,976,332 | ---- | C] () -- C:\Users\Chris\Desktop\Unbenannt.png
[2014.02.26 14:15:30 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\CAE Report Generator.lnk
[2014.02.24 22:46:53 | 001,369,088 | ---- | C] () -- C:\Users\Chris\Desktop\MVH Loader.exe
[2014.02.24 22:45:01 | 001,106,766 | ---- | C] () -- C:\Users\Chris\Desktop\MVH Loader.zip
[2014.02.20 20:51:58 | 000,001,039 | ---- | C] () -- C:\Users\Chris\Desktop\Dropbox.lnk
[2014.02.19 00:07:20 | 000,000,965 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2014.02.15 06:30:02 | 000,002,917 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Scanner Recorder.lnk
[2014.02.08 13:33:50 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2014.02.08 13:33:50 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2014.02.08 10:05:48 | 000,001,002 | ---- | C] () -- C:\Users\Public\Desktop\Traktor 2.lnk
[2014.02.08 10:00:33 | 000,001,094 | ---- | C] () -- C:\Users\Public\Desktop\Controller Editor.lnk
[2014.02.08 09:59:42 | 000,001,059 | ---- | C] () -- C:\Users\Public\Desktop\Service Center.lnk
[2014.02.04 18:05:47 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
[2014.02.03 18:55:35 | 000,001,974 | ---- | C] () -- C:\Users\Chris\Desktop\SAM Broadcaster.lnk
[2014.02.03 18:18:07 | 000,004,988 | ---- | C] () -- C:\ProgramData\qiwmnyln.lsb
[2014.02.02 13:03:25 | 000,001,361 | ---- | C] () -- C:\Users\Chris\Desktop\ILS-SimV4.lnk
[2014.01.08 22:36:13 | 000,000,132 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
[2013.12.20 23:40:20 | 000,139,032 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2013.12.20 23:40:14 | 000,290,184 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2013.12.20 23:40:07 | 000,076,888 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2013.12.20 17:42:20 | 000,007,634 | ---- | C] () -- C:\Users\Chris\AppData\Local\Resmon.ResmonCfg
[2013.12.13 16:34:00 | 000,000,062 | ---- | C] () -- C:\Windows\wininit.ini
[2013.12.08 22:49:32 | 144,752,885 | ---- | C] () -- C:\Users\Chris\AppData\Local\ACCCx2_2_1_260(1).zip
[2013.12.08 22:37:54 | 144,752,885 | ---- | C] () -- C:\Users\Chris\AppData\Local\ACCCx2_2_1_260.zip
[2013.12.08 01:11:00 | 000,011,164 | ---- | C] () -- C:\Windows\System32\drivers\nvphy.bin
[2013.11.28 21:27:51 | 000,000,528 | R--- | C] () -- C:\Users\Chris\MediaID.bin
[2013.11.21 19:07:46 | 000,000,600 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\winscp.rnd
[2013.11.20 22:41:53 | 000,000,600 | ---- | C] () -- C:\Users\Chris\AppData\Local\PUTTY.RND
[2013.11.15 10:52:34 | 000,138,056 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\PnkBstrK.sys
[2013.11.15 03:02:41 | 000,699,416 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2013.11.15 03:02:41 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2013.11.15 03:02:41 | 000,149,556 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2013.11.15 03:02:41 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2013.11.14 18:06:49 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2013.04.30 03:30:54 | 000,204,952 | ---- | C] () -- C:\Windows\System32\ativvsvl.dat
[2013.04.30 03:30:54 | 000,157,144 | ---- | C] () -- C:\Windows\System32\ativvsva.dat
[2013.04.29 23:36:28 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2012.07.02 21:11:02 | 000,016,384 | ---- | C] () -- C:\Windows\System32\theowl.dll
[2012.04.18 19:39:06 | 000,028,672 | ---- | C] () -- C:\Windows\System32\kdbsdk32.dll
[2012.03.06 18:59:32 | 000,618,823 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2005.04.24 18:14:00 | 000,025,896 | -H-- | C] () -- C:\Users\Chris\AppData\Roaming\Chrislog.dat
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 22:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2013.12.03 17:58:31 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Audacity
[2014.02.26 14:15:39 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\CAE_Report_Generator
[2013.12.12 20:21:14 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2014.01.25 01:13:23 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\DAEMON Tools Lite
[2014.01.19 13:26:21 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dealply
[2014.03.03 11:17:53 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dropbox
[2014.02.20 20:51:58 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\DropboxMaster
[2014.02.25 16:29:43 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\DVDVideoSoft
[2014.03.03 21:28:16 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\FileZilla
[2013.12.08 22:43:17 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\flightgear.org
[2013.12.03 16:45:29 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\FlowStone
[2013.12.24 00:47:29 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\FT_Software
[2014.01.14 21:52:27 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\ICQ-Profile
[2014.01.14 16:15:58 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\ICQM
[2013.12.03 16:45:55 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Image-Line
[2013.12.08 22:11:15 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\iSafe
[2013.11.24 14:32:11 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\IsolatedStorage
[2013.11.16 09:43:16 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\KY-Programming
[2014.02.24 22:48:44 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\MVH
[2014.01.16 22:52:19 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\newnext.me
[2013.11.21 20:37:51 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Notepad++
[2014.02.20 16:15:19 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\OpenCandy
[2013.11.19 22:51:56 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\OpenOffice
[2013.11.15 07:14:09 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Origin
[2014.02.20 16:26:06 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Solvusoft
[2013.11.16 19:37:52 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\SoundSpectrum
[2014.02.08 13:14:56 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Spotify
[2013.12.20 20:21:27 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\svchost.exe
[2014.03.01 15:55:31 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Systweak
[2014.02.09 18:03:56 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\TeamViewer
[2013.11.14 21:06:28 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Thunderbird
[2014.03.04 11:40:50 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\TS3Client
[2014.02.20 16:21:16 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\TuneUp Software
[2014.02.02 00:10:00 | 000,000,000 | -HSD | M] -- C:\Users\Chris\AppData\Roaming\wyUpdate AU
[2013.12.28 19:47:42 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\XMedia Recode
[2013.11.14 21:17:19 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\YaTQA
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
< %SYSTEMDRIVE%\*. >
[2014.01.19 17:04:01 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2013.11.28 21:12:25 | 000,000,000 | ---D | M] -- C:\8ebf41383ee3e18591c24b16c6d795
[2013.11.28 21:16:34 | 000,000,000 | ---D | M] -- C:\AMD
[2013.11.15 03:03:46 | 000,000,000 | -HSD | M] -- C:\Boot
[2014.03.04 11:32:20 | 000,000,000 | -HSD | M] -- C:\Config.Msi
[2013.12.28 14:13:36 | 000,000,000 | ---D | M] -- C:\dell
[2009.07.14 05:53:55 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2013.11.14 19:25:49 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2013.11.16 21:20:21 | 000,000,000 | ---D | M] -- C:\Download
[2013.11.15 03:03:25 | 000,000,000 | ---D | M] -- C:\Drivers
[2013.11.15 03:03:25 | 000,000,000 | ---D | M] -- C:\Hotfix
[2014.03.02 02:05:03 | 000,000,000 | ---D | M] -- C:\Nexon
[2009.07.14 03:37:05 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2014.03.03 21:23:10 | 000,000,000 | R--D | M] -- C:\Program Files
[2014.03.04 11:32:30 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2013.11.14 19:25:49 | 000,000,000 | -HSD | M] -- C:\Programme
[2013.11.14 19:25:49 | 000,000,000 | -HSD | M] -- C:\Recovery
[2013.11.24 14:29:35 | 000,000,000 | ---D | M] -- C:\Spacekace
[2014.03.04 11:52:46 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2013.12.08 11:48:21 | 000,000,000 | R--D | M] -- C:\Users
[2014.03.03 22:19:30 | 000,000,000 | ---D | M] -- C:\Windows
 
< %PROGRAMFILES%\*.exe >
 
< %LOCALAPPDATA%\*.exe >
 
< %systemroot%\*. /mp /s >
 
< C:\Windows\system32\*.tsp >
[2009.07.14 02:14:11 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\hidphone.tsp
[2009.07.14 02:14:11 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\kmddsp.tsp
[2009.07.14 02:14:11 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ndptsp.tsp
[2009.07.14 02:14:11 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\remotesp.tsp
[2010.11.20 22:29:06 | 000,281,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\unimdm.tsp
[2009.07.14 05:53:46 | 000,032,634 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2009.07.14 05:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2013.11.14 19:33:46 | 000,000,884 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2013.11.14 21:28:54 | 000,001,092 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2013.11.14 21:28:56 | 000,001,096 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2013.12.13 07:23:37 | 000,001,952 | ---- | C] () -- C:\Windows\Tasks\Plus-HD-1.3-chromeinstaller.job
[2013.12.13 07:24:18 | 000,002,080 | ---- | C] () -- C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job
[2013.12.13 07:24:35 | 000,001,218 | ---- | C] () -- C:\Windows\Tasks\Plus-HD-1.3-codedownloader.job
[2013.12.13 07:24:40 | 000,001,118 | ---- | C] () -- C:\Windows\Tasks\Plus-HD-1.3-enabler.job
[2013.12.13 07:24:45 | 000,001,316 | ---- | C] () -- C:\Windows\Tasks\Plus-HD-1.3-updater.job
 
< MD5 for: AGP440.SYS  >
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_a5025d31bee4647c\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_df26d4d57fdef5b0\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_dfc9143c98e9a6c4\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
 
< MD5 for: EXPLORER.EXE  >
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2010.11.20 22:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
 
< MD5 for: IASTORV.SYS  >
[2011.03.11 06:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\drivers\iaStorV.sys
[2011.03.11 06:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 06:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_b0daddb9e6380745\iaStorV.sys
[2011.03.11 06:28:00 | 000,332,160 | ---- | M] (Intel Corporation) MD5=778D0E6D7D9EBA0C403BADBAAD41DB20 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_b152a892ff64119f\iaStorV.sys
[2010.11.20 22:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 22:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2010.11.20 22:29:12 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll
[2010.11.20 22:29:12 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2011.03.11 06:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\drivers\nvstor.sys
[2011.03.11 06:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 06:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvstor.sys
[2011.03.11 06:28:10 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=66D468654A58594F5F3BA63D5AD5B1AF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvstor.sys
[2010.11.20 22:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 22:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2010.11.20 22:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010.11.20 22:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll
 
< MD5 for: USER32.DLL  >
[2010.11.20 22:29:20 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\System32\user32.dll
[2010.11.20 22:29:20 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2010.11.20 22:29:06 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010.11.20 22:29:06 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2010.11.20 22:29:06 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010.11.20 22:29:06 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\System32\drivers\ws2ifsl.sys
[2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2013.11.14 22:31:28 | 000,135,776 | ---- | M] (Kaspersky Lab ZAO) Unable to obtain MD5 -- C:\Windows\system32\drivers\kl1.sys
[2014.02.18 10:38:42 | 000,094,304 | ---- | M] (Kaspersky Lab ZAO) Unable to obtain MD5 -- C:\Windows\system32\drivers\klflt.sys
[2014.02.18 10:38:42 | 000,576,096 | ---- | M] (Kaspersky Lab ZAO) Unable to obtain MD5 -- C:\Windows\system32\drivers\klif.sys
[2013.10.17 15:47:26 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO) Unable to obtain MD5 -- C:\Windows\system32\drivers\klim6.sys
[2014.02.18 10:38:43 | 000,025,184 | ---- | M] (Kaspersky Lab ZAO) Unable to obtain MD5 -- C:\Windows\system32\drivers\klkbdflt.sys
[2013.10.17 15:47:26 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO) Unable to obtain MD5 -- C:\Windows\system32\drivers\klmouflt.sys
[2013.04.12 15:34:48 | 000,014,432 | ---- | M] (Kaspersky Lab ZAO) Unable to obtain MD5 -- C:\Windows\system32\drivers\klpd.sys
[2013.05.14 17:34:44 | 000,045,024 | ---- | M] (Kaspersky Lab ZAO) Unable to obtain MD5 -- C:\Windows\system32\drivers\kltdi.sys
[2013.12.19 12:47:51 | 000,144,992 | ---- | M] (Kaspersky Lab ZAO) Unable to obtain MD5 -- C:\Windows\system32\drivers\kneps.sys
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\system32\*.dll /lockedfiles >
 
< %USERPROFILE%\*.* >
[2013.12.08 11:48:22 | 000,000,000 | ---- | M] () -- C:\Users\Chris\daemonprocess.txt
[2013.11.28 21:27:51 | 000,000,528 | R--- | M] () -- C:\Users\Chris\MediaID.bin
[2014.03.04 12:18:32 | 003,670,016 | -HS- | M] () -- C:\Users\Chris\ntuser.dat
[2014.03.04 12:18:32 | 000,262,144 | -HS- | M] () -- C:\Users\Chris\ntuser.dat.LOG1
[2013.11.14 19:26:02 | 000,000,000 | -HS- | M] () -- C:\Users\Chris\ntuser.dat.LOG2
[2013.11.14 19:26:02 | 000,065,536 | -HS- | M] () -- C:\Users\Chris\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf
[2013.11.14 19:26:02 | 000,524,288 | -HS- | M] () -- C:\Users\Chris\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms
[2013.11.14 19:26:02 | 000,524,288 | -HS- | M] () -- C:\Users\Chris\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms
[2014.01.25 07:16:54 | 000,065,536 | -HS- | M] () -- C:\Users\Chris\ntuser.dat{d217c682-850a-11e3-bbc9-002185194ef1}.TM.blf
[2014.01.25 07:16:54 | 000,524,288 | -HS- | M] () -- C:\Users\Chris\ntuser.dat{d217c682-850a-11e3-bbc9-002185194ef1}.TMContainer00000000000000000001.regtrans-ms
[2014.01.25 07:16:54 | 000,524,288 | -HS- | M] () -- C:\Users\Chris\ntuser.dat{d217c682-850a-11e3-bbc9-002185194ef1}.TMContainer00000000000000000002.regtrans-ms
[2013.11.14 19:26:02 | 000,000,020 | -HS- | M] () -- C:\Users\Chris\ntuser.ini
 
< %USERPROFILE%\Local Settings\Temp\*.exe >
 
< %USERPROFILE%\Local Settings\Temp\*.dll >
 
< %USERPROFILE%\Application Data\*.exe >
 
< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
 
========== Files - Unicode (All) ==========
[2014.02.24 07:09:01 | 001,343,488 | ---- | M] ()(C:\Windows\System32\????????????????????????????????) -- C:\Windows\System32\㩣灜潲牧浡慤慴歜獡数獲祫氠扡慜灶㐱〮〮摜瑡屡潭畤敬彳湩敶瑮牯⹹慤
[2013.11.23 15:35:40 | 001,343,488 | ---- | C] ()(C:\Windows\System32\????????????????????????????????) -- C:\Windows\System32\㩣灜潲牧浡慤慴歜獡数獲祫氠扡慜灶㐱〮〮摜瑡屡潭畤敬彳湩敶瑮牯⹹慤

< End of report >
         

Exras:

OTL Extras logfile created on: 04.03.2014 11:50:06 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Chris\Downloads
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16518)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,17 Gb Available Physical Memory | 72,45% Memory free
6,00 Gb Paging File | 4,91 Gb Available in Paging File | 81,92% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 931,51 Gb Total Space | 287,57 Gb Free Space | 30,87% Space Free | Partition Type: NTFS
 
Computer Name: CHRIS-PC | User Name: Chris | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = htmlfile] -- Reg Error: Key error. File not found
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- Reg Error: Key error.
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- Reg Error: Key error.
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error.
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{12997831-6BEB-48F0-9E4E-CDEE6D89FE6A}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{253FD525-3219-404A-BF74-DD4437A6F617}" = lport=139 | protocol=6 | dir=in | app=system | 
"{362D59F3-CEA2-41B2-ADFA-B782D1D47B96}" = rport=445 | protocol=6 | dir=out | app=system | 
"{45B43115-695E-4CC3-9448-3083FA42E630}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{51CA24CB-5953-4FB5-A303-6A54B7F7DEC6}" = rport=138 | protocol=17 | dir=out | app=system | 
"{53AEFDDD-01A5-4464-83A4-27E45FCBCAA8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{5CDF08D9-F1A9-4013-9063-286737043805}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe | 
"{65A3B10C-928A-4A09-9DBF-EAE6155E7D0C}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{7EB0BA99-DA0A-49BD-A84E-06CD26198AA3}" = lport=137 | protocol=17 | dir=in | app=system | 
"{9068133E-E233-4587-B025-E6BDB4681102}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{95E05BA2-56FF-4CF6-855E-45C82AB7A773}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{A2F553DF-BA70-47CA-92E7-0CAFE76A7B73}" = lport=138 | protocol=17 | dir=in | app=system | 
"{A4C5BAA6-E06D-4C1E-B43E-CADC3D47B01F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{B62ECB5A-FAB2-4858-A766-776CA3DED7E5}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{BD992055-9E23-42CC-B850-C3F4FC357709}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{BF1D8653-8ACC-454C-903E-D474900FE4A1}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{D28B56B0-FA55-4A1F-8CB4-EE08DF03722A}" = rport=139 | protocol=6 | dir=out | app=system | 
"{D372ECE4-20D5-423E-A2E6-3BD41A139B06}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{DA8ACEA7-F578-4C28-8B41-5D416D5DD4FF}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{FD0E75DA-2F8F-4FC1-B401-83A0F2ACEF13}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{FE327B06-5652-481D-B284-F982CB6C6DC9}" = rport=137 | protocol=17 | dir=out | app=system | 
"{FECEEB85-ADC7-4772-987F-9275C1D66E72}" = lport=445 | protocol=6 | dir=in | app=system | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0387BE3E-5302-47A5-9DD3-2E9401D4067C}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\left 4 dead 2\left4dead2.exe | 
"{0818E383-187E-42A5-9B9D-1672AD0239EB}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\counter-strike global offensive\csgo.exe | 
"{0C03850B-7FDD-48CB-9EB9-FC24F659AD95}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe | 
"{0E7508D7-16B7-4AE7-803A-D9E1D2BC6A80}" = protocol=17 | dir=in | app=c:\program files\battlelog web plugins\sonar\0.70.4\sonarhost.exe | 
"{0FDAAF00-5639-4544-9B8D-770AA9926B7F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{1003CE41-2BC8-4AB1-B276-3F39EDE1A91E}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{1BEE3657-1D04-4AA9-A578-3C9540FB0EE2}" = protocol=17 | dir=in | app=c:\users\chris\appdata\roaming\dropbox\bin\dropbox.exe | 
"{239E317C-29CA-4D41-8451-B9D1EBEE3517}" = protocol=6 | dir=in | app=c:\nexon\combat arms eu\nmservice.exe | 
"{28401590-2985-4963-AE34-FBE37D329D42}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\left 4 dead 2\left4dead2.exe | 
"{2AF60912-751C-4373-A430-81B7019F6616}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\left 4 dead 2\left4dead2.exe | 
"{2F8F4D1B-14B2-48E1-B273-4A96932860E8}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{30298EFF-EB39-4687-8801-B6448066C6F0}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{3C0F3749-8E40-4813-A36C-AE7F4FBA7B56}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version9\teamviewer.exe | 
"{3E93199D-9FEB-4D34-A99A-4F2FAFAA35E2}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{4D3082DA-8429-4FED-841E-743FD01030F7}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version9\teamviewer_service.exe | 
"{52D9E9E1-1142-4FF7-88F9-6AB832462A50}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{5678A7DB-5779-4B0D-A551-52FE4E2B153A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{56C9F0B7-D313-438D-A1AD-EC8D5340AE3F}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{5820BC58-BC0E-44CB-B41D-1C25342DC9FC}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\left 4 dead 2\left4dead2.exe | 
"{58BE2F42-709C-48E0-908E-C0F8EB1F899B}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{58E8D33B-99B3-4482-9248-322EE8697EBB}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\railworks\railworks.exe | 
"{5BAC8378-0514-4426-BF95-D61F78EB0798}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\euro truck simulator\eurotrucks.exe | 
"{5D972DED-FD96-4B6C-8909-84126E077452}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\counter-strike global offensive\csgo.exe | 
"{5DD94AA1-03BF-4DF1-A8C7-F2A1CE144CC3}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\counter-strike global offensive\csgo.exe | 
"{5F0E5084-A25E-4F82-ABF3-4C376D7D6312}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{621CEAF7-D0CA-4EBE-9FD2-BCA050BB2C36}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\railworks\railworks.exe | 
"{62F0023B-B794-4D3B-B69D-F5631E6FD8C3}" = protocol=6 | dir=out | app=system | 
"{70073E45-D233-43D6-A3C2-E60403336F00}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{7C292CA6-B6D4-49D5-B523-0C7A97931F26}" = protocol=17 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe | 
"{862413C0-9B7B-4633-ABC8-3B8AEE757A5E}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\counter-strike global offensive\csgo.exe | 
"{88A8BE23-1255-4184-BB69-3AF08E7D24BC}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{925F0368-E378-43E5-8511-2AC48524081D}" = protocol=6 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe | 
"{A40CAA0C-10E0-4935-880E-04732E148C39}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe | 
"{A5996292-7FA1-49A0-87D5-945BA500A2B1}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version9\teamviewer_service.exe | 
"{A89CB780-2EF7-48D5-99D6-33541403F48C}" = protocol=17 | dir=in | app=c:\users\chris\appdata\roaming\icqm\icq.exe | 
"{A8DC0B66-6395-4321-A098-7292816F6E17}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\euro truck simulator\eurotrucks.exe | 
"{BBDC0E56-BBDC-445C-B7DB-54185D6C9296}" = protocol=6 | dir=in | app=c:\program files\origin games\battlefield 3\bf3.exe | 
"{BDE240F9-CC02-43D1-9C9A-5C9A823626AE}" = protocol=6 | dir=in | app=c:\users\chris\appdata\roaming\dropbox\bin\dropbox.exe | 
"{D111F2B7-D6C5-48B4-A429-46C5681BAA88}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{D740B318-1332-4736-9A2C-696B646EAEF8}" = protocol=6 | dir=in | app=c:\program files\battlelog web plugins\sonar\0.70.4\sonarhost.exe | 
"{DC12ED60-D0CA-492F-9150-B1AB1787E0E4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{E24EBAF1-A82B-4CA1-BC41-C1AC7D83A27D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{E6C5ABF1-1253-41D5-B280-E7D01BD89C4F}" = protocol=17 | dir=in | app=c:\program files\origin games\battlefield 3\bf3.exe | 
"{EC628071-14EB-4E6F-A617-91ACA324611F}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\left 4 dead 2\left4dead2.exe | 
"{EDBACFB7-1E0A-418B-A0D6-FD5EDDBF1176}" = protocol=17 | dir=in | app=c:\nexon\combat arms eu\nmservice.exe | 
"{EE9EA8E1-92F3-43DE-B100-499D6A22EBFF}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\left 4 dead 2\left4dead2.exe | 
"{F08BD54B-7C62-4E72-9033-D8A5766A534E}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version9\teamviewer.exe | 
"{F83AC32D-BE8A-47D1-BE0D-D415ED92A308}" = protocol=6 | dir=in | app=c:\users\chris\appdata\roaming\icqm\icq.exe | 
"{FC868FEE-4F6B-4C6C-9370-49E59B1E9260}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"TCP Query User{4987910B-F199-4465-85AF-D745B73A5600}C:\users\chris\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\chris\appdata\roaming\spotify\spotify.exe | 
"TCP Query User{747F59E0-65EF-49F7-9C30-DA785EA5A823}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=6 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe | 
"UDP Query User{115538E1-C9A7-440C-A5D5-820B17873D6F}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=17 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe | 
"UDP Query User{B6F893DB-F8DC-4543-9598-FA496A352356}C:\users\chris\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\chris\appdata\roaming\spotify\spotify.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00F14E5B-E07A-2A1E-6788-580773CE1486}" = CCC Help English
"{0886900B-B2F3-452C-B580-60F1253F7F80}" = Native Instruments Controller Editor
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A036215-0A8D-6FBE-7EA3-7AED4F9E162A}" = CCC Help Turkish
"{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}" = OpenOffice 4.0.1
"{0B8565BA-BAD5-4732-B122-5FD78EFC50A9}" = Native Instruments Service Center
"{15A05AAA-37E7-D516-5BE9-C960C2170403}" = CCC Help Czech
"{1d86c014-f03a-43a1-be1b-3001da2b1aa6}" = Serato DJ 1.1
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{21E9850E-58C2-FA88-D5AD-B64D253B8F82}" = CCC Help Thai
"{23F20D12-1D01-4806-8AA8-AC79055109DE}" = VirtualDJ PRO Full
"{25A7270E-1B63-DFD1-ACBC-88852A305398}" = CCC Help Chinese Traditional
"{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1" = ConvertHelper 2.2
"{2E376AD9-5C49-4F7D-A0BA-6A44E8FA5A3B}" = Next Generation Visualisations
"{2E69E784-F84A-9A18-7D8E-4EB8504EEE1E}" = CCC Help Danish
"{362614E4-9ABB-E7A7-CDDC-239AB168060A}" = CCC Help Japanese
"{3BBFD444-5FAB-49F6-98B1-A1954E831399}" = Die Sims™ 3 Showtime
"{3DE92282-CB49-434F-81BF-94E5B380E889}" = Die Sims™ 3 Jahreszeiten
"{3DF7D356-6225-8717-AFC2-91D5C1521036}" = AMD Media Foundation Decoders
"{45057FCE-5784-48BE-8176-D9D00AF56C3C}" = Die Sims™ 3 Late Night
"{4745F6F8-09DA-CC39-EC19-0E8D764CF2B7}" = CCC Help Chinese Standard
"{4903D172-DCCB-392F-93A3-34CA9D47FE3D}" = Microsoft .NET Framework 4.5.1
"{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}" = Google Earth Plug-in
"{4B60A7A4-49F6-4D2A-8AE7-BCBAFA6224CE}" = Simulationsprogramm Integrierte Leitstelle V4
"{4E623953-A936-5114-5702-08A609BA509C}" = HydraVision
"{4FA31DE2-B613-24BB-1738-B655C00B1C9D}" = CCC Help Hungarian
"{52E225FC-FCB4-41F7-837B-6E37FB05BD7B}" = Adobe AIR
"{58771CF6-F212-CC4D-61B1-45CC70B6375C}" = CCC Help Dutch
"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
"{5D222DF2-1428-48A6-AB3F-1C7DE57D019C}" = Serato DJ 1.1
"{5D30F159-FFB9-458F-8A03-1747DDE499D8}" = Overwolf
"{6D5CE5F1-CBB0-9ED4-1A1E-91DDCD6225FD}" = CCC Help Italian
"{6F6873E3-5C92-4049-B511-231A138DD090}" = Kaspersky Internet Security
"{707210B0-29F1-C550-BA96-6ECDA245CF24}" = CCC Help Spanish
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{72EF03F5-0507-4861-9A44-D99FD4C41417}" = Paint.NET v3.5.11
"{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}" = Adobe Photoshop CS6
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7F644A4B-C9A7-E419-BFD9-75DFA0EE57DB}" = AMD Accelerated Video Transcoding
"{812B956B-37AB-24B9-4527-78A6D3ECE7F8}" = CCC Help Korean
"{83293709-B863-0EF6-00DA-B026D486E8B5}" = CCC Help Polish
"{8694B919-8C39-41FB-875E-0FC8E3EE3216}_is1" = Werkfeuerwehr Simulator 2014 Version 1.2
"{88B2ABCF-9C00-47C1-8FC4-369B98845DD7}" = Catalyst Control Center - Branding
"{8D5B19AA-3D3A-5870-C9A0-346EBC5DB21E}" = ccc-utility
"{910F4A29-1134-49E0-AD8B-56E4A3152BD1}" = Die Sims™ 3 Traumkarrieren
"{911904DE-EBB6-BC8E-D5BD-762B7DB42C46}" = CCC Help Greek
"{914928E5-4BA3-4809-9280-9C3DC20B993D}" = Scanner Recorder
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031" = Microsoft .NET Framework 4.5.1 (Deutsch)
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
"{9903011B-5F1D-A2A1-8078-EE62B3324CCE}" = CCC Help Portuguese
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A4C534E-431F-4A17-97D4-D1682B19A054}" = Emergency4
"{9A7F1628-2126-34A5-852D-2B93328BCF3F}" = CCC Help German
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9E871D09-064D-3BC9-963B-3AB8ABE1273D}" = Microsoft .NET Framework 4.5.1 (DEU)
"{9FE75E68-96A2-48F3-90AB-34E6B8C9989D}" = Microsoft-Maus- und Tastatur-Center
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A8D93648-9F7F-407D-915C-62044644C3DA}" = MSI to redistribute MS VS2005 CRT libraries
"{A8EC0CC0-AD8D-4244-B080-424EDF7A7634}" = Native Instruments Traktor 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-AB0000000001}" = Adobe Reader XI (11.0.06) - Deutsch
"{ACEF85BD-2489-BE0E-9965-CE2F661260AA}" = AMD Fuel
"{AE6C422B-DADB-D547-411C-E9E56DF03D16}" = CCC Help Russian
"{B09567CC-E43F-10F1-752D-549AC7FB0C43}" = CCC Help Finnish
"{B170B91D-E8E3-A6A3-D129-D8E36FEA8A0B}" = CCC Help Norwegian
"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime
"{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}" = Die Sims™ 3 Reiseabenteuer
"{BD96ABD3-D1D4-5513-6C60-11476D6DCFC5}" = Catalyst Control Center Localization All
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = Die Sims™ 3
"{C39C7876-4D21-8A38-0A42-B5C8858EC6C7}" = CCC Help French
"{C4C91E02-D4E2-481E-BCBA-7D90CC8D43E1}" = LiveZilla
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D4236B82-213F-679E-09A2-9AEB5EF4CADC}" = Catalyst Control Center Graphics Previews Common
"{DB21639E-FE55-432C-BCA2-0C5249E3F79E}" = Die Sims™ 3 Inselparadies
"{DBA18992-B9F3-950D-E973-6ED23422EA73}" = AMD Drag and Drop Transcoding
"{DDA3C325-47B2-4730-9672-BF3771C08799}_is1" = XMedia Recode Version 3.1.7.6
"{E15BC10F-04AA-0AFD-A6C9-476730195F8B}" = Adobe Download Assistant
"{e3ca9788-c318-4024-98c3-68c04a735fbf}_is1" = Funkspiel-Forum
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E43B4909-141E-DFF3-8C58-62B5E4D66BBA}" = AMD Catalyst Install Manager
"{E6B88BD6-E4B2-4701-A648-B6DAC6E491CC}" = Die Sims™ 3 Lebensfreude
"{EBBD4FE6-91DA-C397-6D56-FE85DBF24FCF}" = AMD VISION Engine Control Center
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F26DE8EF-F2CF-40DC-8CDA-CC0D82D11B36}" = Die Sims™ 3 Wildes Studentenleben
"{F7849D41-0A46-457D-827D-00FF47AF2D85}_is1" = CAE Report Generator v1.1
"{F868C16D-75F8-4EE8-BCBF-422D0833415D}_is1" = Open PLS in Windows Media Player 2.3.0
"{FCEFDA6B-63CD-BB17-B845-478A42E24D39}" = CCC Help Swedish
"{RTS-Wegberg-2-0}_is1" = RTS Wegberg Version 2.0
"{Wegberg-Modifikation-6-0}_is1" = Feuer- und Notfallsimulation Wegberg Version 6.0
"5513-1208-7298-9440" = JDownloader 0.9
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 12 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 12 Plugin
"ASIO4ALL" = ASIO4ALL
"Audacity_is1" = Audacity 2.0.5
"AviSynth" = AviSynth 2.5
"BandiMPEG1" = Bandisoft MPEG-1 Decoder
"Battlelog Web Plugins" = Battlelog Web Plugins
"CCleaner" = CCleaner
"com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant
"Combat Arms EU" = Combat Arms EU
"DAEMON Tools Lite" = DAEMON Tools Lite
"ESN Sonar-0.70.4" = ESN Sonar
"ExpressBurn" = Express Burn
"FBDBServer_2_5_is1" = Firebird 2.5.2.26540 (Win32)
"FileZilla Client" = FileZilla Client 3.7.3
"FL Studio 11" = FL Studio 11
"FlowStone" = FlowStone FL 3.0
"Free YouTube Download_is1" = Free YouTube Download version 3.2.23.219
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.12.26.224
"Google Chrome" = Google Chrome
"InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}" = Kaspersky Internet Security
"LAME_is1" = LAME v3.99.3 (for Windows)
"LiveZilla" = LiveZilla
"Microsoft Mouse and Keyboard Center" = Microsoft-Maus- und Tastatur-Center
"MixPad" = MixPad Audiodatei-Mixer
"Mixxx (1.11.0)" = Mixxx 1.11.0
"Mozilla Firefox 27.0.1 (x86 de)" = Mozilla Firefox 27.0.1 (x86 de)
"Mozilla Thunderbird 24.3.0 (x86 de)" = Mozilla Thunderbird 24.3.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Native Instruments Controller Editor" = Native Instruments Controller Editor
"Native Instruments Service Center" = Native Instruments Service Center
"Native Instruments Traktor 2" = Native Instruments Traktor 2
"NAVIGON Fresh" = NAVIGON Fresh 3.5.1
"Notepad++" = Notepad++
"NVIDIA Drivers" = NVIDIA Drivers
"OpenVPN" = OpenVPN 2.3.2-I003 
"Origin" = Origin
"SAM3" = SAM Broadcaster v4
"SCDNAS" = SHOUTcast DNAS (remove only)
"Steam" = Steam
"Steam App 232010" = Euro Truck Simulator
"Steam App 24010" = Train Simulator 2014
"Steam App 550" = Left 4 Dead 2
"Steam App 730" = Counter-Strike: Global Offensive
"TAP-Windows" = TAP-Windows 9.9.2
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TeamViewer 9" = TeamViewer 9
"Virtual Audio Cable 4.10" = Virtual Audio Cable 4.10
"WavePad" = WavePad Audio-Editor
"WhiteCap" = WhiteCap
"WinRAR archiver" = WinRAR 5.00 (32-Bit)
"winscp3_is1" = WinSCP 5.1.7
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"ICQ" = ICQ 8.2 (build 6901)
"Spotify" = Spotify
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 03.03.2014 20:12:45 | Computer Name = Chris-PC | Source = WinSecurity.exe | ID = 0
Description = 
 
Error - 03.03.2014 20:12:45 | Computer Name = Chris-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: WinSecurity.exe, Version: 1.0.0.70,
 Zeitstempel: 0x522949f5  Name des fehlerhaften Moduls: WinSecurity.exe, Version: 
1.0.0.70, Zeitstempel: 0x522949f5  Ausnahmecode: 0xc0000005  Fehleroffset: 0x000052bf
ID
 des fehlerhaften Prozesses: 0x13b0  Startzeit der fehlerhaften Anwendung: 0x01cf373e6f252209
Pfad
 der fehlerhaften Anwendung: C:\Windows\System32\WinSecurity.exe  Pfad des fehlerhaften
 Moduls: C:\Windows\System32\WinSecurity.exe  Berichtskennung: b5af92b8-a331-11e3-8c31-002185194ef1
 
Error - 03.03.2014 20:12:47 | Computer Name = Chris-PC | Source = WinSecurity.exe | ID = 0
Description = 
 
Error - 03.03.2014 20:13:00 | Computer Name = Chris-PC | Source = WinSecurity.exe | ID = 0
Description = 
 
Error - 03.03.2014 20:13:00 | Computer Name = Chris-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: WinSecurity.exe, Version: 1.0.0.70,
 Zeitstempel: 0x522949f5  Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247,
 Zeitstempel: 0x521ea91c  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00046a62  ID des fehlerhaften
 Prozesses: 0x1408  Startzeit der fehlerhaften Anwendung: 0x01cf373e78220570  Pfad der
 fehlerhaften Anwendung: C:\Windows\System32\WinSecurity.exe  Pfad des fehlerhaften
 Moduls: C:\Windows\SYSTEM32\ntdll.dll  Berichtskennung: be7a3e98-a331-11e3-8c31-002185194ef1
 
Error - 03.03.2014 20:13:01 | Computer Name = Chris-PC | Source = WinSecurity.exe | ID = 0
Description = 
 
Error - 03.03.2014 20:13:19 | Computer Name = Chris-PC | Source = WinSecurity.exe | ID = 0
Description = 
 
Error - 03.03.2014 20:13:19 | Computer Name = Chris-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: WinSecurity.exe, Version: 1.0.0.70,
 Zeitstempel: 0x522949f5  Name des fehlerhaften Moduls: WinSecurity.exe, Version: 
1.0.0.70, Zeitstempel: 0x522949f5  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0003b327
ID
 des fehlerhaften Prozesses: 0x12a8  Startzeit der fehlerhaften Anwendung: 0x01cf373e80ecb150
Pfad
 der fehlerhaften Anwendung: C:\Windows\System32\WinSecurity.exe  Pfad des fehlerhaften
 Moduls: C:\Windows\System32\WinSecurity.exe  Berichtskennung: c99b58b6-a331-11e3-8c31-002185194ef1
 
Error - 03.03.2014 20:13:20 | Computer Name = Chris-PC | Source = WinSecurity.exe | ID = 0
Description = 
 
Error - 03.03.2014 20:13:33 | Computer Name = Chris-PC | Source = WinSecurity.exe | ID = 0
Description = 
 
[ Media Center Events ]
Error - 07.01.2014 11:00:31 | Computer Name = Chris-PC | Source = MCUpdate | ID = 0
Description = 16:00:31 - Fehler beim Herstellen der Internetverbindung.  16:00:31 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 07.01.2014 11:01:12 | Computer Name = Chris-PC | Source = MCUpdate | ID = 0
Description = 16:00:38 - Fehler beim Herstellen der Internetverbindung.  16:00:38 
-     Serververbindung konnte nicht hergestellt werden..  
 
[ System Events ]
Error - 03.03.2014 20:21:53 | Computer Name = Chris-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 03.03.2014 20:22:07 | Computer Name = Chris-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 03.03.2014 20:22:26 | Computer Name = Chris-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 03.03.2014 20:22:41 | Computer Name = Chris-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 03.03.2014 20:23:01 | Computer Name = Chris-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 03.03.2014 20:23:16 | Computer Name = Chris-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 03.03.2014 20:23:30 | Computer Name = Chris-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 03.03.2014 20:23:44 | Computer Name = Chris-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 03.03.2014 20:24:03 | Computer Name = Chris-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 03.03.2014 20:24:22 | Computer Name = Chris-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden
 durchgeführt: Neustart des Diensts.
 
 
< End of report >
         

hoffe ihr könnt endlich helfen ich wäre so dankbar weil das echt ätzend ist...

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Okai hab ich gemacht..

FRST:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-03-2014 01
Ran by Chris (administrator) on CHRIS-PC on 04-03-2014 17:45:50
Running from C:\Users\Chris\Downloads
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
() C:\Windows\system32\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
(Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\tv_w32.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft ® Windows ® Operating System) C:\Windows\System32\WinSecurity.exe


==================== Registry (Whitelisted) ==================

HKU\S-1-5-21-851525740-4077580050-1894253159-1001\...\MountPoints2: {92e28e6b-74e1-11e3-996e-002185194ef1} - E:\Autorun.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.dell.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default
FF DefaultSearchEngine: Conduit Search
FF SearchEngineOrder.1: Ask Search
FF SelectedSearchEngine: Conduit Search
FF Homepage: https://www.google.de/
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3312807&SearchSource=2&CUI=UN93255172636127723&UM=1&q=
FF NetworkProxy: "autoconfig_url", "file:///C:/Users/Chris/Desktop/putty.exe%20-N%20-L%201234:localhost:1234%20proxy@cs-sys.de"
FF NetworkProxy: "backup.ftp", "localhost"
FF NetworkProxy: "backup.ftp_port", 1234
FF NetworkProxy: "backup.socks", "localhost"
FF NetworkProxy: "backup.socks_port", 1234
FF NetworkProxy: "backup.ssl", "localhost"
FF NetworkProxy: "backup.ssl_port", 1234
FF NetworkProxy: "ftp", "localhost"
FF NetworkProxy: "ftp_port", 1234
FF NetworkProxy: "http", "localhost"
FF NetworkProxy: "http_port", 1234
FF NetworkProxy: "no_proxies_on", "C:\\Users\\CS-SYS\\Desktop\\putty.exe -N -L 1234:localhost:1234 proxy@cs-sys.de"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "localhost"
FF NetworkProxy: "socks_port", 1234
FF NetworkProxy: "ssl", "localhost"
FF NetworkProxy: "ssl_port", 1234
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @esn.me/esnsonar,version=0.70.4 - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin: @esn/npbattlelog,version=2.3.2 - C:\Program Files\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF SearchPlugin: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Plus-HD-1.3 - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\Extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com [2014-01-30]
FF Extension: Fun Media Bar V11  - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\Extensions\{21bd831c-5f59-432d-9c58-c3162b161816} [2013-12-20]
FF Extension: DownloadHelper - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-11-21]
FF HKLM\...\Firefox\Extensions:  - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2013-11-14]
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2013-11-14]
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2013-11-14]
FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2013-11-14]
FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2013-11-14]

Chrome: 
=======
CHR HomePage: 
CHR Extension: (Google Docs) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14]
CHR Extension: (Google Drive) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-14]
CHR Extension: (YouTube) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-14]
CHR Extension: (Google-Suche) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-14]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-11-15]
CHR Extension: (Beach in the Maldives) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddicfadfciaeikknlkcldgockejldhek [2013-11-14]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2013-11-15]
CHR Extension: (Modul zum Sperren von gefährlichen Webseiten) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2013-11-15]
CHR Extension: (Plus-HD-1.3) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl [2013-12-13]
CHR Extension: (Virtuelle Tastatur) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-11-15]
CHR Extension: (Google Wallet) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-14]
CHR Extension: (Google Mail) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-14]
CHR Extension: (Anti-Banner) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-11-15]
CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-10-17]

========================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-04-29] (Advanced Micro Devices, Inc.)
R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
R2 FirebirdGuardianDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2013-03-19] (Firebird Project)
R3 FirebirdServerDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe [3784704 2013-03-19] (Firebird Project)
R2 iprip; C:\Windows\System32\iprip.dll [29696 2009-07-14] (Microsoft Corporation)
R2 NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [4927280 2013-07-11] (Native Instruments GmbH)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [32568 2013-08-22] (The OpenVPN Project)
S3 OverwolfUpdaterService; C:\Program Files\Overwolf\OverwolfUpdater.exe [18360 2013-10-23] (Overwolf Ltd)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-12-20] ()
R2 WindowsSecurity; C:\Windows\System32\WinSecurity.exe [1496576 2013-12-20] (Microsoft ® Windows ® Operating System)

==================== Drivers (Whitelisted) ====================

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-01-04] (Disc Soft Ltd)
R3 EuMusDesignVirtualAudioCableWdm; C:\Windows\System32\DRIVERS\vrtaucbl.sys [50728 2014-03-01] (Eugene V. Muzychenko)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2013-11-14] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [94304 2014-02-18] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [576096 2014-02-18] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25184 2014-02-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [14432 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [45024 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [144992 2013-12-19] (Kaspersky Lab ZAO)
R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]
S3 IntcAzAudAddService; system32\drivers\RTKVHDA.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-04 17:45 - 2014-03-04 17:46 - 00014270 _____ () C:\Users\Chris\Downloads\FRST.txt
2014-03-04 17:45 - 2014-03-04 17:45 - 01145344 _____ (Farbar) C:\Users\Chris\Downloads\FRST.exe
2014-03-04 17:45 - 2014-03-04 17:45 - 00000000 ____D () C:\FRST
2014-03-04 12:24 - 2014-03-04 12:25 - 00164224 _____ () C:\Windows\Minidump\030414-16281-01.dmp
2014-03-04 12:24 - 2014-03-04 12:24 - 436596576 _____ () C:\Windows\MEMORY.DMP
2014-03-04 12:19 - 2014-03-04 12:19 - 00060694 _____ () C:\Users\Chris\Downloads\Extras.Txt
2014-03-04 12:18 - 2014-03-04 12:18 - 00143044 _____ () C:\Users\Chris\Downloads\OTL.Txt
2014-03-04 11:48 - 2014-03-04 11:48 - 00602112 _____ (OldTimer Tools) C:\Users\Chris\Downloads\OTL.exe
2014-03-04 11:20 - 2014-03-04 11:25 - 257813336 _____ () C:\Users\Chris\Documents\kis14.0.0.4651de-de.exe
2014-03-04 09:43 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-04 02:02 - 2013-10-02 01:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-03-04 02:02 - 2013-10-02 01:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-04 02:02 - 2013-10-02 01:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-04 02:02 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-03-04 02:02 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-03-04 02:02 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-03-04 02:02 - 2013-10-02 00:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-03-04 02:02 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-03-04 02:02 - 2013-10-02 00:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-03-04 02:02 - 2013-10-01 23:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-03-04 02:02 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-03-04 02:01 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-03-03 22:19 - 2014-03-04 17:39 - 00000280 _____ () C:\Windows\setupact.log
2014-03-03 22:19 - 2014-03-03 22:19 - 00000372 _____ () C:\Windows\PFRO.log
2014-03-03 22:19 - 2014-03-03 22:19 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-03 22:16 - 2014-03-03 22:16 - 00000000 ____D () C:\Windows\pss
2014-03-03 21:24 - 2014-03-03 21:24 - 04765152 _____ (Piriform Ltd) C:\Users\Chris\Downloads\ccsetup411.exe
2014-03-02 02:08 - 2014-03-02 02:08 - 00001630 _____ () C:\Users\Public\Desktop\Combat Arms EU.lnk
2014-03-01 19:11 - 2014-03-01 19:47 - 1967289647 _____ (Nexon) C:\Users\Chris\Documents\Combatarms_eu.exe
2014-03-01 19:06 - 2014-03-01 19:06 - 10028912 _____ (Akamai Technologies, Inc.) C:\Users\Chris\Downloads\NexonEU_Installer.exe
2014-03-01 16:18 - 2014-03-01 16:19 - 00000000 ____D () C:\Program Files\Virtual Audio Cable
2014-03-01 16:18 - 2014-03-01 16:18 - 00050728 _____ (Eugene V. Muzychenko) C:\Windows\system32\Drivers\vrtaucbl.sys
2014-03-01 16:15 - 2010-03-27 19:14 - 00000000 ____D () C:\Users\Chris\Documents\Virtual Audio Cable 4.10
2014-03-01 16:13 - 2014-03-01 16:13 - 01323708 _____ () C:\Users\Chris\Documents\VIRTUAL_AUDIO_CABLE_4.10.RAR
2014-03-01 15:52 - 2014-03-01 15:52 - 00677608 _____ () C:\Users\Chris\Downloads\Virtual Audio Cable 4.12 by iwdownload.exe
2014-03-01 15:52 - 2014-03-01 15:52 - 00677608 _____ () C:\Users\Chris\Downloads\Virtual Audio Cable 4.12 by iwdownload(1).exe
2014-02-27 16:13 - 2014-02-27 16:13 - 00000000 ____D () C:\Users\Chris\Documents\ILS-SimV4
2014-02-26 14:15 - 2014-02-26 14:15 - 00001109 _____ () C:\Users\Public\Desktop\CAE Report Generator.lnk
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\CAE_Report_Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Local\CAE_Report_Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\CAE Report Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\BandiMPEG1
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\AviSynth 2.5
2014-02-24 22:55 - 2014-02-24 22:55 - 00000000 ____D () C:\ProgramData\MVH
2014-02-24 22:48 - 2014-02-24 22:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\MVH
2014-02-24 22:46 - 2014-02-25 17:08 - 01369088 _____ () C:\Users\Chris\Desktop\MVH Loader.exe
2014-02-24 22:45 - 2014-02-24 22:45 - 01106766 _____ () C:\Users\Chris\Desktop\MVH Loader.zip
2014-02-21 18:08 - 2014-02-21 18:08 - 00000000 ____D () C:\Users\Chris\Desktop\CB-Desings
2014-02-20 20:51 - 2014-03-03 11:17 - 00000000 ___RD () C:\Users\Chris\Dropbox
2014-02-20 20:51 - 2014-02-20 20:51 - 00001039 _____ () C:\Users\Chris\Desktop\Dropbox.lnk
2014-02-20 20:50 - 2014-02-20 20:51 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\DropboxMaster
2014-02-20 20:50 - 2014-02-20 20:50 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-02-20 20:49 - 2014-03-03 11:17 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Dropbox
2014-02-20 16:21 - 2014-02-20 16:21 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TuneUp Software
2014-02-20 16:19 - 2014-02-20 16:22 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-02-20 16:19 - 2014-02-20 16:19 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-02-20 16:15 - 2014-02-20 16:15 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\OpenCandy
2014-02-19 00:07 - 2014-03-03 21:25 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-18 17:28 - 2014-02-18 17:28 - 00000000 ____D () C:\Users\Chris\Desktop\Filme Download
2014-02-15 07:47 - 2014-02-15 07:47 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-15 06:30 - 2014-02-15 06:30 - 00002917 _____ () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Scanner Recorder.lnk
2014-02-15 06:30 - 2014-02-15 06:30 - 00000000 ____D () C:\Program Files\Scanner Recorder
2014-02-13 22:59 - 2014-02-18 18:58 - 00000000 ____D () C:\Users\Chris\Desktop\Filme Dome
2014-02-13 18:25 - 2014-02-14 13:42 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-02-13 17:32 - 2014-02-13 17:47 - 00000231 _____ () C:\Users\Chris\Desktop\steam.txt
2014-02-12 21:27 - 2014-02-12 22:22 - 00000068 _____ () C:\Users\Chris\Desktop\pw filme.txt
2014-02-12 03:12 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-12 03:12 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-12 03:12 - 2014-02-06 11:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-12 03:12 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-12 03:12 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-12 03:12 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-12 03:12 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-12 03:12 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-12 03:12 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-12 03:12 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-12 03:12 - 2014-02-06 10:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-12 03:12 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-12 03:12 - 2014-02-06 10:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-12 03:12 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-12 03:12 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-12 03:12 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-12 03:12 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-12 03:12 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-12 03:12 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-12 03:12 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-12 03:12 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-12 03:03 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 01:20 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 01:20 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 01:20 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 01:20 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 01:20 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 01:20 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 01:20 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 01:20 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 01:20 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 01:20 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 01:20 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 01:20 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 01:20 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 01:20 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-11 17:14 - 2014-02-11 18:42 - 00000000 ____D () C:\Users\Chris\Desktop\SD-Karte
2014-02-09 17:58 - 2014-02-09 18:03 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TeamViewer
2014-02-08 13:33 - 2014-02-08 13:33 - 00000000 __RSH () C:\MSDOS.SYS
2014-02-08 13:33 - 2014-02-08 13:33 - 00000000 __RSH () C:\IO.SYS
2014-02-08 10:06 - 2014-02-08 10:06 - 00000000 __HDC () C:\ProgramData\{E54DB1D4-CC7D-414E-8BED-584C447836EA}
2014-02-08 10:06 - 2014-02-08 10:06 - 00000000 ____D () C:\Users\Chris\Documents\Native Instruments
2014-02-08 10:05 - 2014-02-08 10:05 - 00001002 _____ () C:\Users\Public\Desktop\Traktor 2.lnk
2014-02-08 10:00 - 2014-02-08 10:00 - 00001094 _____ () C:\Users\Public\Desktop\Controller Editor.lnk
2014-02-08 10:00 - 2014-02-08 10:00 - 00000000 __HDC () C:\ProgramData\{9477ED15-E4A3-4984-9B76-31F573D8EAAF}
2014-02-08 09:59 - 2014-02-08 10:01 - 00000000 ____D () C:\ProgramData\Native Instruments
2014-02-08 09:59 - 2014-02-08 10:01 - 00000000 ____D () C:\Program Files\Native Instruments
2014-02-08 09:59 - 2014-02-08 10:01 - 00000000 ____D () C:\Program Files\Common Files\Native Instruments
2014-02-08 09:59 - 2014-02-08 09:59 - 00001059 _____ () C:\Users\Public\Desktop\Service Center.lnk
2014-02-08 09:59 - 2014-02-08 09:59 - 00000000 __HDC () C:\ProgramData\{F2610326-6A40-4BBC-9FBC-7F05356A912A}
2014-02-08 09:45 - 2013-09-15 19:51 - 00000000 ____D () C:\Users\Chris\Documents\Native Instruments Traktor Scratch Pro 2.v2.6.3
2014-02-07 23:50 - 2014-02-07 23:50 - 00000000 ____D () C:\ProgramData\Package Cache
2014-02-07 23:50 - 2014-02-07 23:50 - 00000000 ____D () C:\Program Files\Serato
2014-02-07 23:29 - 2014-02-07 23:52 - 00000000 ____D () C:\Users\Chris\Desktop\Bild 2
2014-02-04 18:05 - 2014-02-04 18:05 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-02-03 18:55 - 2014-02-03 18:55 - 00001974 _____ () C:\Users\Chris\Desktop\SAM Broadcaster.lnk
2014-02-03 18:55 - 2014-02-03 18:55 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SAM Broadcaster
2014-02-03 18:20 - 2014-02-19 10:19 - 00000000 ____D () C:\ProgramData\firebird
2014-02-03 18:20 - 2014-02-03 18:59 - 00000000 ____D () C:\Users\Chris\AppData\Local\SpacialAudio
2014-02-03 18:18 - 2014-02-03 18:18 - 00004988 _____ () C:\ProgramData\qiwmnyln.lsb
2014-02-03 18:17 - 2013-03-19 11:02 - 00552960 _____ (Firebird Project) C:\Windows\system32\GDS32.DLL
2014-02-03 18:16 - 2014-02-03 18:16 - 00000000 ____D () C:\Program Files\SpacialAudio
2014-02-03 18:16 - 2014-02-03 18:16 - 00000000 ____D () C:\Program Files\Firebird
2014-02-03 17:18 - 2014-02-03 17:18 - 00000000 ____D () C:\Users\Chris\AppData\Local\IsolatedStorage
2014-02-03 17:18 - 2014-02-03 17:18 - 00000000 ____D () C:\Program Files\OpenPlsInWMP
2014-02-03 17:00 - 2014-02-03 17:11 - 00000000 ____D () C:\Program Files\SHOUTcast
2014-02-03 17:00 - 2014-02-03 17:00 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SHOUTcast DNAS
2014-02-02 13:03 - 2014-02-02 13:03 - 00001361 _____ () C:\Users\Chris\Desktop\ILS-SimV4.lnk
2014-02-02 00:20 - 2014-02-02 00:20 - 00000000 ____D () C:\Program Files\ILST-SIM
2014-02-02 00:10 - 2014-03-04 17:43 - 00000000 __SHD () C:\Users\Chris\wc
2014-02-02 00:09 - 2014-02-02 00:10 - 00000000 __SHD () C:\Users\Chris\AppData\Roaming\wyUpdate AU

==================== One Month Modified Files and Folders =======

2014-03-04 17:46 - 2014-03-04 17:45 - 00014270 _____ () C:\Users\Chris\Downloads\FRST.txt
2014-03-04 17:45 - 2014-03-04 17:45 - 01145344 _____ (Farbar) C:\Users\Chris\Downloads\FRST.exe
2014-03-04 17:45 - 2014-03-04 17:45 - 00000000 ____D () C:\FRST
2014-03-04 17:45 - 2013-11-14 21:28 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-04 17:44 - 2013-11-14 19:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-04 17:43 - 2014-02-02 00:10 - 00000000 __SHD () C:\Users\Chris\wc
2014-03-04 17:42 - 2013-11-14 18:07 - 01909309 _____ () C:\Windows\WindowsUpdate.log
2014-03-04 17:40 - 2013-12-13 07:24 - 00002080 _____ () C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job
2014-03-04 17:40 - 2013-12-13 07:24 - 00001316 _____ () C:\Windows\Tasks\Plus-HD-1.3-updater.job
2014-03-04 17:40 - 2013-12-13 07:24 - 00001218 _____ () C:\Windows\Tasks\Plus-HD-1.3-codedownloader.job
2014-03-04 17:40 - 2013-12-13 07:24 - 00001118 _____ () C:\Windows\Tasks\Plus-HD-1.3-enabler.job
2014-03-04 17:40 - 2013-12-13 07:23 - 00001952 _____ () C:\Windows\Tasks\Plus-HD-1.3-chromeinstaller.job
2014-03-04 17:40 - 2013-11-14 22:10 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-04 17:40 - 2013-11-14 21:28 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-04 17:39 - 2014-03-03 22:19 - 00000280 _____ () C:\Windows\setupact.log
2014-03-04 17:39 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-04 13:38 - 2013-11-16 18:58 - 00000000 ____D () C:\Users\Chris\Desktop\CS-Systems
2014-03-04 12:32 - 2009-07-14 05:34 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-04 12:32 - 2009-07-14 05:34 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-04 12:25 - 2014-03-04 12:24 - 00164224 _____ () C:\Windows\Minidump\030414-16281-01.dmp
2014-03-04 12:24 - 2014-03-04 12:24 - 436596576 _____ () C:\Windows\MEMORY.DMP
2014-03-04 12:24 - 2013-11-28 21:20 - 00000000 ____D () C:\Windows\Minidump
2014-03-04 12:19 - 2014-03-04 12:19 - 00060694 _____ () C:\Users\Chris\Downloads\Extras.Txt
2014-03-04 12:18 - 2014-03-04 12:18 - 00143044 _____ () C:\Users\Chris\Downloads\OTL.Txt
2014-03-04 11:48 - 2014-03-04 11:48 - 00602112 _____ (OldTimer Tools) C:\Users\Chris\Downloads\OTL.exe
2014-03-04 11:40 - 2013-11-14 21:21 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TS3Client
2014-03-04 11:31 - 2013-11-14 22:11 - 00001094 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-03-04 11:25 - 2014-03-04 11:20 - 257813336 _____ () C:\Users\Chris\Documents\kis14.0.0.4651de-de.exe
2014-03-04 09:53 - 2013-11-14 21:29 - 00002121 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-04 09:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-03-04 02:03 - 2013-11-15 03:02 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE
2014-03-03 22:19 - 2014-03-03 22:19 - 00000372 _____ () C:\Windows\PFRO.log
2014-03-03 22:19 - 2014-03-03 22:19 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-03 22:16 - 2014-03-03 22:16 - 00000000 ____D () C:\Windows\pss
2014-03-03 21:44 - 2013-11-14 19:33 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-03 21:44 - 2013-11-14 19:33 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-03-03 21:44 - 2013-11-14 19:32 - 00000000 ____D () C:\Users\Chris\AppData\Local\Adobe
2014-03-03 21:28 - 2013-11-16 18:59 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\FileZilla
2014-03-03 21:25 - 2014-02-19 00:07 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-03 21:25 - 2013-11-14 23:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-03 21:24 - 2014-03-03 21:24 - 04765152 _____ (Piriform Ltd) C:\Users\Chris\Downloads\ccsetup411.exe
2014-03-03 11:17 - 2014-02-20 20:51 - 00000000 ___RD () C:\Users\Chris\Dropbox
2014-03-03 11:17 - 2014-02-20 20:49 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Dropbox
2014-03-02 02:08 - 2014-03-02 02:08 - 00001630 _____ () C:\Users\Public\Desktop\Combat Arms EU.lnk
2014-03-02 02:05 - 2013-11-16 20:29 - 00000000 ____D () C:\Nexon
2014-03-01 19:47 - 2014-03-01 19:11 - 1967289647 _____ (Nexon) C:\Users\Chris\Documents\Combatarms_eu.exe
2014-03-01 19:06 - 2014-03-01 19:06 - 10028912 _____ (Akamai Technologies, Inc.) C:\Users\Chris\Downloads\NexonEU_Installer.exe
2014-03-01 16:19 - 2014-03-01 16:18 - 00000000 ____D () C:\Program Files\Virtual Audio Cable
2014-03-01 16:18 - 2014-03-01 16:18 - 00050728 _____ (Eugene V. Muzychenko) C:\Windows\system32\Drivers\vrtaucbl.sys
2014-03-01 16:13 - 2014-03-01 16:13 - 01323708 _____ () C:\Users\Chris\Documents\VIRTUAL_AUDIO_CABLE_4.10.RAR
2014-03-01 15:55 - 2013-12-08 11:47 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Systweak
2014-03-01 15:52 - 2014-03-01 15:52 - 00677608 _____ () C:\Users\Chris\Downloads\Virtual Audio Cable 4.12 by iwdownload.exe
2014-03-01 15:52 - 2014-03-01 15:52 - 00677608 _____ () C:\Users\Chris\Downloads\Virtual Audio Cable 4.12 by iwdownload(1).exe
2014-02-27 16:13 - 2014-02-27 16:13 - 00000000 ____D () C:\Users\Chris\Documents\ILS-SimV4
2014-02-26 14:45 - 2010-11-20 22:01 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-26 14:15 - 2014-02-26 14:15 - 00001109 _____ () C:\Users\Public\Desktop\CAE Report Generator.lnk
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\CAE_Report_Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Local\CAE_Report_Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\CAE Report Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\BandiMPEG1
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\AviSynth 2.5
2014-02-25 17:08 - 2014-02-24 22:46 - 01369088 _____ () C:\Users\Chris\Desktop\MVH Loader.exe
2014-02-25 16:29 - 2013-11-29 17:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\DVDVideoSoft
2014-02-25 16:29 - 2013-11-29 17:48 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-02-25 16:29 - 2013-11-29 17:48 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-02-24 22:55 - 2014-02-24 22:55 - 00000000 ____D () C:\ProgramData\MVH
2014-02-24 22:48 - 2014-02-24 22:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\MVH
2014-02-24 22:45 - 2014-02-24 22:45 - 01106766 _____ () C:\Users\Chris\Desktop\MVH Loader.zip
2014-02-24 07:09 - 2013-11-23 15:35 - 01343488 _____ () C:\Windows\system32\㩣灜潲牧浡慤慴歜獡数獲祫氠扡慜灶㐱〮〮摜瑡屡潭畤敬彳湩敶瑮牯⹹慤
2014-02-21 18:08 - 2014-02-21 18:08 - 00000000 ____D () C:\Users\Chris\Desktop\CB-Desings
2014-02-20 20:51 - 2014-02-20 20:51 - 00001039 _____ () C:\Users\Chris\Desktop\Dropbox.lnk
2014-02-20 20:51 - 2014-02-20 20:50 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\DropboxMaster
2014-02-20 20:51 - 2013-11-14 19:25 - 00000000 ____D () C:\Users\Chris
2014-02-20 20:50 - 2014-02-20 20:50 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-02-20 17:18 - 2014-01-26 12:10 - 00000000 ____D () C:\Users\Chris\AppData\Local\Paint.NET
2014-02-20 16:26 - 2013-11-24 14:30 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Solvusoft
2014-02-20 16:26 - 2013-11-24 14:30 - 00000000 ____D () C:\Program Files\WinThruster
2014-02-20 16:22 - 2014-02-20 16:19 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-02-20 16:21 - 2014-02-20 16:21 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TuneUp Software
2014-02-20 16:19 - 2014-02-20 16:19 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-02-20 16:16 - 2013-12-17 14:34 - 00000000 _____ () C:\END
2014-02-20 16:15 - 2014-02-20 16:15 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\OpenCandy
2014-02-19 17:33 - 2013-11-16 00:38 - 00000000 ____D () C:\Users\Chris\Desktop\Leitstellenspiel
2014-02-19 10:19 - 2014-02-03 18:20 - 00000000 ____D () C:\ProgramData\firebird
2014-02-19 00:09 - 2013-11-14 23:13 - 00000000 ____D () C:\Program Files\Steam
2014-02-18 18:58 - 2014-02-13 22:59 - 00000000 ____D () C:\Users\Chris\Desktop\Filme Dome
2014-02-18 17:28 - 2014-02-18 17:28 - 00000000 ____D () C:\Users\Chris\Desktop\Filme Download
2014-02-18 16:59 - 2013-12-08 11:49 - 00000000 ____D () C:\Program Files\JDownloader
2014-02-18 10:38 - 2013-10-17 15:47 - 00576096 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-02-18 10:38 - 2013-10-17 15:47 - 00025184 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys
2014-02-18 10:38 - 2013-06-08 20:18 - 00094304 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-02-17 14:25 - 2009-07-14 05:53 - 00032634 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-17 14:24 - 2013-11-14 19:31 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-15 07:47 - 2014-02-15 07:47 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-15 06:30 - 2014-02-15 06:30 - 00002917 _____ () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Scanner Recorder.lnk
2014-02-15 06:30 - 2014-02-15 06:30 - 00000000 ____D () C:\Program Files\Scanner Recorder
2014-02-15 06:30 - 2013-11-14 19:26 - 00000000 ____D () C:\Users\Chris\AppData\Local\VirtualStore
2014-02-14 13:42 - 2014-02-13 18:25 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-02-13 17:47 - 2014-02-13 17:32 - 00000231 _____ () C:\Users\Chris\Desktop\steam.txt
2014-02-12 22:22 - 2014-02-12 21:27 - 00000068 _____ () C:\Users\Chris\Desktop\pw filme.txt
2014-02-12 04:08 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-02-12 03:42 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-12 03:12 - 2013-11-14 20:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-12 03:06 - 2013-11-14 20:09 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-11 18:42 - 2014-02-11 17:14 - 00000000 ____D () C:\Users\Chris\Desktop\SD-Karte
2014-02-09 18:03 - 2014-02-09 17:58 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TeamViewer
2014-02-09 11:47 - 2009-07-14 05:33 - 03771384 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-08 13:33 - 2014-02-08 13:33 - 00000000 __RSH () C:\MSDOS.SYS
2014-02-08 13:33 - 2014-02-08 13:33 - 00000000 __RSH () C:\IO.SYS
2014-02-08 13:14 - 2013-11-14 21:00 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Spotify
2014-02-08 10:46 - 2013-11-14 21:01 - 00000000 ____D () C:\Users\Chris\AppData\Local\Spotify
2014-02-08 10:06 - 2014-02-08 10:06 - 00000000 __HDC () C:\ProgramData\{E54DB1D4-CC7D-414E-8BED-584C447836EA}
2014-02-08 10:06 - 2014-02-08 10:06 - 00000000 ____D () C:\Users\Chris\Documents\Native Instruments
2014-02-08 10:05 - 2014-02-08 10:05 - 00001002 _____ () C:\Users\Public\Desktop\Traktor 2.lnk
2014-02-08 10:01 - 2014-02-08 09:59 - 00000000 ____D () C:\ProgramData\Native Instruments
2014-02-08 10:01 - 2014-02-08 09:59 - 00000000 ____D () C:\Program Files\Native Instruments
2014-02-08 10:01 - 2014-02-08 09:59 - 00000000 ____D () C:\Program Files\Common Files\Native Instruments
2014-02-08 10:00 - 2014-02-08 10:00 - 00001094 _____ () C:\Users\Public\Desktop\Controller Editor.lnk
2014-02-08 10:00 - 2014-02-08 10:00 - 00000000 __HDC () C:\ProgramData\{9477ED15-E4A3-4984-9B76-31F573D8EAAF}
2014-02-08 09:59 - 2014-02-08 09:59 - 00001059 _____ () C:\Users\Public\Desktop\Service Center.lnk
2014-02-08 09:59 - 2014-02-08 09:59 - 00000000 __HDC () C:\ProgramData\{F2610326-6A40-4BBC-9FBC-7F05356A912A}
2014-02-07 23:57 - 2013-11-14 21:20 - 00102568 _____ () C:\Users\Chris\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-07 23:52 - 2014-02-07 23:29 - 00000000 ____D () C:\Users\Chris\Desktop\Bild 2
2014-02-07 23:50 - 2014-02-07 23:50 - 00000000 ____D () C:\ProgramData\Package Cache
2014-02-07 23:50 - 2014-02-07 23:50 - 00000000 ____D () C:\Program Files\Serato
2014-02-06 11:38 - 2014-02-12 03:12 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 11:20 - 2014-02-12 03:12 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 11:19 - 2014-02-12 03:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 11:01 - 2014-02-12 03:12 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 11:00 - 2014-02-12 03:12 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-12 03:12 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 10:52 - 2014-02-12 03:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 10:52 - 2014-02-12 03:12 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 10:49 - 2014-02-12 03:12 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 10:47 - 2014-02-12 03:12 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 10:47 - 2014-02-12 03:12 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 10:46 - 2014-02-12 03:12 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 10:34 - 2014-02-12 03:12 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 10:25 - 2014-02-12 03:12 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 10:25 - 2014-02-12 03:12 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 10:13 - 2014-02-12 03:12 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:09 - 2014-02-12 03:12 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:03 - 2014-02-12 03:12 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 09:41 - 2014-02-12 03:12 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 09:36 - 2014-02-12 03:12 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:34 - 2014-02-12 03:12 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-05 20:45 - 2013-11-20 22:41 - 00000600 _____ () C:\Users\Chris\AppData\Local\PUTTY.RND
2014-02-04 20:27 - 2013-11-16 18:09 - 00000000 ____D () C:\Users\Chris\Desktop\Funkspiel
2014-02-04 18:05 - 2014-02-04 18:05 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-02-04 18:04 - 2013-11-15 21:12 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-02-03 18:59 - 2014-02-03 18:20 - 00000000 ____D () C:\Users\Chris\AppData\Local\SpacialAudio
2014-02-03 18:55 - 2014-02-03 18:55 - 00001974 _____ () C:\Users\Chris\Desktop\SAM Broadcaster.lnk
2014-02-03 18:55 - 2014-02-03 18:55 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SAM Broadcaster
2014-02-03 18:18 - 2014-02-03 18:18 - 00004988 _____ () C:\ProgramData\qiwmnyln.lsb
2014-02-03 18:16 - 2014-02-03 18:16 - 00000000 ____D () C:\Program Files\SpacialAudio
2014-02-03 18:16 - 2014-02-03 18:16 - 00000000 ____D () C:\Program Files\Firebird
2014-02-03 17:18 - 2014-02-03 17:18 - 00000000 ____D () C:\Users\Chris\AppData\Local\IsolatedStorage
2014-02-03 17:18 - 2014-02-03 17:18 - 00000000 ____D () C:\Program Files\OpenPlsInWMP
2014-02-03 17:11 - 2014-02-03 17:00 - 00000000 ____D () C:\Program Files\SHOUTcast
2014-02-03 17:00 - 2014-02-03 17:00 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SHOUTcast DNAS
2014-02-02 15:48 - 2013-11-14 21:19 - 00001253 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-02-02 13:03 - 2014-02-02 13:03 - 00001361 _____ () C:\Users\Chris\Desktop\ILS-SimV4.lnk
2014-02-02 00:20 - 2014-02-02 00:20 - 00000000 ____D () C:\Program Files\ILST-SIM
2014-02-02 00:10 - 2014-02-02 00:09 - 00000000 __SHD () C:\Users\Chris\AppData\Roaming\wyUpdate AU

Some content of TEMP:
====================
C:\Users\Chris\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp1dalc9.dll
C:\Users\Chris\AppData\Local\Temp\RegSvr32User.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-28 00:48

==================== End Of Log ============================
         

--- --- ---


Addition:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 04-03-2014 01
Ran by Chris at 2014-03-04 17:47:13
Running from C:\Users\Chris\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.9.0.1380 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.9.0.1380 - Adobe Systems Incorporated) Hidden
Adobe Download Assistant (HKLM\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)
Adobe Download Assistant (Version: 1.2.6 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 12.5.100.30429 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.937.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{E43B4909-141E-DFF3-8C58-62B5E4D66BBA}) (Version: 8.0.877.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.0429.2313.39747 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.80430.0002 - Advanced Micro Devices, Inc.) Hidden
AMD VISION Engine Control Center (Version: 2013.0429.2313.39747 - Ihr Firmenname) Hidden
Apple Application Support (HKLM\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASIO4ALL (HKLM\...\ASIO4ALL) (Version: 2.11 Beta1 - Michael Tippach)
Audacity 2.0.5 (HKLM\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
AviSynth 2.5 (HKLM\...\AviSynth) (Version:  - )
Bandisoft MPEG-1 Decoder (HKLM\...\BandiMPEG1) (Version:  - )
Battlefield 3™ (HKLM\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM\...\Battlelog Web Plugins) (Version: 2.3.2 - EA Digital Illusions CE AB)
CAE Report Generator v1.1 (HKLM\...\{F7849D41-0A46-457D-827D-00FF47AF2D85}_is1) (Version:  - )
Catalyst Control Center - Branding (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
ccc-utility (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.11 - Piriform)
Combat Arms EU (HKLM\...\Combat Arms EU) (Version:  - )
ConvertHelper 2.2 (HKLM\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version:  - DownloadHelper)
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version:  - Valve)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Die Sims™ 3 (HKLM\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.63.5 - Electronic Arts)
Die Sims™ 3 Inselparadies (HKLM\...\{DB21639E-FE55-432C-BCA2-0C5249E3F79E}) (Version: 19.0.101 - Electronic Arts)
Die Sims™ 3 Jahreszeiten (HKLM\...\{3DE92282-CB49-434F-81BF-94E5B380E889}) (Version: 16.0.136 - Electronic Arts)
Die Sims™ 3 Late Night (HKLM\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.0.81 - Electronic Arts)
Die Sims™ 3 Lebensfreude (HKLM\...\{E6B88BD6-E4B2-4701-A648-B6DAC6E491CC}) (Version: 8.0.152 - Electronic Arts)
Die Sims™ 3 Reiseabenteuer (HKLM\...\{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}) (Version: 2.0.86 - Electronic Arts)
Die Sims™ 3 Showtime (HKLM\...\{3BBFD444-5FAB-49F6-98B1-A1954E831399}) (Version: 12.0.273 - Electronic Arts)
Die Sims™ 3 Traumkarrieren (HKLM\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.0.87 - Electronic Arts)
Die Sims™ 3 Wildes Studentenleben (HKLM\...\{F26DE8EF-F2CF-40DC-8CDA-CC0D82D11B36}) (Version: 18.0.126 - Electronic Arts)
Dropbox (HKCU\...\Dropbox) (Version: 2.6.7 - Dropbox, Inc.)
Emergency4 (HKLM\...\{9A4C534E-431F-4A17-97D4-D1682B19A054}) (Version: 1.03.001 - )
ESN Sonar (HKLM\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Euro Truck Simulator (HKLM\...\Steam App 232010) (Version:  - SCS Software)
Express Burn (HKLM\...\ExpressBurn) (Version: 4.69 - NCH Software)
Feuer- und Notfallsimulation Wegberg Version 6.0 (HKLM\...\{Wegberg-Modifikation-6-0}_is1) (Version: 6.0 - Marco H.)
FileZilla Client 3.7.3 (HKLM\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse)
Firebird 2.5.2.26540 (Win32) (HKLM\...\FBDBServer_2_5_is1) (Version: 2.5.2.26540 - Firebird Project)
FL Studio 11 (HKLM\...\FL Studio 11) (Version:  - Image-Line)
FlowStone FL 3.0 (HKLM\...\FlowStone) (Version:  - )
Free YouTube Download version 3.2.23.219 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.23.219 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.26.224 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.26.224 - DVDVideoSoft Ltd.)
Funkspiel-Forum (HKLM\...\{e3ca9788-c318-4024-98c3-68c04a735fbf}_is1) (Version:  - KY-Programming)
Google Chrome (HKLM\...\Google Chrome) (Version: 33.0.1750.146 - Google Inc.)
Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.22.5 - Google Inc.) Hidden
HydraVision (Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
ICQ 8.2 (build 6901) (HKCU\...\ICQ) (Version: 8.2.6901.0 - ICQ)
JDownloader 0.9 (HKLM\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
Kaspersky Internet Security (HKLM\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab)
Kaspersky Internet Security (Version: 14.0.0.4651 - Kaspersky Lab) Hidden
LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version:  - )
Left 4 Dead 2 (HKLM\...\Steam App 550) (Version:  - Valve)
LiveZilla (HKLM\...\LiveZilla) (Version: 5.1.1.0 - LiveZilla GmbH)
LiveZilla (Version: 5.1.1.0 - LiveZilla GmbH) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft_VC80_CRT_x86 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (Version: 1.00.0000 - Adobe) Hidden
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.2.173.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0 - Microsoft Corporation) Hidden
MixPad Audiodatei-Mixer (HKLM\...\MixPad) (Version: 3.37 - NCH Software)
Mixxx 1.11.0 (HKLM\...\Mixxx (1.11.0)) (Version: 1.11.0 - The Mixxx Development Team)
Mozilla Firefox 27.0.1 (x86 de) (HKLM\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
Mozilla Thunderbird 24.3.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.3.0 (x86 de)) (Version: 24.3.0 - Mozilla)
MSI to redistribute MS VS2005 CRT libraries (HKLM\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)
Native Instruments Controller Editor (HKLM\...\Native Instruments Controller Editor) (Version: 1.5.6.1344 - Native Instruments)
Native Instruments Controller Editor (Version: 1.5.6.1344 - Native Instruments) Hidden
Native Instruments Service Center (HKLM\...\Native Instruments Service Center) (Version: 2.4.3.1177 - Native Instruments)
Native Instruments Service Center (Version: 2.4.3.1177 - Native Instruments) Hidden
Native Instruments Traktor 2 (HKLM\...\Native Instruments Traktor 2) (Version: 2.6.3.144 - Native Instruments)
Native Instruments Traktor 2 (Version: 2.6.3.144 - Native Instruments) Hidden
NAVIGON Fresh 3.5.1 (HKLM\...\NAVIGON Fresh) (Version: 3.5.1 - NAVIGON)
Next Generation Visualisations (HKLM\...\{2E376AD9-5C49-4F7D-A0BA-6A44E8FA5A3B}) (Version: 1.0.0 -  Microsoft)
Notepad++ (HKLM\...\Notepad++) (Version: 6.5.1 - Notepad++ Team)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.62.40 - NVIDIA Corporation)
Open PLS in Windows Media Player 2.3.0 (HKLM\...\{F868C16D-75F8-4EE8-BCBF-422D0833415D}_is1) (Version: 2.3 - Jon Galloway)
OpenOffice 4.0.1 (HKLM\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
OpenVPN 2.3.2-I003  (HKLM\...\OpenVPN) (Version: 2.3.2-I003 - )
Origin (HKLM\...\Origin) (Version: 9.3.10.4710 - Electronic Arts, Inc.)
Overwolf (HKLM\...\{5D30F159-FFB9-458F-8A03-1747DDE499D8}) (Version: 0.45.266 - Overwolf)
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41417}) (Version: 3.61.0 - dotPDN LLC)
PDF Settings CS6 (Version: 11.0 - Adobe Systems Incorporated) Hidden
QuickTime (HKLM\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
RTS Wegberg Version 2.0 (HKLM\...\{RTS-Wegberg-2-0}_is1) (Version: 2.0 - Marco H.)
SAM Broadcaster v4 (HKLM\...\SAM3) (Version: v4 - Spacial Audio Solutions, LLC)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.27.0 - SAMSUNG Electronics Co., Ltd.)
Scanner Recorder (HKLM\...\{914928E5-4BA3-4809-9280-9C3DC20B993D}) (Version: 1.9 - Dave Jacobs)
Serato DJ 1.1 (HKLM\...\{1d86c014-f03a-43a1-be1b-3001da2b1aa6}) (Version: 1.1.1.11 - )
Serato DJ 1.1 (Version: 1.1.1.11 - Serato) Hidden
SHOUTcast DNAS (remove only) (HKLM\...\SCDNAS) (Version:  - )
Simulationsprogramm Integrierte Leitstelle V4 (HKLM\...\{4B60A7A4-49F6-4D2A-8AE7-BCBAFA6224CE}) (Version: 4.0.14 - BK Elektronik)
Spotify (HKCU\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
Steam (HKLM\...\Steam) (Version:  - Valve Corporation)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM\...\TeamViewer 9) (Version: 9.0.26297 - TeamViewer)
Train Simulator 2014 (HKLM\...\Steam App 24010) (Version:  - RailSimulator.com)
Virtual Audio Cable 4.10 (HKLM\...\Virtual Audio Cable 4.10) (Version:  - )
VirtualDJ PRO Full (HKLM\...\{23F20D12-1D01-4806-8AA8-AC79055109DE}) (Version: 7.4 - Atomix Productions)
WavePad Audio-Editor (HKLM\...\WavePad) (Version: 5.58 - NCH Software)
Werkfeuerwehr Simulator 2014 Version 1.2 (HKLM\...\{8694B919-8C39-41FB-875E-0FC8E3EE3216}_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
WhiteCap (HKLM\...\WhiteCap) (Version: 6.1 - SoundSpectrum)
WinRAR 5.00 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
WinSCP 5.1.7 (HKLM\...\winscp3_is1) (Version: 5.1.7 - Martin Prikryl)
XMedia Recode Version 3.1.7.6 (HKLM\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.7.6 - XMedia Recode)

==================== Restore Points  =========================

27-02-2014 23:00:02 Geplanter Prüfpunkt
01-03-2014 14:41:17 Gerätetreiber-Paketinstallation: EuMus Design Audio-, Video- und Gamecontroller
01-03-2014 15:04:51 Gerätetreiber-Paketinstallation: EuMus Design Audio-, Video- und Gamecontroller
01-03-2014 15:18:53 Gerätetreiber-Paketinstallation: EuMus Design Audio-, Video- und Gamecontroller
03-03-2014 10:15:07 Windows-Sicherung
04-03-2014 01:01:47 Windows Update
04-03-2014 08:45:50 Windows Update
04-03-2014 10:52:32 OTL Restore Point - 04.03.2014 11:52:29

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0D14904E-8171-47D8-9A76-87119AC28117} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {0D2C3FFF-13E5-4118-B617-573F75E6692E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-14] (Google Inc.)
Task: {1A8BED3E-F937-487C-9BC9-D53A573F4D4D} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {1CF50155-2BA2-412C-B686-A57FB2B24E99} - \Plus-HD-1.3-updater No Task File
Task: {2F97775C-4AC0-4DDC-AC49-A1AE72C070F3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-02-20] (Piriform Ltd)
Task: {356BB449-AAB1-475D-965D-02FAFE88EEBB} - \Plus-HD-1.3-codedownloader No Task File
Task: {3ADCC0B9-0E26-4962-B3D5-631736B3BBE5} - \Plus-HD-1.3-firefoxinstaller No Task File
Task: {4E35CDC2-7F8B-4C1A-B2D5-FEEF2A03CC42} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {68946D94-02DD-4D1B-8ADF-3B0FDCCA0F20} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-03] (Adobe Systems Incorporated)
Task: {8F0B2E84-39EA-4D24-AE8E-6C4330FD7066} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {94095ED4-3B6D-4547-BA9D-CE7D413B198D} - \Plus-HD-1.3-enabler No Task File
Task: {C2B820F8-D91A-42BC-AE2D-EA2873045A77} - \Plus-HD-1.3-chromeinstaller No Task File
Task: {DCA3F3D6-D85D-4046-82A0-9E4F7AA8BC1E} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {E01D8D4A-1E8D-49D4-8817-35915C44A887} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-14] (Google Inc.)
Task: {F38503F5-D027-49A1-90E2-3B1EBB138F52} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Plus-HD-1.3-chromeinstaller.job => C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-1.3-codedownloader.job => C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-1.3-enabler.job => C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job => C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-1.3-updater.job => C:\Program Files\Plus-HD-1.3\Plus-HD-1.3-updater.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll
2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll
2013-12-20 23:40 - 2013-12-20 23:45 - 00076888 _____ () C:\Windows\system32\PnkBstrA.exe
2013-10-16 18:01 - 2013-10-16 18:01 - 02601328 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll
2013-08-07 20:25 - 2013-08-07 20:25 - 00093696 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2014-02-15 07:47 - 2014-02-15 07:47 - 03578992 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^Users^Chris^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeBridge => 
MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: AMD AVT => Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files\AMD AVT\bin\kdbsync.exe" aml
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: icq => C:\Users\Chris\AppData\Roaming\ICQM\icq.exe -CU
MSCONFIG\startupreg: KPeerNexonEU => C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe
MSCONFIG\startupreg: LiveZilla => "C:\Program Files\LiveZilla\LiveZilla.exe" -minimize
MSCONFIG\startupreg: Overwolf => C:\Program Files\Overwolf\Overwolf.exe -silent
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
MSCONFIG\startupreg: Spotify => "C:\Users\Chris\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Chris\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: StartCCC => "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: SwitchBoard => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

==================== Faulty Device Manager Devices =============

Name: Coprozessor
Description: Coprozessor
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/04/2014 05:47:39 PM) (Source: WinSecurity.exe) (User: )
Description: Access violation at address 005D79C8 in module 'WinSecurity.exe'. Read of address 00000000

Error: (03/04/2014 05:47:37 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: WinSecurity.exe, Version: 1.0.0.70, Zeitstempel: 0x522949f5
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea91c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00046a62
ID des fehlerhaften Prozesses: 0x131c
Startzeit der fehlerhaften Anwendung: 0xWinSecurity.exe0
Pfad der fehlerhaften Anwendung: WinSecurity.exe1
Pfad des fehlerhaften Moduls: WinSecurity.exe2
Berichtskennung: WinSecurity.exe3

Error: (03/04/2014 05:47:37 PM) (Source: WinSecurity.exe) (User: )
Description: Stack overflow

Error: (03/04/2014 05:47:24 PM) (Source: WinSecurity.exe) (User: )
Description: Access violation at address 005D79C8 in module 'WinSecurity.exe'. Read of address 00000000

Error: (03/04/2014 05:47:22 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: WinSecurity.exe, Version: 1.0.0.70, Zeitstempel: 0x522949f5
Name des fehlerhaften Moduls: mswsock.dll, Version: 6.1.7601.18254, Zeitstempel: 0x522bdb3e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000016ce
ID des fehlerhaften Prozesses: 0xbec
Startzeit der fehlerhaften Anwendung: 0xWinSecurity.exe0
Pfad der fehlerhaften Anwendung: WinSecurity.exe1
Pfad des fehlerhaften Moduls: WinSecurity.exe2
Berichtskennung: WinSecurity.exe3

Error: (03/04/2014 05:47:22 PM) (Source: WinSecurity.exe) (User: )
Description: Stack overflow

Error: (03/04/2014 05:47:07 PM) (Source: WinSecurity.exe) (User: )
Description: Access violation at address 005D79C8 in module 'WinSecurity.exe'. Read of address 00000000

Error: (03/04/2014 05:47:06 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: WinSecurity.exe, Version: 1.0.0.70, Zeitstempel: 0x522949f5
Name des fehlerhaften Moduls: mswsock.dll, Version: 6.1.7601.18254, Zeitstempel: 0x522bdb3e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000016ce
ID des fehlerhaften Prozesses: 0xa40
Startzeit der fehlerhaften Anwendung: 0xWinSecurity.exe0
Pfad der fehlerhaften Anwendung: WinSecurity.exe1
Pfad des fehlerhaften Moduls: WinSecurity.exe2
Berichtskennung: WinSecurity.exe3

Error: (03/04/2014 05:47:05 PM) (Source: WinSecurity.exe) (User: )
Description: Stack overflow

Error: (03/04/2014 05:46:43 PM) (Source: WinSecurity.exe) (User: )
Description: Access violation at address 005D79C8 in module 'WinSecurity.exe'. Read of address 00000000


System errors:
=============
Error: (03/04/2014 05:47:38 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/04/2014 05:47:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/04/2014 05:47:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/04/2014 05:46:42 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/04/2014 05:46:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/04/2014 05:46:09 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/04/2014 05:45:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/04/2014 05:45:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/04/2014 05:45:17 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/04/2014 05:44:54 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WINDOWS SECURITY COMPONEMENT" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.


Microsoft Office Sessions:
=========================
Error: (03/04/2014 05:47:39 PM) (Source: WinSecurity.exe)(User: )
Description: Access violation at address 005D79C8 in module 'WinSecurity.exe'. Read of address 00000000

Error: (03/04/2014 05:47:37 PM) (Source: Application Error)(User: )
Description: WinSecurity.exe1.0.0.70522949f5ntdll.dll6.1.7601.18247521ea91cc000000500046a62131c01cf37c96a6650adC:\Windows\System32\WinSecurity.exeC:\Windows\SYSTEM32\ntdll.dllb09e33f0-a3bc-11e3-a404-002185194ef1

Error: (03/04/2014 05:47:37 PM) (Source: WinSecurity.exe)(User: )
Description: Stack overflow

Error: (03/04/2014 05:47:24 PM) (Source: WinSecurity.exe)(User: )
Description: Access violation at address 005D79C8 in module 'WinSecurity.exe'. Read of address 00000000

Error: (03/04/2014 05:47:22 PM) (Source: Application Error)(User: )
Description: WinSecurity.exe1.0.0.70522949f5mswsock.dll6.1.7601.18254522bdb3ec0000005000016cebec01cf37c9607d182cC:\Windows\System32\WinSecurity.exeC:\Windows\system32\mswsock.dlla7f49cb1-a3bc-11e3-a404-002185194ef1

Error: (03/04/2014 05:47:22 PM) (Source: WinSecurity.exe)(User: )
Description: Stack overflow

Error: (03/04/2014 05:47:07 PM) (Source: WinSecurity.exe)(User: )
Description: Access violation at address 005D79C8 in module 'WinSecurity.exe'. Read of address 00000000

Error: (03/04/2014 05:47:06 PM) (Source: Application Error)(User: )
Description: WinSecurity.exe1.0.0.70522949f5mswsock.dll6.1.7601.18254522bdb3ec0000005000016cea4001cf37c9526cd32aC:\Windows\System32\WinSecurity.exeC:\Windows\system32\mswsock.dll9e0927fb-a3bc-11e3-a404-002185194ef1

Error: (03/04/2014 05:47:05 PM) (Source: WinSecurity.exe)(User: )
Description: Stack overflow

Error: (03/04/2014 05:46:43 PM) (Source: WinSecurity.exe)(User: )
Description: Access violation at address 005D79C8 in module 'WinSecurity.exe'. Read of address 00000000


CodeIntegrity Errors:
===================================
  Date: 2014-03-04 11:31:06.841
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-04 11:31:06.826
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-04 11:31:06.669
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-04 11:31:06.544
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-04 11:30:14.060
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-04 11:30:14.060
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-04 11:30:14.044
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-04 11:30:14.044
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-04 11:30:10.013
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-04 11:30:10.013
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 36%
Total physical RAM: 3071.37 MB
Available physical RAM: 1963.39 MB
Total Pagefile: 6141.02 MB
Available Pagefile: 4788.36 MB
Total Virtual: 2047.88 MB
Available Virtual: 1909.53 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.51 GB) (Free:349.44 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: AEE74E52)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

sop gemacht und em ich mache das doch die ganze zeit ode oder nicht?

--> zur info es karm keine fehlermeldung

Combofix Logfile:

	
	
ComboFix 14-03-04.03 - Chris 05.03.2014  17:23:32.1.2 - x86
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.3071.1953 [GMT 1:00]
ausgeführt von:: c:\users\Chris\Desktop\ComboFix.exe
AV: Kaspersky Internet Security *Disabled/Updated* {179979E8-273D-D14E-0543-2861940E4886}
FW: Kaspersky Internet Security *Disabled* {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}
SP: Kaspersky Internet Security *Disabled/Updated* {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\DealPly
c:\program files\DealPly\uninst.exe
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_hhlmghjmomaoodfgjeikphfdljhpcpkl_0
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_hhlmghjmomaoodfgjeikphfdljhpcpkl_0\1
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\background.html
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\crossriderManifest.json
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\manifest.xml
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins.json
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\1_base.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\102_dealply_m.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\103_intext_5_m.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\104_jollywallet_m.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\105_corticas_m.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\119_similar_web_m.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\120_luck_m.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\123_intext_adv_m.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\13_CrossriderAppUtils.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\14_CrossriderUtils.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\155_ibario_pops_m.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\17_jQuery.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\177_crossriderDashboard.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\178_revizer_ws_dynamic_m.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\179_revizer_p_dynamic_m.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\180_bpo_serp_m.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\182_openUrl.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\183_tabsWrapper.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\184_noproblemppc_m.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\19_CHAppAPIWrapper.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\194_retargeting_bi_m.js.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\195_icm_convertmedia_m.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\21_debug.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\22_resources.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\28_initializer.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\4_jquery_1_7_1.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\47_resources_background.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\64_appApiMessage.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\7_hooks.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\72_appApiValidation.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\78_CrossriderInfo.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\80_CHPopupAppAPI.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\9_search_engine_hook.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\91_monetizationLoader.js.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\93_superfish_no_coupons_m.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\plugins\97_resourceApiWrapper.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\userCode\background.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\extensionData\userCode\extension.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\icons\actions\1.png
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\icons\icon128.png
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\icons\icon16.png
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\icons\icon48.png
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\api\chrome.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\api\cookie.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\api\message.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\api\pageAction.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\api\pageActionBG.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\background.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\app_api.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\bg_app_api.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\consts.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\cookie_store.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\crossriderAPI.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\delegate.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\events.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\extensionDataStore.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\installer.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\logFile.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\logging.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\onBGDocumentLoad.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\popupResource\newPopup.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\popupResource\popup.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\reports.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\storageWrapper.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\updateManager.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\util.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\lib\xhr.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\js\main.js
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\manifest.json
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\popup.html
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.26.131_0\version.json
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hhlmghjmomaoodfgjeikphfdljhpcpkl
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hhlmghjmomaoodfgjeikphfdljhpcpkl\000039.ldb
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hhlmghjmomaoodfgjeikphfdljhpcpkl\000044.ldb
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hhlmghjmomaoodfgjeikphfdljhpcpkl\000047.ldb
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hhlmghjmomaoodfgjeikphfdljhpcpkl\000056.ldb
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hhlmghjmomaoodfgjeikphfdljhpcpkl\000072.log
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hhlmghjmomaoodfgjeikphfdljhpcpkl\CURRENT
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hhlmghjmomaoodfgjeikphfdljhpcpkl\LOCK
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hhlmghjmomaoodfgjeikphfdljhpcpkl\LOG
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hhlmghjmomaoodfgjeikphfdljhpcpkl\LOG.old
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hhlmghjmomaoodfgjeikphfdljhpcpkl\MANIFEST-000070
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hhlmghjmomaoodfgjeikphfdljhpcpkl_0.localstorage
c:\users\Chris\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Chris\AppData\Roaming\Chrislog.dat
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome.manifest
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api\asyncDB.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api\background.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api\browserAction.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api\contextMenu.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api\dbManager.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api\dom_bg.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api\fileManager.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api\firefox.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api\firefoxNotifications.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api\firefoxOmnibox.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api\message.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api\pageAction.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api\request.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api\tabs.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api\webRequest.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\api\windowsMessagingHandler.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\background.html
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\baseObject.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\browser.xul
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\addressBarChangeObserver.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\console.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\consts.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\delegate.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\extensionDataStore.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\folderIOWrapper.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\httpObserver.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\IDBWrapper.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\installer.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\logFile.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\prefs.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\progressListenerObserver.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\registry.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\reloadObserver.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\reports.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\requestObject.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\searchSettings.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\uninstallObserver.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\updateManager.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\utils.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\core\xhr.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\dialog.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\ffCoreFilesIndex.txt
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\main.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\options.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\options.xul
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\platformVersion.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\chrome\content\search_dialog.xul
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\defaults\preferences\prefs.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\manifest.xml
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins.json
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\1_base.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\102_dealply_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\103_intext_5_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\104_jollywallet_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\105_corticas_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\108_icm_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\119_similar_web_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\123_intext_adv_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\13_CrossriderAppUtils.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\14_CrossriderUtils.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\155_ibario_pops_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\16_FFAppAPIWrapper.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\17_jQuery.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\177_crossriderDashboard.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\178_revizer_ws_dynamic_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\179_revizer_p_dynamic_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\180_bpo_serp_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\182_openUrl.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\183_tabsWrapper.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\184_noproblemppc_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\191_ciuvo_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\194_retargeting_bi_m.js.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\195_icm_convertmedia_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\206_inter_yield_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\207_dbWrapper.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\208_gam_manager.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\21_debug.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\215_quicklizard_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\218_buy4less_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\22_resources.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\28_initializer.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\4_jquery_1_7_1.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\47_resources_background.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\64_appApiMessage.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\7_hooks.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\72_appApiValidation.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\78_CrossriderInfo.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\87_ginyas_wrapper.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\9_search_engine_hook.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\91_monetizationLoader.js.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\93_superfish_no_coupons_m.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\plugins\98_omniCommands.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\userCode\background.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\extensionData\userCode\extension.js
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\install.rdf
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\locale\en-US\translations.dtd
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\skin\button1.png
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\skin\button2.png
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\skin\button3.png
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\skin\button4.png
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\skin\button5.png
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\skin\crossrider_statusbar.png
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\skin\icon128.png
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\skin\icon16.png
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\skin\icon24.png
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\skin\icon48.png
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\skin\panelarrow-up.png
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\skin\popup.html
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\skin\skin.css
c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com\skin\update.css
c:\users\Chris\AppData\Roaming\svchost.exe
c:\windows\security\Database\tmp.edb
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-02-05 bis 2014-03-05  ))))))))))))))))))))))))))))))
.
.
2014-03-05 16:33 . 2014-03-05 16:33	--------	d-----w-	c:\users\Chris\AppData\Local\temp
2014-03-05 16:33 . 2014-03-05 16:33	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-03-05 16:12 . 2014-03-05 16:12	62576	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{4D3DF765-F8DE-4BDA-8B13-E54A5D12524A}\offreg.dll
2014-03-04 16:45 . 2014-03-04 16:47	--------	d-----w-	C:\FRST
2014-03-04 08:43 . 2014-01-09 02:22	5694464	----a-w-	c:\windows\system32\mstscax.dll
2014-03-04 08:42 . 2014-02-06 07:08	7947048	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{4D3DF765-F8DE-4BDA-8B13-E54A5D12524A}\mpengine.dll
2014-03-04 01:02 . 2013-10-01 23:45	32256	----a-w-	c:\windows\system32\TsUsbGDCoInstaller.dll
2014-03-04 01:02 . 2013-10-02 00:32	12800	----a-w-	c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-04 01:02 . 2013-10-02 00:42	49152	----a-w-	c:\windows\system32\drivers\TsUsbFlt.sys
2014-03-04 01:02 . 2013-10-02 00:30	14336	----a-w-	c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-04 01:02 . 2013-10-02 00:14	50176	----a-w-	c:\windows\system32\MsRdpWebAccess.dll
2014-03-04 01:02 . 2013-10-02 00:14	17920	----a-w-	c:\windows\system32\wksprtPS.dll
2014-03-04 01:02 . 2013-10-01 23:58	53248	----a-w-	c:\windows\system32\tsgqec.dll
2014-03-04 01:02 . 2013-10-01 23:08	855552	----a-w-	c:\windows\system32\rdvidcrl.dll
2014-03-04 01:02 . 2013-10-01 23:00	76288	----a-w-	c:\windows\system32\TSWbPrxy.exe
2014-03-04 01:02 . 2013-10-01 22:53	350208	----a-w-	c:\windows\system32\wksprt.exe
2014-03-04 01:02 . 2013-10-01 22:34	1068544	----a-w-	c:\windows\system32\mstsc.exe
2014-03-04 01:01 . 2013-09-25 01:57	792576	----a-w-	c:\windows\system32\TSWorkspace.dll
2014-03-01 17:31 . 2014-03-01 17:31	--------	d-----w-	c:\users\Chris\AppData\Local\Diagnostics
2014-03-01 15:18 . 2014-03-01 15:18	50728	----a-w-	c:\windows\system32\drivers\vrtaucbl.sys
2014-03-01 15:18 . 2014-03-01 15:19	--------	d-----w-	c:\program files\Virtual Audio Cable
2014-02-26 13:15 . 2014-02-26 13:15	--------	d-----w-	c:\users\Chris\AppData\Roaming\CAE_Report_Generator
2014-02-26 13:15 . 2014-02-26 13:15	--------	d-----w-	c:\users\Chris\AppData\Local\CAE_Report_Generator
2014-02-26 13:15 . 2014-02-26 13:15	--------	d-----w-	c:\program files\BandiMPEG1
2014-02-26 13:15 . 2014-02-26 13:15	--------	d-----w-	c:\program files\AviSynth 2.5
2014-02-26 13:15 . 2014-02-26 13:15	--------	d-----w-	c:\program files\CAE Report Generator
2014-02-24 21:55 . 2014-02-24 21:55	--------	d-----w-	c:\programdata\MVH
2014-02-24 21:48 . 2014-02-24 21:48	--------	d-----w-	c:\users\Chris\AppData\Roaming\MVH
2014-02-20 19:51 . 2014-03-03 10:17	--------	d-----r-	c:\users\Chris\Dropbox
2014-02-20 19:49 . 2014-03-03 10:17	--------	d-----w-	c:\users\Chris\AppData\Roaming\Dropbox
2014-02-20 15:21 . 2014-02-20 15:21	--------	d-----w-	c:\users\Chris\AppData\Roaming\TuneUp Software
2014-02-20 15:19 . 2014-02-20 15:22	--------	d-----w-	c:\programdata\TuneUp Software
2014-02-20 15:19 . 2014-02-20 15:19	--------	d-sh--w-	c:\programdata\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-02-20 15:19 . 2014-02-20 15:19	--------	d--h--w-	c:\programdata\Common Files
2014-02-20 15:15 . 2014-02-20 15:15	--------	d-----w-	c:\users\Chris\AppData\Roaming\OpenCandy
2014-02-15 05:30 . 2014-02-15 05:30	--------	d-----w-	c:\program files\Scanner Recorder
2014-02-13 17:25 . 2014-02-14 12:42	--------	d-----w-	c:\program files\Mozilla Thunderbird
2014-02-12 02:03 . 2013-12-21 08:56	454656	----a-w-	c:\windows\system32\vbscript.dll
2014-02-09 16:58 . 2014-02-09 17:03	--------	d-----w-	c:\users\Chris\AppData\Roaming\TeamViewer
2014-02-08 09:06 . 2014-02-08 09:06	--------	dc-h--w-	c:\programdata\{E54DB1D4-CC7D-414E-8BED-584C447836EA}
2014-02-08 09:00 . 2014-02-08 09:00	--------	dc-h--w-	c:\programdata\{9477ED15-E4A3-4984-9B76-31F573D8EAAF}
2014-02-08 08:59 . 2014-02-08 08:59	--------	dc-h--w-	c:\programdata\{F2610326-6A40-4BBC-9FBC-7F05356A912A}
2014-02-08 08:59 . 2014-02-08 09:01	--------	d-----w-	c:\program files\Common Files\Native Instruments
2014-02-08 08:59 . 2014-02-08 09:01	--------	d-----w-	c:\programdata\Native Instruments
2014-02-08 08:59 . 2014-02-08 09:01	--------	d-----w-	c:\program files\Native Instruments
2014-02-07 22:50 . 2014-02-07 22:50	--------	d-----w-	c:\program files\Serato
2014-02-07 22:50 . 2014-02-07 22:50	--------	d-----w-	c:\programdata\Package Cache
2014-02-04 17:03 . 2014-02-04 17:42	--------	d--h--w-	c:\program files\Temp
2014-02-04 17:03 . 2006-02-07 14:40	204800	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll
2014-02-04 17:03 . 2006-02-07 14:40	274432	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll
2014-02-04 17:03 . 2006-02-07 14:45	757760	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll
2014-02-04 17:03 . 2006-02-07 14:40	69715	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
2014-02-04 17:03 . 2005-11-13 22:19	5632	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\DotNetInstaller.exe
2014-02-04 17:03 . 2014-02-04 17:03	200836	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iGdi.dll
2014-02-04 17:03 . 2014-02-04 17:03	331908	----a-w-	c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\setup.dll
2014-02-03 17:20 . 2014-02-19 09:19	--------	d-----w-	c:\programdata\firebird
2014-02-03 17:20 . 2014-02-03 17:59	--------	d-----w-	c:\users\Chris\AppData\Local\SpacialAudio
2014-02-03 17:17 . 2013-03-19 10:02	552960	----a-w-	c:\windows\system32\GDS32.DLL
2014-02-03 17:16 . 2014-02-03 17:16	--------	d-----w-	c:\program files\Firebird
2014-02-03 17:16 . 2014-02-03 17:16	--------	d-----w-	c:\program files\SpacialAudio
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-03 20:44 . 2013-11-14 18:33	71048	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-03 20:44 . 2013-11-14 18:33	692616	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2014-02-18 09:38 . 2013-10-17 14:47	25184	----a-w-	c:\windows\system32\drivers\klkbdflt.sys
2014-02-18 09:38 . 2013-06-08 19:18	94304	----a-w-	c:\windows\system32\drivers\klflt.sys
2014-01-21 16:28 . 2013-11-24 13:30	18776	----a-w-	c:\windows\system32\roboot.exe
2014-01-07 16:01 . 2014-01-07 16:01	893552	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2014-01-07 16:01 . 2014-01-07 16:01	42168	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2014-01-04 10:55 . 2014-01-04 10:55	243128	----a-w-	c:\windows\system32\drivers\dtsoftbus01.sys
2014-01-03 18:03 . 2013-12-20 22:40	139032	----a-w-	c:\windows\system32\drivers\PnkBstrK.sys
2014-01-03 18:03 . 2013-12-20 22:40	290184	----a-w-	c:\windows\system32\PnkBstrB.exe
2014-01-03 18:03 . 2013-12-20 22:40	290184	----a-w-	c:\windows\system32\PnkBstrB.xtr
2014-01-03 18:03 . 2013-12-20 22:40	280904	----a-w-	c:\windows\system32\PnkBstrB.ex0
2013-12-23 21:15 . 2013-12-23 21:15	893552	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2013-12-23 21:14 . 2013-12-23 21:14	42168	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2013-12-23 21:14 . 2013-12-23 21:14	1236816	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2013-12-20 22:45 . 2013-12-20 22:40	76888	----a-w-	c:\windows\system32\PnkBstrA.exe
2013-12-20 19:04 . 2013-12-20 19:04	1496576	----a-w-	c:\windows\system32\WinSecurity.exe
2013-12-19 11:47 . 2013-06-06 16:38	144992	----a-w-	c:\windows\system32\drivers\kneps.sys
2013-12-18 05:13 . 2013-11-15 13:43	231584	------w-	c:\windows\system32\MpSigStub.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco1]
@="{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}"
[HKEY_CLASSES_ROOT\CLSID\{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}]
2013-10-16 17:01	2601328	----a-w-	c:\program files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco2]
@="{853B7E05-C47D-4985-909A-D0DC5C6D7303}"
[HKEY_CLASSES_ROOT\CLSID\{853B7E05-C47D-4985-909A-D0DC5C6D7303}]
2013-10-16 17:01	2601328	----a-w-	c:\program files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco3]
@="{42D38F2E-98E9-4382-B546-E24E4D6D04BB}"
[HKEY_CLASSES_ROOT\CLSID\{42D38F2E-98E9-4382-B546-E24E4D6D04BB}]
2013-10-16 17:01	2601328	----a-w-	c:\program files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	131248	----a-w-	c:\users\Chris\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	131248	----a-w-	c:\users\Chris\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	131248	----a-w-	c:\users\Chris\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	131248	----a-w-	c:\users\Chris\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKLM\~\startupfolder\C:^Users^Chris^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
path=c:\users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
backup=c:\windows\pss\Dropbox.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AMD AVT]
start AMD Accelerated Video Transcoding device initialization [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2013-11-21 16:57	959904	----a-w-	c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
2013-09-25 02:45	472984	------w-	c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager]
2012-03-09 15:26	1073312	----a-w-	c:\program files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2013-04-21 20:43	59720	----a-w-	c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2013-10-28 08:29	3675352	----a-w-	c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\icq]
2014-01-14 15:15	33664344	----a-w-	c:\users\Chris\AppData\Roaming\ICQM\icq.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KPeerNexonEU]
2013-11-16 19:29	438272	----a-w-	c:\nexon\NEXON_EU_Downloader\nxEULauncher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LiveZilla]
2013-11-21 08:39	8930344	----a-w-	c:\program files\LiveZilla\LiveZilla.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Overwolf]
2013-10-23 10:53	35256	----a-w-	c:\program files\Overwolf\Overwolf.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2013-05-01 02:59	421888	----a-w-	c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
2010-11-20 21:29	1174016	----a-w-	c:\program files\Windows Sidebar\sidebar.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify]
2014-02-07 22:42	5951488	----a-w-	c:\users\Chris\AppData\Roaming\Spotify\spotify.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]
2014-02-07 22:42	1168896	----a-w-	c:\users\Chris\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2013-04-29 23:18	642304	----a-w-	c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
2010-02-19 12:37	517096	----a-w-	c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2013-10-28 87064]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-02-06 108032]
R3 OverwolfUpdaterService;Overwolf Updater Service;c:\program files\Overwolf\OverwolfUpdater.exe [2013-10-23 18360]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2013-10-28 182680]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [2010-11-20 77184]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [2012-08-23 24064]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 27136]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [2010-11-20 112640]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R4 klflt;klflt;c:\windows\system32\DRIVERS\klflt.sys [2014-02-18 94304]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2014-01-04 243128]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2013-10-17 25696]
S1 klpd;klpd;c:\windows\system32\DRIVERS\klpd.sys [2013-04-12 14432]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys [2013-05-14 45024]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys [2013-12-19 144992]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2013-04-30 217088]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-04-29 291840]
S2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files\Firebird\Firebird_2_5\bin\fbguard.exe [2013-03-19 98304]
S2 iprip;RIP-Überwachung;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [2013-07-11 4927280]
S2 TeamViewer9;TeamViewer 9;c:\program files\TeamViewer\Version9\TeamViewer_Service.exe [2014-02-17 4915040]
S2 WindowsSecurity;WINDOWS SECURITY COMPONEMENT;c:\windows\System32\WinSecurity.exe [2013-12-20 1496576]
S3 amdiox86;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox86.sys [2010-02-18 37944]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2012-05-14 86656]
S3 EuMusDesignVirtualAudioCableWdm;Virtual Audio Cable (WDM);c:\windows\system32\DRIVERS\vrtaucbl.sys [2014-03-01 50728]
S3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files\Firebird\Firebird_2_5\bin\fbserver.exe [2013-03-19 3784704]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys [2014-02-18 25184]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2013-10-17 25696]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
ipripsvc	REG_MULTI_SZ   	iprip
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-03-04 08:45	1150280	----a-w-	c:\program files\Google\Chrome\Application\33.0.1750.146\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-03-05 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-14 20:44]
.
2014-03-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-11-14 20:28]
.
2014-03-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-11-14 20:28]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.dell.com
uInternet Settings,ProxyOverride = <local>
IE: Zu Anti-Banner hinzufügen - c:\program files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ie_banner_deny.htm
TCP: DhcpNameServer = 192.168.2.1 192.168.2.1
FF - ProfilePath - c:\users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3312807&CUI=UN93255172636127723&UM=1&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Conduit Search
FF - prefs.js: browser.startup.homepage - hxxps://www.google.de/
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3312807&SearchSource=2&CUI=UN93255172636127723&UM=1&q=
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
AddRemove-01_Simmental - c:\program files\SAMSUNG\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\SAMSUNG\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\SAMSUNG\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\SAMSUNG\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-07_Schorl - c:\program files\SAMSUNG\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-09_Hsp - c:\program files\SAMSUNG\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\SAMSUNG\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\SAMSUNG\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\SAMSUNG\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-24_flashusbdriver - c:\program files\SAMSUNG\USB Drivers\24_flashusbdriver\Uninstall.exe
AddRemove-25_escape - c:\program files\SAMSUNG\USB Drivers\25_escape\Uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-03-05  17:35:13
ComboFix-quarantined-files.txt  2014-03-05 16:35
.
Vor Suchlauf: 14 Verzeichnis(se), 374.712.041.472 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 374.644.174.848 Bytes frei
.
- - End Of File - - 5654CC60F00D0E636ED3505AB81EA256
         
 
--- --- ---
A36C5E4F47E84449FF07ED3517B43A31
         

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Malwarebytes:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.03.06.06

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16518
Chris :: CHRIS-PC [Administrator]

06.03.2014 16:13:01
MBAM-log-2014-03-06 (20-31-37).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 228319
Laufzeit: 20 Minute(n), 40 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 17
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt.
HKCR\CrossriderApp0031257.BHO (PUP.Optional.CrossRider.A) -> Keine Aktion durchgeführt.
HKCR\CrossriderApp0031257.BHO.1 (PUP.Optional.CrossRider.A) -> Keine Aktion durchgeführt.
HKCR\CrossriderApp0031257.Sandbox (PUP.Optional.CrossRider.A) -> Keine Aktion durchgeführt.
HKCR\CrossriderApp0031257.Sandbox.1 (PUP.Optional.CrossRider.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCU\Software\1ClickDownload (PUP.Optional.1ClickDownload.A) -> Keine Aktion durchgeführt.
HKCU\Software\Iminent (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt.
HKCU\Software\AppDataLow\Software\Plus-HD-1.3 (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
HKCU\Software\Conduit\FF (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
HKCU\Software\InstallCore\1I1T1Q1S (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt.
HKCU\Software\InstalledBrowserExtensions\Plus HD (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Plus-HD-1.3 (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 3
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0X2O1C0R2R1R -> Keine Aktion durchgeführt.
HKCU\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Daten: 263944004287652151704679070371751218929 -> Keine Aktion durchgeführt.
HKLM\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Daten: 263944004287652151704679070371751218929 -> Keine Aktion durchgeführt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 15
C:\ProgramData\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\ProgramData\DealPlyLive\Update (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\ProgramData\DealPlyLive\Update\Log (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\Dealply (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\Dealply\UpdateProc (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files\DealPlyLive\CrashReports (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\OpenCandy\0849B9AACC124CF0A21344CFDABD00C2 (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\OpenCandy\65946E2AE7D64B33A00B7A02216A920D (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Local\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Local\DealPlyLive\CrashReports (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files\Plus-HD-1.3 (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\newnext.me (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\newnext.me\cache (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt.

Infizierte Dateien: 14
C:\Users\Chris\AppData\Roaming\OpenCandy\0849B9AACC124CF0A21344CFDABD00C2\SSStub_SearchProtect_p1v0.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\Downloads\Virtual Audio Cable 4.12 by iwdownload(1).exe (PUP.Optional.Freemium.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\Downloads\Virtual Audio Cable 4.12 by iwdownload.exe (PUP.Optional.Freemium.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\roboot.exe (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\ProgramData\DealPlyLive\Update\Log\DealPlyLive.log (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\Dealply\UpdateProc\config.dat (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\OpenCandy\65946E2AE7D64B33A00B7A02216A920D\Trial-14.0.1000.89_de-DE_1004732_DE-1.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Program Files\Plus-HD-1.3\31257.crx (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files\Plus-HD-1.3\31257.xpi (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files\Plus-HD-1.3\background.html (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files\Plus-HD-1.3\Installer.log (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files\Plus-HD-1.3\Plus-HD-1.3.ico (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\newnext.me\nengine.cookie (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\newnext.me\cache\spark.bin (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt.

(Ende)
         

adwcleaner:

# AdwCleaner v3.020 - Bericht erstellt am 06/03/2014 um 20:39:58
# Aktualisiert 27/02/2014 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (32 bits)
# Benutzername : Chris - CHRIS-PC
# Gestartet von : C:\Users\Chris\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\apn
Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\ProgramData\NCH Software
Ordner Gelöscht : C:\Program Files\Mobogenie
Ordner Gelöscht : C:\Program Files\NCH Software
Ordner Gelöscht : C:\Users\Chris\AppData\Local\cool_mirage
Ordner Gelöscht : C:\Users\Chris\AppData\Local\genienext
Ordner Gelöscht : C:\Users\Chris\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\Chris\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Chris\AppData\Roaming\iSafe
Ordner Gelöscht : C:\Users\Chris\AppData\Roaming\NCH Software
Ordner Gelöscht : C:\Users\Chris\AppData\Roaming\Solvusoft
Ordner Gelöscht : C:\Users\Chris\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movie2KDownloader.com
Ordner Gelöscht : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\CT3312807
Ordner Gelöscht : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\Extensions\{21bd831c-5f59-432d-9c58-c3162b161816}
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\searchplugins\ask-search.xml
Datei Gelöscht : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\searchplugins\Conduit.xml
Datei Gelöscht : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\searchplugins\conduit-search.xml
Datei Gelöscht : C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
Datei Gelöscht : C:\Windows\System32\Tasks\NCH Software

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355125557}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366126657}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344124457}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions
Schlüssel Gelöscht : HKCU\Software\NCH Software
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\NCH Software
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75FF6D97AF9FC004A9521D4B83FA6321
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB13D869D7D092348847B7481BB59E27
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7

***** [ Browser ] *****

-\\ Internet Explorer v0.0.0.0


-\\ Mozilla Firefox v27.0.1 (de)

[ Datei : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\prefs.js ]

Zeile gelöscht : user_pref("CT3312807.FF19Solved", "true");
Zeile gelöscht : user_pref("CT3312807.UserID", "UN93255172636127723");
Zeile gelöscht : user_pref("CT3312807.browser.search.defaultthis.engineName", "true");
Zeile gelöscht : user_pref("CT3312807.fullUserID", "UN93255172636127723.IN.20131217143501");
Zeile gelöscht : user_pref("CT3312807.installDate", "17/12/2013 14:35:03");
Zeile gelöscht : user_pref("CT3312807.installSessionId", "{BDBD60AE-6394-4F18-A582-FB30EA5B2BC7}");
Zeile gelöscht : user_pref("CT3312807.installSp", "FALSE");
Zeile gelöscht : user_pref("CT3312807.installerVersion", "1.8.1.4");
Zeile gelöscht : user_pref("CT3312807.keyword", "true");
Zeile gelöscht : user_pref("CT3312807.originalHomepage", "hxxp://www.google.de/");
Zeile gelöscht : user_pref("CT3312807.originalSearchAddressUrl", "");
Zeile gelöscht : user_pref("CT3312807.originalSearchEngine", "Ask Search");
Zeile gelöscht : user_pref("CT3312807.originalSearchEngineName", "Ask Search");
Zeile gelöscht : user_pref("CT3312807.searchRevert", "false");
Zeile gelöscht : user_pref("CT3312807.searchUninstallUserMode", "1");
Zeile gelöscht : user_pref("CT3312807.searchUserMode", "1");
Zeile gelöscht : user_pref("CT3312807.smartbar.homepage", "true");
Zeile gelöscht : user_pref("CT3312807.toolbarInstallDate", "17-12-2013 14:35:01");
Zeile gelöscht : user_pref("CT3312807.versionFromInstaller", "10.23.0.722");
Zeile gelöscht : user_pref("CT3312807.xpeMode", "0");
Zeile gelöscht : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Conduit Search");
Zeile gelöscht : user_pref("browser.search.defaultthis.engineName", "Fun Media Bar V11 Customized Web Search");
Zeile gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3312807&CUI=UN93255172636127723&UM=1&SearchSource=3&q={searchTerms}");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Conduit Search");
Zeile gelöscht : user_pref("extensions.crossrider.bic", "142ec974a3f9e30a01b40c8d7daf883f");
Zeile gelöscht : user_pref("iminent.LayoutId", "1");
Zeile gelöscht : user_pref("iminent.adapters", "{\"iminent\":{\"CountryCode\":\"DE\",\"NoAds\":false,\"Status\":1,\"expireTime\":\"1386537043043259200\"},\"funkspiel-forum\":{\"CountryCode\":\"DE\",\"NoAds\":false,\"S[...]
Zeile gelöscht : user_pref("iminent.enabledAds", "false");
Zeile gelöscht : user_pref("iminent.version", "7.48.1.1");
Zeile gelöscht : user_pref("iminent.versioning", "{\"CurrentVersion\":\"7.48.1.1\",\"InstallEventCTime\":1386537033270,\"InstallEvent\":\"True\"}");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3312807&SearchSource=2&CUI=UN93255172636127723&UM=1&q=");
Zeile gelöscht : user_pref("smartbar.addressBarOwnerCTID", "CT3312807");
Zeile gelöscht : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3312807&CUI=UN93255172636127723&UM=1&SearchSource=13");
Zeile gelöscht : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3312807&SearchSource=2&CUI=UN93255172636127723&UM=1&q=");
Zeile gelöscht : user_pref("smartbar.defaultSearchOwnerCTID", "CT3312807");
Zeile gelöscht : user_pref("smartbar.homePageOwnerCTID", "CT3312807");
Zeile gelöscht : user_pref("smartbar.machineId", "K8D+GBQGKFRDTWM7Y4PONTUZULHAZL9+YGELMUWS+W3CZBSI0XOB982FDXV5CXLOGGEHBIMC360M5SIZ3S+RNG");

-\\ Google Chrome v33.0.1750.146

[ Datei : C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [12468 octets] - [06/03/2014 20:38:49]
AdwCleaner[S0].txt - [12418 octets] - [06/03/2014 20:39:58]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [12479 octets] ##########
         

der rest folgt..in den nächsten minuten

Zitat von CS-SYS

Malwarebytes:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.03.06.06

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16518
Chris :: CHRIS-PC [Administrator]

06.03.2014 16:13:01
MBAM-log-2014-03-06 (20-31-37).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 228319
Laufzeit: 20 Minute(n), 40 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 17
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt.
HKCR\CrossriderApp0031257.BHO (PUP.Optional.CrossRider.A) -> Keine Aktion durchgeführt.
HKCR\CrossriderApp0031257.BHO.1 (PUP.Optional.CrossRider.A) -> Keine Aktion durchgeführt.
HKCR\CrossriderApp0031257.Sandbox (PUP.Optional.CrossRider.A) -> Keine Aktion durchgeführt.
HKCR\CrossriderApp0031257.Sandbox.1 (PUP.Optional.CrossRider.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCU\Software\1ClickDownload (PUP.Optional.1ClickDownload.A) -> Keine Aktion durchgeführt.
HKCU\Software\Iminent (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt.
HKCU\Software\AppDataLow\Software\Plus-HD-1.3 (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
HKCU\Software\Conduit\FF (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
HKCU\Software\InstallCore\1I1T1Q1S (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt.
HKCU\Software\InstalledBrowserExtensions\Plus HD (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Plus-HD-1.3 (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 3
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0X2O1C0R2R1R -> Keine Aktion durchgeführt.
HKCU\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Daten: 263944004287652151704679070371751218929 -> Keine Aktion durchgeführt.
HKLM\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Daten: 263944004287652151704679070371751218929 -> Keine Aktion durchgeführt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 15
C:\ProgramData\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\ProgramData\DealPlyLive\Update (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\ProgramData\DealPlyLive\Update\Log (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\Dealply (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\Dealply\UpdateProc (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files\DealPlyLive\CrashReports (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\OpenCandy\0849B9AACC124CF0A21344CFDABD00C2 (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\OpenCandy\65946E2AE7D64B33A00B7A02216A920D (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Local\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Local\DealPlyLive\CrashReports (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files\Plus-HD-1.3 (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\newnext.me (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\newnext.me\cache (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt.

Infizierte Dateien: 14
C:\Users\Chris\AppData\Roaming\OpenCandy\0849B9AACC124CF0A21344CFDABD00C2\SSStub_SearchProtect_p1v0.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\Downloads\Virtual Audio Cable 4.12 by iwdownload(1).exe (PUP.Optional.Freemium.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\Downloads\Virtual Audio Cable 4.12 by iwdownload.exe (PUP.Optional.Freemium.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\roboot.exe (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\ProgramData\DealPlyLive\Update\Log\DealPlyLive.log (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\Dealply\UpdateProc\config.dat (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\OpenCandy\65946E2AE7D64B33A00B7A02216A920D\Trial-14.0.1000.89_de-DE_1004732_DE-1.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Program Files\Plus-HD-1.3\31257.crx (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files\Plus-HD-1.3\31257.xpi (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files\Plus-HD-1.3\background.html (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files\Plus-HD-1.3\Installer.log (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files\Plus-HD-1.3\Plus-HD-1.3.ico (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\newnext.me\nengine.cookie (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt.
C:\Users\Chris\AppData\Roaming\newnext.me\cache\spark.bin (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt.

(Ende)
         

adwcleaner:

# AdwCleaner v3.020 - Bericht erstellt am 06/03/2014 um 20:39:58
# Aktualisiert 27/02/2014 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (32 bits)
# Benutzername : Chris - CHRIS-PC
# Gestartet von : C:\Users\Chris\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\apn
Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\ProgramData\NCH Software
Ordner Gelöscht : C:\Program Files\Mobogenie
Ordner Gelöscht : C:\Program Files\NCH Software
Ordner Gelöscht : C:\Users\Chris\AppData\Local\cool_mirage
Ordner Gelöscht : C:\Users\Chris\AppData\Local\genienext
Ordner Gelöscht : C:\Users\Chris\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\Chris\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Chris\AppData\Roaming\iSafe
Ordner Gelöscht : C:\Users\Chris\AppData\Roaming\NCH Software
Ordner Gelöscht : C:\Users\Chris\AppData\Roaming\Solvusoft
Ordner Gelöscht : C:\Users\Chris\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movie2KDownloader.com
Ordner Gelöscht : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\CT3312807
Ordner Gelöscht : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\Extensions\{21bd831c-5f59-432d-9c58-c3162b161816}
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\searchplugins\ask-search.xml
Datei Gelöscht : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\searchplugins\Conduit.xml
Datei Gelöscht : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\searchplugins\conduit-search.xml
Datei Gelöscht : C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
Datei Gelöscht : C:\Windows\System32\Tasks\NCH Software

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355125557}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366126657}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344124457}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions
Schlüssel Gelöscht : HKCU\Software\NCH Software
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\NCH Software
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75FF6D97AF9FC004A9521D4B83FA6321
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB13D869D7D092348847B7481BB59E27
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7

***** [ Browser ] *****

-\\ Internet Explorer v0.0.0.0


-\\ Mozilla Firefox v27.0.1 (de)

[ Datei : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\prefs.js ]

Zeile gelöscht : user_pref("CT3312807.FF19Solved", "true");
Zeile gelöscht : user_pref("CT3312807.UserID", "UN93255172636127723");
Zeile gelöscht : user_pref("CT3312807.browser.search.defaultthis.engineName", "true");
Zeile gelöscht : user_pref("CT3312807.fullUserID", "UN93255172636127723.IN.20131217143501");
Zeile gelöscht : user_pref("CT3312807.installDate", "17/12/2013 14:35:03");
Zeile gelöscht : user_pref("CT3312807.installSessionId", "{BDBD60AE-6394-4F18-A582-FB30EA5B2BC7}");
Zeile gelöscht : user_pref("CT3312807.installSp", "FALSE");
Zeile gelöscht : user_pref("CT3312807.installerVersion", "1.8.1.4");
Zeile gelöscht : user_pref("CT3312807.keyword", "true");
Zeile gelöscht : user_pref("CT3312807.originalHomepage", "hxxp://www.google.de/");
Zeile gelöscht : user_pref("CT3312807.originalSearchAddressUrl", "");
Zeile gelöscht : user_pref("CT3312807.originalSearchEngine", "Ask Search");
Zeile gelöscht : user_pref("CT3312807.originalSearchEngineName", "Ask Search");
Zeile gelöscht : user_pref("CT3312807.searchRevert", "false");
Zeile gelöscht : user_pref("CT3312807.searchUninstallUserMode", "1");
Zeile gelöscht : user_pref("CT3312807.searchUserMode", "1");
Zeile gelöscht : user_pref("CT3312807.smartbar.homepage", "true");
Zeile gelöscht : user_pref("CT3312807.toolbarInstallDate", "17-12-2013 14:35:01");
Zeile gelöscht : user_pref("CT3312807.versionFromInstaller", "10.23.0.722");
Zeile gelöscht : user_pref("CT3312807.xpeMode", "0");
Zeile gelöscht : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Conduit Search");
Zeile gelöscht : user_pref("browser.search.defaultthis.engineName", "Fun Media Bar V11 Customized Web Search");
Zeile gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3312807&CUI=UN93255172636127723&UM=1&SearchSource=3&q={searchTerms}");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Conduit Search");
Zeile gelöscht : user_pref("extensions.crossrider.bic", "142ec974a3f9e30a01b40c8d7daf883f");
Zeile gelöscht : user_pref("iminent.LayoutId", "1");
Zeile gelöscht : user_pref("iminent.adapters", "{\"iminent\":{\"CountryCode\":\"DE\",\"NoAds\":false,\"Status\":1,\"expireTime\":\"1386537043043259200\"},\"funkspiel-forum\":{\"CountryCode\":\"DE\",\"NoAds\":false,\"S[...]
Zeile gelöscht : user_pref("iminent.enabledAds", "false");
Zeile gelöscht : user_pref("iminent.version", "7.48.1.1");
Zeile gelöscht : user_pref("iminent.versioning", "{\"CurrentVersion\":\"7.48.1.1\",\"InstallEventCTime\":1386537033270,\"InstallEvent\":\"True\"}");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3312807&SearchSource=2&CUI=UN93255172636127723&UM=1&q=");
Zeile gelöscht : user_pref("smartbar.addressBarOwnerCTID", "CT3312807");
Zeile gelöscht : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3312807&CUI=UN93255172636127723&UM=1&SearchSource=13");
Zeile gelöscht : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3312807&SearchSource=2&CUI=UN93255172636127723&UM=1&q=");
Zeile gelöscht : user_pref("smartbar.defaultSearchOwnerCTID", "CT3312807");
Zeile gelöscht : user_pref("smartbar.homePageOwnerCTID", "CT3312807");
Zeile gelöscht : user_pref("smartbar.machineId", "K8D+GBQGKFRDTWM7Y4PONTUZULHAZL9+YGELMUWS+W3CZBSI0XOB982FDXV5CXLOGGEHBIMC360M5SIZ3S+RNG");

-\\ Google Chrome v33.0.1750.146

[ Datei : C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [12468 octets] - [06/03/2014 20:38:49]
AdwCleaner[S0].txt - [12418 octets] - [06/03/2014 20:39:58]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [12479 octets] ##########
         

der rest folgt..in den nächsten minuten

JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Ultimate x86
Ran by Chris on 06.03.2014 at 20:45:35,77
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Chris\AppData\Roaming\mozilla\firefox\profiles\v5p5rn11.default\minidumps [55 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.03.2014 at 20:49:28,41
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-03-2014
Ran by Chris (administrator) on CHRIS-PC on 06-03-2014 21:51:19
Running from C:\Users\Chris\Desktop
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
() C:\Windows\system32\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
(Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft ® Windows ® Operating System) C:\Windows\System32\WinSecurity.exe
(Microsoft Corporation) C:\Windows\system32\wermgr.exe


==================== Registry (Whitelisted) ==================


==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.dell.com
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default
FF SearchEngineOrder.1: Ask Search
FF Homepage: https://www.google.de/
FF NetworkProxy: "autoconfig_url", "file:///C:/Users/Chris/Desktop/putty.exe%20-N%20-L%201234:localhost:1234%20proxy@cs-sys.de"
FF NetworkProxy: "backup.ftp", "localhost"
FF NetworkProxy: "backup.ftp_port", 1234
FF NetworkProxy: "backup.socks", "localhost"
FF NetworkProxy: "backup.socks_port", 1234
FF NetworkProxy: "backup.ssl", "localhost"
FF NetworkProxy: "backup.ssl_port", 1234
FF NetworkProxy: "ftp", "localhost"
FF NetworkProxy: "ftp_port", 1234
FF NetworkProxy: "http", "localhost"
FF NetworkProxy: "http_port", 1234
FF NetworkProxy: "no_proxies_on", "C:\\Users\\CS-SYS\\Desktop\\putty.exe -N -L 1234:localhost:1234 proxy@cs-sys.de"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "localhost"
FF NetworkProxy: "socks_port", 1234
FF NetworkProxy: "ssl", "localhost"
FF NetworkProxy: "ssl_port", 1234
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @esn.me/esnsonar,version=0.70.4 - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin: @esn/npbattlelog,version=2.3.2 - C:\Program Files\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-11-21]
FF HKLM\...\Firefox\Extensions:  - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2013-11-14]
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2013-11-14]
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2013-11-14]
FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2013-11-14]
FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2013-11-14]

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14]
CHR Extension: (Google Drive) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-14]
CHR Extension: (YouTube) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-14]
CHR Extension: (Google-Suche) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-14]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-11-15]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2013-11-15]
CHR Extension: (Modul zum Sperren von gefährlichen Webseiten) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2013-11-15]
CHR Extension: (Virtuelle Tastatur) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-11-15]
CHR Extension: (Google Wallet) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-14]
CHR Extension: (Google Mail) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-14]
CHR Extension: (Anti-Banner) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-11-15]
CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-10-17]

========================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-04-29] (Advanced Micro Devices, Inc.)
R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
R2 FirebirdGuardianDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2013-03-19] (Firebird Project)
R3 FirebirdServerDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe [3784704 2013-03-19] (Firebird Project)
R2 iprip; C:\Windows\System32\iprip.dll [29696 2009-07-14] (Microsoft Corporation)
R2 NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [4927280 2013-07-11] (Native Instruments GmbH)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [32568 2013-08-22] (The OpenVPN Project)
S3 OverwolfUpdaterService; C:\Program Files\Overwolf\OverwolfUpdater.exe [18360 2013-10-23] (Overwolf Ltd)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-12-20] ()
R2 WindowsSecurity; C:\Windows\System32\WinSecurity.exe [1496576 2013-12-20] (Microsoft ® Windows ® Operating System)

==================== Drivers (Whitelisted) ====================

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-01-04] (Disc Soft Ltd)
R3 EuMusDesignVirtualAudioCableWdm; C:\Windows\System32\DRIVERS\vrtaucbl.sys [50728 2014-03-01] (Eugene V. Muzychenko)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2013-11-14] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [94304 2014-02-18] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [576096 2014-02-18] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25184 2014-02-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [14432 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [45024 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [144992 2013-12-19] (Kaspersky Lab ZAO)
R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
S3 catchme; \??\C:\Users\Chris\AppData\Local\Temp\catchme.sys [X]
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]
S3 IntcAzAudAddService; system32\drivers\RTKVHDA.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-06 21:51 - 2014-03-06 21:51 - 00012880 _____ () C:\Users\Chris\Desktop\FRST.txt
2014-03-06 21:50 - 2014-03-06 21:50 - 01145344 _____ (Farbar) C:\Users\Chris\Desktop\FRST.exe
2014-03-06 20:49 - 2014-03-06 20:49 - 00000753 _____ () C:\Users\Chris\Desktop\JRT.txt
2014-03-06 20:45 - 2014-03-06 20:45 - 00000000 ____D () C:\Windows\ERUNT
2014-03-06 20:38 - 2014-03-06 20:40 - 00000000 ____D () C:\AdwCleaner
2014-03-06 16:10 - 2014-03-06 16:10 - 00001067 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-06 16:10 - 2014-03-06 16:10 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Malwarebytes
2014-03-06 16:10 - 2014-03-06 16:10 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-06 16:10 - 2014-03-06 16:10 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-06 16:10 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-06 16:09 - 2014-03-06 16:09 - 01244192 _____ () C:\Users\Chris\Desktop\adwcleaner.exe
2014-03-06 16:09 - 2014-03-06 16:09 - 01037734 _____ (Thisisu) C:\Users\Chris\Desktop\JRT.exe
2014-03-05 17:35 - 2014-03-05 17:35 - 00057064 _____ () C:\ComboFix.txt
2014-03-05 17:21 - 2014-03-05 17:35 - 00000000 ____D () C:\Qoobox
2014-03-05 17:21 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-03-05 17:21 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-03-05 17:21 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-03-05 17:21 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-03-05 17:21 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-03-05 17:21 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-03-05 17:21 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-03-05 17:21 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-03-05 17:20 - 2014-03-05 17:34 - 00000000 ____D () C:\Windows\erdnt
2014-03-05 17:19 - 2014-03-05 17:19 - 05186850 ____R (Swearware) C:\Users\Chris\Desktop\ComboFix.exe
2014-03-04 17:47 - 2014-03-04 17:47 - 00033157 _____ () C:\Users\Chris\Downloads\Addition.txt
2014-03-04 17:45 - 2014-03-06 21:51 - 00000000 ____D () C:\FRST
2014-03-04 17:45 - 2014-03-04 17:47 - 00045846 _____ () C:\Users\Chris\Downloads\FRST.txt
2014-03-04 17:45 - 2014-03-04 17:45 - 01145344 _____ (Farbar) C:\Users\Chris\Downloads\FRST.exe
2014-03-04 12:24 - 2014-03-04 12:25 - 00164224 _____ () C:\Windows\Minidump\030414-16281-01.dmp
2014-03-04 12:24 - 2014-03-04 12:24 - 436596576 _____ () C:\Windows\MEMORY.DMP
2014-03-04 12:19 - 2014-03-04 12:19 - 00060694 _____ () C:\Users\Chris\Downloads\Extras.Txt
2014-03-04 12:18 - 2014-03-04 12:18 - 00143044 _____ () C:\Users\Chris\Downloads\OTL.Txt
2014-03-04 11:48 - 2014-03-04 11:48 - 00602112 _____ (OldTimer Tools) C:\Users\Chris\Downloads\OTL.exe
2014-03-04 11:20 - 2014-03-04 11:25 - 257813336 _____ () C:\Users\Chris\Documents\kis14.0.0.4651de-de.exe
2014-03-04 09:43 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-04 02:02 - 2013-10-02 01:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-03-04 02:02 - 2013-10-02 01:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-04 02:02 - 2013-10-02 01:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-04 02:02 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-03-04 02:02 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-03-04 02:02 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-03-04 02:02 - 2013-10-02 00:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-03-04 02:02 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-03-04 02:02 - 2013-10-02 00:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-03-04 02:02 - 2013-10-01 23:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-03-04 02:02 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-03-04 02:01 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-03-03 22:19 - 2014-03-06 20:41 - 00000560 _____ () C:\Windows\setupact.log
2014-03-03 22:19 - 2014-03-06 20:35 - 00008010 _____ () C:\Windows\PFRO.log
2014-03-03 22:19 - 2014-03-03 22:19 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-03 22:16 - 2014-03-03 22:16 - 00000000 ____D () C:\Windows\pss
2014-03-03 21:24 - 2014-03-03 21:24 - 04765152 _____ (Piriform Ltd) C:\Users\Chris\Downloads\ccsetup411.exe
2014-03-02 02:08 - 2014-03-02 02:08 - 00001630 _____ () C:\Users\Public\Desktop\Combat Arms EU.lnk
2014-03-01 19:11 - 2014-03-01 19:47 - 1967289647 _____ (Nexon) C:\Users\Chris\Documents\Combatarms_eu.exe
2014-03-01 19:06 - 2014-03-01 19:06 - 10028912 _____ (Akamai Technologies, Inc.) C:\Users\Chris\Downloads\NexonEU_Installer.exe
2014-03-01 16:18 - 2014-03-01 16:19 - 00000000 ____D () C:\Program Files\Virtual Audio Cable
2014-03-01 16:18 - 2014-03-01 16:18 - 00050728 _____ (Eugene V. Muzychenko) C:\Windows\system32\Drivers\vrtaucbl.sys
2014-03-01 16:15 - 2010-03-27 19:14 - 00000000 ____D () C:\Users\Chris\Documents\Virtual Audio Cable 4.10
2014-03-01 16:13 - 2014-03-01 16:13 - 01323708 _____ () C:\Users\Chris\Documents\VIRTUAL_AUDIO_CABLE_4.10.RAR
2014-02-27 16:13 - 2014-02-27 16:13 - 00000000 ____D () C:\Users\Chris\Documents\ILS-SimV4
2014-02-26 14:15 - 2014-02-26 14:15 - 00001109 _____ () C:\Users\Public\Desktop\CAE Report Generator.lnk
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\CAE_Report_Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Local\CAE_Report_Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\CAE Report Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\BandiMPEG1
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\AviSynth 2.5
2014-02-24 22:55 - 2014-02-24 22:55 - 00000000 ____D () C:\ProgramData\MVH
2014-02-24 22:48 - 2014-02-24 22:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\MVH
2014-02-24 22:46 - 2014-02-25 17:08 - 01369088 _____ () C:\Users\Chris\Desktop\MVH Loader.exe
2014-02-24 22:45 - 2014-02-24 22:45 - 01106766 _____ () C:\Users\Chris\Desktop\MVH Loader.zip
2014-02-21 18:08 - 2014-02-21 18:08 - 00000000 ____D () C:\Users\Chris\Desktop\CB-Desings
2014-02-20 20:51 - 2014-03-03 11:17 - 00000000 ___RD () C:\Users\Chris\Dropbox
2014-02-20 20:51 - 2014-02-20 20:51 - 00001039 _____ () C:\Users\Chris\Desktop\Dropbox.lnk
2014-02-20 20:50 - 2014-02-20 20:51 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\DropboxMaster
2014-02-20 20:50 - 2014-02-20 20:50 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-02-20 20:49 - 2014-03-03 11:17 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Dropbox
2014-02-20 16:21 - 2014-02-20 16:21 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TuneUp Software
2014-02-20 16:19 - 2014-02-20 16:22 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-02-20 16:19 - 2014-02-20 16:19 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-02-19 00:07 - 2014-03-03 21:25 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-18 17:28 - 2014-02-18 17:28 - 00000000 ____D () C:\Users\Chris\Desktop\Filme Download
2014-02-15 07:47 - 2014-02-15 07:47 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-15 06:30 - 2014-02-15 06:30 - 00002917 _____ () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Scanner Recorder.lnk
2014-02-15 06:30 - 2014-02-15 06:30 - 00000000 ____D () C:\Program Files\Scanner Recorder
2014-02-13 22:59 - 2014-02-18 18:58 - 00000000 ____D () C:\Users\Chris\Desktop\Filme Dome
2014-02-13 18:25 - 2014-02-14 13:42 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-02-13 17:32 - 2014-02-13 17:47 - 00000231 _____ () C:\Users\Chris\Desktop\steam.txt
2014-02-12 21:27 - 2014-02-12 22:22 - 00000068 _____ () C:\Users\Chris\Desktop\pw filme.txt
2014-02-12 03:12 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-12 03:12 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-12 03:12 - 2014-02-06 11:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-12 03:12 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-12 03:12 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-12 03:12 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-12 03:12 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-12 03:12 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-12 03:12 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-12 03:12 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-12 03:12 - 2014-02-06 10:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-12 03:12 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-12 03:12 - 2014-02-06 10:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-12 03:12 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-12 03:12 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-12 03:12 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-12 03:12 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-12 03:12 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-12 03:12 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-12 03:12 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-12 03:12 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-12 03:03 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 01:20 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 01:20 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 01:20 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 01:20 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 01:20 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 01:20 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 01:20 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 01:20 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 01:20 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 01:20 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 01:20 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 01:20 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 01:20 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 01:20 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-11 17:14 - 2014-02-11 18:42 - 00000000 ____D () C:\Users\Chris\Desktop\SD-Karte
2014-02-09 17:58 - 2014-02-09 18:03 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TeamViewer
2014-02-08 13:33 - 2014-02-08 13:33 - 00000000 __RSH () C:\MSDOS.SYS
2014-02-08 13:33 - 2014-02-08 13:33 - 00000000 __RSH () C:\IO.SYS
2014-02-08 10:06 - 2014-02-08 10:06 - 00000000 __HDC () C:\ProgramData\{E54DB1D4-CC7D-414E-8BED-584C447836EA}
2014-02-08 10:06 - 2014-02-08 10:06 - 00000000 ____D () C:\Users\Chris\Documents\Native Instruments
2014-02-08 10:05 - 2014-02-08 10:05 - 00001002 _____ () C:\Users\Public\Desktop\Traktor 2.lnk
2014-02-08 10:00 - 2014-02-08 10:00 - 00001094 _____ () C:\Users\Public\Desktop\Controller Editor.lnk
2014-02-08 10:00 - 2014-02-08 10:00 - 00000000 __HDC () C:\ProgramData\{9477ED15-E4A3-4984-9B76-31F573D8EAAF}
2014-02-08 09:59 - 2014-02-08 10:01 - 00000000 ____D () C:\ProgramData\Native Instruments
2014-02-08 09:59 - 2014-02-08 10:01 - 00000000 ____D () C:\Program Files\Native Instruments
2014-02-08 09:59 - 2014-02-08 10:01 - 00000000 ____D () C:\Program Files\Common Files\Native Instruments
2014-02-08 09:59 - 2014-02-08 09:59 - 00001059 _____ () C:\Users\Public\Desktop\Service Center.lnk
2014-02-08 09:59 - 2014-02-08 09:59 - 00000000 __HDC () C:\ProgramData\{F2610326-6A40-4BBC-9FBC-7F05356A912A}
2014-02-08 09:45 - 2013-09-15 19:51 - 00000000 ____D () C:\Users\Chris\Documents\Native Instruments Traktor Scratch Pro 2.v2.6.3
2014-02-07 23:50 - 2014-02-07 23:50 - 00000000 ____D () C:\ProgramData\Package Cache
2014-02-07 23:50 - 2014-02-07 23:50 - 00000000 ____D () C:\Program Files\Serato
2014-02-07 23:29 - 2014-02-07 23:52 - 00000000 ____D () C:\Users\Chris\Desktop\Bild 2
2014-02-04 18:05 - 2014-02-04 18:05 - 00000000 ____H () C:\ProgramData\DP45977C.lfl

==================== One Month Modified Files and Folders =======

2014-03-06 21:51 - 2014-03-06 21:51 - 00012880 _____ () C:\Users\Chris\Desktop\FRST.txt
2014-03-06 21:51 - 2014-03-04 17:45 - 00000000 ____D () C:\FRST
2014-03-06 21:50 - 2014-03-06 21:50 - 01145344 _____ (Farbar) C:\Users\Chris\Desktop\FRST.exe
2014-03-06 21:45 - 2013-11-14 21:28 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-06 21:44 - 2013-11-14 19:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-06 20:49 - 2014-03-06 20:49 - 00000753 _____ () C:\Users\Chris\Desktop\JRT.txt
2014-03-06 20:49 - 2009-07-14 05:34 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-06 20:49 - 2009-07-14 05:34 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-06 20:45 - 2014-03-06 20:45 - 00000000 ____D () C:\Windows\ERUNT
2014-03-06 20:41 - 2014-03-03 22:19 - 00000560 _____ () C:\Windows\setupact.log
2014-03-06 20:41 - 2013-11-14 22:10 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-06 20:41 - 2013-11-14 21:28 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-06 20:41 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-06 20:40 - 2014-03-06 20:38 - 00000000 ____D () C:\AdwCleaner
2014-03-06 20:40 - 2013-11-14 18:07 - 01975703 _____ () C:\Windows\WindowsUpdate.log
2014-03-06 20:35 - 2014-03-03 22:19 - 00008010 _____ () C:\Windows\PFRO.log
2014-03-06 20:35 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-03-06 16:10 - 2014-03-06 16:10 - 00001067 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-06 16:10 - 2014-03-06 16:10 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Malwarebytes
2014-03-06 16:10 - 2014-03-06 16:10 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-06 16:10 - 2014-03-06 16:10 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-06 16:09 - 2014-03-06 16:09 - 01244192 _____ () C:\Users\Chris\Desktop\adwcleaner.exe
2014-03-06 16:09 - 2014-03-06 16:09 - 01037734 _____ (Thisisu) C:\Users\Chris\Desktop\JRT.exe
2014-03-05 17:35 - 2014-03-05 17:35 - 00057064 _____ () C:\ComboFix.txt
2014-03-05 17:35 - 2014-03-05 17:21 - 00000000 ____D () C:\Qoobox
2014-03-05 17:35 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-03-05 17:34 - 2014-03-05 17:20 - 00000000 ____D () C:\Windows\erdnt
2014-03-05 17:33 - 2009-07-14 03:04 - 00000215 _____ () C:\Windows\system.ini
2014-03-05 17:19 - 2014-03-05 17:19 - 05186850 ____R (Swearware) C:\Users\Chris\Desktop\ComboFix.exe
2014-03-05 17:08 - 2014-02-02 00:10 - 00000000 __SHD () C:\Users\Chris\wc
2014-03-04 17:47 - 2014-03-04 17:47 - 00033157 _____ () C:\Users\Chris\Downloads\Addition.txt
2014-03-04 17:47 - 2014-03-04 17:45 - 00045846 _____ () C:\Users\Chris\Downloads\FRST.txt
2014-03-04 17:45 - 2014-03-04 17:45 - 01145344 _____ (Farbar) C:\Users\Chris\Downloads\FRST.exe
2014-03-04 13:38 - 2013-11-16 18:58 - 00000000 ____D () C:\Users\Chris\Desktop\CS-Systems
2014-03-04 12:25 - 2014-03-04 12:24 - 00164224 _____ () C:\Windows\Minidump\030414-16281-01.dmp
2014-03-04 12:24 - 2014-03-04 12:24 - 436596576 _____ () C:\Windows\MEMORY.DMP
2014-03-04 12:24 - 2013-11-28 21:20 - 00000000 ____D () C:\Windows\Minidump
2014-03-04 12:19 - 2014-03-04 12:19 - 00060694 _____ () C:\Users\Chris\Downloads\Extras.Txt
2014-03-04 12:18 - 2014-03-04 12:18 - 00143044 _____ () C:\Users\Chris\Downloads\OTL.Txt
2014-03-04 11:48 - 2014-03-04 11:48 - 00602112 _____ (OldTimer Tools) C:\Users\Chris\Downloads\OTL.exe
2014-03-04 11:40 - 2013-11-14 21:21 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TS3Client
2014-03-04 11:31 - 2013-11-14 22:11 - 00001094 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-03-04 11:25 - 2014-03-04 11:20 - 257813336 _____ () C:\Users\Chris\Documents\kis14.0.0.4651de-de.exe
2014-03-04 09:53 - 2013-11-14 21:29 - 00002121 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-04 09:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-03-04 02:03 - 2013-11-15 03:02 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE
2014-03-03 22:19 - 2014-03-03 22:19 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-03 22:16 - 2014-03-03 22:16 - 00000000 ____D () C:\Windows\pss
2014-03-03 21:44 - 2013-11-14 19:33 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-03 21:44 - 2013-11-14 19:33 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-03-03 21:44 - 2013-11-14 19:32 - 00000000 ____D () C:\Users\Chris\AppData\Local\Adobe
2014-03-03 21:28 - 2013-11-16 18:59 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\FileZilla
2014-03-03 21:25 - 2014-02-19 00:07 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-03 21:25 - 2013-11-14 23:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-03 21:24 - 2014-03-03 21:24 - 04765152 _____ (Piriform Ltd) C:\Users\Chris\Downloads\ccsetup411.exe
2014-03-03 11:17 - 2014-02-20 20:51 - 00000000 ___RD () C:\Users\Chris\Dropbox
2014-03-03 11:17 - 2014-02-20 20:49 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Dropbox
2014-03-02 02:08 - 2014-03-02 02:08 - 00001630 _____ () C:\Users\Public\Desktop\Combat Arms EU.lnk
2014-03-02 02:05 - 2013-11-16 20:29 - 00000000 ____D () C:\Nexon
2014-03-01 19:47 - 2014-03-01 19:11 - 1967289647 _____ (Nexon) C:\Users\Chris\Documents\Combatarms_eu.exe
2014-03-01 19:06 - 2014-03-01 19:06 - 10028912 _____ (Akamai Technologies, Inc.) C:\Users\Chris\Downloads\NexonEU_Installer.exe
2014-03-01 16:19 - 2014-03-01 16:18 - 00000000 ____D () C:\Program Files\Virtual Audio Cable
2014-03-01 16:18 - 2014-03-01 16:18 - 00050728 _____ (Eugene V. Muzychenko) C:\Windows\system32\Drivers\vrtaucbl.sys
2014-03-01 16:13 - 2014-03-01 16:13 - 01323708 _____ () C:\Users\Chris\Documents\VIRTUAL_AUDIO_CABLE_4.10.RAR
2014-02-27 16:13 - 2014-02-27 16:13 - 00000000 ____D () C:\Users\Chris\Documents\ILS-SimV4
2014-02-26 14:45 - 2010-11-20 22:01 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-26 14:15 - 2014-02-26 14:15 - 00001109 _____ () C:\Users\Public\Desktop\CAE Report Generator.lnk
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\CAE_Report_Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Local\CAE_Report_Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\CAE Report Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\BandiMPEG1
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\AviSynth 2.5
2014-02-25 17:08 - 2014-02-24 22:46 - 01369088 _____ () C:\Users\Chris\Desktop\MVH Loader.exe
2014-02-25 16:29 - 2013-11-29 17:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\DVDVideoSoft
2014-02-25 16:29 - 2013-11-29 17:48 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-02-25 16:29 - 2013-11-29 17:48 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-02-24 22:55 - 2014-02-24 22:55 - 00000000 ____D () C:\ProgramData\MVH
2014-02-24 22:48 - 2014-02-24 22:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\MVH
2014-02-24 22:45 - 2014-02-24 22:45 - 01106766 _____ () C:\Users\Chris\Desktop\MVH Loader.zip
2014-02-24 07:09 - 2013-11-23 15:35 - 01343488 _____ () C:\Windows\system32\㩣灜潲牧浡慤慴歜獡数獲祫氠扡慜灶㐱〮〮摜瑡屡潭畤敬彳湩敶瑮牯⹹慤
2014-02-21 18:08 - 2014-02-21 18:08 - 00000000 ____D () C:\Users\Chris\Desktop\CB-Desings
2014-02-20 20:51 - 2014-02-20 20:51 - 00001039 _____ () C:\Users\Chris\Desktop\Dropbox.lnk
2014-02-20 20:51 - 2014-02-20 20:50 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\DropboxMaster
2014-02-20 20:51 - 2013-11-14 19:25 - 00000000 ____D () C:\Users\Chris
2014-02-20 20:50 - 2014-02-20 20:50 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-02-20 17:18 - 2014-01-26 12:10 - 00000000 ____D () C:\Users\Chris\AppData\Local\Paint.NET
2014-02-20 16:26 - 2013-11-24 14:30 - 00000000 ____D () C:\Program Files\WinThruster
2014-02-20 16:22 - 2014-02-20 16:19 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-02-20 16:21 - 2014-02-20 16:21 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TuneUp Software
2014-02-20 16:19 - 2014-02-20 16:19 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-02-19 17:33 - 2013-11-16 00:38 - 00000000 ____D () C:\Users\Chris\Desktop\Leitstellenspiel
2014-02-19 10:19 - 2014-02-03 18:20 - 00000000 ____D () C:\ProgramData\firebird
2014-02-19 00:09 - 2013-11-14 23:13 - 00000000 ____D () C:\Program Files\Steam
2014-02-18 18:58 - 2014-02-13 22:59 - 00000000 ____D () C:\Users\Chris\Desktop\Filme Dome
2014-02-18 17:28 - 2014-02-18 17:28 - 00000000 ____D () C:\Users\Chris\Desktop\Filme Download
2014-02-18 16:59 - 2013-12-08 11:49 - 00000000 ____D () C:\Program Files\JDownloader
2014-02-18 10:38 - 2013-10-17 15:47 - 00576096 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-02-18 10:38 - 2013-10-17 15:47 - 00025184 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys
2014-02-18 10:38 - 2013-06-08 20:18 - 00094304 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-02-17 14:25 - 2009-07-14 05:53 - 00032634 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-17 14:24 - 2013-11-14 19:31 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-15 07:47 - 2014-02-15 07:47 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-15 06:30 - 2014-02-15 06:30 - 00002917 _____ () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Scanner Recorder.lnk
2014-02-15 06:30 - 2014-02-15 06:30 - 00000000 ____D () C:\Program Files\Scanner Recorder
2014-02-15 06:30 - 2013-11-14 19:26 - 00000000 ____D () C:\Users\Chris\AppData\Local\VirtualStore
2014-02-14 13:42 - 2014-02-13 18:25 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-02-13 17:47 - 2014-02-13 17:32 - 00000231 _____ () C:\Users\Chris\Desktop\steam.txt
2014-02-12 22:22 - 2014-02-12 21:27 - 00000068 _____ () C:\Users\Chris\Desktop\pw filme.txt
2014-02-12 04:08 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-02-12 03:12 - 2013-11-14 20:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-12 03:06 - 2013-11-14 20:09 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-11 18:42 - 2014-02-11 17:14 - 00000000 ____D () C:\Users\Chris\Desktop\SD-Karte
2014-02-09 18:03 - 2014-02-09 17:58 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TeamViewer
2014-02-09 11:47 - 2009-07-14 05:33 - 03771384 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-08 13:33 - 2014-02-08 13:33 - 00000000 __RSH () C:\MSDOS.SYS
2014-02-08 13:33 - 2014-02-08 13:33 - 00000000 __RSH () C:\IO.SYS
2014-02-08 13:14 - 2013-11-14 21:00 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Spotify
2014-02-08 10:46 - 2013-11-14 21:01 - 00000000 ____D () C:\Users\Chris\AppData\Local\Spotify
2014-02-08 10:06 - 2014-02-08 10:06 - 00000000 __HDC () C:\ProgramData\{E54DB1D4-CC7D-414E-8BED-584C447836EA}
2014-02-08 10:06 - 2014-02-08 10:06 - 00000000 ____D () C:\Users\Chris\Documents\Native Instruments
2014-02-08 10:05 - 2014-02-08 10:05 - 00001002 _____ () C:\Users\Public\Desktop\Traktor 2.lnk
2014-02-08 10:01 - 2014-02-08 09:59 - 00000000 ____D () C:\ProgramData\Native Instruments
2014-02-08 10:01 - 2014-02-08 09:59 - 00000000 ____D () C:\Program Files\Native Instruments
2014-02-08 10:01 - 2014-02-08 09:59 - 00000000 ____D () C:\Program Files\Common Files\Native Instruments
2014-02-08 10:00 - 2014-02-08 10:00 - 00001094 _____ () C:\Users\Public\Desktop\Controller Editor.lnk
2014-02-08 10:00 - 2014-02-08 10:00 - 00000000 __HDC () C:\ProgramData\{9477ED15-E4A3-4984-9B76-31F573D8EAAF}
2014-02-08 09:59 - 2014-02-08 09:59 - 00001059 _____ () C:\Users\Public\Desktop\Service Center.lnk
2014-02-08 09:59 - 2014-02-08 09:59 - 00000000 __HDC () C:\ProgramData\{F2610326-6A40-4BBC-9FBC-7F05356A912A}
2014-02-07 23:57 - 2013-11-14 21:20 - 00102568 _____ () C:\Users\Chris\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-07 23:52 - 2014-02-07 23:29 - 00000000 ____D () C:\Users\Chris\Desktop\Bild 2
2014-02-07 23:50 - 2014-02-07 23:50 - 00000000 ____D () C:\ProgramData\Package Cache
2014-02-07 23:50 - 2014-02-07 23:50 - 00000000 ____D () C:\Program Files\Serato
2014-02-06 11:38 - 2014-02-12 03:12 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 11:20 - 2014-02-12 03:12 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 11:19 - 2014-02-12 03:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 11:01 - 2014-02-12 03:12 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 11:00 - 2014-02-12 03:12 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-12 03:12 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 10:52 - 2014-02-12 03:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 10:52 - 2014-02-12 03:12 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 10:49 - 2014-02-12 03:12 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 10:47 - 2014-02-12 03:12 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 10:47 - 2014-02-12 03:12 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 10:46 - 2014-02-12 03:12 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 10:34 - 2014-02-12 03:12 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 10:25 - 2014-02-12 03:12 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 10:25 - 2014-02-12 03:12 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 10:13 - 2014-02-12 03:12 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:09 - 2014-02-12 03:12 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:03 - 2014-02-12 03:12 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 09:41 - 2014-02-12 03:12 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 09:36 - 2014-02-12 03:12 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:34 - 2014-02-12 03:12 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-05 20:45 - 2013-11-20 22:41 - 00000600 _____ () C:\Users\Chris\AppData\Local\PUTTY.RND
2014-02-04 20:27 - 2013-11-16 18:09 - 00000000 ____D () C:\Users\Chris\Desktop\Funkspiel
2014-02-04 18:05 - 2014-02-04 18:05 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-02-04 18:04 - 2013-11-15 21:12 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information

Some content of TEMP:
====================
C:\Users\Chris\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-28 00:48

==================== End Of Log ============================
         

--- --- ---

--- --- ---

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Eset log:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=6a274446b531ea419caf812fd80a4e47
# engine=17364
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-03-08 01:59:37
# local_time=2014-03-08 02:59:37 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 95 15355 922713 0 0
# compatibility_mode=5893 16776574 100 94 15413 145875168 0 0
# scanned=372453
# found=0
# cleaned=0
# scan_time=10331
         

SecurityCheck:

Results of screen317's Security Check version 0.99.80  
 Windows 7 Service Pack 1 x86 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop                 
Kaspersky Internet Security   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 CCleaner     
 Adobe Flash Player 	12.0.0.70  
 Adobe Reader XI  
 Mozilla Firefox (27.0.1) 
 Mozilla Thunderbird (24.3.0) 
 Google Chrome 33.0.1750.117  
 Google Chrome 33.0.1750.146  
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
 ESET ESET Online Scanner OnlineScannerApp.exe  
 ESET ESET Online Scanner OnlineCmdLineScanner.exe  
 Kaspersky Lab Kaspersky Internet Security 14.0.0 avp.exe  
 Kaspersky Lab Kaspersky Internet Security 14.0.0 avpui.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

FRST:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-03-2014
Ran by Chris (administrator) on CHRIS-PC on 08-03-2014 03:25:40
Running from C:\Users\Chris\Desktop\TB-Software
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
() C:\Windows\system32\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Avira Systray] - C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [172624 2014-02-24] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-25] (Avira Operations GmbH & Co. KG)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.dell.com
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default
FF SearchEngineOrder.1: Ask Search
FF Homepage: https://www.google.de/
FF NetworkProxy: "autoconfig_url", "file:///C:/Users/Chris/Desktop/putty.exe%20-N%20-L%201234:localhost:1234%20proxy@cs-sys.de"
FF NetworkProxy: "backup.ftp", "localhost"
FF NetworkProxy: "backup.ftp_port", 1234
FF NetworkProxy: "backup.socks", "localhost"
FF NetworkProxy: "backup.socks_port", 1234
FF NetworkProxy: "backup.ssl", "localhost"
FF NetworkProxy: "backup.ssl_port", 1234
FF NetworkProxy: "ftp", "localhost"
FF NetworkProxy: "ftp_port", 1234
FF NetworkProxy: "http", "localhost"
FF NetworkProxy: "http_port", 1234
FF NetworkProxy: "no_proxies_on", "C:\\Users\\CS-SYS\\Desktop\\putty.exe -N -L 1234:localhost:1234 proxy@cs-sys.de"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "localhost"
FF NetworkProxy: "socks_port", 1234
FF NetworkProxy: "ssl", "localhost"
FF NetworkProxy: "ssl_port", 1234
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @esn.me/esnsonar,version=0.70.4 - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin: @esn/npbattlelog,version=2.3.2 - C:\Program Files\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\v5p5rn11.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-11-21]
FF HKLM\...\Firefox\Extensions:  - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2013-11-14]
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2013-11-14]
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2013-11-14]
FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2013-11-14]
FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2013-11-14]

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14]
CHR Extension: (Google Drive) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-14]
CHR Extension: (YouTube) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-14]
CHR Extension: (Google-Suche) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-14]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-11-15]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2013-11-15]
CHR Extension: (Modul zum Sperren von gefährlichen Webseiten) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2013-11-15]
CHR Extension: (Virtuelle Tastatur) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-11-15]
CHR Extension: (Google Wallet) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-14]
CHR Extension: (Google Mail) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-14]
CHR Extension: (Anti-Banner) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-11-15]
CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-10-17]

========================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-04-29] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-25] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [117328 2014-02-24] (Avira Operations GmbH & Co. KG)
R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
R2 FirebirdGuardianDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2013-03-19] (Firebird Project)
R3 FirebirdServerDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe [3784704 2013-03-19] (Firebird Project)
R2 iprip; C:\Windows\System32\iprip.dll [29696 2009-07-14] (Microsoft Corporation)
R2 NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [4927280 2013-07-11] (Native Instruments GmbH)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [32568 2013-08-22] (The OpenVPN Project)
S3 OverwolfUpdaterService; C:\Program Files\Overwolf\OverwolfUpdater.exe [18360 2013-10-23] (Overwolf Ltd)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-12-20] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-01-04] (Disc Soft Ltd)
R3 EuMusDesignVirtualAudioCableWdm; C:\Windows\System32\DRIVERS\vrtaucbl.sys [50728 2014-03-01] (Eugene V. Muzychenko)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2013-11-14] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [94304 2014-02-18] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [576096 2014-02-18] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25184 2014-02-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [14432 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [45024 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [144992 2013-12-19] (Kaspersky Lab ZAO)
S1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-02-25] (Avira GmbH)
R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
S3 catchme; \??\C:\Users\Chris\AppData\Local\Temp\catchme.sys [X]
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]
S3 IntcAzAudAddService; system32\drivers\RTKVHDA.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-07 23:47 - 2014-03-07 23:47 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Avira
2014-03-07 23:41 - 2014-02-25 11:41 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-03-07 23:41 - 2014-02-25 11:41 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-03-07 23:41 - 2014-02-25 11:41 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2014-03-07 23:40 - 2014-02-25 11:41 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-03-07 23:36 - 2014-03-07 23:40 - 00000000 ____D () C:\ProgramData\Avira
2014-03-07 23:36 - 2014-03-07 23:40 - 00000000 ____D () C:\Program Files\Avira
2014-03-07 23:36 - 2014-03-07 23:36 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-03-07 23:35 - 2014-03-07 23:35 - 04051872 _____ (Avira Operations GmbH & Co. KG) C:\Users\Chris\Downloads\avira_de_av___ws.exe
2014-03-06 21:56 - 2014-03-08 03:25 - 00000000 ____D () C:\Users\Chris\Desktop\TB-Software
2014-03-06 20:45 - 2014-03-07 16:13 - 00000000 ____D () C:\Windows\ERUNT
2014-03-06 20:38 - 2014-03-07 16:13 - 00000000 ____D () C:\AdwCleaner
2014-03-06 16:10 - 2014-03-07 16:13 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-06 16:10 - 2014-03-07 16:11 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Malwarebytes
2014-03-06 16:10 - 2014-03-07 16:10 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-06 16:10 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-05 17:35 - 2014-03-05 17:35 - 00057064 _____ () C:\ComboFix.txt
2014-03-05 17:21 - 2014-03-05 17:35 - 00000000 ____D () C:\Qoobox
2014-03-05 17:21 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-03-05 17:21 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-03-05 17:21 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-03-05 17:21 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-03-05 17:21 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-03-05 17:21 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-03-05 17:21 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-03-05 17:21 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-03-05 17:20 - 2014-03-07 16:13 - 00000000 ____D () C:\Windows\erdnt
2014-03-04 17:47 - 2014-03-04 17:47 - 00033157 _____ () C:\Users\Chris\Downloads\Addition.txt
2014-03-04 17:45 - 2014-03-08 03:25 - 00000000 ____D () C:\FRST
2014-03-04 17:45 - 2014-03-04 17:47 - 00045846 _____ () C:\Users\Chris\Downloads\FRST.txt
2014-03-04 17:45 - 2014-03-04 17:45 - 01145344 _____ (Farbar) C:\Users\Chris\Downloads\FRST.exe
2014-03-04 12:24 - 2014-03-04 12:25 - 00164224 _____ () C:\Windows\Minidump\030414-16281-01.dmp
2014-03-04 12:24 - 2014-03-04 12:24 - 436596576 _____ () C:\Windows\MEMORY.DMP
2014-03-04 12:19 - 2014-03-04 12:19 - 00060694 _____ () C:\Users\Chris\Downloads\Extras.Txt
2014-03-04 12:18 - 2014-03-04 12:18 - 00143044 _____ () C:\Users\Chris\Downloads\OTL.Txt
2014-03-04 11:48 - 2014-03-04 11:48 - 00602112 _____ (OldTimer Tools) C:\Users\Chris\Downloads\OTL.exe
2014-03-04 11:20 - 2014-03-04 11:25 - 257813336 _____ () C:\Users\Chris\Documents\kis14.0.0.4651de-de.exe
2014-03-04 09:43 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-04 02:02 - 2013-10-02 01:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-03-04 02:02 - 2013-10-02 01:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-04 02:02 - 2013-10-02 01:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-04 02:02 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-03-04 02:02 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-03-04 02:02 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-03-04 02:02 - 2013-10-02 00:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-03-04 02:02 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-03-04 02:02 - 2013-10-02 00:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-03-04 02:02 - 2013-10-01 23:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-03-04 02:02 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-03-04 02:01 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-03-03 22:19 - 2014-03-07 16:14 - 00000616 _____ () C:\Windows\setupact.log
2014-03-03 22:19 - 2014-03-06 20:35 - 00008010 _____ () C:\Windows\PFRO.log
2014-03-03 22:19 - 2014-03-03 22:19 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-03 22:16 - 2014-03-07 16:13 - 00000000 ____D () C:\Windows\pss
2014-03-03 21:24 - 2014-03-03 21:24 - 04765152 _____ (Piriform Ltd) C:\Users\Chris\Downloads\ccsetup411.exe
2014-03-02 02:08 - 2014-03-02 02:08 - 00001630 _____ () C:\Users\Public\Desktop\Combat Arms EU.lnk
2014-03-01 19:11 - 2014-03-01 19:47 - 1967289647 _____ (Nexon) C:\Users\Chris\Documents\Combatarms_eu.exe
2014-03-01 19:06 - 2014-03-01 19:06 - 10028912 _____ (Akamai Technologies, Inc.) C:\Users\Chris\Downloads\NexonEU_Installer.exe
2014-03-01 16:18 - 2014-03-07 16:13 - 00000000 ____D () C:\Program Files\Virtual Audio Cable
2014-03-01 16:18 - 2014-03-01 16:18 - 00050728 _____ (Eugene V. Muzychenko) C:\Windows\system32\Drivers\vrtaucbl.sys
2014-03-01 16:15 - 2014-03-07 16:13 - 00000000 ____D () C:\Users\Chris\Documents\Virtual Audio Cable 4.10
2014-03-01 16:13 - 2014-03-01 16:13 - 01323708 _____ () C:\Users\Chris\Documents\VIRTUAL_AUDIO_CABLE_4.10.RAR
2014-02-27 16:13 - 2014-02-27 16:13 - 00000000 ____D () C:\Users\Chris\Documents\ILS-SimV4
2014-02-26 14:15 - 2014-02-26 14:15 - 00001109 _____ () C:\Users\Public\Desktop\CAE Report Generator.lnk
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\CAE_Report_Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Local\CAE_Report_Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\CAE Report Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\BandiMPEG1
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\AviSynth 2.5
2014-02-24 22:55 - 2014-02-24 22:55 - 00000000 ____D () C:\ProgramData\MVH
2014-02-24 22:48 - 2014-02-24 22:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\MVH
2014-02-21 18:08 - 2014-02-21 18:08 - 00000000 ____D () C:\Users\Chris\Desktop\CB-Desings
2014-02-20 20:51 - 2014-03-03 11:17 - 00000000 ___RD () C:\Users\Chris\Dropbox
2014-02-20 20:51 - 2014-02-20 20:51 - 00001039 _____ () C:\Users\Chris\Desktop\Dropbox.lnk
2014-02-20 20:50 - 2014-02-20 20:51 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\DropboxMaster
2014-02-20 20:50 - 2014-02-20 20:50 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-02-20 20:49 - 2014-03-03 11:17 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Dropbox
2014-02-20 16:21 - 2014-02-20 16:21 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TuneUp Software
2014-02-20 16:19 - 2014-02-20 16:22 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-02-20 16:19 - 2014-02-20 16:19 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-02-19 00:07 - 2014-03-03 21:25 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-15 07:47 - 2014-03-07 16:13 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-15 06:30 - 2014-02-15 06:30 - 00002917 _____ () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Scanner Recorder.lnk
2014-02-15 06:30 - 2014-02-15 06:30 - 00000000 ____D () C:\Program Files\Scanner Recorder
2014-02-13 22:59 - 2014-03-08 00:03 - 00000000 ____D () C:\Users\Chris\Desktop\Filme Dome
2014-02-13 18:25 - 2014-02-14 13:42 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-02-13 17:32 - 2014-02-13 17:47 - 00000231 _____ () C:\Users\Chris\Desktop\steam.txt
2014-02-12 21:27 - 2014-02-12 22:22 - 00000068 _____ () C:\Users\Chris\Desktop\pw filme.txt
2014-02-12 03:12 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-12 03:12 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-12 03:12 - 2014-02-06 11:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-12 03:12 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-12 03:12 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-12 03:12 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-12 03:12 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-12 03:12 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-12 03:12 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-12 03:12 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-12 03:12 - 2014-02-06 10:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-12 03:12 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-12 03:12 - 2014-02-06 10:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-12 03:12 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-12 03:12 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-12 03:12 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-12 03:12 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-12 03:12 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-12 03:12 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-12 03:12 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-12 03:12 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-12 03:03 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 01:20 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 01:20 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 01:20 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 01:20 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 01:20 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 01:20 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 01:20 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 01:20 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 01:20 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 01:20 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 01:20 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 01:20 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 01:20 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 01:20 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-11 17:14 - 2014-02-11 18:42 - 00000000 ____D () C:\Users\Chris\Desktop\SD-Karte
2014-02-09 17:58 - 2014-02-09 18:03 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TeamViewer
2014-02-08 13:33 - 2014-02-08 13:33 - 00000000 __RSH () C:\MSDOS.SYS
2014-02-08 13:33 - 2014-02-08 13:33 - 00000000 __RSH () C:\IO.SYS
2014-02-08 10:06 - 2014-02-08 10:06 - 00000000 __HDC () C:\ProgramData\{E54DB1D4-CC7D-414E-8BED-584C447836EA}
2014-02-08 10:06 - 2014-02-08 10:06 - 00000000 ____D () C:\Users\Chris\Documents\Native Instruments
2014-02-08 10:05 - 2014-02-08 10:05 - 00001002 _____ () C:\Users\Public\Desktop\Traktor 2.lnk
2014-02-08 10:00 - 2014-02-08 10:00 - 00001094 _____ () C:\Users\Public\Desktop\Controller Editor.lnk
2014-02-08 10:00 - 2014-02-08 10:00 - 00000000 __HDC () C:\ProgramData\{9477ED15-E4A3-4984-9B76-31F573D8EAAF}
2014-02-08 09:59 - 2014-02-08 10:01 - 00000000 ____D () C:\ProgramData\Native Instruments
2014-02-08 09:59 - 2014-02-08 10:01 - 00000000 ____D () C:\Program Files\Native Instruments
2014-02-08 09:59 - 2014-02-08 10:01 - 00000000 ____D () C:\Program Files\Common Files\Native Instruments
2014-02-08 09:59 - 2014-02-08 09:59 - 00001059 _____ () C:\Users\Public\Desktop\Service Center.lnk
2014-02-08 09:59 - 2014-02-08 09:59 - 00000000 __HDC () C:\ProgramData\{F2610326-6A40-4BBC-9FBC-7F05356A912A}
2014-02-08 09:45 - 2013-09-15 19:51 - 00000000 ____D () C:\Users\Chris\Documents\Native Instruments Traktor Scratch Pro 2.v2.6.3
2014-02-07 23:50 - 2014-03-07 23:36 - 00000000 ____D () C:\ProgramData\Package Cache
2014-02-07 23:50 - 2014-02-07 23:50 - 00000000 ____D () C:\Program Files\Serato
2014-02-07 23:29 - 2014-02-07 23:52 - 00000000 ____D () C:\Users\Chris\Desktop\Bild 2

==================== One Month Modified Files and Folders =======

2014-03-08 03:25 - 2014-03-06 21:56 - 00000000 ____D () C:\Users\Chris\Desktop\TB-Software
2014-03-08 03:25 - 2014-03-04 17:45 - 00000000 ____D () C:\FRST
2014-03-08 02:46 - 2013-11-14 21:28 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-08 02:44 - 2013-11-14 19:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-08 02:43 - 2013-11-14 22:10 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-08 01:46 - 2014-02-02 00:10 - 00000000 __SHD () C:\Users\Chris\wc
2014-03-08 00:03 - 2014-02-13 22:59 - 00000000 ____D () C:\Users\Chris\Desktop\Filme Dome
2014-03-07 23:47 - 2014-03-07 23:47 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Avira
2014-03-07 23:45 - 2013-11-14 21:28 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-07 23:40 - 2014-03-07 23:36 - 00000000 ____D () C:\ProgramData\Avira
2014-03-07 23:40 - 2014-03-07 23:36 - 00000000 ____D () C:\Program Files\Avira
2014-03-07 23:37 - 2013-11-14 18:07 - 02014616 _____ () C:\Windows\WindowsUpdate.log
2014-03-07 23:36 - 2014-03-07 23:36 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-03-07 23:36 - 2014-02-07 23:50 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-07 23:35 - 2014-03-07 23:35 - 04051872 _____ (Avira Operations GmbH & Co. KG) C:\Users\Chris\Downloads\avira_de_av___ws.exe
2014-03-07 23:00 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-03-07 18:00 - 2014-01-26 12:10 - 00000000 ____D () C:\Users\Chris\AppData\Local\Paint.NET
2014-03-07 17:02 - 2013-11-16 00:38 - 00000000 ____D () C:\Users\Chris\Desktop\Leitstellenspiel
2014-03-07 16:21 - 2009-07-14 05:34 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-07 16:21 - 2009-07-14 05:34 - 00025648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-07 16:14 - 2014-03-03 22:19 - 00000616 _____ () C:\Windows\setupact.log
2014-03-07 16:14 - 2013-11-14 19:25 - 00000000 ____D () C:\Users\Chris
2014-03-07 16:14 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-07 16:14 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-03-07 16:13 - 2014-03-06 20:45 - 00000000 ____D () C:\Windows\ERUNT
2014-03-07 16:13 - 2014-03-06 20:38 - 00000000 ____D () C:\AdwCleaner
2014-03-07 16:13 - 2014-03-06 16:10 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-07 16:13 - 2014-03-05 17:20 - 00000000 ____D () C:\Windows\erdnt
2014-03-07 16:13 - 2014-03-03 22:16 - 00000000 ____D () C:\Windows\pss
2014-03-07 16:13 - 2014-03-01 16:18 - 00000000 ____D () C:\Program Files\Virtual Audio Cable
2014-03-07 16:13 - 2014-03-01 16:15 - 00000000 ____D () C:\Users\Chris\Documents\Virtual Audio Cable 4.10
2014-03-07 16:13 - 2014-02-15 07:47 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-07 16:13 - 2013-12-28 19:47 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\XMedia Recode
2014-03-07 16:13 - 2013-11-28 21:20 - 00000000 ____D () C:\Windows\Minidump
2014-03-07 16:13 - 2013-11-15 03:02 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE
2014-03-07 16:13 - 2013-11-14 23:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-07 16:13 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-03-07 16:13 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\schemas
2014-03-07 16:13 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\AppCompat
2014-03-07 16:12 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2014-03-07 16:12 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-03-07 16:11 - 2014-03-06 16:10 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Malwarebytes
2014-03-07 16:11 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-03-07 16:10 - 2014-03-06 16:10 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-07 16:10 - 2013-11-16 20:29 - 00000000 ____D () C:\Nexon
2014-03-06 20:35 - 2014-03-03 22:19 - 00008010 _____ () C:\Windows\PFRO.log
2014-03-05 17:35 - 2014-03-05 17:35 - 00057064 _____ () C:\ComboFix.txt
2014-03-05 17:35 - 2014-03-05 17:21 - 00000000 ____D () C:\Qoobox
2014-03-05 17:33 - 2009-07-14 03:04 - 00000215 _____ () C:\Windows\system.ini
2014-03-04 17:47 - 2014-03-04 17:47 - 00033157 _____ () C:\Users\Chris\Downloads\Addition.txt
2014-03-04 17:47 - 2014-03-04 17:45 - 00045846 _____ () C:\Users\Chris\Downloads\FRST.txt
2014-03-04 17:45 - 2014-03-04 17:45 - 01145344 _____ (Farbar) C:\Users\Chris\Downloads\FRST.exe
2014-03-04 13:38 - 2013-11-16 18:58 - 00000000 ____D () C:\Users\Chris\Desktop\CS-Systems
2014-03-04 12:25 - 2014-03-04 12:24 - 00164224 _____ () C:\Windows\Minidump\030414-16281-01.dmp
2014-03-04 12:24 - 2014-03-04 12:24 - 436596576 _____ () C:\Windows\MEMORY.DMP
2014-03-04 12:19 - 2014-03-04 12:19 - 00060694 _____ () C:\Users\Chris\Downloads\Extras.Txt
2014-03-04 12:18 - 2014-03-04 12:18 - 00143044 _____ () C:\Users\Chris\Downloads\OTL.Txt
2014-03-04 11:48 - 2014-03-04 11:48 - 00602112 _____ (OldTimer Tools) C:\Users\Chris\Downloads\OTL.exe
2014-03-04 11:40 - 2013-11-14 21:21 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TS3Client
2014-03-04 11:31 - 2013-11-14 22:11 - 00001094 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-03-04 11:25 - 2014-03-04 11:20 - 257813336 _____ () C:\Users\Chris\Documents\kis14.0.0.4651de-de.exe
2014-03-04 09:53 - 2013-11-14 21:29 - 00002121 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-03 22:19 - 2014-03-03 22:19 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-03 21:44 - 2013-11-14 19:33 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-03 21:44 - 2013-11-14 19:33 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-03-03 21:44 - 2013-11-14 19:32 - 00000000 ____D () C:\Users\Chris\AppData\Local\Adobe
2014-03-03 21:28 - 2013-11-16 18:59 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\FileZilla
2014-03-03 21:25 - 2014-02-19 00:07 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-03 21:24 - 2014-03-03 21:24 - 04765152 _____ (Piriform Ltd) C:\Users\Chris\Downloads\ccsetup411.exe
2014-03-03 11:17 - 2014-02-20 20:51 - 00000000 ___RD () C:\Users\Chris\Dropbox
2014-03-03 11:17 - 2014-02-20 20:49 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Dropbox
2014-03-02 02:08 - 2014-03-02 02:08 - 00001630 _____ () C:\Users\Public\Desktop\Combat Arms EU.lnk
2014-03-01 19:47 - 2014-03-01 19:11 - 1967289647 _____ (Nexon) C:\Users\Chris\Documents\Combatarms_eu.exe
2014-03-01 19:06 - 2014-03-01 19:06 - 10028912 _____ (Akamai Technologies, Inc.) C:\Users\Chris\Downloads\NexonEU_Installer.exe
2014-03-01 16:18 - 2014-03-01 16:18 - 00050728 _____ (Eugene V. Muzychenko) C:\Windows\system32\Drivers\vrtaucbl.sys
2014-03-01 16:13 - 2014-03-01 16:13 - 01323708 _____ () C:\Users\Chris\Documents\VIRTUAL_AUDIO_CABLE_4.10.RAR
2014-02-27 16:13 - 2014-02-27 16:13 - 00000000 ____D () C:\Users\Chris\Documents\ILS-SimV4
2014-02-26 14:45 - 2010-11-20 22:01 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-26 14:15 - 2014-02-26 14:15 - 00001109 _____ () C:\Users\Public\Desktop\CAE Report Generator.lnk
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\CAE_Report_Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Users\Chris\AppData\Local\CAE_Report_Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\CAE Report Generator
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\BandiMPEG1
2014-02-26 14:15 - 2014-02-26 14:15 - 00000000 ____D () C:\Program Files\AviSynth 2.5
2014-02-25 16:29 - 2013-11-29 17:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\DVDVideoSoft
2014-02-25 16:29 - 2013-11-29 17:48 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-02-25 16:29 - 2013-11-29 17:48 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-02-25 11:41 - 2014-03-07 23:41 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-02-25 11:41 - 2014-03-07 23:41 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-02-25 11:41 - 2014-03-07 23:41 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2014-02-25 11:41 - 2014-03-07 23:40 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-02-24 22:55 - 2014-02-24 22:55 - 00000000 ____D () C:\ProgramData\MVH
2014-02-24 22:48 - 2014-02-24 22:48 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\MVH
2014-02-24 07:09 - 2013-11-23 15:35 - 01343488 _____ () C:\Windows\system32\㩣灜潲牧浡慤慴歜獡数獲祫氠扡慜灶㐱〮〮摜瑡屡潭畤敬彳湩敶瑮牯⹹慤
2014-02-21 18:08 - 2014-02-21 18:08 - 00000000 ____D () C:\Users\Chris\Desktop\CB-Desings
2014-02-20 20:51 - 2014-02-20 20:51 - 00001039 _____ () C:\Users\Chris\Desktop\Dropbox.lnk
2014-02-20 20:51 - 2014-02-20 20:50 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\DropboxMaster
2014-02-20 20:50 - 2014-02-20 20:50 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-02-20 16:26 - 2013-11-24 14:30 - 00000000 ____D () C:\Program Files\WinThruster
2014-02-20 16:22 - 2014-02-20 16:19 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-02-20 16:21 - 2014-02-20 16:21 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TuneUp Software
2014-02-20 16:19 - 2014-02-20 16:19 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-02-19 10:19 - 2014-02-03 18:20 - 00000000 ____D () C:\ProgramData\firebird
2014-02-19 00:09 - 2013-11-14 23:13 - 00000000 ____D () C:\Program Files\Steam
2014-02-18 16:59 - 2013-12-08 11:49 - 00000000 ____D () C:\Program Files\JDownloader
2014-02-18 10:38 - 2013-10-17 15:47 - 00576096 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-02-18 10:38 - 2013-10-17 15:47 - 00025184 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys
2014-02-18 10:38 - 2013-06-08 20:18 - 00094304 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-02-17 14:25 - 2009-07-14 05:53 - 00032634 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-17 14:24 - 2013-11-14 19:31 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-15 06:30 - 2014-02-15 06:30 - 00002917 _____ () C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Scanner Recorder.lnk
2014-02-15 06:30 - 2014-02-15 06:30 - 00000000 ____D () C:\Program Files\Scanner Recorder
2014-02-15 06:30 - 2013-11-14 19:26 - 00000000 ____D () C:\Users\Chris\AppData\Local\VirtualStore
2014-02-14 13:42 - 2014-02-13 18:25 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-02-13 17:47 - 2014-02-13 17:32 - 00000231 _____ () C:\Users\Chris\Desktop\steam.txt
2014-02-12 22:22 - 2014-02-12 21:27 - 00000068 _____ () C:\Users\Chris\Desktop\pw filme.txt
2014-02-12 03:12 - 2013-11-14 20:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-12 03:06 - 2013-11-14 20:09 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-11 18:42 - 2014-02-11 17:14 - 00000000 ____D () C:\Users\Chris\Desktop\SD-Karte
2014-02-09 18:03 - 2014-02-09 17:58 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\TeamViewer
2014-02-09 11:47 - 2009-07-14 05:33 - 03771384 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-08 13:33 - 2014-02-08 13:33 - 00000000 __RSH () C:\MSDOS.SYS
2014-02-08 13:33 - 2014-02-08 13:33 - 00000000 __RSH () C:\IO.SYS
2014-02-08 13:14 - 2013-11-14 21:00 - 00000000 ____D () C:\Users\Chris\AppData\Roaming\Spotify
2014-02-08 10:46 - 2013-11-14 21:01 - 00000000 ____D () C:\Users\Chris\AppData\Local\Spotify
2014-02-08 10:06 - 2014-02-08 10:06 - 00000000 __HDC () C:\ProgramData\{E54DB1D4-CC7D-414E-8BED-584C447836EA}
2014-02-08 10:06 - 2014-02-08 10:06 - 00000000 ____D () C:\Users\Chris\Documents\Native Instruments
2014-02-08 10:05 - 2014-02-08 10:05 - 00001002 _____ () C:\Users\Public\Desktop\Traktor 2.lnk
2014-02-08 10:01 - 2014-02-08 09:59 - 00000000 ____D () C:\ProgramData\Native Instruments
2014-02-08 10:01 - 2014-02-08 09:59 - 00000000 ____D () C:\Program Files\Native Instruments
2014-02-08 10:01 - 2014-02-08 09:59 - 00000000 ____D () C:\Program Files\Common Files\Native Instruments
2014-02-08 10:00 - 2014-02-08 10:00 - 00001094 _____ () C:\Users\Public\Desktop\Controller Editor.lnk
2014-02-08 10:00 - 2014-02-08 10:00 - 00000000 __HDC () C:\ProgramData\{9477ED15-E4A3-4984-9B76-31F573D8EAAF}
2014-02-08 09:59 - 2014-02-08 09:59 - 00001059 _____ () C:\Users\Public\Desktop\Service Center.lnk
2014-02-08 09:59 - 2014-02-08 09:59 - 00000000 __HDC () C:\ProgramData\{F2610326-6A40-4BBC-9FBC-7F05356A912A}
2014-02-07 23:57 - 2013-11-14 21:20 - 00102568 _____ () C:\Users\Chris\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-07 23:52 - 2014-02-07 23:29 - 00000000 ____D () C:\Users\Chris\Desktop\Bild 2
2014-02-07 23:50 - 2014-02-07 23:50 - 00000000 ____D () C:\Program Files\Serato
2014-02-06 11:38 - 2014-02-12 03:12 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 11:20 - 2014-02-12 03:12 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 11:19 - 2014-02-12 03:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 11:01 - 2014-02-12 03:12 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 11:00 - 2014-02-12 03:12 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-12 03:12 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 10:52 - 2014-02-12 03:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 10:52 - 2014-02-12 03:12 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 10:49 - 2014-02-12 03:12 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 10:47 - 2014-02-12 03:12 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 10:47 - 2014-02-12 03:12 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 10:46 - 2014-02-12 03:12 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 10:34 - 2014-02-12 03:12 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 10:25 - 2014-02-12 03:12 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 10:25 - 2014-02-12 03:12 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 10:13 - 2014-02-12 03:12 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:09 - 2014-02-12 03:12 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:03 - 2014-02-12 03:12 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 09:41 - 2014-02-12 03:12 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 09:36 - 2014-02-12 03:12 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:34 - 2014-02-12 03:12 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

Some content of TEMP:
====================
C:\Users\Chris\AppData\Local\temp\avgnt.exe
C:\Users\Chris\AppData\Local\temp\Quarantine.exe
C:\Users\Chris\AppData\Local\temp\RegSvr32User.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-28 00:48

==================== End Of Log ============================
         

--- --- ---




--->>> so ich glaube zum end ergebnis klappt alles wieder bis jetzt top, hoffe es bleibt so ansonsten melde ich mich umgehend nochmal und vielen vielen dank für die arbeit )) dankeschön (Das Forum empfehle ich auf jedenfall weiter)

mfg chris

Fertig

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.