Amazon-Icon, GIGA-Android-Startseite und Amazon.de.Url nach Download einer Datei(jedoch keine erkennbarne Probleme)

# AdwCleaner v3.304 - Bericht erstellt am 11/08/2014 um 08:54:59
# Aktualisiert 08/08/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : userABC_000 - LORDHELIX
# Gestartet von : C:\Users\userABC_000\Downloads\adwcleaner_3.304.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\userABC_~1\AppData\Local\Temp\OCS
Datei Gelöscht : C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\foxydeal.sqlite

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Mozilla Firefox v31.0 (x86 de)

[ Datei : C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\prefs.js ]


-\\ Google Chrome v36.0.1985.125

[ Datei : C:\Users\userABC_000\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1219 octets] - [11/08/2014 08:50:14]
AdwCleaner[S0].txt - [1094 octets] - [11/08/2014 08:54:59]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1154 octets] ##########
         

# AdwCleaner v3.304 - Bericht erstellt am 11/08/2014 um 22:41:20
# Aktualisiert 08/08/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : userABC_000 - LORDHELIX
# Gestartet von : C:\Users\userABC_000\Downloads\adwcleaner_3.304.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Mozilla Firefox v31.0 (x86 de)

[ Datei : C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\prefs.js ]


-\\ Google Chrome v36.0.1985.125

[ Datei : C:\Users\userABC_000\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1219 octets] - [11/08/2014 08:50:14]
AdwCleaner[R1].txt - [1081 octets] - [11/08/2014 22:37:09]
AdwCleaner[R2].txt - [1141 octets] - [11/08/2014 22:40:10]
AdwCleaner[S0].txt - [1234 octets] - [11/08/2014 08:54:59]
AdwCleaner[S1].txt - [1063 octets] - [11/08/2014 22:41:20]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1123 octets] ##########
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-08-2014 01
Ran by userABC_000 (administrator) on LORDHELIX on 11-08-2014 22:46:46
Running from C:\Users\userABC_000\Downloads
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.0.3.226\AsusWSWinService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\Bin\IpOverUsbSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Kinect Drivers\Service\KinectManagementService.exe
() C:\Program Files\MySQL\MySQL Server 5.6\bin\mysqld.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\livecomm.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\msosync.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s  RtHDVCpl    C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s  kernel32.dll 
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1368792 2013-11-13] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4101584 2014-04-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-110364190-1643542413-822559574-1001\...\Run: [EvJOWall] => C:\Program Files\EvJOSoft\Wallpaper Changer\EvJOWall.exe [3998720 2010-08-31] (EvJOSoft)
HKU\S-1-5-21-110364190-1643542413-822559574-1001\...\Policies\Explorer: [DisallowRun] 1
ShellIconOverlayIdentifiers: !AsusWSShellExt_B -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.8.381\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: !AsusWSShellExt_O -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.8.381\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: !AsusWSShellExt_U -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.8.381\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\userABC_000\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\userABC_000\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\userABC_000\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\userABC_000\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers-x32:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\userABC_000\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\userABC_000\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\userABC_000\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default
FF NetworkProxy: "socks_remote_dns", true
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.0.2 -> C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.0.2 -> C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\userABC_000\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\userABC_000\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\userABC_000\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\searchplugins\duckduckgo.xml
FF SearchPlugin: C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\searchplugins\ixquick-https.xml
FF SearchPlugin: C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\searchplugins\youtube.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: FoxyProxy Standard - C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\Extensions\foxyproxy@eric.h.jung [2014-07-29]
FF Extension: ProxTube - Unblock YouTube - C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\Extensions\ich@maltegoetz.de [2014-04-30]
FF Extension: YouTube Unblocker - C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\Extensions\youtubeunblocker@unblocker.yt [2014-04-22]
FF Extension: FireShot - C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2014-07-29]
FF Extension: DownloadHelper - C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-08-08]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\Extensions\adblockpopups@jessehakanen.net.xpi [2014-04-21]
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\Extensions\elemhidehelper@adblockplus.org.xpi [2014-04-21]
FF Extension: Ghostery - C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\Extensions\firefox@ghostery.com.xpi [2014-07-29]
FF Extension: Adblock Plus - C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-21]
FF Extension: BetterPrivacy - C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2014-07-30]
FF Extension: DownThemAll! - C:\Users\userABC_000\AppData\Roaming\Mozilla\Firefox\Profiles\xwtkoswt.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-06-12]

Chrome: 
=======
CHR HomePage: chrome://newtab
CHR Extension: (ProxFlow) - C:\Users\userABC_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-07-20]
CHR Extension: (Google Docs) - C:\Users\userABC_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-09]
CHR Extension: (Google Drive) - C:\Users\userABC_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-09]
CHR Extension: (YouTube) - C:\Users\userABC_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-09]
CHR Extension: (Webseiten-Screenshot - Webpage Screenshot) - C:\Users\userABC_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckibcdccnfeookdmbahgiakhnjcddpki [2014-06-23]
CHR Extension: (Google-Suche) - C:\Users\userABC_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-09]
CHR Extension: (Facebook Disconnect) - C:\Users\userABC_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpepffjfmamnambagiibghpglaidiec [2014-06-09]
CHR Extension: (Facebook™ Chat Privacy) - C:\Users\userABC_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfpgaanechfneiboempkfjghninbibjn [2014-06-09]
CHR Extension: (AdBlock) - C:\Users\userABC_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-06-09]
CHR Extension: (Google Wallet) - C:\Users\userABC_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-09]
CHR Extension: (Google Mail) - C:\Users\userABC_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-09]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.0.3.226\AsusWSWinService.exe [71680 2013-08-16] (ASUS Cloud Corporation) [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-05-12] () [File not signed]
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2014-05-20] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2356912 2014-07-19] (Microsoft Corporation)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6817544 2014-04-16] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2264280 2014-03-25] (COMODO)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227936 2013-11-09] (WildTangent)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-16] (Intel Corporation)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\Bin\IpOverUsbSvc.exe [22768 2014-04-17] (Microsoft Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 KinectManagement; C:\Program Files\Microsoft Kinect Drivers\Service\KinectManagementService.exe [98816 2013-08-20] (Microsoft Corporation) [File not signed]
R2 MySQL56; C:\ProgramData\MySQL\MySQL Server 5.6\my.ini [14262 2014-08-02] () [File not signed]
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [32568 2014-05-02] (The OpenVPN Project)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-04-24] ()
R2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4250624 2014-05-23] (A-Volute) [File not signed]
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [174088 2014-05-29] (Sandboxie Holdings, LLC)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738200 2014-04-25] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2081752 2014-04-25] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87736 2014-04-30] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3880448 2013-11-13] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70928 2014-02-13] (ASUS Corporation)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2014-04-16] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [748784 2014-04-16] (COMODO)
R1 cmdhlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [37560 2014-04-16] (COMODO)
R1 inspect; C:\Windows\system32\DRIVERS\inspect.sys [127664 2014-04-16] (COMODO)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
S3 KinectCamera; C:\Windows\System32\Drivers\kinectcamera.sys [192512 2013-08-20] (Microsoft Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2014-01-03] (Windows (R) Win 7 DDK provider)
R3 RZMAELSTROMVADService; C:\Windows\system32\drivers\RzMaelstromVAD.sys [32768 2014-05-23] (Windows (R) Win 7 DDK provider)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [185352 2014-05-29] (Sandboxie Holdings, LLC)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2014-06-21] (Windows (R) Win 7 DDK provider)
S3 tap0901t; C:\Windows\system32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [52592 2014-03-12] (Cisco Systems, Inc.)
S3 VSPerfDrv110; D:\Programming\Microsoft Visual Studio 2012\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-11 16:23 - 2014-08-11 16:40 - 00012905 _____ () C:\Users\userABC_000\Downloads\hijackthis.log
2014-08-11 16:21 - 2014-08-11 16:21 - 00388608 _____ (Trend Micro Inc.) C:\Users\userABC_000\Downloads\HiJackThis204.exe
2014-08-11 16:07 - 2014-08-11 16:07 - 00000954 _____ () C:\Users\userABC_000\Desktop\JRT.txt
2014-08-11 09:07 - 2014-08-11 09:07 - 00000000 ____D () C:\Windows\ERUNT
2014-08-11 08:53 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-11 04:25 - 2014-08-11 04:26 - 00100179 _____ () C:\Users\userABC_000\Downloads\Addition.txt
2014-08-11 03:05 - 2014-08-11 22:47 - 00026730 _____ () C:\Users\userABC_000\Downloads\FRST.txt
2014-08-11 03:05 - 2014-08-11 22:46 - 00000000 ____D () C:\FRST
2014-08-11 03:04 - 2014-08-11 03:04 - 02099712 _____ (Farbar) C:\Users\userABC_000\Downloads\FRST64.exe
2014-08-11 03:03 - 2014-08-11 03:03 - 01091072 _____ (Farbar) C:\Users\userABC_000\Downloads\FRST.exe
2014-08-11 02:44 - 2014-08-11 02:44 - 00709564 _____ () C:\Users\userABC_000\Downloads\delfix_10.8.exe
2014-08-11 02:44 - 2014-08-11 02:44 - 00448512 _____ (OldTimer Tools) C:\Users\userABC_000\Downloads\TFC.exe
2014-08-11 02:42 - 2014-08-11 02:42 - 01016261 _____ (Thisisu) C:\Users\userABC_000\Downloads\JRT_6.1.4 (1).exe
2014-08-11 02:35 - 2014-08-11 02:35 - 1046385731 _____ () C:\Windows\MEMORY.DMP
2014-08-11 02:35 - 2014-08-11 02:35 - 00303264 _____ () C:\Windows\Minidump\081114-67359-01.dmp
2014-08-11 02:34 - 2014-08-11 22:43 - 00001656 _____ () C:\Windows\PFRO.log
2014-08-11 02:32 - 2014-08-11 02:32 - 02347384 _____ (ESET) C:\Users\userABC_000\Downloads\Nicht bestätigt 570719.crdownload
2014-08-11 02:32 - 2014-08-11 02:32 - 00854410 _____ () C:\Users\userABC_000\Downloads\SecurityCheck.exe
2014-08-11 02:31 - 2014-08-11 22:42 - 00000000 ____D () C:\AdwCleaner
2014-08-11 02:31 - 2014-08-11 02:31 - 01366203 _____ () C:\Users\userABC_000\Downloads\adwcleaner_3.304.exe
2014-08-11 02:30 - 2014-08-11 02:30 - 01016261 _____ (Thisisu) C:\Users\userABC_000\Downloads\JRT_6.1.4.exe
2014-08-11 02:28 - 2014-08-11 17:51 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-11 02:28 - 2014-08-11 02:28 - 00001116 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-11 02:28 - 2014-08-11 02:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-11 02:28 - 2014-08-11 02:28 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-11 02:28 - 2014-08-11 02:28 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-11 02:28 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-11 02:28 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-11 02:28 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-11 02:26 - 2014-08-11 02:26 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\userABC_000\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-11 02:26 - 2014-08-11 02:26 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\userABC_000\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-08-11 01:49 - 2014-08-11 01:49 - 00000000 ____D () C:\Users\userABC_000\AppData\Local\Temp9f74e24dbbb7daf280bfb67f55219c5f
2014-08-11 00:31 - 2014-08-11 01:54 - 00000161 _____ () C:\Users\userABC_000\Desktop\Neues Textdokument (4).txt
2014-08-10 02:33 - 2014-08-10 02:33 - 00421971 _____ () C:\Users\userABC_000\Downloads\libusb-1.0.9.tar.bz2
2014-08-10 02:30 - 2014-08-10 02:30 - 00970155 _____ () C:\Users\userABC_000\Downloads\vrpn_07_26.zip
2014-08-10 02:30 - 2014-08-10 02:30 - 00002724 _____ () C:\Users\userABC_000\Downloads\VRPNTutorial.zip
2014-08-10 01:57 - 2014-08-10 01:57 - 14605046 _____ () C:\Users\userABC_000\Downloads\VRPN-07.29.0-git-version_07.29-211-g6d674b0-Windows- (1).zip
2014-08-10 00:57 - 2014-08-10 00:57 - 14605046 _____ () C:\Users\userABC_000\Downloads\VRPN-07.29.0-git-version_07.29-211-g6d674b0-Windows-.zip
2014-08-10 00:57 - 2014-08-10 00:57 - 00254478 _____ () C:\Users\userABC_000\Downloads\WiiUse-0.13.1-vs9 (1).exe
2014-08-10 00:57 - 2014-08-10 00:57 - 00058006 _____ () C:\Users\userABC_000\Downloads\WiiUse-0.13.1-vs9.zip
2014-08-10 00:50 - 2014-08-10 00:51 - 60867934 _____ () C:\Users\userABC_000\Downloads\vrjuggler-2.2.2-svn-vc9.7z
2014-08-10 00:50 - 2014-08-10 00:51 - 28778137 _____ () C:\Users\userABC_000\Downloads\vrjugglua-3.0-vc9-2.8git-snapshot20111003.zip
2014-08-10 00:50 - 2014-08-10 00:50 - 02884784 _____ () C:\Users\userABC_000\Downloads\rpavlik-vrpn-wmhtgui-sensitivity-0-gabeebb0.zip
2014-08-10 00:50 - 2014-08-10 00:50 - 01296391 _____ () C:\Users\userABC_000\Downloads\rpavlik-vrpn-wmhtgui-initial-requirements-283-g40d4af0.tar.gz
2014-08-10 00:50 - 2014-08-10 00:50 - 00254478 _____ () C:\Users\userABC_000\Downloads\WiiUse-0.13.1-vs9.exe
2014-08-10 00:49 - 2014-08-10 00:49 - 01099239 _____ () C:\Users\userABC_000\Downloads\vrpn-wiimote-pre2-07.27-wiimote.tar.gz
2014-08-10 00:49 - 2014-08-10 00:49 - 00429936 _____ (Ryan Pavlik ) C:\Users\userABC_000\Downloads\setup-git-windows-mintty-1.1.exe
2014-08-10 00:44 - 2014-08-10 00:44 - 12292707 _____ () C:\Users\userABC_000\Downloads\vrjuggler-3.0.1-1-src.7z
2014-08-10 00:43 - 2014-08-10 00:43 - 00788770 _____ () C:\Users\userABC_000\Downloads\WiiYourself!_1.15.zip
2014-08-10 00:36 - 2014-08-10 00:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blade of Darkness [GOG.com]
2014-08-10 00:23 - 2014-08-10 00:23 - 20562001 _____ () C:\Users\userABC_000\Downloads\VRPN-07.31.0-git-07.31-54-gbb55950-Windows-.zip
2014-08-10 00:16 - 2014-08-10 00:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CMake 3.0.1
2014-08-10 00:16 - 2014-08-10 00:16 - 00000000 ____D () C:\Program Files (x86)\CMake
2014-08-10 00:15 - 2014-08-10 00:16 - 11299622 _____ () C:\Users\userABC_000\Downloads\cmake-3.0.1-win32-x86.exe
2014-08-09 23:44 - 2014-08-09 23:44 - 15999866 _____ () C:\Users\userABC_000\Downloads\vrpn_07_30.zip
2014-08-09 23:33 - 2014-08-09 23:33 - 18075980 _____ () C:\Users\userABC_000\Downloads\vrpn_07_31.zip
2014-08-09 17:32 - 2014-08-09 17:32 - 00000000 ____D () C:\Users\userABC_000\AppData\Local\DOSBox
2014-08-09 17:29 - 2014-08-09 17:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DotEmu
2014-08-09 17:27 - 2014-08-09 17:37 - 00049148 _____ () C:\Windows\War3Unin.dat
2014-08-09 17:26 - 2014-08-09 17:36 - 00139264 _____ (Blizzard Entertainment) C:\Windows\War3Unin.exe
2014-08-09 17:26 - 2014-08-09 17:36 - 00002829 _____ () C:\Windows\War3Unin.pif
2014-08-09 17:26 - 2014-08-09 17:36 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Warcraft III
2014-08-09 17:26 - 2014-08-09 17:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Warcraft III
2014-08-09 17:20 - 2014-08-09 17:20 - 00000000 ____D () C:\Users\userABC_000\Desktop\LBA_1_Master
2014-08-08 23:26 - 2014-08-08 23:26 - 01046636 _____ () C:\Users\userABC_000\Downloads\SC3_HLSP_enabler.rar
2014-08-08 23:26 - 2014-08-08 23:26 - 00000000 ____D () C:\Users\userABC_000\Desktop\SC3_HLSP_enabler
2014-08-08 01:06 - 2014-08-08 01:06 - 00000000 ____D () C:\Users\userABC_000\AppData\Local\Adam_Reece
2014-08-08 00:55 - 2014-08-08 00:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sven Co-op
2014-08-08 00:26 - 2014-08-08 00:44 - 755100549 _____ () C:\Users\userABC_000\Downloads\svencoop48.exe
2014-08-06 21:37 - 2014-08-06 21:37 - 00021458 _____ () C:\Users\userABC_000\AppData\Local\recently-used.xbel
2014-08-06 15:46 - 2014-08-06 15:46 - 00000000 ___HD () C:\Users\userABC_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
2014-08-06 15:46 - 2014-08-06 15:46 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\GlarySoft
2014-08-06 15:45 - 2014-08-11 22:43 - 00000354 _____ () C:\Windows\Tasks\GlaryInitialize.job
2014-08-06 15:45 - 2014-08-06 15:45 - 00002620 _____ () C:\Windows\System32\Tasks\GlaryInitialize
2014-08-06 15:45 - 2014-08-06 15:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities
2014-08-06 15:45 - 2014-08-06 15:45 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities
2014-08-06 15:21 - 2014-08-06 15:21 - 00826192 _____ (Chip Digital GmbH) C:\Users\userABC_000\Downloads\Revo Uninstaller - CHIP-Installer.exe
2014-08-06 15:20 - 2014-08-06 15:21 - 00826192 _____ (Chip Digital GmbH) C:\Users\userABC_000\Downloads\Glary Utilities - CHIP-Installer.exe
2014-08-06 15:12 - 2014-08-06 15:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tools&More
2014-08-06 15:11 - 2014-08-06 15:11 - 00000000 ____D () C:\Program Files (x86)\Tools&More
2014-08-06 15:09 - 2014-08-06 15:09 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-08-06 15:00 - 2014-08-06 15:00 - 00826192 _____ (Chip Digital GmbH) C:\Users\userABC_000\Downloads\AutoStart Manager - CHIP-Installer.exe
2014-08-06 03:50 - 2014-08-06 03:50 - 00000138 _____ () C:\Users\userABC_000\AppData\Local\psppirerc
2014-08-05 19:32 - 2014-08-05 19:36 - 114760879 _____ () C:\Users\userABC_000\Downloads\OneLateNight.zip
2014-08-05 19:32 - 2014-08-05 19:35 - 114763930 _____ () C:\Users\userABC_000\Downloads\OneLateNight_dx11.zip
2014-08-05 18:44 - 2014-08-05 18:44 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-08-05 18:44 - 2014-08-05 18:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-08-05 18:44 - 2014-08-05 18:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-08-05 18:44 - 2014-08-05 18:44 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-08-05 18:44 - 2014-08-05 18:44 - 00000000 ____D () C:\Program Files\Java
2014-08-05 18:42 - 2014-08-05 18:42 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-05 18:42 - 2014-04-15 16:29 - 00264600 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-05 18:42 - 2014-04-15 16:29 - 00176024 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-08-05 18:42 - 2014-04-15 16:29 - 00176024 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-08-05 18:10 - 2014-08-05 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco
2014-08-05 18:10 - 2014-06-11 05:15 - 00112496 ____R (Cisco Systems, Inc.) C:\Windows\system32\Drivers\acsock64.sys
2014-08-05 00:58 - 2014-08-05 00:58 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\xp-AntiSpy
2014-08-05 00:58 - 2014-08-05 00:58 - 00000000 ____D () C:\Program Files (x86)\xp-AntiSpy
2014-08-04 22:41 - 2014-08-04 22:52 - 535984318 _____ () C:\Users\userABC_000\Downloads\LBA_1_Master.zip
2014-08-04 20:17 - 2014-08-06 03:25 - 00000180 _____ () C:\Users\userABC_000\pspp.jnl
2014-08-04 20:16 - 2014-08-04 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PSPP
2014-08-04 20:16 - 2014-08-04 20:16 - 00000000 ____D () C:\Program Files (x86)\PSPP
2014-08-03 00:37 - 2014-08-03 00:38 - 58014125 _____ (Docear) C:\Users\userABC_000\Downloads\docear.exe
2014-08-02 21:52 - 2014-08-02 21:52 - 00000000 ____D () C:\Program Files\MySQL
2014-08-02 21:47 - 2014-08-02 21:52 - 131758072 _____ (Bitnami) C:\Users\userABC_000\Downloads\xampp-win32-1.8.3-3-VC11-installer.exe
2014-08-02 21:46 - 2014-08-02 22:54 - 00000000 ____D () C:\ProgramData\MySQL
2014-08-02 21:46 - 2014-08-02 21:46 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MySQL
2014-08-02 21:29 - 2014-08-02 21:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JabRef
2014-08-02 21:29 - 2014-08-02 21:29 - 00000000 ____D () C:\Program Files (x86)\JabRef
2014-08-02 20:52 - 2014-08-02 20:52 - 00173213 _____ () C:\Users\userABC_000\Desktop\Neues Textdokument (3).txt
2014-08-02 19:45 - 2014-08-02 19:45 - 00000729 _____ () C:\Users\Public\Desktop\TeXstudio.lnk
2014-08-02 19:36 - 2014-08-03 11:49 - 00000000 ____D () C:\Users\userABC_000\Desktop\HMI-Bericht
2014-08-02 18:41 - 2014-08-02 18:41 - 00354371 _____ () C:\Users\userABC_000\Desktop\biblatex-apa.zip
2014-08-02 18:40 - 2014-08-02 18:40 - 00817714 _____ () C:\Users\userABC_000\Desktop\apacite.zip
2014-08-02 18:38 - 2014-08-02 18:38 - 00597534 _____ () C:\Users\userABC_000\Desktop\apa6.zip
2014-08-01 02:01 - 2014-08-01 02:01 - 00001381 _____ () C:\Users\userABC_000\Desktop\SbieCtrl.exe - Verknüpfung.lnk
2014-07-31 20:59 - 2014-07-31 21:00 - 00000000 ____D () C:\Users\userABC_000\Desktop\export
2014-07-31 05:10 - 2014-07-31 05:10 - 00001726 _____ () C:\Users\userABC_000\Desktop\vidalia.exe - Verknüpfung.lnk
2014-07-29 16:00 - 2014-08-11 20:34 - 00432889 _____ () C:\Windows\WindowsUpdate.log
2014-07-29 13:16 - 2014-07-29 13:16 - 00002780 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-07-29 13:16 - 2014-07-29 13:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-07-29 13:16 - 2014-07-29 13:16 - 00000000 ____D () C:\Program Files\CCleaner
2014-07-29 02:29 - 2014-07-29 02:29 - 00000000 ___RD () C:\Sandbox
2014-07-29 02:28 - 2014-07-29 02:28 - 00001502 _____ () C:\Users\userABC_000\Desktop\firefox.exe - Verknüpfung.lnk
2014-07-29 02:27 - 2014-08-10 13:59 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\tor
2014-07-29 02:15 - 2014-07-29 02:15 - 00000000 ____D () C:\Users\userABC_000\Desktop\Tor Browser
2014-07-29 01:53 - 2014-08-10 13:59 - 00000000 ____D () C:\Users\userABC_000\AppData\Local\Vidalia
2014-07-29 01:53 - 2014-07-29 01:53 - 00000000 ____D () C:\Users\userABC_000\AppData\Local\Tor
2014-07-29 01:53 - 2014-07-29 01:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vidalia Bridge Bundle
2014-07-29 01:53 - 2014-07-29 01:53 - 00000000 ____D () C:\Program Files (x86)\Vidalia Bridge Bundle
2014-07-28 18:55 - 2014-07-28 18:55 - 00000000 ___RD () C:\Users\userABC_000\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App
2014-07-28 03:18 - 2014-07-28 03:18 - 00000000 ____D () C:\Users\userABC_000\Desktop\Bericht
2014-07-28 03:17 - 2014-07-28 03:17 - 02699073 _____ () C:\Users\userABC_000\Downloads\Bericht.zip
2014-07-28 03:17 - 2014-07-28 03:17 - 00000209 _____ () C:\Users\userABC_000\Desktop\MBG-Bericht.html
2014-07-26 23:44 - 2014-07-26 23:44 - 00000000 ____D () C:\Users\Public\CyberLink
2014-07-26 23:40 - 2014-07-26 23:41 - 00000000 ____D () C:\Users\userABC_000\Documents\CyberLink
2014-07-26 23:40 - 2014-07-26 23:41 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\CyberLink
2014-07-26 23:40 - 2014-07-26 23:41 - 00000000 ____D () C:\ProgramData\CyberLink
2014-07-25 17:11 - 2014-07-25 17:11 - 00000000 ____D () C:\Users\userABC_000\Desktop\x360ce.App-2.1.2.191
2014-07-25 02:25 - 2014-07-25 17:30 - 00000000 ____D () C:\Users\userABC_000\Documents\Overlord
2014-07-25 01:58 - 2014-07-25 01:59 - 00000000 ____D () C:\Users\userABC_000\Documents\Giana Sisters - Twisted Dreams
2014-07-24 23:52 - 2014-08-11 02:35 - 00000000 ____D () C:\Windows\Minidump
2014-07-24 18:18 - 2014-07-24 18:18 - 00581031 _____ () C:\Users\userABC_000\Desktop\hci-thesis-and-project-report-template.zip
2014-07-24 17:53 - 2014-07-24 17:53 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\MMFApplications
2014-07-24 12:19 - 2014-07-24 12:19 - 00000000 ____D () C:\Users\userABC_000\Desktop\hci-paper-style-report-template
2014-07-24 11:12 - 2014-07-24 11:12 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\MiKTeX
2014-07-24 11:11 - 2014-07-24 11:11 - 00000000 ____D () C:\Users\userABC_000\Desktop\hci-thesis-and-project-report-template
2014-07-24 11:03 - 2014-07-24 11:03 - 00000000 ____D () C:\Users\userABC_000\Desktop\OpenSceneGraph-3.2.1
2014-07-24 10:53 - 2014-07-24 10:54 - 07219212 _____ () C:\Users\userABC_000\Downloads\OpenSceneGraph-3.2.1.zip
2014-07-23 13:12 - 2014-07-23 13:12 - 00133828 _____ () C:\Users\userABC_000\Downloads\DeusExe-v6.2.zip
2014-07-23 13:12 - 2014-07-23 13:12 - 00111744 _____ () C:\Users\userABC_000\Downloads\dxglr20.zip
2014-07-23 13:12 - 2014-07-23 13:12 - 00109155 _____ () C:\Users\userABC_000\Downloads\dxd3d9r13.zip
2014-07-23 13:10 - 2014-07-23 13:10 - 01732150 _____ () C:\Users\userABC_000\Downloads\DXENB.RAR
2014-07-23 13:07 - 2014-07-23 13:08 - 18363191 _____ (Off Topic Productions) C:\Users\userABC_000\Downloads\HDTP-Release1.exe
2014-07-23 13:06 - 2014-07-23 13:09 - 52787997 _____ () C:\Users\userABC_000\Downloads\HDTPBeta03.zip
2014-07-23 13:03 - 2014-07-23 13:54 - 1239299948 _____ (DaveW) C:\Users\userABC_000\Downloads\New_Vision_v1-5.exe
2014-07-23 12:56 - 2014-07-10 06:16 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-07-23 12:56 - 2014-07-10 06:03 - 04756992 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-07-23 12:56 - 2014-07-10 05:33 - 01120256 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-07-22 22:36 - 2014-08-10 13:00 - 00001496 _____ () C:\Windows\Sandboxie.ini
2014-07-22 21:15 - 2014-07-22 21:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-22 20:18 - 2014-07-22 20:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie
2014-07-22 19:23 - 2014-07-22 19:23 - 00000000 ____D () C:\Program Files\Sandboxie
2014-07-20 13:12 - 2014-07-20 13:12 - 00381105 _____ () C:\Users\userABC_000\Downloads\UEQ_kit.zip
2014-07-15 19:51 - 2014-07-15 21:31 - 00000000 ____D () C:\Users\userABC_000\Desktop\Imbo
2014-07-13 17:26 - 2014-07-13 17:26 - 00000000 ____D () C:\Users\userABC_000\Desktop\ASE251
2014-07-13 17:25 - 2014-07-13 17:25 - 00011364 _____ () C:\Users\userABC_000\Downloads\ASE251.zip

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-11 22:47 - 2014-08-11 03:05 - 00026730 _____ () C:\Users\userABC_000\Downloads\FRST.txt
2014-08-11 22:46 - 2014-08-11 03:05 - 00000000 ____D () C:\FRST
2014-08-11 22:46 - 2014-04-10 19:49 - 00000074 _____ () C:\Users\userABC_000\AppData\Roaming\sp_data.sys
2014-08-11 22:45 - 2014-04-15 15:41 - 00005156 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for LORDHELIX-userABC_000 LordHelix
2014-08-11 22:44 - 2014-04-21 23:57 - 00001132 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-11 22:44 - 2014-04-10 19:50 - 00000000 __RDO () C:\Users\userABC_000\SkyDrive
2014-08-11 22:43 - 2014-08-11 02:34 - 00001656 _____ () C:\Windows\PFRO.log
2014-08-11 22:43 - 2014-08-06 15:45 - 00000354 _____ () C:\Windows\Tasks\GlaryInitialize.job
2014-08-11 22:43 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-11 22:42 - 2014-08-11 02:31 - 00000000 ____D () C:\AdwCleaner
2014-08-11 22:42 - 2014-04-22 14:33 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat
2014-08-11 22:42 - 2013-08-22 15:25 - 00524288 ___SH () C:\Windows\system32\config\BBI
2014-08-11 22:13 - 2014-04-21 23:57 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-11 22:04 - 2014-04-11 12:48 - 00001156 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-110364190-1643542413-822559574-1001UA.job
2014-08-11 22:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-08-11 21:26 - 2014-06-21 00:24 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-08-11 20:34 - 2014-07-29 16:00 - 00432889 _____ () C:\Windows\WindowsUpdate.log
2014-08-11 17:51 - 2014-08-11 02:28 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-11 17:26 - 2014-06-21 05:04 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-08-11 17:02 - 2014-04-10 19:54 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-110364190-1643542413-822559574-1001
2014-08-11 16:40 - 2014-08-11 16:23 - 00012905 _____ () C:\Users\userABC_000\Downloads\hijackthis.log
2014-08-11 16:21 - 2014-08-11 16:21 - 00388608 _____ (Trend Micro Inc.) C:\Users\userABC_000\Downloads\HiJackThis204.exe
2014-08-11 16:18 - 2014-06-21 05:04 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-08-11 16:07 - 2014-08-11 16:07 - 00000954 _____ () C:\Users\userABC_000\Desktop\JRT.txt
2014-08-11 09:07 - 2014-08-11 09:07 - 00000000 ____D () C:\Windows\ERUNT
2014-08-11 04:26 - 2014-08-11 04:25 - 00100179 _____ () C:\Users\userABC_000\Downloads\Addition.txt
2014-08-11 03:31 - 2014-04-10 19:48 - 00000000 ____D () C:\Users\userABC_000
2014-08-11 03:04 - 2014-08-11 03:04 - 02099712 _____ (Farbar) C:\Users\userABC_000\Downloads\FRST64.exe
2014-08-11 03:03 - 2014-08-11 03:03 - 01091072 _____ (Farbar) C:\Users\userABC_000\Downloads\FRST.exe
2014-08-11 02:44 - 2014-08-11 02:44 - 00709564 _____ () C:\Users\userABC_000\Downloads\delfix_10.8.exe
2014-08-11 02:44 - 2014-08-11 02:44 - 00448512 _____ (OldTimer Tools) C:\Users\userABC_000\Downloads\TFC.exe
2014-08-11 02:42 - 2014-08-11 02:42 - 01016261 _____ (Thisisu) C:\Users\userABC_000\Downloads\JRT_6.1.4 (1).exe
2014-08-11 02:35 - 2014-08-11 02:35 - 1046385731 _____ () C:\Windows\MEMORY.DMP
2014-08-11 02:35 - 2014-08-11 02:35 - 00303264 _____ () C:\Windows\Minidump\081114-67359-01.dmp
2014-08-11 02:35 - 2014-07-24 23:52 - 00000000 ____D () C:\Windows\Minidump
2014-08-11 02:35 - 2013-08-22 16:44 - 00526640 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-11 02:32 - 2014-08-11 02:32 - 02347384 _____ (ESET) C:\Users\userABC_000\Downloads\Nicht bestätigt 570719.crdownload
2014-08-11 02:32 - 2014-08-11 02:32 - 00854410 _____ () C:\Users\userABC_000\Downloads\SecurityCheck.exe
2014-08-11 02:31 - 2014-08-11 02:31 - 01366203 _____ () C:\Users\userABC_000\Downloads\adwcleaner_3.304.exe
2014-08-11 02:30 - 2014-08-11 02:30 - 01016261 _____ (Thisisu) C:\Users\userABC_000\Downloads\JRT_6.1.4.exe
2014-08-11 02:29 - 2014-06-01 15:24 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\vlc
2014-08-11 02:28 - 2014-08-11 02:28 - 00001116 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-11 02:28 - 2014-08-11 02:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-11 02:28 - 2014-08-11 02:28 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-11 02:28 - 2014-08-11 02:28 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-11 02:26 - 2014-08-11 02:26 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\userABC_000\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-11 02:26 - 2014-08-11 02:26 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\userABC_000\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-08-11 01:54 - 2014-08-11 00:31 - 00000161 _____ () C:\Users\userABC_000\Desktop\Neues Textdokument (4).txt
2014-08-11 01:49 - 2014-08-11 01:49 - 00000000 ____D () C:\Users\userABC_000\AppData\Local\Temp9f74e24dbbb7daf280bfb67f55219c5f
2014-08-10 23:33 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-08-10 13:59 - 2014-07-29 02:27 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\tor
2014-08-10 13:59 - 2014-07-29 01:53 - 00000000 ____D () C:\Users\userABC_000\AppData\Local\Vidalia
2014-08-10 13:00 - 2014-07-22 22:36 - 00001496 _____ () C:\Windows\Sandboxie.ini
2014-08-10 04:04 - 2014-04-11 12:48 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-110364190-1643542413-822559574-1001Core.job
2014-08-10 02:53 - 2014-05-20 01:43 - 00000000 ____D () C:\Users\userABC_000\Documents\Visual Studio 2013
2014-08-10 02:33 - 2014-08-10 02:33 - 00421971 _____ () C:\Users\userABC_000\Downloads\libusb-1.0.9.tar.bz2
2014-08-10 02:30 - 2014-08-10 02:30 - 00970155 _____ () C:\Users\userABC_000\Downloads\vrpn_07_26.zip
2014-08-10 02:30 - 2014-08-10 02:30 - 00002724 _____ () C:\Users\userABC_000\Downloads\VRPNTutorial.zip
2014-08-10 01:57 - 2014-08-10 01:57 - 14605046 _____ () C:\Users\userABC_000\Downloads\VRPN-07.29.0-git-version_07.29-211-g6d674b0-Windows- (1).zip
2014-08-10 00:57 - 2014-08-10 00:57 - 14605046 _____ () C:\Users\userABC_000\Downloads\VRPN-07.29.0-git-version_07.29-211-g6d674b0-Windows-.zip
2014-08-10 00:57 - 2014-08-10 00:57 - 00254478 _____ () C:\Users\userABC_000\Downloads\WiiUse-0.13.1-vs9 (1).exe
2014-08-10 00:57 - 2014-08-10 00:57 - 00058006 _____ () C:\Users\userABC_000\Downloads\WiiUse-0.13.1-vs9.zip
2014-08-10 00:51 - 2014-08-10 00:50 - 60867934 _____ () C:\Users\userABC_000\Downloads\vrjuggler-2.2.2-svn-vc9.7z
2014-08-10 00:51 - 2014-08-10 00:50 - 28778137 _____ () C:\Users\userABC_000\Downloads\vrjugglua-3.0-vc9-2.8git-snapshot20111003.zip
2014-08-10 00:50 - 2014-08-10 00:50 - 02884784 _____ () C:\Users\userABC_000\Downloads\rpavlik-vrpn-wmhtgui-sensitivity-0-gabeebb0.zip
2014-08-10 00:50 - 2014-08-10 00:50 - 01296391 _____ () C:\Users\userABC_000\Downloads\rpavlik-vrpn-wmhtgui-initial-requirements-283-g40d4af0.tar.gz
2014-08-10 00:50 - 2014-08-10 00:50 - 00254478 _____ () C:\Users\userABC_000\Downloads\WiiUse-0.13.1-vs9.exe
2014-08-10 00:49 - 2014-08-10 00:49 - 01099239 _____ () C:\Users\userABC_000\Downloads\vrpn-wiimote-pre2-07.27-wiimote.tar.gz
2014-08-10 00:49 - 2014-08-10 00:49 - 00429936 _____ (Ryan Pavlik ) C:\Users\userABC_000\Downloads\setup-git-windows-mintty-1.1.exe
2014-08-10 00:44 - 2014-08-10 00:44 - 12292707 _____ () C:\Users\userABC_000\Downloads\vrjuggler-3.0.1-1-src.7z
2014-08-10 00:43 - 2014-08-10 00:43 - 00788770 _____ () C:\Users\userABC_000\Downloads\WiiYourself!_1.15.zip
2014-08-10 00:36 - 2014-08-10 00:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blade of Darkness [GOG.com]
2014-08-10 00:23 - 2014-08-10 00:23 - 20562001 _____ () C:\Users\userABC_000\Downloads\VRPN-07.31.0-git-07.31-54-gbb55950-Windows-.zip
2014-08-10 00:17 - 2014-08-10 00:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CMake 3.0.1
2014-08-10 00:16 - 2014-08-10 00:16 - 00000000 ____D () C:\Program Files (x86)\CMake
2014-08-10 00:16 - 2014-08-10 00:15 - 11299622 _____ () C:\Users\userABC_000\Downloads\cmake-3.0.1-win32-x86.exe
2014-08-09 23:44 - 2014-08-09 23:44 - 15999866 _____ () C:\Users\userABC_000\Downloads\vrpn_07_30.zip
2014-08-09 23:33 - 2014-08-09 23:33 - 18075980 _____ () C:\Users\userABC_000\Downloads\vrpn_07_31.zip
2014-08-09 17:37 - 2014-08-09 17:27 - 00049148 _____ () C:\Windows\War3Unin.dat
2014-08-09 17:36 - 2014-08-09 17:26 - 00139264 _____ (Blizzard Entertainment) C:\Windows\War3Unin.exe
2014-08-09 17:36 - 2014-08-09 17:26 - 00002829 _____ () C:\Windows\War3Unin.pif
2014-08-09 17:36 - 2014-08-09 17:26 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Warcraft III
2014-08-09 17:36 - 2014-08-09 17:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Warcraft III
2014-08-09 17:32 - 2014-08-09 17:32 - 00000000 ____D () C:\Users\userABC_000\AppData\Local\DOSBox
2014-08-09 17:29 - 2014-08-09 17:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DotEmu
2014-08-09 17:20 - 2014-08-09 17:20 - 00000000 ____D () C:\Users\userABC_000\Desktop\LBA_1_Master
2014-08-09 02:03 - 2014-04-23 17:38 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\Skype
2014-08-09 01:14 - 2014-04-10 22:38 - 00000000 ____D () C:\Users\userABC_000\Documents\Visual Studio 2012
2014-08-08 23:26 - 2014-08-08 23:26 - 01046636 _____ () C:\Users\userABC_000\Downloads\SC3_HLSP_enabler.rar
2014-08-08 23:26 - 2014-08-08 23:26 - 00000000 ____D () C:\Users\userABC_000\Desktop\SC3_HLSP_enabler
2014-08-08 01:06 - 2014-08-08 01:06 - 00000000 ____D () C:\Users\userABC_000\AppData\Local\Adam_Reece
2014-08-08 00:55 - 2014-08-08 00:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sven Co-op
2014-08-08 00:44 - 2014-08-08 00:26 - 755100549 _____ () C:\Users\userABC_000\Downloads\svencoop48.exe
2014-08-07 03:51 - 2014-04-28 13:03 - 00000000 ____D () C:\Users\userABC_000\.gimp-2.8
2014-08-06 21:37 - 2014-08-06 21:37 - 00021458 _____ () C:\Users\userABC_000\AppData\Local\recently-used.xbel
2014-08-06 21:37 - 2014-04-28 13:14 - 00000000 ____D () C:\Users\userABC_000\AppData\Local\gtk-2.0
2014-08-06 18:45 - 2014-04-22 21:27 - 02713088 ___SH () C:\Users\userABC_000\Desktop\Thumbs.db
2014-08-06 15:46 - 2014-08-06 15:46 - 00000000 ___HD () C:\Users\userABC_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
2014-08-06 15:46 - 2014-08-06 15:46 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\GlarySoft
2014-08-06 15:45 - 2014-08-06 15:45 - 00002620 _____ () C:\Windows\System32\Tasks\GlaryInitialize
2014-08-06 15:45 - 2014-08-06 15:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities
2014-08-06 15:45 - 2014-08-06 15:45 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities
2014-08-06 15:21 - 2014-08-06 15:21 - 00826192 _____ (Chip Digital GmbH) C:\Users\userABC_000\Downloads\Revo Uninstaller - CHIP-Installer.exe
2014-08-06 15:21 - 2014-08-06 15:20 - 00826192 _____ (Chip Digital GmbH) C:\Users\userABC_000\Downloads\Glary Utilities - CHIP-Installer.exe
2014-08-06 15:12 - 2014-08-06 15:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tools&More
2014-08-06 15:11 - 2014-08-06 15:11 - 00000000 ____D () C:\Program Files (x86)\Tools&More
2014-08-06 15:09 - 2014-08-06 15:09 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-08-06 15:00 - 2014-08-06 15:00 - 00826192 _____ (Chip Digital GmbH) C:\Users\userABC_000\Downloads\AutoStart Manager - CHIP-Installer.exe
2014-08-06 03:50 - 2014-08-06 03:50 - 00000138 _____ () C:\Users\userABC_000\AppData\Local\psppirerc
2014-08-06 03:25 - 2014-08-04 20:17 - 00000180 _____ () C:\Users\userABC_000\pspp.jnl
2014-08-05 19:36 - 2014-08-05 19:32 - 114760879 _____ () C:\Users\userABC_000\Downloads\OneLateNight.zip
2014-08-05 19:35 - 2014-08-05 19:32 - 114763930 _____ () C:\Users\userABC_000\Downloads\OneLateNight_dx11.zip
2014-08-05 18:44 - 2014-08-05 18:44 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-08-05 18:44 - 2014-08-05 18:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-08-05 18:44 - 2014-08-05 18:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-08-05 18:44 - 2014-08-05 18:44 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-08-05 18:44 - 2014-08-05 18:44 - 00000000 ____D () C:\Program Files\Java
2014-08-05 18:42 - 2014-08-05 18:42 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-05 18:41 - 2014-04-15 16:29 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-05 18:10 - 2014-08-05 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco
2014-08-05 18:10 - 2014-06-02 20:16 - 00000000 ____D () C:\Program Files (x86)\Cisco
2014-08-05 18:10 - 2014-06-02 20:15 - 00000000 ____D () C:\ProgramData\Cisco
2014-08-05 16:32 - 2014-04-10 23:25 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-08-05 00:58 - 2014-08-05 00:58 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\xp-AntiSpy
2014-08-05 00:58 - 2014-08-05 00:58 - 00000000 ____D () C:\Program Files (x86)\xp-AntiSpy
2014-08-04 22:52 - 2014-08-04 22:41 - 535984318 _____ () C:\Users\userABC_000\Downloads\LBA_1_Master.zip
2014-08-04 20:16 - 2014-08-04 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PSPP
2014-08-04 20:16 - 2014-08-04 20:16 - 00000000 ____D () C:\Program Files (x86)\PSPP
2014-08-03 11:49 - 2014-08-02 19:36 - 00000000 ____D () C:\Users\userABC_000\Desktop\HMI-Bericht
2014-08-03 00:38 - 2014-08-03 00:37 - 58014125 _____ (Docear) C:\Users\userABC_000\Downloads\docear.exe
2014-08-02 23:59 - 2014-04-15 15:08 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\texstudio
2014-08-02 22:54 - 2014-08-02 21:46 - 00000000 ____D () C:\ProgramData\MySQL
2014-08-02 22:54 - 2014-05-27 19:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MySQL
2014-08-02 21:53 - 2014-05-27 19:30 - 00000000 ____D () C:\Program Files (x86)\MySQL
2014-08-02 21:52 - 2014-08-02 21:52 - 00000000 ____D () C:\Program Files\MySQL
2014-08-02 21:52 - 2014-08-02 21:47 - 131758072 _____ (Bitnami) C:\Users\userABC_000\Downloads\xampp-win32-1.8.3-3-VC11-installer.exe
2014-08-02 21:46 - 2014-08-02 21:46 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MySQL
2014-08-02 21:30 - 2014-08-02 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JabRef
2014-08-02 21:29 - 2014-08-02 21:29 - 00000000 ____D () C:\Program Files (x86)\JabRef
2014-08-02 20:52 - 2014-08-02 20:52 - 00173213 _____ () C:\Users\userABC_000\Desktop\Neues Textdokument (3).txt
2014-08-02 19:45 - 2014-08-02 19:45 - 00000729 _____ () C:\Users\Public\Desktop\TeXstudio.lnk
2014-08-02 19:45 - 2014-04-15 15:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeXstudio
2014-08-02 18:41 - 2014-08-02 18:41 - 00354371 _____ () C:\Users\userABC_000\Desktop\biblatex-apa.zip
2014-08-02 18:40 - 2014-08-02 18:40 - 00817714 _____ () C:\Users\userABC_000\Desktop\apacite.zip
2014-08-02 18:38 - 2014-08-02 18:38 - 00597534 _____ () C:\Users\userABC_000\Desktop\apa6.zip
2014-08-02 11:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-08-01 02:01 - 2014-08-01 02:01 - 00001381 _____ () C:\Users\userABC_000\Desktop\SbieCtrl.exe - Verknüpfung.lnk
2014-07-31 21:46 - 2014-04-10 20:44 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\Notepad++
2014-07-31 21:00 - 2014-07-31 20:59 - 00000000 ____D () C:\Users\userABC_000\Desktop\export
2014-07-31 05:10 - 2014-07-31 05:10 - 00001726 _____ () C:\Users\userABC_000\Desktop\vidalia.exe - Verknüpfung.lnk
2014-07-30 00:21 - 2014-04-10 20:44 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-07-29 13:35 - 2014-04-27 18:10 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\BitTorrent
2014-07-29 13:35 - 2014-04-27 18:05 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\uTorrent
2014-07-29 13:34 - 2013-12-13 13:45 - 00000000 ____D () C:\Windows\Panther
2014-07-29 13:16 - 2014-07-29 13:16 - 00002780 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-07-29 13:16 - 2014-07-29 13:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-07-29 13:16 - 2014-07-29 13:16 - 00000000 ____D () C:\Program Files\CCleaner
2014-07-29 11:03 - 2014-04-10 19:52 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\WebStorage
2014-07-29 02:29 - 2014-07-29 02:29 - 00000000 ___RD () C:\Sandbox
2014-07-29 02:28 - 2014-07-29 02:28 - 00001502 _____ () C:\Users\userABC_000\Desktop\firefox.exe - Verknüpfung.lnk
2014-07-29 02:15 - 2014-07-29 02:15 - 00000000 ____D () C:\Users\userABC_000\Desktop\Tor Browser
2014-07-29 01:53 - 2014-07-29 01:53 - 00000000 ____D () C:\Users\userABC_000\AppData\Local\Tor
2014-07-29 01:53 - 2014-07-29 01:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vidalia Bridge Bundle
2014-07-29 01:53 - 2014-07-29 01:53 - 00000000 ____D () C:\Program Files (x86)\Vidalia Bridge Bundle
2014-07-28 19:17 - 2014-04-10 22:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unreal Development Kit
2014-07-28 18:55 - 2014-07-28 18:55 - 00000000 ___RD () C:\Users\userABC_000\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App
2014-07-28 03:18 - 2014-07-28 03:18 - 00000000 ____D () C:\Users\userABC_000\Desktop\Bericht
2014-07-28 03:17 - 2014-07-28 03:17 - 02699073 _____ () C:\Users\userABC_000\Downloads\Bericht.zip
2014-07-28 03:17 - 2014-07-28 03:17 - 00000209 _____ () C:\Users\userABC_000\Desktop\MBG-Bericht.html
2014-07-27 17:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-07-27 15:51 - 2013-12-13 13:04 - 00807196 _____ () C:\Windows\system32\perfh007.dat
2014-07-27 15:51 - 2013-12-13 13:04 - 00176672 _____ () C:\Windows\system32\perfc007.dat
2014-07-27 15:51 - 2013-12-13 06:09 - 01886820 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-26 23:44 - 2014-07-26 23:44 - 00000000 ____D () C:\Users\Public\CyberLink
2014-07-26 23:41 - 2014-07-26 23:40 - 00000000 ____D () C:\Users\userABC_000\Documents\CyberLink
2014-07-26 23:41 - 2014-07-26 23:40 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\CyberLink
2014-07-26 23:41 - 2014-07-26 23:40 - 00000000 ____D () C:\ProgramData\CyberLink
2014-07-26 17:05 - 2014-04-22 18:56 - 00000000 ____D () C:\Users\userABC_000\Documents\My Games
2014-07-25 17:30 - 2014-07-25 02:25 - 00000000 ____D () C:\Users\userABC_000\Documents\Overlord
2014-07-25 17:11 - 2014-07-25 17:11 - 00000000 ____D () C:\Users\userABC_000\Desktop\x360ce.App-2.1.2.191
2014-07-25 04:36 - 2014-07-10 16:13 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\foobar2000
2014-07-25 01:59 - 2014-07-25 01:58 - 00000000 ____D () C:\Users\userABC_000\Documents\Giana Sisters - Twisted Dreams
2014-07-24 23:52 - 2014-05-28 02:46 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 23:52 - 2014-05-28 02:46 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 20:07 - 2014-05-28 02:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-24 18:18 - 2014-07-24 18:18 - 00581031 _____ () C:\Users\userABC_000\Desktop\hci-thesis-and-project-report-template.zip
2014-07-24 17:53 - 2014-07-24 17:53 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\MMFApplications
2014-07-24 12:19 - 2014-07-24 12:19 - 00000000 ____D () C:\Users\userABC_000\Desktop\hci-paper-style-report-template
2014-07-24 11:12 - 2014-07-24 11:12 - 00000000 ____D () C:\Users\userABC_000\AppData\Roaming\MiKTeX
2014-07-24 11:11 - 2014-07-24 11:11 - 00000000 ____D () C:\Users\userABC_000\Desktop\hci-thesis-and-project-report-template
2014-07-24 11:03 - 2014-07-24 11:03 - 00000000 ____D () C:\Users\userABC_000\Desktop\OpenSceneGraph-3.2.1
2014-07-24 11:00 - 2014-07-10 16:44 - 00000000 ____D () C:\Users\userABC_000\Desktop\Poster
2014-07-24 10:54 - 2014-07-24 10:53 - 07219212 _____ () C:\Users\userABC_000\Downloads\OpenSceneGraph-3.2.1.zip
2014-07-24 08:44 - 2014-04-10 20:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-23 13:54 - 2014-07-23 13:03 - 1239299948 _____ (DaveW) C:\Users\userABC_000\Downloads\New_Vision_v1-5.exe
2014-07-23 13:12 - 2014-07-23 13:12 - 00133828 _____ () C:\Users\userABC_000\Downloads\DeusExe-v6.2.zip
2014-07-23 13:12 - 2014-07-23 13:12 - 00111744 _____ () C:\Users\userABC_000\Downloads\dxglr20.zip
2014-07-23 13:12 - 2014-07-23 13:12 - 00109155 _____ () C:\Users\userABC_000\Downloads\dxd3d9r13.zip
2014-07-23 13:10 - 2014-07-23 13:10 - 01732150 _____ () C:\Users\userABC_000\Downloads\DXENB.RAR
2014-07-23 13:09 - 2014-07-23 13:06 - 52787997 _____ () C:\Users\userABC_000\Downloads\HDTPBeta03.zip
2014-07-23 13:08 - 2014-07-23 13:07 - 18363191 _____ (Off Topic Productions) C:\Users\userABC_000\Downloads\HDTP-Release1.exe
2014-07-23 03:30 - 2014-06-18 00:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox.bak
2014-07-22 21:15 - 2014-07-22 21:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-22 20:18 - 2014-07-22 20:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie
2014-07-22 19:23 - 2014-07-22 19:23 - 00000000 ____D () C:\Program Files\Sandboxie
2014-07-20 13:39 - 2014-04-10 19:48 - 00000000 ____D () C:\Users\userABC_000\AppData\Local\Packages
2014-07-20 13:12 - 2014-07-20 13:12 - 00381105 _____ () C:\Users\userABC_000\Downloads\UEQ_kit.zip
2014-07-15 21:31 - 2014-07-15 19:51 - 00000000 ____D () C:\Users\userABC_000\Desktop\Imbo
2014-07-14 14:40 - 2014-04-11 11:30 - 00000000 ____D () C:\Users\userABC_000\AppData\Local\Unity
2014-07-13 17:26 - 2014-07-13 17:26 - 00000000 ____D () C:\Users\userABC_000\Desktop\ASE251
2014-07-13 17:25 - 2014-07-13 17:25 - 00011364 _____ () C:\Users\userABC_000\Downloads\ASE251.zip

Files to move or delete:
====================
C:\ProgramData\SetStretch.exe
C:\ProgramData\SetStretch.VBS


Some content of TEMP:
====================
C:\Users\userABC_000\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-09 21:32

==================== End Of Log ============================