Programme lasssen sich nicht vollständig entfernen

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 08:09 on 26/04/2015 (Admin)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-04-2015
Ran by Admin (administrator) on DANIELA-PC on 26-04-2015 08:12:19
Running from C:\Users\Admin\Desktop
Loaded Profiles: Admin (Available profiles: Daniela & Admin & Dani)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IObit) C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Ralink Technology, Corp.) C:\Program Files\Ralink\Common\RaRegistry.exe
(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(IObit) C:\Program Files\IObit\Advanced SystemCare 8\Monitor.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(G Data Software AG) C:\Program Files\G DATA\USB KEYBOARD GUARD\GD2NDKBB.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(IObit) C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe
(Ralink Technology, Corp.) C:\Program Files\Ralink\Common\RaUI.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BDExtHost.exe
(Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BDAppHost.exe
(Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BDRuntimeHost.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_17_0_0_169_ActiveX.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [978520 2015-01-30] (Microsoft Corporation)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AMD AVT] => C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM\...\Run: [BingDesktop] => C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe [2372800 2014-11-26] (Microsoft Corp.)
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [GDataUsbProtection] => C:\Program Files\G DATA\USB KEYBOARD GUARD\GD2NDKBB.exe [1405560 2014-09-03] (G Data Software AG)
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [448520 2015-04-08] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\Run: [Advanced SystemCare 8] => C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit)
HKU\S-1-5-18\...\Run: [Advanced SystemCare 8] => C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2014-04-26]
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Nach Updates suchen.lnk [2015-04-22]
ShortcutTarget: Nach Updates suchen.lnk -> C:\Program Files\Common Files\PCTV Systems\WebUpdater\WebUpdater.exe (PCTV Systems)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ralink Wireless Utility.lnk [2015-01-06]
ShortcutTarget: Ralink Wireless Utility.lnk -> C:\Program Files\Ralink\Common\RaUI.exe (Ralink Technology, Corp.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll [2015-04-26] (IObit)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-16] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2015-04-01] (IObit)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-16] (Oracle Corporation)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)
DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ubhm5qpi.default
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF Keyword.URL: hxxp://google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1217157.dll [2015-02-16] (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-16] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-16] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll [2014-12-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @nullsoft.com/winampDetector;version=1 -> C:\Program Files\Winamp Detect\npwachk.dll [2013-12-13] (Nullsoft, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2014-10-24] (Apple Inc.)
FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ubhm5qpi.default\searchplugins\search_engine.xml [2014-07-14]
FF Extension: Amazon-Icon - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ubhm5qpi.default\Extensions\amazon-icon@giga.de [2014-06-07]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ubhm5qpi.default\Extensions\iobitascsurfingprotection@iobit.com [2015-04-26]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-04-08]
FF HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\Admin\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2014-06-07]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [Not Found]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdvancedSystemCareService8; C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe [814880 2015-04-03] (IObit)
R2 BingDesktopUpdate; C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe [173248 2014-11-26] (Microsoft Corp.)
R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [370792 2010-01-21] ()
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed]
S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2585376 2015-03-26] (IObit)
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22184 2015-01-30] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [284472 2015-01-30] (Microsoft Corporation)
R2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [167528 2010-01-21] ()
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]
R2 RalinkRegistryWriter; C:\Program Files\Ralink\Common\RaRegistry.exe [372736 2012-01-13] (Ralink Technology, Corp.) [File not signed]
S3 RaMediaServer; C:\Program Files\Ralink\Common\RaMediaServer.exe [625728 2011-08-18] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 azvusb; C:\Windows\System32\DRIVERS\azvusb.sys [44544 2009-08-24] (AzureWave Technologies, Inc.)
S3 DrvAgent32; C:\Windows\system32\Drivers\DrvAgent32.sys [23456 2015-04-22] (Phoenix Technologies) [File not signed]
R3 GDKBBlocker; C:\Windows\system32\drivers\GDKBBlocker32.sys [27648 2015-04-06] (G Data Software AG)
R1 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [92888 2015-04-14] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2015-04-26] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [239224 2014-11-15] (Microsoft Corporation)
S3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [1308736 2012-03-02] (Ralink Technology Corp.)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35088 2010-06-25] (CACE Technologies, Inc.)
S3 Ph6xIB32; C:\Windows\System32\DRIVERS\Ph6xIB32.sys [1277952 2009-07-14] (NXP Semiconductors GmbH)
R3 PhilCap; C:\Windows\System32\DRIVERS\PhilCap.sys [908832 2007-07-30] (NXP Semiconductors Germany GmbH)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [15576 2013-07-01] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [10200 2013-07-01] ()
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Admin\AppData\Local\Temp\catchme.sys [X]
S3 cpuz137; \??\C:\Program Files\CPUID\PC Wizard 2013\pcwiz_x32.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-26 08:12 - 2015-04-26 08:12 - 00016746 _____ () C:\Users\Admin\Desktop\FRST.txt
2015-04-26 08:12 - 2015-04-26 08:12 - 00000000 ____D () C:\FRST
2015-04-26 08:10 - 2015-04-26 08:10 - 01139200 _____ (Farbar) C:\Users\Admin\Desktop\FRST.exe
2015-04-26 08:09 - 2015-04-26 08:09 - 00000472 _____ () C:\Users\Admin\Desktop\defogger_disable.log
2015-04-26 08:09 - 2015-04-26 08:09 - 00000000 _____ () C:\Users\Admin\defogger_reenable
2015-04-26 08:08 - 2015-04-26 08:08 - 00050477 _____ () C:\Users\Admin\Desktop\Defogger.exe
2015-04-26 07:46 - 2015-04-26 07:53 - 00000000 ____D () C:\Program Files\Common Files\SpeedBit
2015-04-26 07:43 - 2015-04-26 07:43 - 00001583 _____ () C:\Users\Daniela\Desktop\My DAP Downloads.lnk
2015-04-26 07:43 - 2015-04-26 07:43 - 00000897 _____ () C:\Users\Daniela\Desktop\Download Accelerator Plus (DAP).lnk
2015-04-26 07:41 - 2015-04-26 05:00 - 01045208 _____ () C:\Users\Admin\Downloads\dap10i_65aca9a390_setup.exe
2015-04-26 07:38 - 2015-04-26 07:38 - 00109664 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-26 07:28 - 2015-04-26 08:01 - 00000224 _____ () C:\Windows\setupact.log
2015-04-26 07:28 - 2015-04-26 08:00 - 00006228 _____ () C:\Windows\PFRO.log
2015-04-26 07:28 - 2015-04-26 07:28 - 00411880 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-26 07:28 - 2015-04-26 07:28 - 00000000 _____ () C:\Windows\setuperr.log
2015-04-26 06:22 - 2015-04-26 07:01 - 00000932 _____ () C:\Users\Daniela\Desktop\RegCleaner.lnk
2015-04-26 06:22 - 2015-04-26 06:22 - 00000000 ____D () C:\Program Files\RegCleaner
2015-04-26 05:07 - 2015-04-26 07:59 - 00000000 ____D () C:\Users\Public\Documents\Speedbit
2015-04-26 05:04 - 2015-04-26 05:04 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Speedbit
2015-04-26 05:02 - 2015-04-26 07:42 - 00000000 ____D () C:\ProgramData\SpeedBit
2015-04-26 05:02 - 2015-04-26 05:02 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\SpeedBit
2015-04-26 05:00 - 2015-04-26 05:00 - 01045208 _____ () C:\Users\Dani\Downloads\dap10i_65aca9a390_setup.exe
2015-04-26 02:12 - 2015-04-26 02:33 - 00000000 ____D () C:\Program Files\LeechGet 2009
2015-04-26 02:01 - 2015-04-26 02:03 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\GetRight
2015-04-26 01:53 - 2015-04-26 02:02 - 00000000 ____D () C:\ProgramData\GetRight
2015-04-26 01:50 - 2015-04-26 01:54 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\GetRight
2015-04-26 01:49 - 2015-04-26 02:03 - 00000000 ____D () C:\Program Files\GetRight
2015-04-26 01:36 - 2015-04-26 03:17 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Free Download Manager
2015-04-26 00:40 - 2015-04-26 00:40 - 48044320 _____ (IObit) C:\Users\Admin\Downloads\advanced-systemcare-setup.exe
2015-04-22 03:19 - 2015-04-22 03:19 - 00023456 _____ (Phoenix Technologies) C:\Windows\system32\Drivers\DrvAgent32.sys
2015-04-22 03:19 - 2015-04-22 03:19 - 00000000 ____D () C:\Users\Admin\AppData\Local\eSupport.com
2015-04-22 03:19 - 2015-04-22 03:19 - 00000000 ____D () C:\Program Files\eSupport.com
2015-04-22 03:01 - 2015-04-25 00:33 - 00000349 _____ () C:\Users\Public\Documents\PCLECHAL.INI
2015-04-22 02:59 - 2015-04-22 02:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PCTV Systems
2015-04-22 02:58 - 2015-04-22 02:59 - 00000000 ____D () C:\Program Files\Common Files\PCTV Systems
2015-04-22 02:58 - 2015-04-22 02:58 - 00000000 ____D () C:\Program Files\PCTV Systems
2015-04-22 02:40 - 2015-04-22 03:01 - 00000000 ____D () C:\ProgramData\PCTV Systems
2015-04-22 02:38 - 2015-04-22 02:39 - 00000000 ____D () C:\Users\Dani\Downloads\TVCenter Installation
2015-04-22 01:46 - 2015-04-22 01:49 - 590141104 _____ (PCTV Systems) C:\Users\Dani\Downloads\PCTVSystems_TVCenter_Setup_6.4.9.1033.exe
2015-04-22 01:38 - 2015-04-22 01:38 - 00107301 _____ () C:\Users\Dani\Downloads\DANIELA-PC.html
2015-04-22 01:35 - 2015-04-22 01:35 - 00000000 ____D () C:\Users\Dani\Downloads\GPU-Z.0.8.2
2015-04-22 01:31 - 2015-04-22 01:31 - 05451464 _____ (Advanced Micro Devices, Inc.) C:\Users\Dani\Downloads\autodetectutility.exe
2015-04-22 01:26 - 2015-04-22 01:26 - 00000000 ____D () C:\Users\Dani\Downloads\cpu-z_172
2015-04-22 01:19 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-04-22 01:18 - 2015-03-14 05:04 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-04-22 01:18 - 2015-03-14 05:04 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-04-18 04:23 - 2015-04-26 02:41 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\IDM
2015-04-18 04:23 - 2015-04-26 00:13 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\DMCache
2015-04-17 23:36 - 2015-04-17 23:36 - 00000000 ____D () C:\Users\Dani\AppData\Local\Apple
2015-04-16 00:18 - 2015-04-16 00:18 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-04-15 00:14 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-04-15 00:14 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-15 00:14 - 2015-03-17 07:01 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-15 00:14 - 2015-03-17 07:01 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-15 00:14 - 2015-03-17 06:59 - 01306112 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-15 00:14 - 2015-03-17 06:57 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-15 00:14 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-15 00:14 - 2015-03-17 06:57 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-15 00:14 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-15 00:14 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-15 00:14 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-15 00:14 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-15 00:14 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-15 00:14 - 2015-03-17 06:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-15 00:14 - 2015-03-17 06:56 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-15 00:14 - 2015-03-04 06:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-15 00:14 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 00:13 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-15 00:13 - 2015-03-17 06:57 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-15 00:13 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-15 00:13 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-15 00:13 - 2015-03-17 06:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-15 00:13 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-15 00:13 - 2015-03-17 06:56 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-15 00:13 - 2015-03-17 06:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-15 00:13 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-15 00:13 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-15 00:13 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-15 00:13 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-15 00:13 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-15 00:13 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-15 00:13 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-15 00:13 - 2015-03-13 05:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-15 00:13 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-15 00:13 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-15 00:13 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-15 00:13 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-15 00:13 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-15 00:13 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-15 00:13 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-15 00:13 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-15 00:13 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-15 00:13 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-15 00:13 - 2015-03-13 05:16 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-15 00:13 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-15 00:13 - 2015-03-13 05:09 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-15 00:13 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-15 00:13 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 00:13 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-15 00:13 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-15 00:13 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-15 00:13 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-15 00:13 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-15 00:13 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-15 00:13 - 2015-03-13 04:43 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-15 00:13 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-15 00:13 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-15 00:13 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-15 00:13 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-15 00:13 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-15 00:13 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-15 00:13 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-15 00:13 - 2015-03-05 06:06 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-15 00:13 - 2015-02-25 05:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-14 02:46 - 2015-04-14 02:46 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-04-13 03:51 - 2015-04-13 03:51 - 00000000 ____D () C:\Users\Dani\AppData\Local\HP
2015-04-12 00:56 - 2015-04-25 00:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2015-04-12 00:55 - 2015-04-25 00:31 - 00000000 ____D () C:\Program Files\DivX
2015-04-12 00:51 - 2015-04-12 00:51 - 01010672 _____ (DivX, LLC) C:\Users\Dani\Downloads\DivXInstaller.exe
2015-04-11 16:38 - 2015-04-11 16:38 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\HpUpdate
2015-04-11 03:56 - 2015-04-11 03:56 - 00000000 ____D () C:\Users\Dani\AppData\Local\Macromedia
2015-04-11 03:48 - 2015-04-11 03:49 - 00000000 ____D () C:\Users\Dani\Downloads\Microsoft Office 2007 Professional Plus
2015-04-11 03:48 - 2015-04-11 03:48 - 00000000 ____D () C:\Users\Dani\Downloads\Medion-Rechner
2015-04-10 23:30 - 2015-03-25 05:00 - 03088384 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-10 23:30 - 2015-03-25 05:00 - 02020864 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-10 23:30 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-10 23:30 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-10 23:30 - 2015-03-25 05:00 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-10 23:30 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-10 23:30 - 2015-03-25 05:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-10 23:30 - 2015-03-25 05:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-10 23:30 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-10 23:30 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-10 23:30 - 2015-03-25 05:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-09 20:53 - 2015-04-09 20:47 - 00560552 _____ (Oracle Corporation) C:\Users\Dani\Downloads\JavaSetup8u40.exe
2015-04-09 20:51 - 2015-04-16 00:17 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-04-09 20:51 - 2015-04-09 20:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-04-09 20:36 - 2015-04-09 20:37 - 00001933 _____ () C:\DelFix.txt
2015-04-09 20:36 - 2015-04-09 20:36 - 00000000 ____D () C:\Windows\ERUNT
2015-04-09 09:21 - 2015-04-09 09:21 - 00000000 ____D () C:\Users\Default\AppData\Roaming\ProductData
2015-04-09 09:21 - 2015-04-09 09:21 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\ProductData
2015-04-09 02:24 - 2015-04-09 02:24 - 00002619 _____ () C:\Users\Public\Desktop\Powerline Utility.lnk
2015-04-09 02:24 - 2015-04-09 02:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros
2015-04-09 02:24 - 2015-04-09 02:24 - 00000000 ____D () C:\Program Files\Qualcomm Atheros
2015-04-09 02:23 - 2015-04-09 02:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
2015-04-09 02:22 - 2015-04-09 02:23 - 00000000 ____D () C:\Program Files\WinPcap
2015-04-09 02:20 - 2015-04-09 02:21 - 00000000 ____D () C:\Users\Dani\Downloads\PowerPacketUtility german
2015-04-08 03:15 - 2014-12-03 00:10 - 00000000 ____D () C:\Users\Dani\.egvp2_client
2015-04-08 01:35 - 2015-03-23 05:06 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-08 01:35 - 2015-03-23 05:06 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-08 01:35 - 2015-03-23 05:06 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-08 01:35 - 2015-03-23 05:06 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-08 01:35 - 2015-03-23 05:06 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-08 01:35 - 2015-03-23 05:06 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-08 01:35 - 2015-03-23 05:06 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-08 01:35 - 2015-03-23 04:59 - 00896000 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-08 01:01 - 2015-04-08 01:01 - 00000000 ___HD () C:\Users\Dani\Documents\_SYNCAPP
2015-04-08 01:01 - 2015-04-08 01:01 - 00000000 ____D () C:\Users\Dani\Documents\X-Box Einrichtung der EasyBox 802
2015-04-08 01:01 - 2015-04-08 01:01 - 00000000 ____D () C:\Users\Dani\Documents\xbox
2015-04-08 01:01 - 2015-04-08 01:01 - 00000000 ____D () C:\Users\Dani\Documents\Wolfsberg
2015-04-08 01:01 - 2015-04-08 01:01 - 00000000 ____D () C:\Users\Dani\Documents\Turbo Lister Backup
2015-04-08 01:01 - 2015-04-08 01:01 - 00000000 ____D () C:\Users\Dani\Documents\TRC
2015-04-08 01:01 - 2015-04-08 01:01 - 00000000 ____D () C:\Users\Dani\Documents\Quiz
2015-04-08 01:01 - 2015-04-08 01:01 - 00000000 ____D () C:\Users\Dani\Documents\Projektarbeit
2015-04-08 01:01 - 2015-04-08 01:01 - 00000000 ____D () C:\Users\Dani\Documents\Outlook
2015-04-08 01:01 - 2015-04-08 01:01 - 00000000 ____D () C:\Users\Dani\Documents\onetouch Manager
2015-04-08 00:59 - 2015-04-08 01:00 - 00000000 ____D () C:\Users\Dani\Documents\Nokia
2015-04-08 00:56 - 2015-04-23 02:29 - 00000000 ____D () C:\Users\Dani\Documents\Eigene Scans
2015-04-08 00:56 - 2015-04-08 00:58 - 00000000 ____D () C:\Users\Dani\Documents\MyPhoneExplorer
2015-04-08 00:56 - 2015-04-08 00:56 - 00000000 ____D () C:\Users\Dani\Documents\Memorycard Handy
2015-04-08 00:56 - 2015-04-08 00:56 - 00000000 ____D () C:\Users\Dani\Documents\Kinderzuschlag
2015-04-08 00:56 - 2015-04-08 00:56 - 00000000 ____D () C:\Users\Dani\Documents\Handelsschule Herrmann
2015-04-08 00:56 - 2015-04-08 00:56 - 00000000 ____D () C:\Users\Dani\Documents\gegl-0.0
2015-04-08 00:56 - 2015-04-08 00:56 - 00000000 ____D () C:\Users\Dani\Documents\Fotos ibis acam
2015-04-08 00:56 - 2015-04-08 00:56 - 00000000 ____D () C:\Users\Dani\Documents\Fax
2015-04-08 00:56 - 2015-04-08 00:56 - 00000000 ____D () C:\Users\Dani\Documents\Elster
2015-04-08 00:56 - 2015-04-08 00:56 - 00000000 ____D () C:\Users\Dani\Documents\Eigene Webs
2015-04-08 00:56 - 2015-04-08 00:56 - 00000000 ____D () C:\Users\Dani\Documents\EGVP2
2015-04-08 00:56 - 2015-04-08 00:56 - 00000000 ____D () C:\Users\Dani\Documents\EGVP1
2015-04-08 00:56 - 2015-04-08 00:56 - 00000000 ____D () C:\Users\Dani\Documents\EGVP
2015-04-08 00:56 - 2015-04-08 00:56 - 00000000 ____D () C:\Users\Dani\Documents\Dozenten Handelsschule
2015-04-08 00:56 - 2010-03-25 22:08 - 00000000 ____D () C:\Users\Dani\Documents\My Art
2015-04-08 00:56 - 2010-03-24 20:26 - 00000000 ____D () C:\Users\Dani\Documents\ForceField Shared Files
2015-04-08 00:56 - 2007-12-15 00:01 - 00000000 ____D () C:\Users\Dani\Documents\Eigene eBooks
2015-04-08 00:55 - 2015-04-23 04:01 - 00000000 ____D () C:\Users\Dani\Documents\Bewerbungen, Schriftverkehr
2015-04-08 00:55 - 2015-04-08 00:55 - 00000000 ____D () C:\Users\Dani\Documents\Commerzbank
2015-04-08 00:55 - 2015-04-08 00:55 - 00000000 ____D () C:\Users\Dani\Documents\Anschluss FritzBox
2015-04-08 00:55 - 2015-04-08 00:55 - 00000000 ____D () C:\Users\Dani\Documents\ANNEN-POST
2015-04-08 00:55 - 2010-03-24 16:34 - 00000000 ____D () C:\Users\Dani\Documents\Bluetooth-Exchange-Ordner
2015-04-08 00:53 - 2015-04-08 00:55 - 00000000 ____D () C:\Users\Dani\Documents\Anlagen Outlook
2015-04-08 00:53 - 2015-04-08 00:53 - 00000000 ____D () C:\Users\Dani\Documents\Android Manager
2015-04-08 00:53 - 2014-12-05 03:04 - 00028160 _____ () C:\Users\Dani\Documents\XBOX360 ohne Batman+Halo3.xls
2015-04-08 00:53 - 2014-05-24 06:19 - 00023040 _____ () C:\Users\Dani\Documents\Torsten.xls
2015-04-08 00:53 - 2011-04-15 13:52 - 00024064 _____ () C:\Users\Dani\Documents\TRC_Gehälter.xls
2015-04-08 00:53 - 2011-03-08 22:52 - 00029696 _____ () C:\Users\Dani\Documents\TRC_Okt10.xls
2015-04-08 00:53 - 2011-03-08 22:50 - 00029184 _____ () C:\Users\Dani\Documents\TRC_Sept10.xls
2015-04-08 00:53 - 2011-03-08 22:49 - 00029184 _____ () C:\Users\Dani\Documents\TRC_Nov10.xls
2015-04-08 00:53 - 2011-01-14 16:29 - 00018944 _____ () C:\Users\Dani\Documents\TRC_Arbeitszeiten2.xls
2015-04-08 00:53 - 2010-11-27 21:38 - 00033792 _____ () C:\Users\Dani\Documents\TRC_Arbeitsplan.xls
2015-04-08 00:53 - 2010-08-31 08:42 - 00094720 _____ () C:\Users\Dani\Documents\TRC_Strichliste.xls
2015-04-08 00:53 - 2010-03-17 01:46 - 00083968 _____ () C:\Users\Dani\Documents\xp_gewinn_verlust.xls
2015-04-08 00:53 - 2009-07-14 15:20 - 00053760 _____ () C:\Users\Dani\Documents\TRC_Arbeitszeiten.xls
2015-04-08 00:53 - 2009-06-25 00:55 - 14149830 _____ () C:\Users\Dani\Documents\Spiegel TV - Über die TRC Telemedia, MC Multimedia &amp;amp; Allinkasso.AVI
2015-04-08 00:53 - 2009-03-04 15:00 - 00013824 _____ () C:\Users\Dani\Documents\Tilgung.xls
2015-04-08 00:53 - 2009-01-30 00:39 - 00019456 _____ () C:\Users\Dani\Documents\TRC_Jan.xls
2015-04-08 00:53 - 2009-01-18 10:21 - 00018944 _____ () C:\Users\Dani\Documents\TRC_Dez.xls
2015-04-08 00:53 - 2008-11-02 12:57 - 00018944 _____ () C:\Users\Dani\Documents\TSW.xls
2015-04-08 00:53 - 2008-09-16 01:36 - 00017408 _____ () C:\Users\Dani\Documents\TRC_Tätigkeitenüberblick.xls
2015-04-08 00:53 - 2008-03-24 01:54 - 03232845 _____ () C:\Users\Dani\Documents\Sonderheft_Netzwerke.zip
2015-04-08 00:53 - 2007-10-13 22:27 - 03254784 ____R () C:\Users\Dani\Documents\WelcomeToRomania[1].pps
2015-04-08 00:53 - 2007-04-29 17:32 - 00127488 ____R () C:\Users\Dani\Documents\Vodafone_April2007.xls
2015-04-08 00:53 - 2005-09-09 17:04 - 00015872 ____R () C:\Users\Dani\Documents\Stundenpläne.xls
2015-04-08 00:52 - 2015-04-24 23:32 - 00274944 _____ () C:\Users\Dani\Documents\Lampenwelt_Arbeitszeiten.xls
2015-04-08 00:52 - 2015-04-02 01:27 - 00062464 _____ () C:\Users\Dani\Documents\Finanzen.xls
2015-04-08 00:52 - 2015-03-16 04:08 - 00110080 _____ () C:\Users\Dani\Documents\Lampenwelt Lieferantenliste Ersatzgläser 1.5.xls
2015-04-08 00:52 - 2014-12-28 08:30 - 00112640 _____ () C:\Users\Dani\Documents\Lampenwelt Ersatz-Lieferantenliste Ersatzgläser Dezember 2014.xls
2015-04-08 00:52 - 2014-12-28 04:54 - 00061645 _____ () C:\Users\Dani\Documents\Lampenwelt Ersatz-Lieferantenliste Ersatzgläser Oktober 2014 1.3.xlsx
2015-04-08 00:52 - 2014-06-28 02:42 - 12971704 _____ () C:\Users\Dani\Documents\Donata verbrennt 16.06.14.mp4
2015-04-08 00:52 - 2013-06-01 01:13 - 00023552 _____ () C:\Users\Dani\Documents\Krampftagebuch.xls
2015-04-08 00:52 - 2013-01-26 23:20 - 00015039 _____ () C:\Users\Dani\Documents\ESt2012_Palancianu_Daniela.elfo
2015-04-08 00:52 - 2012-06-05 00:21 - 00024064 _____ () C:\Users\Dani\Documents\Senior-Katzenfutter.xls
2015-04-08 00:52 - 2012-05-17 22:42 - 00004080 _____ () C:\Users\Dani\Documents\cc_20120517_223836.reg
2015-04-08 00:52 - 2012-04-07 17:33 - 00097394 _____ () C:\Users\Dani\Documents\ESt2011_Palancianu_Daniela.elfo
2015-04-08 00:52 - 2012-02-23 23:13 - 00055296 _____ () C:\Users\Dani\Documents\FRITZ!Box_Anrufliste2.xls
2015-04-08 00:52 - 2012-02-15 03:37 - 00023552 _____ () C:\Users\Dani\Documents\Kreditkarten.xls
2015-04-08 00:52 - 2012-02-14 18:43 - 00013824 _____ () C:\Users\Dani\Documents\Adrian.xls
2015-04-08 00:52 - 2012-02-14 01:35 - 00055808 _____ () C:\Users\Dani\Documents\FRITZ!Box_Anrufliste.xls
2015-04-08 00:52 - 2012-01-04 01:10 - 00049152 _____ () C:\Users\Dani\Documents\Lampenwelt_Statistik.xls
2015-04-08 00:52 - 2011-01-10 21:19 - 00048334 _____ () C:\Users\Dani\Documents\Handleiding JIM² Foon.txt
2015-04-08 00:52 - 2010-10-04 17:01 - 00525779 _____ () C:\Users\Dani\Documents\PferdeStehlen.zip
2015-04-08 00:52 - 2010-05-28 09:34 - 01905664 _____ () C:\Users\Dani\Documents\Kläranlage.ppt
2015-04-08 00:52 - 2010-03-28 03:01 - 00000185 _____ () C:\Users\Dani\Documents\GB.txt
2015-04-08 00:52 - 2009-08-06 16:12 - 01793536 _____ () C:\Users\Dani\Documents\Bsp_Unikate2.xls
2015-04-08 00:52 - 2009-08-05 12:59 - 04265984 _____ () C:\Users\Dani\Documents\Bsp_Unikate1.xls
2015-04-08 00:52 - 2009-07-08 15:18 - 235049700 _____ () C:\Users\Dani\Documents\2009-07-08 Nokia N78.nbu
2015-04-08 00:52 - 2009-06-25 01:26 - 25401786 _____ () C:\Users\Dani\Documents\Akte 09 - Bei Anruf Abzocke! Wie die TRC Telemedia Sie jetzt um ihr Geld bringt.AVI
2015-04-08 00:52 - 2009-06-25 00:38 - 18346640 _____ () C:\Users\Dani\Documents\BiZZ in Fulda MC Multimedia TRC Telemedia.AVI
2015-04-08 00:52 - 2009-03-24 23:16 - 00024576 _____ () C:\Users\Dani\Documents\Adressen Konfer.xls
2015-04-08 00:52 - 2008-10-05 21:22 - 00256512 _____ () C:\Users\Dani\Documents\Deutsch-Englisch-Funktionen.xls
2015-04-08 00:52 - 2008-10-04 03:52 - 01788928 _____ () C:\Users\Dani\Documents\BeispielFuerDaniela2.xls
2015-04-08 00:52 - 2008-10-04 02:43 - 01792000 _____ () C:\Users\Dani\Documents\BeispielFuerDaniela.xls
2015-04-08 00:52 - 2008-03-21 17:22 - 00714377 _____ () C:\Users\Dani\Documents\ISO1_DVD.nri
2015-04-08 00:52 - 2008-01-15 02:57 - 00025600 _____ () C:\Users\Dani\Documents\Bewerbungsliste1.xls
2015-04-08 00:52 - 2007-02-13 03:38 - 00016896 _____ () C:\Users\Dani\Documents\Bewerbungsliste.xls
2015-04-08 00:52 - 2006-10-29 23:55 - 00005976 ____R () C:\Users\Dani\Documents\cc_20061029_2254.reg
2015-04-08 00:52 - 2006-10-01 01:58 - 00003466 _____ () C:\Users\Dani\Documents\Erklärung2005.05
2015-04-08 00:52 - 2006-08-07 03:33 - 159318937 _____ () C:\Users\Dani\Documents\karpaten.wmv
2015-04-08 00:52 - 2006-04-22 20:56 - 01949090 _____ () C:\Users\Dani\Documents\Rumänische Musik.wmv
2015-04-08 00:52 - 2004-11-08 23:40 - 01507443 _____ () C:\Users\Dani\Documents\Dupli-Color.dat
2015-04-08 00:52 - 2004-11-08 23:34 - 00865053 _____ () C:\Users\Dani\Documents\Motip.dat
2015-04-08 00:52 - 2004-09-28 16:02 - 00031232 _____ () C:\Users\Dani\Documents\Betreuungsabrechnung.xls
2015-04-08 00:52 - 2004-07-16 21:50 - 00000125 ____H () C:\Users\Dani\Documents\desktop (2).ini
2015-04-08 00:42 - 2015-04-26 01:26 - 00000000 ____D () C:\Users\Dani\Scans
2015-04-06 07:40 - 2015-04-06 07:40 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\MyPhoneExplorer
2015-04-06 07:39 - 2015-04-23 01:32 - 00000000 ____D () C:\Users\Dani\Ulk
2015-04-06 07:33 - 2015-04-06 07:33 - 00027648 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBBlocker32.sys
2015-04-06 07:33 - 2015-04-06 07:33 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_GDKBBlocker32_01007.Wdf
2015-04-06 07:33 - 2015-04-06 07:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA USB KEYBOARD GUARD
2015-04-06 07:33 - 2015-04-06 07:33 - 00000000 ____D () C:\Program Files\G DATA
2015-04-06 07:32 - 2015-04-06 07:32 - 00000000 ____D () C:\ProgramData\G Data
2015-04-06 07:30 - 2015-04-06 07:30 - 11893880 _____ (G Data Software AG) C:\Users\Dani\Downloads\INT_GD_USB_KEYBOARD_GUARD.exe
2015-04-06 04:23 - 2015-04-06 04:51 - 03735552 ___HT () C:\Users\Dani\Desktop\~backup.pst.tmp
2015-04-06 03:18 - 2015-04-06 03:18 - 00000000 ____D () C:\Users\Dani\AppData\Local\Adobe
2015-04-06 03:07 - 2015-04-06 03:07 - 00000000 ____D () C:\Users\Dani\AppData\Local\Apple Computer
2015-04-06 02:49 - 2015-04-06 02:50 - 00000000 ____D () C:\Datensicherung
2015-04-06 02:45 - 2015-04-06 02:49 - 00001150 _____ () C:\Users\Dani\Desktop\Registry-Sicherung.lnk
2015-04-06 02:33 - 2015-04-06 02:33 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\IrfanView
2015-04-06 02:10 - 2015-04-01 03:30 - 02208768 _____ () C:\Users\Dani\Downloads\AdwCleaner 4.200.exe
2015-04-06 01:31 - 2015-04-06 01:31 - 00000000 ____D () C:\Users\Dani\Downloads\OTRDecoder_2.0.0.22
2015-04-06 01:25 - 2015-04-19 03:14 - 00000000 ____D () C:\Users\Dani\Downloads\Filme
2015-04-06 01:12 - 2015-04-06 01:12 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\ProductData
2015-04-06 00:21 - 2015-04-06 00:21 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-DANIELA-PC-Windows-7-Home-Premium-(32-bit).dat
2015-04-06 00:21 - 2015-04-06 00:21 - 00000000 ____D () C:\RegBackup
2015-04-05 14:12 - 2015-04-05 14:12 - 01302528 _____ () C:\Users\Dani\Downloads\OLFix Outlook-Reperatur.exe
2015-04-05 14:03 - 2015-04-13 03:51 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\HP
2015-04-05 14:03 - 2015-04-05 14:03 - 00002795 _____ () C:\Users\Dani\Desktop\Microsoft Office Outlook 2007.lnk
2015-04-05 13:29 - 2015-04-09 20:20 - 00000000 ____D () C:\Windows\erdnt
2015-04-05 12:28 - 2015-04-05 12:28 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Apple Computer
2015-04-05 11:15 - 2015-04-05 11:16 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Mozilla
2015-04-05 11:15 - 2015-04-05 11:16 - 00000000 ____D () C:\Users\Dani\AppData\Local\Mozilla
2015-04-05 10:58 - 2015-04-05 10:58 - 00000000 __SHD () C:\Users\Dani\AppData\Local\EmieUserList
2015-04-05 10:58 - 2015-04-05 10:58 - 00000000 __SHD () C:\Users\Dani\AppData\Local\EmieSiteList
2015-04-05 10:58 - 2015-04-05 10:58 - 00000000 __SHD () C:\Users\Dani\AppData\Local\EmieBrowserModeList
2015-04-05 10:58 - 2015-04-05 10:58 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Macromedia
2015-04-05 10:53 - 2015-04-05 10:53 - 00109664 _____ () C:\Users\Dani\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-05 10:53 - 2015-04-05 10:53 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\ATI
2015-04-05 10:53 - 2015-04-05 10:53 - 00000000 ____D () C:\Users\Dani\AppData\Local\ATI
2015-04-05 10:52 - 2015-04-26 04:18 - 00000000 ____D () C:\Users\Dani
2015-04-05 10:52 - 2015-04-26 01:50 - 00000000 ____D () C:\Users\Dani\AppData\Local\VirtualStore
2015-04-05 10:52 - 2015-04-09 09:20 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\IObit
2015-04-05 10:52 - 2015-04-06 03:18 - 00000000 ____D () C:\Users\Dani\AppData\Roaming\Adobe
2015-04-05 10:52 - 2015-04-05 10:52 - 00001425 _____ () C:\Users\Dani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-04-05 10:52 - 2015-04-05 10:52 - 00000020 ___SH () C:\Users\Dani\ntuser.ini
2015-04-05 10:52 - 2015-04-05 10:52 - 00000000 _SHDL () C:\Users\Dani\Startmenü
2015-04-05 10:52 - 2015-04-05 10:52 - 00000000 _SHDL () C:\Users\Dani\Netzwerkumgebung
2015-04-05 10:52 - 2015-04-05 10:52 - 00000000 _SHDL () C:\Users\Dani\Druckumgebung
2015-04-05 10:52 - 2015-04-05 10:52 - 00000000 _SHDL () C:\Users\Dani\Documents\Eigene Musik
2015-04-05 10:52 - 2015-04-05 10:52 - 00000000 _SHDL () C:\Users\Dani\Documents\Eigene Bilder
2015-04-05 10:52 - 2015-04-05 10:52 - 00000000 _SHDL () C:\Users\Dani\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-04-05 10:52 - 2015-04-05 10:52 - 00000000 _SHDL () C:\Users\Dani\AppData\Local\Verlauf
2015-04-05 10:52 - 2015-03-29 11:52 - 00000000 ____D () C:\Users\Dani\AppData\Local\Microsoft Help
2015-04-05 10:52 - 2009-07-14 06:42 - 00000000 ___RD () C:\Users\Dani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-04-05 10:52 - 2009-07-14 06:37 - 00000000 ___RD () C:\Users\Dani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-04-05 10:43 - 2015-04-09 20:28 - 00000000 ____D () C:\Users\Admin\Desktop\Trojaner-Board
2015-04-04 22:04 - 2015-04-04 22:27 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-04-04 06:58 - 2015-04-26 00:34 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\DMCache
2015-04-04 06:58 - 2015-04-04 06:58 - 00000000 ____D () C:\ProgramData\IDM
2015-04-04 06:47 - 2015-04-04 06:47 - 00000000 ____D () C:\ProgramData\Free Download Manager
2015-04-03 13:55 - 2015-04-03 14:01 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\DirSync
2015-04-01 04:47 - 2015-04-26 08:04 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-01 04:47 - 2015-04-26 01:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-04-01 04:47 - 2015-04-14 09:37 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-01 04:47 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-04-01 04:47 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-04-01 04:00 - 2015-04-26 07:54 - 00002560 _____ () C:\Windows\_MSRSTRT.EXE
2015-03-31 09:33 - 2015-03-31 09:33 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2015-03-29 11:57 - 2015-03-31 09:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2015-03-29 11:57 - 2015-03-29 11:57 - 00000000 ____D () C:\Program Files\Microsoft CAPICOM 2.1.0.2
2015-03-29 11:52 - 2015-03-29 11:52 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2015-03-29 11:52 - 2015-03-29 11:52 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2015-03-29 11:09 - 2015-03-29 11:09 - 00000000 ____D () C:\Users\Daniela\AppData\Local\Microsoft Help
2015-03-29 10:57 - 2015-03-29 10:57 - 00002639 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Neues Microsoft Office-Dokument.lnk
2015-03-29 10:57 - 2015-03-29 10:57 - 00002639 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Microsoft Office-Dokument öffnen.lnk
2015-03-29 10:57 - 2015-03-29 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-03-29 10:57 - 2009-02-26 19:18 - 00029552 _____ (Microsoft Corporation) C:\Windows\system32\mdimon.dll
2015-03-29 10:54 - 2015-03-29 11:51 - 00000000 ____D () C:\Program Files\Microsoft Works
2015-03-29 10:48 - 2015-03-29 11:00 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 8
2015-03-29 10:48 - 2015-03-29 10:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2005
2015-03-29 10:48 - 2015-03-29 10:48 - 00000000 ____D () C:\IDE
2015-03-29 10:47 - 2015-04-15 00:28 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-29 10:47 - 2015-03-29 10:47 - 00000000 ____D () C:\Users\Admin\AppData\Local\Microsoft Help
2015-03-29 10:46 - 2015-03-29 10:46 - 00000000 ___RD () C:\MSOCache
2015-03-29 10:41 - 2015-03-29 10:35 - 1122369536 _____ () C:\Users\Daniela\outlook.pst
2015-03-29 03:26 - 2015-03-29 03:26 - 00000000 ____D () C:\Users\Daniela\AppData\Local\Sun
2015-03-28 07:35 - 2015-03-31 09:04 - 00000000 ___SD () C:\Windows\system32\GWX

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-26 08:09 - 2014-04-07 01:31 - 00000000 ____D () C:\Users\Admin
2015-04-26 08:09 - 2009-07-14 06:34 - 00023168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-26 08:09 - 2009-07-14 06:34 - 00023168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-26 08:06 - 2014-04-06 07:33 - 01673984 _____ () C:\Windows\WindowsUpdate.log
2015-04-26 08:01 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-26 07:54 - 2015-01-24 04:01 - 00000000 ____D () C:\Program Files\DAP
2015-04-26 07:53 - 2015-01-24 04:01 - 00000000 ____D () C:\ProgramData\TEMP
2015-04-26 07:46 - 2014-05-14 19:17 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-26 07:27 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2015-04-26 07:26 - 2014-06-21 01:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DeepBurner
2015-04-26 07:26 - 2014-04-14 02:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF reDirect v2
2015-04-26 06:43 - 2015-01-24 04:06 - 00000000 ____D () C:\Windows\system32\Plugins
2015-04-26 04:27 - 2014-06-09 14:39 - 00000000 ____D () C:\Windows\Minidump
2015-04-26 04:18 - 2015-03-25 04:12 - 59981824 _____ () C:\Windows\system32\config\SOFTWARE.iobit
2015-04-26 04:18 - 2015-03-25 04:12 - 00417792 _____ () C:\Windows\system32\config\DEFAULT.iobit
2015-04-26 04:18 - 2015-03-25 04:12 - 00135168 _____ () C:\Windows\system32\config\SAM.iobit
2015-04-26 04:18 - 2015-03-25 04:12 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iobit
2015-04-26 02:02 - 2014-04-07 01:31 - 00000000 ____D () C:\Users\Admin\AppData\Local\VirtualStore
2015-04-26 01:12 - 2015-03-19 05:55 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2015-04-26 00:48 - 2015-03-25 04:12 - 34934784 _____ () C:\Windows\system32\config\components.iobit
2015-04-26 00:42 - 2015-03-25 02:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
2015-04-25 00:31 - 2014-06-21 10:00 - 00000000 ____D () C:\Program Files\Common Files\DivX Shared
2015-04-25 00:31 - 2014-06-21 09:55 - 00000000 ____D () C:\ProgramData\DivX
2015-04-23 00:49 - 2015-03-25 02:14 - 00000000 ____D () C:\ProgramData\ProductData
2015-04-22 02:29 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-04-16 00:20 - 2014-07-27 05:08 - 00000000 ____D () C:\Program Files\Java
2015-04-15 21:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2015-04-15 20:46 - 2014-04-06 14:54 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-04-15 20:46 - 2014-04-06 14:54 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-04-15 20:28 - 2014-04-06 13:08 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-04-15 00:58 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-04-15 00:44 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-04-15 00:38 - 2014-04-06 12:23 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-15 00:29 - 2014-04-06 12:23 - 125832184 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-15 00:26 - 2014-04-06 07:44 - 01592628 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-12 00:57 - 2014-06-21 10:00 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\DivX
2015-04-10 23:23 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat
2015-04-09 21:00 - 2014-10-15 04:18 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe
2015-04-09 20:52 - 2014-04-07 18:43 - 00000000 ____D () C:\ProgramData\Oracle
2015-04-09 20:11 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2015-04-09 09:20 - 2015-03-25 06:02 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit
2015-04-09 09:20 - 2015-03-25 06:02 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit
2015-04-09 02:25 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2015-04-08 01:39 - 2014-12-09 23:46 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-08 01:39 - 2014-04-23 00:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-08 01:22 - 2014-04-08 01:42 - 00000000 ____D () C:\Users\Daniela\Ulk
2015-04-08 01:20 - 2014-04-08 01:39 - 00000000 ____D () C:\Users\Daniela\Scans
2015-04-05 13:55 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2015-04-04 08:03 - 2014-08-20 17:45 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\HpUpdate
2015-04-03 12:41 - 2014-04-06 13:08 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-03-31 09:26 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\System
2015-03-31 09:26 - 2009-07-14 04:04 - 00000534 _____ () C:\Windows\win.ini
2015-03-31 09:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp
2015-03-31 09:04 - 2015-03-25 06:02 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\ProductData
2015-03-31 09:04 - 2015-03-25 02:15 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\ProductData
2015-03-31 09:04 - 2014-04-06 07:37 - 00000000 ____D () C:\Users\Daniela
2015-03-31 09:04 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2015-03-30 00:48 - 2014-04-06 07:55 - 00109664 _____ () C:\Users\Daniela\AppData\Local\GDIPFONTCACHEV1.DAT
2015-03-29 11:52 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-03-29 11:01 - 2009-07-14 10:57 - 00000000 ____D () C:\Windows\ShellNew
2015-03-29 10:54 - 2014-04-26 08:18 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-03-29 10:54 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\MSBuild
2015-03-29 10:52 - 2014-04-06 14:00 - 00000000 ____D () C:\Program Files\Microsoft.NET
2015-03-29 10:52 - 2009-07-14 04:37 - 00000000 __RSD () C:\Windows\Media
2015-03-29 10:52 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Help
2015-03-29 10:51 - 2014-04-26 08:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2015-03-29 04:14 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF

==================== Files in the root of some directories =======

2014-08-05 00:03 - 2014-10-07 05:56 - 0128621 _____ () C:\Users\Admin\AppData\Local\ars.cache
2014-08-05 00:04 - 2014-10-07 05:57 - 0367993 _____ () C:\Users\Admin\AppData\Local\census.cache
2014-08-04 18:38 - 2014-08-04 18:38 - 0000036 _____ () C:\Users\Admin\AppData\Local\housecall.guid.cache
2014-04-08 22:41 - 2015-03-24 03:53 - 0012575 _____ () C:\ProgramData\hpzinstall.log

Files to move or delete:
====================
C:\Users\Daniela\Registry.reg


Some content of TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\ASCSetup_340331.exe
C:\Users\Admin\AppData\Local\Temp\cabex.dll
C:\Users\Admin\AppData\Local\Temp\DAPREMOVE.EXE
C:\Users\Admin\AppData\Local\Temp\RunWizards.exe
C:\Users\Admin\AppData\Local\Temp\SetupUtils6.dll
C:\Users\Admin\AppData\Local\Temp\unelevate.exe
C:\Users\Admin\AppData\Local\Temp\VARemove.exe
C:\Users\Admin\AppData\Local\Temp\VAUninstall.exe
C:\Users\Admin\AppData\Local\Temp\vcredist_x86.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-15 21:10

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 24-04-2015
Ran by Admin at 2015-04-26 08:13:42
Running from C:\Users\Admin\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Admin (S-1-5-21-3046395627-4054670192-1170409365-1003 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-3046395627-4054670192-1170409365-500 - Administrator - Disabled)
Dani (S-1-5-21-3046395627-4054670192-1170409365-1005 - Limited - Enabled) => C:\Users\Dani
Daniela (S-1-5-21-3046395627-4054670192-1170409365-1000 - Limited - Enabled) => C:\Users\Daniela
Gast (S-1-5-21-3046395627-4054670192-1170409365-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3046395627-4054670192-1170409365-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
4500_G510af_Help (Version: 000.0.439.000 - Hewlett-Packard) Hidden
4500G510af (Version: 000.0.423.000 - Hewlett-Packard) Hidden
4500G510af_Software_Min (Version: 000.0.423.000 - Hewlett-Packard) Hidden
7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )
Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader XI Lite - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.7.157 - Adobe Systems, Inc.)
Advanced SystemCare 8 (HKLM\...\Advanced SystemCare 8_is1) (Version: 8.2.0 - IObit)
Alcatel onetouch Manager (HKLM\...\{C32EDA33-2F6F-0200-0000-000000000000}) (Version: 13.05.2155 - Mobile Action)
AMD Catalyst Install Manager (HKLM\...\{B448BC74-1CB7-7A57-3313-5E075AFB413E}) (Version: 8.0.877.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{18D47FA1-0440-48D3-A7E0-DA09537FF471}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bing Bar (HKLM\...\{449CE12D-E2C7-4B97-B19E-55D163EA9435}) (Version: 7.0.619.0 - Microsoft Corporation)
Bing-Desktop (HKLM\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.4.167.0 - Microsoft Corporation)
BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden
Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
concept/design online.TiVi (HKLM\...\{2EC5640C-A426-4CFA-8737-656D1FE58128}_is1) (Version: 1.6.0.0 - concept/design GmbH)
concept/design onlineTV 11 (HKLM\...\{8A4C3184-DA2F-4553-BF61-83F5690C3048}_is1) (Version: 11.0.0.0 - concept/design GmbH)
CoolSoft VirtualMIDISynth 1.9.2 (HKLM\...\CoolSoft VirtualMIDISynth) (Version: 1.9.2.0 - CoolSoft)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 130.0.372.000 - Hewlett-Packard) Hidden
DirSync  2.96 (HKLM\...\DirSync) (Version:  - Stephen Kalisch)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)
DocMgr (Version: 130.0.000.000 - Ihr Firmenname) Hidden
DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden
EGVP (HKLM\...\{EDA192EA-4DA3-416D-965D-65BFDA0E3715}) (Version: 1.5.3.0 - Governikus KG)
Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden
FreePDF (Remove only) (HKLM\...\FreePDF_XP) (Version:  - )
G DATA USB KEYBOARD GUARD (HKLM\...\{D8CBD59F-B29D-4E38-9D66-DEAEAB473FA9}) (Version: 1.0.0.32 - G DATA Software AG)
GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.07) (Version: 9.07 - Artifex Software Inc.)
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Officejet 4500 G510a-f (HKLM\...\{C98517B6-DCE9-49B7-B19E-E384178D3986}) (Version: 13.0 - HP)
HP Print Projects 1.0 (HKLM\...\HP Print Projects) (Version: 1.0 - HP)
HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (Version: 1.00.0001 - Microsoft) Hidden
hpPrintProjects (Version: 130.0.303.000 - Hewlett-Packard) Hidden
HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (Version: 130.0.371.000 - Hewlett-Packard) Hidden
hpWLPGInstaller (Version: 130.0.303.000 - Hewlett-Packard) Hidden
inSSIDer Home (HKLM\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC)
IObit Uninstaller (HKLM\...\IObitUninstall) (Version: 4.2.6.2 - IObit)
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
Java 8 Update 45 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden
Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2000 SR-1 Premium (HKLM\...\{00000407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.3821 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Plus 2007 (HKLM\...\PROPLUS) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.31211.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
MiniTool Partition Wizard Home Edition 8.0 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version:  - MiniTool Solution Ltd.)
MKV Player 2.1.17 (HKLM\...\MKV Player_is1) (Version:  - )
Mozilla Firefox 37.0.1 (x86 de) (HKLM\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 37.0 - Mozilla)
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyPhoneExplorer (HKLM\...\MPE) (Version: 1.8.6 - F.J. Wechselberger)
Nokia Connectivity Cable Driver (HKLM\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Nokia PC Suite (HKLM\...\Nokia PC Suite) (Version: 7.1.180.94 - Nokia)
Nokia PC Suite (Version: 7.1.180.94 - Nokia) Hidden
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.57.35 - NVIDIA Corporation)
NVIDIA ForceWare Network Access Manager (HKLM\...\{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}) (Version: 1.00.7325.0 - NVIDIA Corporation)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
PC Connectivity Solution (HKLM\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
PDF reDirect (remove only) (HKLM\...\PDF reDirect) (Version: v2.5.2 - EXP Systems LLC)
PDF24 Creator 6.7.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PixelNet Software 4.14.4 (HKLM\...\PixelNet Software) (Version: 4.14.4 - ORWO Net)
Powerline Utility  (HKLM\...\{57F145A5-2B04-4A76-9BE0-EF8EFBA70DE0}) (Version: 6.1.0 - Qualcomm Atheros)
QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Ralink RT2870 Wireless LAN Card (HKLM\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.17.0 - Ralink)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version: 1.90 - Ghostgum Software Pty Ltd)
Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SmartWebPrinting (Version: 130.0.373.000 - Hewlett-Packard) Hidden
SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden
Status (Version: 130.0.373.000 - Hewlett-Packard) Hidden
Surfing Protection (HKLM\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (Version: 130.0.376.000 - Hewlett-Packard) Hidden
TVCenter (HKLM\...\{12EA7B1D-C33D-4F52-BEF7-9909DF0138AC}) (Version: 6.4.9.1033 - PCTV Systems)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_PROPLUS_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_PROPLUS_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_PROPLUS_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_PROPLUS_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden
Winamp (HKLM\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows-Treiberpaket - Nokia Modem  (02/25/2011 4.7) (HKLM\...\E0AC723A3DE3A04256288CADBBB011B112AED454) (Version: 02/25/2011 4.7 - Nokia)
Windows-Treiberpaket - Nokia Modem  (02/25/2011 7.01.0.9) (HKLM\...\72A50F48CC5601190B9C4E74D81161693133E7F7) (Version: 02/25/2011 7.01.0.9 - Nokia)
Windows-Treiberpaket - Nokia pccsmcfd “LegacyDriver”  (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia)
WinPcap 4.1.2 (HKLM\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

09-04-2015 20:36:28 Ende der Bereinigung
09-04-2015 20:48:38 Removed Java 8 Update 40
10-04-2015 23:30:21 Windows Update
14-04-2015 02:16:50 Installed Microsoft Fix it 50848
14-04-2015 02:21:02 Installed Microsoft Fix it 50848
14-04-2015 02:32:27 Windows Update
15-04-2015 00:15:11 Windows Update
18-04-2015 22:49:02 Windows Update
21-04-2015 23:58:35 Windows Update
22-04-2015 01:19:07 Windows Update
22-04-2015 02:57:33 Installed TVCenter.
22-04-2015 03:24:29 Treibersammeldownload
26-04-2015 00:26:17 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2015-04-09 20:10 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {3625605D-9736-4E0D-ADED-80AB17549529} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: {4A95605E-2F72-413F-9F4A-4F9B662C3B70} - System32\Tasks\{5589489F-BCF7-4E4E-A924-E7FCCE636DA8} => pcalua.exe -a "C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
Task: {525DFEDD-382C-4622-B265-C697B12DB958} - System32\Tasks\Uninstaller_SkipUac_Admin => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-01-20] (IObit)
Task: {653435B1-E8BB-4611-8BBB-E2FE2CBE8B8C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {7FEA1C05-5956-47C1-9720-5580AA7A98CB} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {8734083E-A084-4978-A36C-CA4115FD8883} - System32\Tasks\{085A87EE-090C-40C6-B1AC-A2A6111D4864} => C:\Program Files\Microsoft Office\Office\OUTLOOK.EXE
Task: {BDAC862A-E650-4CF1-B04B-EDEB1AB59011} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {C25AC480-6624-4D9C-8B25-278248801903} - System32\Tasks\{2B746783-2101-4698-B844-F37A8A02D71E} => pcalua.exe -a C:\Users\Admin\Downloads\1430024097-1430031597-75a458-B-20992397adb2771827f722339847d4c0.exe -d C:\Users\Admin\Downloads
Task: {CB4C5EFE-BD10-4F84-AB23-DAE40656302C} - System32\Tasks\ASC8_PerformanceMonitor => C:\Program Files\IObit\Advanced SystemCare 8\Monitor.exe [2015-04-09] (IObit)
Task: {CC03CE20-36F4-4A2E-A124-C25E64B229FD} - System32\Tasks\Uninstaller_SkipUac_Dani => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-01-20] (IObit)
Task: {F0924483-9454-4017-BDB8-588065DA78F3} - System32\Tasks\ASC8_SkipUac_Admin => C:\Program Files\IObit\Advanced SystemCare 8\ASC.exe [2015-04-09] (IObit)
Task: {F2CAD89D-9A42-4025-8876-58161729CDCB} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {F815A518-89BD-445C-8A71-0D92281353F8} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) ==============

2015-03-25 02:16 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files\IObit\Advanced SystemCare 8\sqlite3.dll
2010-06-06 16:20 - 2010-06-06 16:20 - 00065344 _____ () C:\Windows\System32\PDFreDirectMonNT.dll
2014-10-02 02:12 - 2012-06-21 07:25 - 00094208 _____ () C:\Windows\System32\redmon32.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-04-06 16:24 - 2010-01-21 01:52 - 00370792 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
2014-04-06 16:24 - 2010-01-21 01:51 - 00062568 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nv_common.dll
2014-04-06 16:24 - 2010-01-21 01:52 - 00565864 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\SpecialCase.dll
2014-04-06 16:24 - 2010-01-21 01:52 - 00167528 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
2015-03-25 02:16 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files\IObit\Advanced SystemCare 8\madExcept_.bpl
2015-03-25 02:16 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files\IObit\Advanced SystemCare 8\madBasic_.bpl
2015-03-25 02:16 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files\IObit\Advanced SystemCare 8\madDisAsm_.bpl
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2015-03-25 02:16 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files\IObit\Advanced SystemCare 8\webres.dll
2015-01-06 20:50 - 2012-02-20 13:59 - 01087336 _____ () C:\Program Files\Ralink\Common\RaWLAPI.dll
2013-06-18 15:49 - 2013-06-18 15:49 - 00016384 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-04-29 23:08 - 2013-04-29 23:08 - 00369152 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:56E2E879

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\100sexlinks.com -> 100sexlinks.com

There are 4788 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: FreePDF Assistant => "C:\Program Files\FreePDF_XP\fpassist.exe"
MSCONFIG\startupreg: PC Suite Tray => "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
MSCONFIG\startupreg: PDFPrint => C:\Program Files\PDF24\pdf24.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/26/2015 07:30:31 AM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/26/2015 07:30:31 AM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/26/2015 07:30:31 AM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/26/2015 07:30:31 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (04/26/2015 07:30:21 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/26/2015 07:30:21 AM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (04/26/2015 07:30:21 AM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/26/2015 07:30:21 AM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/26/2015 07:30:21 AM) (Source: Windows Search Service) (EventID: 9000) (User: )
Description: Der Jet-Eigenschaftenspeicher kann von Windows Search nicht geöffnet werden.


Details:
	0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))

Error: (04/26/2015 07:30:21 AM) (Source: ESENT) (EventID: 455) (User: )
Description: Windows (3156) Windows: Fehler -1811 beim Öffnen von Protokolldatei C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00E35.log.


System errors:
=============
Error: (04/26/2015 07:52:06 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "VideoAcceleratorService" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (04/26/2015 07:46:38 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "VideoAcceleratorService" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (04/26/2015 07:31:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (04/26/2015 07:31:01 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.

Error: (04/26/2015 07:30:31 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/26/2015 07:30:31 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.

Error: (04/26/2015 06:53:24 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (04/26/2015 06:53:24 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (04/26/2015 05:34:30 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "VideoAcceleratorService" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (04/26/2015 05:32:25 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMService erreicht.


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) Dual CPU E2200 @ 2.20GHz
Percentage of memory in use: 42%
Total physical RAM: 3071.3 MB
Available physical RAM: 1777.46 MB
Total Pagefile: 6140.91 MB
Available Pagefile: 4236.61 MB
Total Virtual: 2047.88 MB
Available Virtual: 1900.14 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:218.24 GB) (Free:111.34 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVERY) (Fixed) (Total:14.65 GB) (Free:14.52 GB) NTFS
Drive i: (KINGSTON) (Removable) (Total:7.44 GB) (Free:3.44 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 2BAB359D)
Partition 1: (Active) - (Size=218.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=14.6 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 7.5 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=7.5 GB) - (Type=0C)

==================== End Of Log ============================