Trojaner-Board - Eingefangene SoftwareUpdate.ui.exe

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Eingefangene SoftwareUpdate.ui.exe (https://www.trojaner-board.de/140699-eingefangene-softwareupdate-ui-exe.html)

Eingefangene SoftwareUpdate.ui.exe

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 28-08-2013
Ran by GOD IS GOOD TO ME at 2013-08-30 06:59:39
Running from C:\Users\GOD IS GOOD TO ME\Downloads
Boot Mode: Normal
==========================================================

==================== Installed Programs =======================

Update for Microsoft Office 2007 (KB2508958)
1-2-3PDFConverter (Version: 4.1.0.0)
Activation Assistant for the 2007 Microsoft Office suites
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0)
ActiveCheck component for HP Active Support Library (Version: 3.0.0.2)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (Version: 11.8.800.94)
Adobe Photoshop 7.0 (Version: 7.0)
Adobe Reader 9.4.5 - Deutsch (Version: 9.4.5)
Adobe Shockwave Player (Version: 11.0)
Adobe Shockwave Player 11.6 (Version: 11.6.4.634)
AllDup 3.3.10 (Version: 3.3.10)
Apple Application Support (Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (Version: 2.1.3.127)
Aspell English Dictionary-0.50-2
Aspell German Dictionary-0.50-2
Avira Free Antivirus (Version: 13.0.0.4045)
BitComet 1.10 (Version: 1.10)
Bonjour (Version: 3.0.0.10)
Broadcom 802.11 Wireless LAN Adapter (Version: 5.10.38.14)
CCleaner (Version: 3.05)
CometBird (3.0.9) (Version: 3.0.9 (de))
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
Complitly
CyberLink DVD Suite (Version: 6.0.2126)
DivX Plus Web Player (Version: 2.0.0)
Dropbox (HKCU Version: 2.0.22)
EPSON BX305 Series Manual
EPSON BX305 Series Network Guide
EPSON BX305 Series Printer Uninstall
Epson Easy Photo Print 2 (Version: 2.2.0.0)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (Version: 1.00.0000)
Epson FAX Utility (Version: 1.10.00)
Epson PC-FAX Driver
EPSON Scan
EpsonNet Print (Version: 2.4i)
EpsonNet Setup 3.3 (Version: 3.3a)
ESU for Microsoft Vista (Version: 1.0.0)
FoxTab FLV Player
Free Audio CD Burner version 1.2
Free System Utilities (Version: 1.0.0)
Free SystemUtilities (Version: 1.0.0)
Free YouTube to MP3 Converter version 3.12.9.725 (Version: 3.12.9.725)
FreePDF (Remove only)
GNU Aspell 0.50-3
Google Chrome (HKCU Version: 29.0.1547.62)
Google Drive (Version: 1.11.4865.2530)
Google Talk Plugin (Version: 4.4.2.14502)
Google Update Helper (Version: 1.3.21.153)
GTK+ Runtime 2.14.7 rev a (nur entfernen)
Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (Version: 1)
HP Active Support Library (Version: 3.1.9.1)
HP Customer Experience Enhancements (Version: 5.7.0.2664)
HP Doc Viewer (Version: 1.03.0001)
HP Help and Support (Version: 2.1.0.0)
HP MediaSmart DVD (Version: 2.0.2126)
HP MediaSmart Music/Photo/Video (Version: 2.0.2125)
HP MediaSmart SmartMenu (Version: 2.0.8)
HP MediaSmart TV (Version: 2.2.1622)
HP MediaSmart Webcam (Version: 2.0.0926)
HP Quick Launch Buttons 6.40 H2 (Version: 6.40 H2)
HP Total Care Advisor (Version: 2.4.4941.2798)
HP Total Care Setup (Version: 1.1.1983.2818)
HP Update (Version: 4.000.010.008)
HP User Guides 0126 (Version: 1.01.0000)
HP Wireless Assistant (Version: 3.00 K2)
HPAsset component for HP Active Support Library (Version: 3.0.2.2)
HPNetworkAssistant (Version: 1.1.70)
Huawei modem
iCloud (Version: 2.1.2.8)
IDT Audio (Version: 1.0.6087.22)
iLivid (Version: 1.92.0.115854)
iTunes (Version: 11.0.5.5)
Java 7 Update 15 (Version: 7.0.150)
Java Auto Updater (Version: 2.1.9.0)
Java(TM) 6 Update 7 (Version: 1.6.0.70)
JMicron JMB38X Flash Media Controller (Version: 1.00.18.07)
Junk Mail filter update (Version: 14.0.8089.726)
LabelPrint (Version: 2.5.0919)
LightScribe System Software 1.14.17.1 (Version: 1.14.17.1)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook Connector (Version: 12.0.6423.1000)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Security Client (Version: 4.2.0223.1)
Microsoft Security Essentials (Version: 4.2.223.1)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (Version: 9.0.30729)
Microsoft Works (Version: 9.7.0621)
MobileMe Control Panel (Version: 3.1.8.0)
Mozilla Firefox 8.0.1 (x86 en-GB) (Version: 8.0.1)
MSVC80_x86 (Version: 1.0.1.0)
MSVC80_x86_v2 (Version: 1.0.3.0)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
muvee Reveal (Version: 7.0.35.6951)
Nokia Connectivity Cable Driver (Version: 7.1.36.0)
Nokia PC Suite (Version: 7.1.60.0)
Nokia PC-Internetzugang (Version: 1.1.2.5)
Nokia_Multimedia_Common_Components_2_5 (Version: 2.5.197)
Norton Internet Security (Version: 16.0.0.125)
NVIDIA Drivers (Version: 1.10)
Octoshape add-in for Adobe Flash Player
Octoshape Streaming Services
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0)
Orange Mobile Partner (Version: 11.030.01.02.361)
PC Connectivity Solution (Version: 10.50.2.0)
pdfforge Toolbar v1.0 (Version: 1.00.0000)
PoivY (Version: 4.03 build 534)
PokerStars
Power2Go (Version: 6.0.2119)
PowerDirector (Version: 7.0.2119)
ProtectSmart Hard Drive Protection (Version: 3.10 A7)
PVSonyDll (Version: 1.00.0001)
QuickTime (Version: 7.74.80.86)
Realtek 8169 8168 8101E 8102E Ethernet Driver (Version: 1.00.0000)
RedMon - Redirection Port Monitor
Samsung AllShare (Version: 2.1.0.12031_10)
Skype Click to Call (Version: 5.9.9216)
Skype™ 6.6 (Version: 6.6.106)
SopCast 3.2.4 (Version: 3.2.4)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
Spotify (HKCU Version: 0.9.1.57.ge7405149)
swMSM (Version: 12.0.0.1)
Synaptics Pointing Device Driver (Version: 15.0.17.4)
TeamViewer 6 (Version: 6.0.11117)
T-Mobile Mobile Broadband Manager (Version: 1.0.0.2)
TubeBox (Version: 1.0.0.0)
TubeBox (Version: 4.0.0.0)
TuneUp Companion 2.2.5 (Version: 2.2.5)
TVAnts 1.0
TVUPlayer 2.5.3.1 (Version: 2.5.3.1)
Uninstall 1.0.0.1
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2768023) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817642) 32-Bit Edition
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Outlook 2007 Help (KB963677)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
VC80CRTRedist - 8.0.50727.4053 (Version: 1.1.0)
Veetle TV (Version: 0.9.18)
Virtual DJ - Atomix Productions
VLC media player 1.0.1 (Version: 1.0.1)
Vodafone Mobile Broadband Lite (Version: 10.1.0.25677)
VoipStunt (Version: 4.04 build 550)
vShare Plugin
vShare.tv plugin 1.3 (Version: 1.3)
web'n'walk Manager (Version: 11.002.07.22.55)
Windows iLivid Toolbar (Version: 3.0.0.115554)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8064.206)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Family Safety (Version: 14.0.8093.805)
Windows Live Fotogalerie (Version: 14.0.8081.709)
Windows Live ID-Anmelde-Assistent (Version: 6.500.3165.0)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live Movie Maker (Version: 14.0.8091.0730)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Writer (Version: 14.0.8089.0726)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
Windows-Treiberpaket - ENE (enecir) HIDClass (09/04/2008 2.6.0.0) (Version: 09/04/2008 2.6.0.0)
Windows-Treiberpaket - Nokia Modem (06/09/2010 7.01.0.8) (Version: 06/09/2010 7.01.0.8)
Windows-Treiberpaket - Nokia Modem (10/07/2010 4.6) (Version: 10/07/2010 4.6)
Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) (Version: 08/22/2008 7.0.0.0)
Yahoo! Detect
Yahoo! Messenger
ZTE_MF627_USB_MODEM_1.2059.0.4

==================== Restore Points =========================

18-08-2013 22:09:35 Windows Update
19-08-2013 14:51:50 Geplanter Prüfpunkt
21-08-2013 17:23:10 Geplanter Prüfpunkt
22-08-2013 21:46:10 Windows Update
24-08-2013 08:31:20 Geplanter Prüfpunkt
24-08-2013 23:00:07 Geplanter Prüfpunkt
26-08-2013 00:23:15 Windows Update
26-08-2013 21:29:13 Geplanter Prüfpunkt
27-08-2013 02:00:16 Windows Update
27-08-2013 23:00:10 Geplanter Prüfpunkt
28-08-2013 02:02:09 Windows Update
29-08-2013 01:26:43 Geplanter Prüfpunkt
29-08-2013 14:43:29 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {28C3E0F4-37F3-4037-8158-BE8F7880F4FF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2198722660-397689999-1900526466-1000Core => C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Update\GoogleUpdate.exe [2010-02-12] (Google Inc.)
Task: {2FDBDC47-7148-49DB-9D32-32E6A003C996} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 => C:\Windows\System32\ndfapi.dll [2008-01-21] (Microsoft Corporation)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {3F232331-5DE0-482A-988E-C5501FE3CDBF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-21] (Adobe Systems Incorporated)
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {4AE1ED92-E7E4-4DB1-91C2-1097CC499A77} - System32\Tasks\Software Updater Ui => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-08-24] ()
Task: {57F86407-D5B8-4C78-998C-9F7B41AC5557} - System32\Tasks\{BB8E759B-FB41-4028-B88B-6DB913CDAD09} => C:\Program Files\Skype\\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {67D6DE73-48D2-4F9D-AAA2-71CC7B76232C} - System32\Tasks\HP Health Check => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-10-09] (Hewlett-Packard)
Task: {6D239899-A6B4-44C4-812B-BDDCC29D9D61} - System32\Tasks\Software Updater => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-07-12] ()
Task: {73383D1B-6895-4462-BABE-245F180B27A5} - System32\Tasks\Install => C:\Windows\System32\Macromed\Shockwave 10\nssstub.exe No File
Task: {7929A39B-CE49-4D4C-8DFB-D0A238515A12} - System32\Tasks\Microsoft\Windows\Defrag\ManualDefrag => C:\Windows\system32\defrag.exe [2008-01-21] (Microsoft Corp.)
Task: {7AF570A8-08B4-43C1-9925-13273E325F1C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-10-19] (Google Inc.)
Task: {855F9E31-4689-4BE1-B12C-9DE9BA405775} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2198722660-397689999-1900526466-1000UA => C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Update\GoogleUpdate.exe [2010-02-12] (Google Inc.)
Task: {8CCEE394-AA74-49E3-BCDE-5D75A240D219} - System32\Tasks\User_Feed_Synchronization-{03622D9A-D5C9-4C0C-ACD4-DAFBEC6AC69E} => C:\Windows\system32\msfeedssync.exe [2011-05-25] (Microsoft Corporation)
Task: {9730D0F4-368F-460A-8706-09E0C1E8EA9A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-10-19] (Google Inc.)
Task: {A1868F64-ED08-49A9-9F86-F62ED855AFFD} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\System32\srrstr.dll [2008-01-21] (Microsoft Corporation)
Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-21] (Microsoft Corporation)
Task: {C73936D9-650A-4968-8C25-D25B2259F47E} - System32\Tasks\WPD\SqmUpload_S-1-5-21-2198722660-397689999-1900526466-1000 => C:\Windows\System32\portabledeviceapi.dll [2009-10-01] (Microsoft Corporation)
Task: {CFE6E042-AE6D-4647-A11A-5BBD76B8AB22} - System32\Tasks\Microsoft\Windows\RestartManager\{3813C8A8-4EE8-48aa-8AAE-DB82B9844ACA} => C:\Windows\system32\rmclient.exe [2006-11-02] (Microsoft Corporation)
Task: {D1CCFB5C-4C8B-4E1F-A745-85DCA1CAF87C} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-21] (Microsoft Corporation)
Task: {D7E46849-3196-4168-9667-ED8EBEA00FA1} - System32\Tasks\{47163377-38A1-4F89-B06F-54898310994A} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {F375559B-AB97-48F1-8EC5-7B0F0D953F7E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {F761761A-90B6-4D73-BB89-4DD9991C07F8} - System32\Tasks\Install_NSS => C:\Program Files\DivX\Symantec\scstubinstaller.exe [2009-11-14] (Symantec Corporation)
Task: {F8D6E476-24FE-4649-A4D7-985706B29128} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 => C:\Windows\System32\ndfapi.dll [2008-01-21] (Microsoft Corporation)
Task: {FA1B7920-CD4D-4C4B-9EFC-6DB210AD574F} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-01-27] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2198722660-397689999-1900526466-1000Core.job => C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2198722660-397689999-1900526466-1000UA.job => C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Install.job => C:\Windows\System32\Macromed\Shockwave 10\nssstub.exe
Task: C:\Windows\Tasks\Install_NSS.job => C:\Program Files\DivX\Symantec\scstubinstaller.exe

==================== Alternate Data Streams (whitelisted) ==========

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (08/30/2013 06:30:57 AM) (Source: VmbService) (User: )
Description: GetProcessOwner

Error: (08/30/2013 06:29:14 AM) (Source: HP AdvisorUpdate) (User: )
Description: Ein Teil des Pfades "C:\_pack6\hp-advisor\src\HPAdvisor\Shared\Content\xsd\HPAdvisor.xsd" konnte nicht gefunden werden. bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
bei System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
bei System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize)
bei System.Xml.XmlDownloadManager.GetStream(Uri uri, ICredentials credentials)
bei System.Xml.XmlUrlResolver.GetEntity(Uri absoluteUri, String role, Type ofObjectToReturn)
bei System.Xml.XmlReader.Create(String inputUri, XmlReaderSettings settings, XmlParserContext inputContext)
bei System.Xml.Schema.XmlSchemaSet.Add(String targetNamespace, String schemaUri)
bei HPAdvisor.Common.Content.CategoryCollection.ValidateDocument(String path) ValidateDocument failed Business\SearchTargets.xml

Error: (08/30/2013 06:23:59 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/30/2013 06:22:57 AM) (Source: VmbService) (User: )
Description: conflictManagerTypeValue

Error: (08/29/2013 00:32:09 PM) (Source: VmbService) (User: )
Description: GetProcessOwner

Error: (08/29/2013 00:32:09 PM) (Source: VmbService) (User: )
Description: GetProcessOwner

Error: (08/29/2013 00:31:09 PM) (Source: HP AdvisorUpdate) (User: )
Description: Ein Teil des Pfades "C:\_pack6\hp-advisor\src\HPAdvisor\Shared\Content\xsd\HPAdvisor.xsd" konnte nicht gefunden werden. bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
bei System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
bei System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize)
bei System.Xml.XmlDownloadManager.GetStream(Uri uri, ICredentials credentials)
bei System.Xml.XmlUrlResolver.GetEntity(Uri absoluteUri, String role, Type ofObjectToReturn)
bei System.Xml.XmlReader.Create(String inputUri, XmlReaderSettings settings, XmlParserContext inputContext)
bei System.Xml.Schema.XmlSchemaSet.Add(String targetNamespace, String schemaUri)
bei HPAdvisor.Common.Content.CategoryCollection.ValidateDocument(String path) ValidateDocument failed Business\SearchTargets.xml

Error: (08/29/2013 00:24:50 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/29/2013 00:24:34 PM) (Source: VmbService) (User: )
Description: conflictManagerTypeValue

Error: (08/29/2013 00:20:44 PM) (Source: Bonjour Service) (User: )
Description: 380: ERROR: read_msg errno 0 (Der Vorgang wurde erfolgreich beendet.)

System errors:
=============
Error: (08/30/2013 06:27:51 AM) (Source: Service Control Manager) (User: )
Description: Windows Presentation Foundation-Schriftartcache 3.0.0.0%%1053

Error: (08/30/2013 06:27:49 AM) (Source: Service Control Manager) (User: )
Description: 30000Windows Presentation Foundation-Schriftartcache 3.0.0.0

Error: (08/30/2013 06:26:41 AM) (Source: Service Control Manager) (User: )
Description: 30000Microsoft .NET Framework NGEN v4.0.30319_X86

Error: (08/30/2013 06:24:00 AM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (08/30/2013 06:22:45 AM) (Source: Print) (User: NT-AUTORITÄT)
Description: Das Dokument PUBLICATION FOR FUNERAL konnte nicht gedruckt werden und wurde aufgrund einer Beschädigung an der gespoolten Datei gelöscht. Der zugewiesene Treiber ist "EPSON BX305 Series". Versuchen Sie erneut, das Dokument zu drucken.

Error: (08/30/2013 06:22:38 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 30.08.2013 um 00:14:04 unerwartet heruntergefahren.

Error: (08/29/2013 00:28:35 PM) (Source: Service Control Manager) (User: )
Description: 30000Microsoft .NET Framework NGEN v4.0.30319_X86

Error: (08/29/2013 00:24:50 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (08/28/2013 03:02:06 AM) (Source: Service Control Manager) (User: )
Description: Adobe Flash Player Update Service%%1053

Error: (08/28/2013 03:02:05 AM) (Source: Service Control Manager) (User: )
Description: 30000Adobe Flash Player Update Service

Microsoft Office Sessions:
=========================
Error: (08/26/2013 04:08:21 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 402494 seconds with 720 seconds of active time. This session ended with a crash.

Error: (08/22/2013 00:19:39 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 191044 seconds with 660 seconds of active time. This session ended with a crash.

Error: (07/04/2013 02:51:27 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6600.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 4378 seconds with 2520 seconds of active time. This session ended with a crash.

Error: (07/01/2013 07:56:46 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 150 seconds with 120 seconds of active time. This session ended with a crash.

Error: (06/29/2013 02:19:44 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 187863 seconds with 1800 seconds of active time. This session ended with a crash.

Error: (06/14/2013 05:13:18 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 127485 seconds with 2280 seconds of active time. This session ended with a crash.

Error: (06/07/2013 04:22:32 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 371 seconds with 360 seconds of active time. This session ended with a crash.

Error: (06/06/2013 05:17:56 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 1302 seconds with 240 seconds of active time. This session ended with a crash.

Error: (11/29/2011 09:47:51 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 24 seconds with 0 seconds of active time. This session ended with a crash.

Error: (11/12/2011 08:09:51 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 9 seconds with 0 seconds of active time. This session ended with a crash.

CodeIntegrity Errors:
===================================
Date: 2013-08-30 06:58:05.844
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-30 06:58:05.153
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-30 06:58:04.463
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-30 06:58:03.790
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-29 10:23:20.737
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-29 10:23:19.400
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-29 10:23:18.268
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-29 10:23:16.891
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-16 13:27:01.857
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-16 13:27:01.140
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

==================== Memory info ===========================

Percentage of memory in use: 63%
Total physical RAM: 3068.44 MB
Available physical RAM: 1110.14 MB
Total Pagefile: 6369.14 MB
Available Pagefile: 3886.91 MB
Total Virtual: 2047.88 MB
Available Virtual: 1903.05 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:222.29 GB) (Free:68.98 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVERY) (Fixed) (Total:10.6 GB) (Free:1.79 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (My Disc) (CDROM) (Total:0.64 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 233 GB) (Disk ID: BFFDD588)
Partition 1: (Active) - (Size=222 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=11 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Hi,

das ist die Addition.txt von FRST. Poste bitte auch noch den Inhalt der FRST.txt.

Sorry, Ich hab so nicht so viel ahnung, wie mache ich das?

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-08-2013

Ran by GOD IS GOOD TO ME (administrator) on 30-08-2013 06:56:21

Running from C:\Users\GOD IS GOOD TO ME\Downloads

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe

(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\STacSV.exe

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe

(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\aestsrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Program Files\SMINST\BLService.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Vodafone) C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Google Inc.) C:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(CyberLink Corp.) C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe

(CyberLink Corp.) C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe

(CyberLink) C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe

( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe

(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(CyberLink Corp.) C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe

(Microsoft Corporation) C:\Windows\WindowsMobile\wmdSync.exe

() C:\Program Files\T-Mobile Mobile Broadband Manager\UIExec.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe

(shbox.de) C:\Program Files\FreePDF_XP\fpassist.exe

(SEIKO EPSON CORPORATION) C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\AllShare\AllShareAgent.exe

(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe

(Microsoft Corporation) C:\Windows\ehome\ehtray.exe

(Octoshape ApS) C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe

(Nokia) C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe

(Spotify Ltd) C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

(Google) C:\Program Files\Google\Drive\googledrivesync.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Dropbox, Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe

(Google) C:\Program Files\Google\Drive\googledrivesync.exe

(Nokia) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe

(Microsoft Corporation) C:\Windows\system32\conime.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Hewlett-Packard) c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe

(Microsoft Corporation) C:\Windows\system32\wuauclt.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

() C:\Program Files\T-Mobile\web'n'walk Manager\WTGU.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1721640 2010-05-27] (Synaptics Incorporated)

HKLM\...\Run: [DVDAgent] - C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe [1148200 2008-09-26] (CyberLink Corp.)

HKLM\...\Run: [TSMAgent] - C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe [1152296 2008-09-25] (CyberLink Corp.)

HKLM\...\Run: [CLMLServer for HP TouchSmart] - C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [189736 2008-09-25] (CyberLink)

HKLM\...\Run: [UCam_Menu] - C:\Program Files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [912688 2008-09-23] (Hewlett-Packard)

HKLM\...\Run: [UpdateLBPShortCut] - C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [UpdatePSTShortCut] - C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2008-09-26] (CyberLink Corp.)

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [QlbCtrl.exe] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [202032 2008-08-01] ( Hewlett-Packard Development Company, L.P.)

HKLM\...\Run: [UpdateP2GoShortCut] - C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [UpdatePDIRShortCut] - C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [HP Software Update] - C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)

HKLM\...\Run: [hpWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752 2008-04-15] (Hewlett-Packard Development Company, L.P.)

HKLM\...\Run: [SearchSettings] - C:\Program Files\pdfforge Toolbar\SearchSettings.exe [992256 2009-01-30] (GreenTree Applications, Inc.)

HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM\...\Run: [TVAgent] - C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe [206120 2009-04-22] (CyberLink Corp.)

HKLM\...\Run: [Windows Mobile-based device management] - C:\Windows\WindowsMobile\wmdSync.exe [215552 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [UIExec] - C:\Program Files\T-Mobile Mobile Broadband Manager\UIExec.exe [132608 2009-07-17] ()

HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [13826664 2009-10-03] (NVIDIA Corporation)

HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2011-06-08] (Adobe Systems Incorporated)

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-03-30] (Adobe Systems Incorporated)

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray.exe [450659 2008-10-26] (IDT, Inc.)

HKLM\...\Run: [FreePDF Assistant] - C:\Program Files\FreePDF_XP\fpassist.exe [385024 2009-09-05] (shbox.de)

HKLM\...\Run: [MobileBroadband] - C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe [272384 2010-08-18] (Vodafone)

HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-02] (Apple Inc.)

HKLM\...\Run: [FUFAXSTM] - C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe [847872 2009-12-03] (SEIKO EPSON CORPORATION)

HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM\...\Run: [HP Health Check Scheduler] - c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [75008 2008-10-09] (Hewlett-Packard)

HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [947152 2013-01-27] (Microsoft Corporation)

HKLM\...\Run: [AllShareAgent] - C:\Program Files\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-02] (Samsung Electronics Co., Ltd.)

HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-08-29] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)

HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2008-06-09] (Hewlett-Packard Company)

HKCU\...\Run: [HPAdvisor] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [972080 2008-09-30] (Hewlett-Packard)

HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)

HKCU\...\Run: [Google Update] - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Update\GoogleUpdate.exe [135664 2010-02-12] (Google Inc.)

HKCU\...\Run: [Octoshape Streaming Services] - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [70936 2009-01-08] (Octoshape ApS)

HKCU\...\Run: [PC Suite Tray] - C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [1483264 2010-12-21] (Nokia)

HKCU\...\Run: [Updater shortcut] - C:\Program Files\T-Mobile\web'n'walk Manager\WTGU.exe [857544 2008-06-19] ()

HKCU\...\Run: [Epson Stylus Office BX305(Netzwerk)] - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGJE.EXE /FU "C:\Windows\TEMP\E_SDB36.tmp" /EF "HKCU" [x]

HKCU\...\Run: [VoipStunt] - C:\Program Files\VoipStunt.com\VoipStunt\voipstunt.exe [19125208 2013-01-19] (VoipStunt)

HKCU\...\Run: [Spotify Web Helper] - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-12] (Spotify Ltd)

HKCU\...\Run: [GoogleDriveSync] - C:\Program Files\Google\Drive\googledrivesync.exe [20097696 2013-06-27] (Google)

HKCU\...\Run: [GoogleChromeAutoLaunch_684A0628291B916B27137DB7ACCD1842] - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe [829392 2013-08-24] (Google Inc.)

HKCU\...\Run: [Spotify] - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify\Spotify.exe [4640768 2013-07-12] (Spotify Ltd)

HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)

HKCU\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)

HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)

MountPoints2: {0e3a93c2-d472-11df-aa6e-00238b89b164} - F:\NokiaPCIA_Autorun.exe

MountPoints2: {1757adba-c2f8-11df-bc8b-00238b89b164} - F:\VersionControl.exe

MountPoints2: {21eab26b-9990-11e0-aa11-00238b89b164} - F:\AutoRun.exe

MountPoints2: {21eab27a-9990-11e0-aa11-00238b89b164} - F:\AutoRun.exe

MountPoints2: {21eab283-9990-11e0-aa11-00238b89b164} - F:\AutoRun.exe

MountPoints2: {2224482d-c3b5-11df-b7a5-00238b89b164} - F:\VersionControl.exe

MountPoints2: {2224482e-c3b5-11df-b7a5-00238b89b164} - F:\VersionControl.exe

MountPoints2: {22633822-1901-11e0-95a6-00238b89b164} - F:\AutoRun.exe

MountPoints2: {2263382e-1901-11e0-95a6-00238b89b164} - F:\AutoRun.exe

MountPoints2: {3153bcbc-af81-11e0-af70-00a0c6000000} - F:\setup_vmb_lite.exe /checkApplicationPresence

MountPoints2: {4cc8c487-c583-11df-bc65-00238b89b164} - F:\VersionControl.exe

MountPoints2: {53461e06-48bf-11e0-8755-00238b89b164} - F:\AutoRun.exe

MountPoints2: {53461e20-48bf-11e0-8755-00238b89b164} - F:\AutoRun.exe

MountPoints2: {54a9a2bb-49b8-11e0-b03b-00238b89b164} - F:\AutoRun.exe

MountPoints2: {54a9a2bd-49b8-11e0-b03b-00238b89b164} - F:\AutoRun.exe

MountPoints2: {54a9a2c6-49b8-11e0-b03b-00238b89b164} - F:\AutoRun.exe

MountPoints2: {54a9a2c8-49b8-11e0-b03b-00238b89b164} - F:\AutoRun.exe

MountPoints2: {60eb22f2-5198-11e0-9050-00238b89b164} - F:\AutoRun.exe

MountPoints2: {63c4776e-a284-11de-8517-00238b89b164} - F:\PMB_P.exe

MountPoints2: {94a0f6d8-2b1e-11e0-bc3a-00238b89b164} - F:\AutoRun.exe

MountPoints2: {94a0f72a-2b1e-11e0-bc3a-00238b89b164} - F:\AutoRun.exe

MountPoints2: {9f78ab0e-fcc8-11df-b0ea-00238b89b164} - F:\AutoRun.exe

MountPoints2: {a939c226-9998-11e0-a62c-00238b89b164} - F:\AutoRun.exe

MountPoints2: {a939c229-9998-11e0-a62c-00238b89b164} - F:\AutoRun.exe

MountPoints2: {aa1ebce6-53c2-11e0-8491-00238b89b164} - F:\AutoRun.exe

MountPoints2: {adf70519-19d8-11e0-9403-00238b89b164} - F:\AutoRun.exe

MountPoints2: {ef9f7784-1a97-11e0-b9e5-806e6f6e6963} - F:\AutoRun.exe

MountPoints2: {ef9f77e4-1a97-11e0-b9e5-00238b89b164} - F:\AutoRun.exe

HKU\Default\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-09-30] (Hewlett-Packard)

HKU\Default User\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-09-30] (Hewlett-Packard)

HKU\Gast\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-09-30] (Hewlett-Packard)

HKU\Gast\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-06-09] (Hewlett-Packard Company)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk

ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Netzwerk Server.lnk

ShortcutTarget: Netzwerk Server.lnk -> C:\Program Files\WIBUKEY\Server\WkSvMgr.exe (No File)

Startup: C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

BootExecute: 'autocheck autochk * '
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://startsear.ch/?aff=1

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.

URLSearchHook: (No Name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} -  No File

SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD21} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=1083&systemid=1&sr=0&q={searchTerms}

SearchScopes: HKLM - {08D5D282-8201-4369-AD91-B56E22BABFFA} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de

SearchScopes: HKLM - {2A38E76A-B220-4381-AC14-571525B7D559} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008

SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD21} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=1083&systemid=1&sr=0&q={searchTerms}

SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://www.searchqu.com/web?src=ieb&appid=119&systemid=406&sr=0&q={searchTerms}

SearchScopes: HKLM - {C3678759-6DDB-46C8-9566-89C14A58AF9A} URL = hxxp://startsear.ch/?aff=1&q={searchTerms}

SearchScopes: HKLM - {EEFFE926-4B4C-43C6-84DA-7DCC17D5E867} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933

SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&AF=119998&babsrc=SP_ss&mntrId=5cf4b111000000000000002100c18b06

SearchScopes: HKCU - {043C5167-00BB-4324-AF7E-62013FAEDACF} URL = hxxp://vshare.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp

SearchScopes: HKCU - {08D5D282-8201-4369-AD91-B56E22BABFFA} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de

SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&AF=119998&babsrc=SP_ss&mntrId=5cf4b111000000000000002100c18b06

SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = hxxp://supertoolbar.ask.com/redirect?client=ie&tb=SPC&o=15000&src=crm&q={searchTerms}&locale=de_DE

SearchScopes: HKCU - {2A38E76A-B220-4381-AC14-571525B7D559} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008

SearchScopes: HKCU - {6B9E672B-C9AC-4EA3-AB3F-78B53DFCF5D5} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=971163&p={searchTerms}

SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD21} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=1083&systemid=1&sr=0&q={searchTerms}

SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://www.searchqu.com/web?src=ieb&appid=119&systemid=406&sr=0&q={searchTerms}

SearchScopes: HKCU - {C3678759-6DDB-46C8-9566-89C14A58AF9A} URL = hxxp://startsear.ch/?aff=1&q={searchTerms}

SearchScopes: HKCU - {D1333851-BD3C-4B40-B4A2-77DF85FE9843} URL = hxxp://www.google.de/search?q={searchTerms}

SearchScopes: HKCU - {DADCFD18-A006-49D6-9476-D85B58A13601} URL = hxxp://www.bing.com/search?q={searchTerms}&form=BIE9DF&pc=BIE9&src=IE-SearchBox

SearchScopes: HKCU - {EEFFE926-4B4C-43C6-84DA-7DCC17D5E867} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933

BHO: No Name - {02478D38-C3F9-4efb-9B51-7695ECA05670} -  No File

BHO: vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll ()

BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Complitly\Complitly.dll (SimplyGen)

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll (BitComet)

BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: IE5BarLauncherBHO Class - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.)

BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\WI371A~1\Datamngr\ToolBar\searchqudtx.dll ()

BHO: SearchCore for Browsers - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\PROGRA~1\SEARCH~1\SEARCH~1\BROWSE~1.DLL (Bandoo Media, inc)

BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll (GreenTree Applications, Inc.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO: No Name - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} -  No File

BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)

Toolbar: HKLM - pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll (GreenTree Applications, Inc.)

Toolbar: HKLM - vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll ()

Toolbar: HKLM - VShareToolBar - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.)

Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

Toolbar: HKLM - Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\WI371A~1\Datamngr\ToolBar\searchqudtx.dll ()

Toolbar: HKCU -No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File

Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

Toolbar: HKCU -vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll ()

DPF: {5D6F45B3-9043-443D-A792-115447494D24} MSN Games - Free Online Games

DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} MSN Games - Free Online Games

DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} hxxp://mobileapps.blackberry.com/devicesoftware/AxLoader.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Handler: vsharechrome - {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files\vShare\vshare_toolbar.dll ()

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

Tcpip\..\Interfaces\{3CAB5F6D-B28C-4107-9965-53F894B70FD8}: [NameServer]149.254.230.7 149.254.199.126
 

FireFox:

========

FF ProfilePath: C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default

FF SelectedSearchEngine: Ask.com

FF Homepage: hxxp://search.avira.com/?l=dis&o=APN10401&gct=hp&dc=EU&locale=de_GB

FF Keyword.URL: hxxp://dts.search-results.com/sr?src=ffb&appid=1083&systemid=1&sr=0&q=

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()

FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)

FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @pages.tvunetworks.com/WebPlayer - C:\Program Files\TVUPlayer\npTVUAx.dll (TVU networks)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)

FF Plugin: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)

FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)

FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()

FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF SearchPlugin: C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\searchplugins\askcom.xml

FF SearchPlugin: C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\searchplugins\SearchResults.xml

FF SearchPlugin: C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\searchplugins\Search_Results.xml

FF SearchPlugin: C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\searchplugins\startsear.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\answers.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\SearchResults.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml

FF Extension: No Name - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}

FF Extension: TVU Web Player - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\firefox@tvunetworks.com

FF Extension: No Name - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\staged

FF Extension: Microsoft .NET Framework Assistant - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}

FF Extension: Complitly - Speed up your search with your personal search suggestions tool - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}

FF Extension: Searchqu Toolbar - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}

FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

FF Extension: Default - C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF HKLM\...\Firefox\Extensions: [bkmrksync@nokia.com] C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\

FF Extension: PC Sync 2 Synchronisation Extension - C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\

FF HKLM\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\

FF Extension: No Name - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\

FF HKCU\...\Firefox\Extensions: [{609305BF-D46B-47EE-BB92-D918DCE077F0}] C:\Users\GOD IS GOOD TO ME\AppData\Local\{609305BF-D46B-47EE-BB92-D918DCE077F0}\

FF Extension: XULRunner - C:\Users\GOD IS GOOD TO ME\AppData\Local\{609305BF-D46B-47EE-BB92-D918DCE077F0}\
 

Chrome: 

=======

CHR RestoreOnStartup: "hxxp://www.facebook.com/"

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\29.0.1547.62\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\29.0.1547.62\pdf.dll ()

CHR Plugin: (Shockwave Flash) - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\29.0.1547.62\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File

CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)

CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll No File

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll No File

CHR Plugin: (vShare.tv plug-in) - C:\Program Files\Mozilla Firefox\plugins\npvsharetvplg.dll (vShare.tv )

CHR Plugin: (Octoshape Streaming Services) - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\plugins\npoctoshape.dll (Octoshape ApS)

CHR Plugin: (Octoshape Streaming Services) - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

CHR Plugin: (DivX Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)

CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll No File

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File

CHR Plugin: (TVU Web Player for FireFox) - C:\Program Files\TVUPlayer\npTVUAx.dll (TVU networks)

CHR Plugin: (Veetle TV Player) - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)

CHR Plugin: (Veetle TV Core) - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)

CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File

CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

CHR Extension: (Google Drive) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (Complitly plugin for chrome) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0

CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak\1.0_0

CHR Extension: (vshare plugin) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0

CHR Extension: (Skype Click to Call) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0

CHR Extension: (DVDVideoSoft) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.2.3.3_0

CHR Extension: (Chrome In-App Payments service) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0

CHR HKLM\...\Chrome\Extension: [dlfienamagdnkekbbbocojppncdambda] - C:\Program Files\Complitly\chrome\ComplitlyChrome.crx

CHR HKLM\...\Chrome\Extension: [kpionmjnkbpcdpcflammlgllecmejgjj] - C:\Program Files\vShare.tv plugin\vshareplg.crx

CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

CHR StartMenuInternet: Google Chrome - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe
 

========================== Services (Whitelisted) =================
 

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\aestsrv.exe [77824 2008-06-27] (Andrea Electronics Corporation)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-08-29] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-08-29] (Avira Operations GmbH & Co. KG)

R2 EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION)

R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208 2008-10-09] (Hewlett-Packard)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [20456 2013-01-27] (Microsoft Corporation)

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295232 2013-01-27] (Microsoft Corporation)

R2 Recovery Service for Windows; C:\Program Files\SMINST\BLService.exe [365952 2008-10-06] ()

S4 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [241734 2008-06-30] ()

R2 SamsungAllShareV2.0; C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [25504 2012-03-02] (Samsung Electronics Co., Ltd.)

S3 SimpleSlideShowServer; C:\Program Files\Samsung\AllShare\AllShareSlideShowService.exe [27584 2012-03-02] (Samsung Electronics Co., Ltd.)

R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\STacSV.exe [237657 2008-10-26] (IDT, Inc.)

S4 TVCapSvc; C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe [296320 2009-04-22] ()

S4 TVSched; C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe [116104 2009-04-22] ()

S4 UI Assistant Service; C:\Program Files\T-Mobile Mobile Broadband Manager\AssistantServices.exe [241664 2009-07-17] ()

R2 VmbService; C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [8704 2010-08-18] (Vodafone)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-08-29] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-08-29] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-04-10] (Avira Operations GmbH & Co. KG)

R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [195296 2013-01-20] (Microsoft Corporation)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-03-02] (Avira GmbH)

R3 vodafone_K380x-z_dc_enum; C:\Windows\System32\DRIVERS\vodafone_K380x-z_dc_enum.sys [80000 2010-05-20] (Vodafone)

S3 ZTEusbnet; C:\Windows\System32\DRIVERS\ZTEusbnet.sys [114688 2010-08-11] (ZTE Corporation)

S3 ZTEusbvoice; C:\Windows\System32\DRIVERS\ZTEusbvoice.sys [105856 2010-08-11] (ZTE Incorporated)

R2 {55662437-DA8C-40c0-AADA-2C816A897A49}; C:\Program Files\Hewlett-Packard\Media\DVD\000.fcl [59376 2008-09-26] (Cyberlink Corp.)

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]

S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

S1 qfrkhehd; \??\C:\Windows\system32\drivers\qfrkhehd.sys [x]

S1 soxopydg; \??\C:\Windows\system32\drivers\soxopydg.sys [x]

S1 uvvvcaub; \??\C:\Windows\system32\drivers\uvvvcaub.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-08-30 06:53 - 2013-08-30 06:53 - 01072975 _____ (Farbar) C:\Users\GOD IS GOOD TO ME\Downloads\FRST.exe

2013-08-30 06:52 - 2013-08-30 06:52 - 01579080 _____ (Farbar) C:\Users\GOD IS GOOD TO ME\Downloads\FRST64.exe

2013-08-30 06:27 - 2013-08-30 06:27 - 94712498 _____ C:\Windows\system32\兽�ᴼœ

2013-08-29 18:11 - 2013-08-29 18:11 - 94663095 _____ C:\Windows\system32\잿ľᴼª

2013-08-27 20:15 - 2013-08-02 05:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-08-27 18:50 - 2013-08-27 18:50 - 00220647 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Photo by mrdzifs.htm

2013-08-27 18:50 - 2013-08-27 18:50 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Photo by mrdzifs_files

2013-08-26 17:22 - 2013-08-26 17:23 - 00065804 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Academic words.xlsx

2013-08-19 19:05 - 2013-08-19 19:13 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Social Impact Analysis

2013-08-18 23:07 - 2013-08-18 23:07 - 00001624 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-08-18 23:04 - 2013-08-18 23:04 - 00000000 ____D C:\Program Files\iPod

2013-08-18 23:03 - 2013-08-18 23:07 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1

2013-08-16 13:26 - 2013-08-16 13:26 - 00213024 _____ C:\Windows\Minidump\Mini081613-01.dmp

2013-08-16 13:25 - 2013-08-16 13:25 - 276877329 _____ C:\Windows\MEMORY.DMP

2013-08-15 03:33 - 2013-08-15 03:41 - 00000000 ____D C:\Windows\system32\MRT

2013-08-15 03:09 - 2013-07-25 03:40 - 12334080 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-08-15 03:09 - 2013-07-25 03:32 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-08-15 03:09 - 2013-07-25 03:30 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-08-15 03:09 - 2013-07-25 03:26 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-08-15 03:09 - 2013-07-25 03:26 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-08-15 03:09 - 2013-07-25 03:25 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-08-15 03:09 - 2013-07-25 03:24 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-08-15 03:09 - 2013-07-25 03:24 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-08-15 03:09 - 2013-07-25 03:22 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-08-15 03:09 - 2013-07-25 03:22 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-08-15 03:09 - 2013-07-25 03:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-08-14 23:44 - 2013-07-17 20:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-08-14 23:44 - 2013-07-10 10:47 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2013-08-14 23:44 - 2013-07-09 13:10 - 01205168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-08-14 23:44 - 2013-07-08 05:55 - 03603904 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2013-08-14 23:44 - 2013-07-08 05:55 - 03551680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-08-14 23:44 - 2013-07-05 04:20 - 00914880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-08-14 23:44 - 2013-07-05 02:43 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys

2013-08-14 23:44 - 2013-06-15 14:22 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll

2013-08-14 23:44 - 2013-06-15 12:23 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2013-08-14 23:39 - 2013-07-08 05:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2013-08-14 23:39 - 2013-07-08 05:16 - 00992768 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-08-14 23:39 - 2013-07-08 05:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-08-14 23:39 - 2013-07-08 05:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-08-10 14:04 - 2013-08-10 14:08 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\House Project Ghana

2013-08-10 08:36 - 2013-08-10 08:36 - 00451072 _____ C:\Users\GOD IS GOOD TO ME\Downloads\excel-time-sheet-attendance.xls

2013-08-10 08:35 - 2013-08-10 08:35 - 00045171 _____ C:\Users\GOD IS GOOD TO ME\Downloads\TS102807582.dotx

2013-08-09 21:42 - 2013-08-09 21:46 - 00000000 ____D C:\Program Files\DVDVideoSoft

2013-08-09 21:42 - 2013-08-09 21:46 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft

2013-08-09 21:34 - 2013-08-09 21:35 - 27142232 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\GOD IS GOOD TO ME\Downloads\FreeYouTubeToMP3Converter (1).exe

2013-08-09 21:23 - 2013-08-09 21:25 - 77947798 _____ C:\Users\GOD IS GOOD TO ME\Downloads\NAVIIV X PASSION.zip

2013-08-09 19:56 - 2013-08-09 19:56 - 00014845 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Housing companies 2.xlsx

2013-08-09 19:55 - 2013-08-09 19:55 - 00015648 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Housing companies.xlsx

2013-08-06 22:28 - 2013-08-06 22:28 - 00022044 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Kitchen deep cleaning - PQQ scoring.xlsx

2013-08-05 17:39 - 2013-08-05 17:39 - 00037888 _____ C:\Users\GOD IS GOOD TO ME\Downloads\100422 Tenant Satisfaction.xls

2013-08-05 17:37 - 2013-08-05 17:38 - 00055296 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Third Sector funding 2011-12 - Appendix B.xls

2013-08-05 17:32 - 2013-08-05 17:32 - 00069120 _____ C:\Users\GOD IS GOOD TO ME\Downloads\2010-10 C2 2009.xls

2013-08-03 11:59 - 2013-08-03 12:00 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Beckys Dad

2013-08-03 09:05 - 2013-08-03 09:05 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Church FM
 

==================== One Month Modified Files and Folders =======
 

2013-08-30 06:57 - 2011-06-01 10:26 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Dropbox

2013-08-30 06:56 - 2013-08-30 06:56 - 00000000 ____D C:\FRST

2013-08-30 06:53 - 2013-08-30 06:53 - 01072975 _____ (Farbar) C:\Users\GOD IS GOOD TO ME\Downloads\FRST.exe

2013-08-30 06:52 - 2013-08-30 06:52 - 01579080 _____ (Farbar) C:\Users\GOD IS GOOD TO ME\Downloads\FRST64.exe

2013-08-30 06:46 - 2010-11-02 10:37 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-08-30 06:33 - 2009-02-26 02:45 - 01898901 _____ C:\Windows\WindowsUpdate.log

2013-08-30 06:29 - 2012-01-25 09:12 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify

2013-08-30 06:28 - 2012-06-27 20:18 - 00000000 ___RD C:\Users\GOD IS GOOD TO ME\Google Drive

2013-08-30 06:27 - 2013-08-30 06:27 - 94712498 _____ C:\Windows\system32\兽�ᴼœ

2013-08-30 06:26 - 2011-06-01 10:29 - 00000000 ___RD C:\Users\GOD IS GOOD TO ME\Dropbox

2013-08-30 06:24 - 2010-11-02 10:37 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-08-30 06:23 - 2009-02-26 03:42 - 00065971 _____ C:\ProgramData\nvModes.001

2013-08-30 06:23 - 2009-02-26 03:27 - 00065971 _____ C:\ProgramData\nvModes.dat

2013-08-30 06:22 - 2013-03-26 09:40 - 00022660 _____ C:\Windows\PFRO.log

2013-08-30 06:22 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-08-30 06:22 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-08-30 06:22 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-08-30 00:12 - 2012-04-11 21:43 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-08-29 23:18 - 2010-02-12 14:25 - 00000956 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2198722660-397689999-1900526466-1000UA.job

2013-08-29 21:18 - 2010-02-12 14:25 - 00000904 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2198722660-397689999-1900526466-1000Core.job

2013-08-29 18:11 - 2013-08-29 18:11 - 94663095 _____ C:\Windows\system32\잿ľᴼª

2013-08-29 17:29 - 2011-03-09 01:07 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\HCM Updater

2013-08-29 12:21 - 2006-11-02 14:01 - 00032638 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-08-29 12:16 - 2009-04-09 18:37 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Skype

2013-08-29 12:15 - 2013-03-02 09:14 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-08-29 12:15 - 2013-03-02 09:14 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-08-27 18:50 - 2013-08-27 18:50 - 00220647 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Photo by mrdzifs.htm

2013-08-27 18:50 - 2013-08-27 18:50 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Photo by mrdzifs_files

2013-08-27 17:39 - 2009-05-03 02:20 - 00000052 _____ C:\Windows\system32\DOErrors.log

2013-08-27 03:17 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET

2013-08-27 03:07 - 2006-11-02 11:33 - 01478250 _____ C:\Windows\system32\PerfStringBackup.INI

2013-08-26 23:03 - 2012-01-25 09:13 - 00000000 ____D C:\Users\GODISG~1\AppData\Local\Spotify

2013-08-26 17:23 - 2013-08-26 17:22 - 00065804 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Academic words.xlsx

2013-08-26 13:58 - 2013-06-04 18:28 - 00000000 ____D C:\Users\GODISG~1\AppData\Local\48459218-93EB-4FF8-A57F-F866C4FA96FB.aplzod

2013-08-21 16:06 - 2012-04-11 21:43 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2013-08-21 16:06 - 2011-05-25 12:16 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2013-08-20 22:20 - 2011-07-17 22:08 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Personal Finance

2013-08-20 19:34 - 2009-07-26 09:07 - 00000000 ___RD C:\Program Files\Skype

2013-08-20 19:34 - 2009-04-09 18:36 - 00000000 ____D C:\ProgramData\Skype

2013-08-19 23:18 - 2011-09-27 20:49 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\TuneUpMedia

2013-08-19 19:13 - 2013-08-19 19:05 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Social Impact Analysis

2013-08-18 23:07 - 2013-08-18 23:07 - 00001624 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-08-18 23:07 - 2013-08-18 23:03 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1

2013-08-18 23:07 - 2011-07-19 21:50 - 00000000 ____D C:\Program Files\iTunes

2013-08-18 23:04 - 2013-08-18 23:04 - 00000000 ____D C:\Program Files\iPod

2013-08-18 23:04 - 2011-04-13 14:51 - 00000000 ____D C:\Program Files\Common Files\Apple

2013-08-16 13:26 - 2013-08-16 13:26 - 00213024 _____ C:\Windows\Minidump\Mini081613-01.dmp

2013-08-16 13:26 - 2009-04-11 22:35 - 00000000 ____D C:\Windows\Minidump

2013-08-16 13:25 - 2013-08-16 13:25 - 276877329 _____ C:\Windows\MEMORY.DMP

2013-08-15 09:13 - 2009-04-09 22:03 - 00000000 ____D C:\Users\GODISG~1\AppData\Local\Adobe

2013-08-15 04:36 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache

2013-08-15 03:59 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE

2013-08-15 03:41 - 2013-08-15 03:33 - 00000000 ____D C:\Windows\system32\MRT

2013-08-15 03:33 - 2006-11-02 11:24 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2013-08-15 03:28 - 2008-11-15 05:36 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-08-10 14:08 - 2013-08-10 14:04 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\House Project Ghana

2013-08-10 08:36 - 2013-08-10 08:36 - 00451072 _____ C:\Users\GOD IS GOOD TO ME\Downloads\excel-time-sheet-attendance.xls

2013-08-10 08:35 - 2013-08-10 08:35 - 00045171 _____ C:\Users\GOD IS GOOD TO ME\Downloads\TS102807582.dotx

2013-08-09 21:46 - 2013-08-09 21:42 - 00000000 ____D C:\Program Files\DVDVideoSoft

2013-08-09 21:46 - 2013-08-09 21:42 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft

2013-08-09 21:42 - 2013-02-15 18:36 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\DVDVideoSoft

2013-08-09 21:42 - 2011-09-27 20:48 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\OpenCandy

2013-08-09 21:35 - 2013-08-09 21:34 - 27142232 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\GOD IS GOOD TO ME\Downloads\FreeYouTubeToMP3Converter (1).exe

2013-08-09 21:25 - 2013-08-09 21:23 - 77947798 _____ C:\Users\GOD IS GOOD TO ME\Downloads\NAVIIV X PASSION.zip

2013-08-09 19:56 - 2013-08-09 19:56 - 00014845 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Housing companies 2.xlsx

2013-08-09 19:55 - 2013-08-09 19:55 - 00015648 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Housing companies.xlsx

2013-08-08 05:48 - 2010-12-02 19:33 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Kylean

2013-08-06 22:28 - 2013-08-06 22:28 - 00022044 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Kitchen deep cleaning - PQQ scoring.xlsx

2013-08-05 17:39 - 2013-08-05 17:39 - 00037888 _____ C:\Users\GOD IS GOOD TO ME\Downloads\100422 Tenant Satisfaction.xls

2013-08-05 17:38 - 2013-08-05 17:37 - 00055296 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Third Sector funding 2011-12 - Appendix B.xls

2013-08-05 17:32 - 2013-08-05 17:32 - 00069120 _____ C:\Users\GOD IS GOOD TO ME\Downloads\2010-10 C2 2009.xls

2013-08-03 12:00 - 2013-08-03 11:59 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Beckys Dad

2013-08-03 12:00 - 2009-06-26 11:43 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\NPP

2013-08-03 09:05 - 2013-08-03 09:05 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Church FM

2013-08-02 05:09 - 2013-08-27 20:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
 

Files to move or delete:

====================

C:\ProgramData\nvModes.dat

C:\Users\Gast\AppData\Local\Temp\AskSLib.dll

C:\Users\Gast\AppData\Local\Temp\4F29.dir\InstallFlashPlayer.exe

C:\Users\GODISG~1\AppData\Local\Temp\htmlayout.dll

C:\Users\GODISG~1\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe

C:\Users\GODISG~1\AppData\Local\Temp\RegAsm.exe

C:\Users\GODISG~1\AppData\Local\Temp\SkypeSetup.exe

C:\Users\GODISG~1\AppData\Local\Temp\UpdaterCopy.exe

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\xcrashreport\XCrashReport.exe

C:\Users\GODISG~1\AppData\Local\Temp\tmpuvqt2t\googledrivesync.exe

C:\Users\GODISG~1\AppData\Local\Temp\tmpqqthhg\googledrivesync.exe

C:\Users\GODISG~1\AppData\Local\Temp\tmpijlksn\googledrivesync.exe

C:\Users\GODISG~1\AppData\Local\Temp\tmpc8wa1p\googledrivesync.exe
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-08-30 06:33
 

==================== End Of Log ============================

--- --- ---

--- --- ---

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-08-2013

Ran by GOD IS GOOD TO ME (administrator) on 30-08-2013 06:56:21

Running from C:\Users\GOD IS GOOD TO ME\Downloads

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe

(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\STacSV.exe

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe

(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\aestsrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Program Files\SMINST\BLService.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Vodafone) C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Google Inc.) C:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(CyberLink Corp.) C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe

(CyberLink Corp.) C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe

(CyberLink) C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe

( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe

(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(CyberLink Corp.) C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe

(Microsoft Corporation) C:\Windows\WindowsMobile\wmdSync.exe

() C:\Program Files\T-Mobile Mobile Broadband Manager\UIExec.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe

(shbox.de) C:\Program Files\FreePDF_XP\fpassist.exe

(SEIKO EPSON CORPORATION) C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\AllShare\AllShareAgent.exe

(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe

(Microsoft Corporation) C:\Windows\ehome\ehtray.exe

(Octoshape ApS) C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe

(Nokia) C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe

(Spotify Ltd) C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

(Google) C:\Program Files\Google\Drive\googledrivesync.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Dropbox, Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe

(Google) C:\Program Files\Google\Drive\googledrivesync.exe

(Nokia) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe

(Microsoft Corporation) C:\Windows\system32\conime.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Hewlett-Packard) c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe

(Microsoft Corporation) C:\Windows\system32\wuauclt.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

() C:\Program Files\T-Mobile\web'n'walk Manager\WTGU.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1721640 2010-05-27] (Synaptics Incorporated)

HKLM\...\Run: [DVDAgent] - C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe [1148200 2008-09-26] (CyberLink Corp.)

HKLM\...\Run: [TSMAgent] - C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe [1152296 2008-09-25] (CyberLink Corp.)

HKLM\...\Run: [CLMLServer for HP TouchSmart] - C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [189736 2008-09-25] (CyberLink)

HKLM\...\Run: [UCam_Menu] - C:\Program Files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [912688 2008-09-23] (Hewlett-Packard)

HKLM\...\Run: [UpdateLBPShortCut] - C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [UpdatePSTShortCut] - C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2008-09-26] (CyberLink Corp.)

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [QlbCtrl.exe] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [202032 2008-08-01] ( Hewlett-Packard Development Company, L.P.)

HKLM\...\Run: [UpdateP2GoShortCut] - C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [UpdatePDIRShortCut] - C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [HP Software Update] - C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)

HKLM\...\Run: [hpWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752 2008-04-15] (Hewlett-Packard Development Company, L.P.)

HKLM\...\Run: [SearchSettings] - C:\Program Files\pdfforge Toolbar\SearchSettings.exe [992256 2009-01-30] (GreenTree Applications, Inc.)

HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM\...\Run: [TVAgent] - C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe [206120 2009-04-22] (CyberLink Corp.)

HKLM\...\Run: [Windows Mobile-based device management] - C:\Windows\WindowsMobile\wmdSync.exe [215552 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [UIExec] - C:\Program Files\T-Mobile Mobile Broadband Manager\UIExec.exe [132608 2009-07-17] ()

HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [13826664 2009-10-03] (NVIDIA Corporation)

HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2011-06-08] (Adobe Systems Incorporated)

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-03-30] (Adobe Systems Incorporated)

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray.exe [450659 2008-10-26] (IDT, Inc.)

HKLM\...\Run: [FreePDF Assistant] - C:\Program Files\FreePDF_XP\fpassist.exe [385024 2009-09-05] (shbox.de)

HKLM\...\Run: [MobileBroadband] - C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe [272384 2010-08-18] (Vodafone)

HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-02] (Apple Inc.)

HKLM\...\Run: [FUFAXSTM] - C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe [847872 2009-12-03] (SEIKO EPSON CORPORATION)

HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM\...\Run: [HP Health Check Scheduler] - c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [75008 2008-10-09] (Hewlett-Packard)

HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [947152 2013-01-27] (Microsoft Corporation)

HKLM\...\Run: [AllShareAgent] - C:\Program Files\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-02] (Samsung Electronics Co., Ltd.)

HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-08-29] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)

HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2008-06-09] (Hewlett-Packard Company)

HKCU\...\Run: [HPAdvisor] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [972080 2008-09-30] (Hewlett-Packard)

HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)

HKCU\...\Run: [Google Update] - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Update\GoogleUpdate.exe [135664 2010-02-12] (Google Inc.)

HKCU\...\Run: [Octoshape Streaming Services] - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [70936 2009-01-08] (Octoshape ApS)

HKCU\...\Run: [PC Suite Tray] - C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [1483264 2010-12-21] (Nokia)

HKCU\...\Run: [Updater shortcut] - C:\Program Files\T-Mobile\web'n'walk Manager\WTGU.exe [857544 2008-06-19] ()

HKCU\...\Run: [Epson Stylus Office BX305(Netzwerk)] - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGJE.EXE /FU "C:\Windows\TEMP\E_SDB36.tmp" /EF "HKCU" [x]

HKCU\...\Run: [VoipStunt] - C:\Program Files\VoipStunt.com\VoipStunt\voipstunt.exe [19125208 2013-01-19] (VoipStunt)

HKCU\...\Run: [Spotify Web Helper] - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-12] (Spotify Ltd)

HKCU\...\Run: [GoogleDriveSync] - C:\Program Files\Google\Drive\googledrivesync.exe [20097696 2013-06-27] (Google)

HKCU\...\Run: [GoogleChromeAutoLaunch_684A0628291B916B27137DB7ACCD1842] - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe [829392 2013-08-24] (Google Inc.)

HKCU\...\Run: [Spotify] - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify\Spotify.exe [4640768 2013-07-12] (Spotify Ltd)

HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)

HKCU\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)

HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)

MountPoints2: {0e3a93c2-d472-11df-aa6e-00238b89b164} - F:\NokiaPCIA_Autorun.exe

MountPoints2: {1757adba-c2f8-11df-bc8b-00238b89b164} - F:\VersionControl.exe

MountPoints2: {21eab26b-9990-11e0-aa11-00238b89b164} - F:\AutoRun.exe

MountPoints2: {21eab27a-9990-11e0-aa11-00238b89b164} - F:\AutoRun.exe

MountPoints2: {21eab283-9990-11e0-aa11-00238b89b164} - F:\AutoRun.exe

MountPoints2: {2224482d-c3b5-11df-b7a5-00238b89b164} - F:\VersionControl.exe

MountPoints2: {2224482e-c3b5-11df-b7a5-00238b89b164} - F:\VersionControl.exe

MountPoints2: {22633822-1901-11e0-95a6-00238b89b164} - F:\AutoRun.exe

MountPoints2: {2263382e-1901-11e0-95a6-00238b89b164} - F:\AutoRun.exe

MountPoints2: {3153bcbc-af81-11e0-af70-00a0c6000000} - F:\setup_vmb_lite.exe /checkApplicationPresence

MountPoints2: {4cc8c487-c583-11df-bc65-00238b89b164} - F:\VersionControl.exe

MountPoints2: {53461e06-48bf-11e0-8755-00238b89b164} - F:\AutoRun.exe

MountPoints2: {53461e20-48bf-11e0-8755-00238b89b164} - F:\AutoRun.exe

MountPoints2: {54a9a2bb-49b8-11e0-b03b-00238b89b164} - F:\AutoRun.exe

MountPoints2: {54a9a2bd-49b8-11e0-b03b-00238b89b164} - F:\AutoRun.exe

MountPoints2: {54a9a2c6-49b8-11e0-b03b-00238b89b164} - F:\AutoRun.exe

MountPoints2: {54a9a2c8-49b8-11e0-b03b-00238b89b164} - F:\AutoRun.exe

MountPoints2: {60eb22f2-5198-11e0-9050-00238b89b164} - F:\AutoRun.exe

MountPoints2: {63c4776e-a284-11de-8517-00238b89b164} - F:\PMB_P.exe

MountPoints2: {94a0f6d8-2b1e-11e0-bc3a-00238b89b164} - F:\AutoRun.exe

MountPoints2: {94a0f72a-2b1e-11e0-bc3a-00238b89b164} - F:\AutoRun.exe

MountPoints2: {9f78ab0e-fcc8-11df-b0ea-00238b89b164} - F:\AutoRun.exe

MountPoints2: {a939c226-9998-11e0-a62c-00238b89b164} - F:\AutoRun.exe

MountPoints2: {a939c229-9998-11e0-a62c-00238b89b164} - F:\AutoRun.exe

MountPoints2: {aa1ebce6-53c2-11e0-8491-00238b89b164} - F:\AutoRun.exe

MountPoints2: {adf70519-19d8-11e0-9403-00238b89b164} - F:\AutoRun.exe

MountPoints2: {ef9f7784-1a97-11e0-b9e5-806e6f6e6963} - F:\AutoRun.exe

MountPoints2: {ef9f77e4-1a97-11e0-b9e5-00238b89b164} - F:\AutoRun.exe

HKU\Default\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-09-30] (Hewlett-Packard)

HKU\Default User\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-09-30] (Hewlett-Packard)

HKU\Gast\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-09-30] (Hewlett-Packard)

HKU\Gast\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-06-09] (Hewlett-Packard Company)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk

ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Netzwerk Server.lnk

ShortcutTarget: Netzwerk Server.lnk -> C:\Program Files\WIBUKEY\Server\WkSvMgr.exe (No File)

Startup: C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

BootExecute: 'autocheck autochk * '
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://startsear.ch/?aff=1

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.

URLSearchHook: (No Name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} -  No File

SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD21} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=1083&systemid=1&sr=0&q={searchTerms}

SearchScopes: HKLM - {08D5D282-8201-4369-AD91-B56E22BABFFA} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de

SearchScopes: HKLM - {2A38E76A-B220-4381-AC14-571525B7D559} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008

SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD21} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=1083&systemid=1&sr=0&q={searchTerms}

SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://www.searchqu.com/web?src=ieb&appid=119&systemid=406&sr=0&q={searchTerms}

SearchScopes: HKLM - {C3678759-6DDB-46C8-9566-89C14A58AF9A} URL = hxxp://startsear.ch/?aff=1&q={searchTerms}

SearchScopes: HKLM - {EEFFE926-4B4C-43C6-84DA-7DCC17D5E867} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933

SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&AF=119998&babsrc=SP_ss&mntrId=5cf4b111000000000000002100c18b06

SearchScopes: HKCU - {043C5167-00BB-4324-AF7E-62013FAEDACF} URL = hxxp://vshare.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp

SearchScopes: HKCU - {08D5D282-8201-4369-AD91-B56E22BABFFA} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de

SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&AF=119998&babsrc=SP_ss&mntrId=5cf4b111000000000000002100c18b06

SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = hxxp://supertoolbar.ask.com/redirect?client=ie&tb=SPC&o=15000&src=crm&q={searchTerms}&locale=de_DE

SearchScopes: HKCU - {2A38E76A-B220-4381-AC14-571525B7D559} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008

SearchScopes: HKCU - {6B9E672B-C9AC-4EA3-AB3F-78B53DFCF5D5} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=971163&p={searchTerms}

SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD21} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=1083&systemid=1&sr=0&q={searchTerms}

SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://www.searchqu.com/web?src=ieb&appid=119&systemid=406&sr=0&q={searchTerms}

SearchScopes: HKCU - {C3678759-6DDB-46C8-9566-89C14A58AF9A} URL = hxxp://startsear.ch/?aff=1&q={searchTerms}

SearchScopes: HKCU - {D1333851-BD3C-4B40-B4A2-77DF85FE9843} URL = hxxp://www.google.de/search?q={searchTerms}

SearchScopes: HKCU - {DADCFD18-A006-49D6-9476-D85B58A13601} URL = hxxp://www.bing.com/search?q={searchTerms}&form=BIE9DF&pc=BIE9&src=IE-SearchBox

SearchScopes: HKCU - {EEFFE926-4B4C-43C6-84DA-7DCC17D5E867} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933

BHO: No Name - {02478D38-C3F9-4efb-9B51-7695ECA05670} -  No File

BHO: vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll ()

BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Complitly\Complitly.dll (SimplyGen)

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll (BitComet)

BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: IE5BarLauncherBHO Class - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.)

BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\WI371A~1\Datamngr\ToolBar\searchqudtx.dll ()

BHO: SearchCore for Browsers - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\PROGRA~1\SEARCH~1\SEARCH~1\BROWSE~1.DLL (Bandoo Media, inc)

BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll (GreenTree Applications, Inc.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO: No Name - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} -  No File

BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)

Toolbar: HKLM - pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll (GreenTree Applications, Inc.)

Toolbar: HKLM - vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll ()

Toolbar: HKLM - VShareToolBar - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.)

Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

Toolbar: HKLM - Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\WI371A~1\Datamngr\ToolBar\searchqudtx.dll ()

Toolbar: HKCU -No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File

Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

Toolbar: HKCU -vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll ()

DPF: {5D6F45B3-9043-443D-A792-115447494D24} MSN Games - Free Online Games

DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} MSN Games - Free Online Games

DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} hxxp://mobileapps.blackberry.com/devicesoftware/AxLoader.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Handler: vsharechrome - {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files\vShare\vshare_toolbar.dll ()

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

Tcpip\..\Interfaces\{3CAB5F6D-B28C-4107-9965-53F894B70FD8}: [NameServer]149.254.230.7 149.254.199.126
 

FireFox:

========

FF ProfilePath: C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default

FF SelectedSearchEngine: Ask.com

FF Homepage: hxxp://search.avira.com/?l=dis&o=APN10401&gct=hp&dc=EU&locale=de_GB

FF Keyword.URL: hxxp://dts.search-results.com/sr?src=ffb&appid=1083&systemid=1&sr=0&q=

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()

FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)

FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @pages.tvunetworks.com/WebPlayer - C:\Program Files\TVUPlayer\npTVUAx.dll (TVU networks)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)

FF Plugin: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)

FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)

FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()

FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF SearchPlugin: C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\searchplugins\askcom.xml

FF SearchPlugin: C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\searchplugins\SearchResults.xml

FF SearchPlugin: C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\searchplugins\Search_Results.xml

FF SearchPlugin: C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\searchplugins\startsear.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\answers.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\SearchResults.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml

FF Extension: No Name - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}

FF Extension: TVU Web Player - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\firefox@tvunetworks.com

FF Extension: No Name - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\staged

FF Extension: Microsoft .NET Framework Assistant - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}

FF Extension: Complitly - Speed up your search with your personal search suggestions tool - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}

FF Extension: Searchqu Toolbar - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}

FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

FF Extension: Default - C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF HKLM\...\Firefox\Extensions: [bkmrksync@nokia.com] C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\

FF Extension: PC Sync 2 Synchronisation Extension - C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\

FF HKLM\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\

FF Extension: No Name - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\

FF HKCU\...\Firefox\Extensions: [{609305BF-D46B-47EE-BB92-D918DCE077F0}] C:\Users\GOD IS GOOD TO ME\AppData\Local\{609305BF-D46B-47EE-BB92-D918DCE077F0}\

FF Extension: XULRunner - C:\Users\GOD IS GOOD TO ME\AppData\Local\{609305BF-D46B-47EE-BB92-D918DCE077F0}\
 

Chrome: 

=======

CHR RestoreOnStartup: "hxxp://www.facebook.com/"

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\29.0.1547.62\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\29.0.1547.62\pdf.dll ()

CHR Plugin: (Shockwave Flash) - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\29.0.1547.62\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File

CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)

CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll No File

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll No File

CHR Plugin: (vShare.tv plug-in) - C:\Program Files\Mozilla Firefox\plugins\npvsharetvplg.dll (vShare.tv )

CHR Plugin: (Octoshape Streaming Services) - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\plugins\npoctoshape.dll (Octoshape ApS)

CHR Plugin: (Octoshape Streaming Services) - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

CHR Plugin: (DivX Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)

CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll No File

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File

CHR Plugin: (TVU Web Player for FireFox) - C:\Program Files\TVUPlayer\npTVUAx.dll (TVU networks)

CHR Plugin: (Veetle TV Player) - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)

CHR Plugin: (Veetle TV Core) - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)

CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File

CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

CHR Extension: (Google Drive) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (Complitly plugin for chrome) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0

CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak\1.0_0

CHR Extension: (vshare plugin) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0

CHR Extension: (Skype Click to Call) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0

CHR Extension: (DVDVideoSoft) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.2.3.3_0

CHR Extension: (Chrome In-App Payments service) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0

CHR HKLM\...\Chrome\Extension: [dlfienamagdnkekbbbocojppncdambda] - C:\Program Files\Complitly\chrome\ComplitlyChrome.crx

CHR HKLM\...\Chrome\Extension: [kpionmjnkbpcdpcflammlgllecmejgjj] - C:\Program Files\vShare.tv plugin\vshareplg.crx

CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

CHR StartMenuInternet: Google Chrome - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe
 

========================== Services (Whitelisted) =================
 

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\aestsrv.exe [77824 2008-06-27] (Andrea Electronics Corporation)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-08-29] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-08-29] (Avira Operations GmbH & Co. KG)

R2 EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION)

R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208 2008-10-09] (Hewlett-Packard)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [20456 2013-01-27] (Microsoft Corporation)

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295232 2013-01-27] (Microsoft Corporation)

R2 Recovery Service for Windows; C:\Program Files\SMINST\BLService.exe [365952 2008-10-06] ()

S4 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [241734 2008-06-30] ()

R2 SamsungAllShareV2.0; C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [25504 2012-03-02] (Samsung Electronics Co., Ltd.)

S3 SimpleSlideShowServer; C:\Program Files\Samsung\AllShare\AllShareSlideShowService.exe [27584 2012-03-02] (Samsung Electronics Co., Ltd.)

R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\STacSV.exe [237657 2008-10-26] (IDT, Inc.)

S4 TVCapSvc; C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe [296320 2009-04-22] ()

S4 TVSched; C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe [116104 2009-04-22] ()

S4 UI Assistant Service; C:\Program Files\T-Mobile Mobile Broadband Manager\AssistantServices.exe [241664 2009-07-17] ()

R2 VmbService; C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [8704 2010-08-18] (Vodafone)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-08-29] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-08-29] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-04-10] (Avira Operations GmbH & Co. KG)

R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [195296 2013-01-20] (Microsoft Corporation)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-03-02] (Avira GmbH)

R3 vodafone_K380x-z_dc_enum; C:\Windows\System32\DRIVERS\vodafone_K380x-z_dc_enum.sys [80000 2010-05-20] (Vodafone)

S3 ZTEusbnet; C:\Windows\System32\DRIVERS\ZTEusbnet.sys [114688 2010-08-11] (ZTE Corporation)

S3 ZTEusbvoice; C:\Windows\System32\DRIVERS\ZTEusbvoice.sys [105856 2010-08-11] (ZTE Incorporated)

R2 {55662437-DA8C-40c0-AADA-2C816A897A49}; C:\Program Files\Hewlett-Packard\Media\DVD\000.fcl [59376 2008-09-26] (Cyberlink Corp.)

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]

S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

S1 qfrkhehd; \??\C:\Windows\system32\drivers\qfrkhehd.sys [x]

S1 soxopydg; \??\C:\Windows\system32\drivers\soxopydg.sys [x]

S1 uvvvcaub; \??\C:\Windows\system32\drivers\uvvvcaub.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-08-30 06:53 - 2013-08-30 06:53 - 01072975 _____ (Farbar) C:\Users\GOD IS GOOD TO ME\Downloads\FRST.exe

2013-08-30 06:52 - 2013-08-30 06:52 - 01579080 _____ (Farbar) C:\Users\GOD IS GOOD TO ME\Downloads\FRST64.exe

2013-08-30 06:27 - 2013-08-30 06:27 - 94712498 _____ C:\Windows\system32\兽�ᴼœ

2013-08-29 18:11 - 2013-08-29 18:11 - 94663095 _____ C:\Windows\system32\잿ľᴼª

2013-08-27 20:15 - 2013-08-02 05:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-08-27 18:50 - 2013-08-27 18:50 - 00220647 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Photo by mrdzifs.htm

2013-08-27 18:50 - 2013-08-27 18:50 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Photo by mrdzifs_files

2013-08-26 17:22 - 2013-08-26 17:23 - 00065804 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Academic words.xlsx

2013-08-19 19:05 - 2013-08-19 19:13 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Social Impact Analysis

2013-08-18 23:07 - 2013-08-18 23:07 - 00001624 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-08-18 23:04 - 2013-08-18 23:04 - 00000000 ____D C:\Program Files\iPod

2013-08-18 23:03 - 2013-08-18 23:07 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1

2013-08-16 13:26 - 2013-08-16 13:26 - 00213024 _____ C:\Windows\Minidump\Mini081613-01.dmp

2013-08-16 13:25 - 2013-08-16 13:25 - 276877329 _____ C:\Windows\MEMORY.DMP

2013-08-15 03:33 - 2013-08-15 03:41 - 00000000 ____D C:\Windows\system32\MRT

2013-08-15 03:09 - 2013-07-25 03:40 - 12334080 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-08-15 03:09 - 2013-07-25 03:32 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-08-15 03:09 - 2013-07-25 03:30 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-08-15 03:09 - 2013-07-25 03:26 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-08-15 03:09 - 2013-07-25 03:26 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-08-15 03:09 - 2013-07-25 03:25 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-08-15 03:09 - 2013-07-25 03:24 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-08-15 03:09 - 2013-07-25 03:24 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-08-15 03:09 - 2013-07-25 03:22 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-08-15 03:09 - 2013-07-25 03:22 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-08-15 03:09 - 2013-07-25 03:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-08-14 23:44 - 2013-07-17 20:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-08-14 23:44 - 2013-07-10 10:47 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2013-08-14 23:44 - 2013-07-09 13:10 - 01205168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-08-14 23:44 - 2013-07-08 05:55 - 03603904 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2013-08-14 23:44 - 2013-07-08 05:55 - 03551680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-08-14 23:44 - 2013-07-05 04:20 - 00914880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-08-14 23:44 - 2013-07-05 02:43 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys

2013-08-14 23:44 - 2013-06-15 14:22 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll

2013-08-14 23:44 - 2013-06-15 12:23 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2013-08-14 23:39 - 2013-07-08 05:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2013-08-14 23:39 - 2013-07-08 05:16 - 00992768 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-08-14 23:39 - 2013-07-08 05:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-08-14 23:39 - 2013-07-08 05:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-08-10 14:04 - 2013-08-10 14:08 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\House Project Ghana

2013-08-10 08:36 - 2013-08-10 08:36 - 00451072 _____ C:\Users\GOD IS GOOD TO ME\Downloads\excel-time-sheet-attendance.xls

2013-08-10 08:35 - 2013-08-10 08:35 - 00045171 _____ C:\Users\GOD IS GOOD TO ME\Downloads\TS102807582.dotx

2013-08-09 21:42 - 2013-08-09 21:46 - 00000000 ____D C:\Program Files\DVDVideoSoft

2013-08-09 21:42 - 2013-08-09 21:46 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft

2013-08-09 21:34 - 2013-08-09 21:35 - 27142232 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\GOD IS GOOD TO ME\Downloads\FreeYouTubeToMP3Converter (1).exe

2013-08-09 21:23 - 2013-08-09 21:25 - 77947798 _____ C:\Users\GOD IS GOOD TO ME\Downloads\NAVIIV X PASSION.zip

2013-08-09 19:56 - 2013-08-09 19:56 - 00014845 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Housing companies 2.xlsx

2013-08-09 19:55 - 2013-08-09 19:55 - 00015648 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Housing companies.xlsx

2013-08-06 22:28 - 2013-08-06 22:28 - 00022044 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Kitchen deep cleaning - PQQ scoring.xlsx

2013-08-05 17:39 - 2013-08-05 17:39 - 00037888 _____ C:\Users\GOD IS GOOD TO ME\Downloads\100422 Tenant Satisfaction.xls

2013-08-05 17:37 - 2013-08-05 17:38 - 00055296 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Third Sector funding 2011-12 - Appendix B.xls

2013-08-05 17:32 - 2013-08-05 17:32 - 00069120 _____ C:\Users\GOD IS GOOD TO ME\Downloads\2010-10 C2 2009.xls

2013-08-03 11:59 - 2013-08-03 12:00 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Beckys Dad

2013-08-03 09:05 - 2013-08-03 09:05 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Church FM
 

==================== One Month Modified Files and Folders =======
 

2013-08-30 06:57 - 2011-06-01 10:26 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Dropbox

2013-08-30 06:56 - 2013-08-30 06:56 - 00000000 ____D C:\FRST

2013-08-30 06:53 - 2013-08-30 06:53 - 01072975 _____ (Farbar) C:\Users\GOD IS GOOD TO ME\Downloads\FRST.exe

2013-08-30 06:52 - 2013-08-30 06:52 - 01579080 _____ (Farbar) C:\Users\GOD IS GOOD TO ME\Downloads\FRST64.exe

2013-08-30 06:46 - 2010-11-02 10:37 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-08-30 06:33 - 2009-02-26 02:45 - 01898901 _____ C:\Windows\WindowsUpdate.log

2013-08-30 06:29 - 2012-01-25 09:12 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify

2013-08-30 06:28 - 2012-06-27 20:18 - 00000000 ___RD C:\Users\GOD IS GOOD TO ME\Google Drive

2013-08-30 06:27 - 2013-08-30 06:27 - 94712498 _____ C:\Windows\system32\兽�ᴼœ

2013-08-30 06:26 - 2011-06-01 10:29 - 00000000 ___RD C:\Users\GOD IS GOOD TO ME\Dropbox

2013-08-30 06:24 - 2010-11-02 10:37 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-08-30 06:23 - 2009-02-26 03:42 - 00065971 _____ C:\ProgramData\nvModes.001

2013-08-30 06:23 - 2009-02-26 03:27 - 00065971 _____ C:\ProgramData\nvModes.dat

2013-08-30 06:22 - 2013-03-26 09:40 - 00022660 _____ C:\Windows\PFRO.log

2013-08-30 06:22 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-08-30 06:22 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-08-30 06:22 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-08-30 00:12 - 2012-04-11 21:43 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-08-29 23:18 - 2010-02-12 14:25 - 00000956 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2198722660-397689999-1900526466-1000UA.job

2013-08-29 21:18 - 2010-02-12 14:25 - 00000904 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2198722660-397689999-1900526466-1000Core.job

2013-08-29 18:11 - 2013-08-29 18:11 - 94663095 _____ C:\Windows\system32\잿ľᴼª

2013-08-29 17:29 - 2011-03-09 01:07 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\HCM Updater

2013-08-29 12:21 - 2006-11-02 14:01 - 00032638 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-08-29 12:16 - 2009-04-09 18:37 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Skype

2013-08-29 12:15 - 2013-03-02 09:14 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-08-29 12:15 - 2013-03-02 09:14 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-08-27 18:50 - 2013-08-27 18:50 - 00220647 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Photo by mrdzifs.htm

2013-08-27 18:50 - 2013-08-27 18:50 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Photo by mrdzifs_files

2013-08-27 17:39 - 2009-05-03 02:20 - 00000052 _____ C:\Windows\system32\DOErrors.log

2013-08-27 03:17 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET

2013-08-27 03:07 - 2006-11-02 11:33 - 01478250 _____ C:\Windows\system32\PerfStringBackup.INI

2013-08-26 23:03 - 2012-01-25 09:13 - 00000000 ____D C:\Users\GODISG~1\AppData\Local\Spotify

2013-08-26 17:23 - 2013-08-26 17:22 - 00065804 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Academic words.xlsx

2013-08-26 13:58 - 2013-06-04 18:28 - 00000000 ____D C:\Users\GODISG~1\AppData\Local\48459218-93EB-4FF8-A57F-F866C4FA96FB.aplzod

2013-08-21 16:06 - 2012-04-11 21:43 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2013-08-21 16:06 - 2011-05-25 12:16 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2013-08-20 22:20 - 2011-07-17 22:08 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Personal Finance

2013-08-20 19:34 - 2009-07-26 09:07 - 00000000 ___RD C:\Program Files\Skype

2013-08-20 19:34 - 2009-04-09 18:36 - 00000000 ____D C:\ProgramData\Skype

2013-08-19 23:18 - 2011-09-27 20:49 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\TuneUpMedia

2013-08-19 19:13 - 2013-08-19 19:05 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Social Impact Analysis

2013-08-18 23:07 - 2013-08-18 23:07 - 00001624 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-08-18 23:07 - 2013-08-18 23:03 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1

2013-08-18 23:07 - 2011-07-19 21:50 - 00000000 ____D C:\Program Files\iTunes

2013-08-18 23:04 - 2013-08-18 23:04 - 00000000 ____D C:\Program Files\iPod

2013-08-18 23:04 - 2011-04-13 14:51 - 00000000 ____D C:\Program Files\Common Files\Apple

2013-08-16 13:26 - 2013-08-16 13:26 - 00213024 _____ C:\Windows\Minidump\Mini081613-01.dmp

2013-08-16 13:26 - 2009-04-11 22:35 - 00000000 ____D C:\Windows\Minidump

2013-08-16 13:25 - 2013-08-16 13:25 - 276877329 _____ C:\Windows\MEMORY.DMP

2013-08-15 09:13 - 2009-04-09 22:03 - 00000000 ____D C:\Users\GODISG~1\AppData\Local\Adobe

2013-08-15 04:36 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache

2013-08-15 03:59 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE

2013-08-15 03:41 - 2013-08-15 03:33 - 00000000 ____D C:\Windows\system32\MRT

2013-08-15 03:33 - 2006-11-02 11:24 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2013-08-15 03:28 - 2008-11-15 05:36 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-08-10 14:08 - 2013-08-10 14:04 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\House Project Ghana

2013-08-10 08:36 - 2013-08-10 08:36 - 00451072 _____ C:\Users\GOD IS GOOD TO ME\Downloads\excel-time-sheet-attendance.xls

2013-08-10 08:35 - 2013-08-10 08:35 - 00045171 _____ C:\Users\GOD IS GOOD TO ME\Downloads\TS102807582.dotx

2013-08-09 21:46 - 2013-08-09 21:42 - 00000000 ____D C:\Program Files\DVDVideoSoft

2013-08-09 21:46 - 2013-08-09 21:42 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft

2013-08-09 21:42 - 2013-02-15 18:36 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\DVDVideoSoft

2013-08-09 21:42 - 2011-09-27 20:48 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\OpenCandy

2013-08-09 21:35 - 2013-08-09 21:34 - 27142232 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\GOD IS GOOD TO ME\Downloads\FreeYouTubeToMP3Converter (1).exe

2013-08-09 21:25 - 2013-08-09 21:23 - 77947798 _____ C:\Users\GOD IS GOOD TO ME\Downloads\NAVIIV X PASSION.zip

2013-08-09 19:56 - 2013-08-09 19:56 - 00014845 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Housing companies 2.xlsx

2013-08-09 19:55 - 2013-08-09 19:55 - 00015648 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Housing companies.xlsx

2013-08-08 05:48 - 2010-12-02 19:33 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Kylean

2013-08-06 22:28 - 2013-08-06 22:28 - 00022044 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Kitchen deep cleaning - PQQ scoring.xlsx

2013-08-05 17:39 - 2013-08-05 17:39 - 00037888 _____ C:\Users\GOD IS GOOD TO ME\Downloads\100422 Tenant Satisfaction.xls

2013-08-05 17:38 - 2013-08-05 17:37 - 00055296 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Third Sector funding 2011-12 - Appendix B.xls

2013-08-05 17:32 - 2013-08-05 17:32 - 00069120 _____ C:\Users\GOD IS GOOD TO ME\Downloads\2010-10 C2 2009.xls

2013-08-03 12:00 - 2013-08-03 11:59 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Beckys Dad

2013-08-03 12:00 - 2009-06-26 11:43 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\NPP

2013-08-03 09:05 - 2013-08-03 09:05 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Church FM

2013-08-02 05:09 - 2013-08-27 20:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
 

Files to move or delete:

====================

C:\ProgramData\nvModes.dat

C:\Users\Gast\AppData\Local\Temp\AskSLib.dll

C:\Users\Gast\AppData\Local\Temp\4F29.dir\InstallFlashPlayer.exe

C:\Users\GODISG~1\AppData\Local\Temp\htmlayout.dll

C:\Users\GODISG~1\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe

C:\Users\GODISG~1\AppData\Local\Temp\RegAsm.exe

C:\Users\GODISG~1\AppData\Local\Temp\SkypeSetup.exe

C:\Users\GODISG~1\AppData\Local\Temp\UpdaterCopy.exe

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\xcrashreport\XCrashReport.exe

C:\Users\GODISG~1\AppData\Local\Temp\tmpuvqt2t\googledrivesync.exe

C:\Users\GODISG~1\AppData\Local\Temp\tmpqqthhg\googledrivesync.exe

C:\Users\GODISG~1\AppData\Local\Temp\tmpijlksn\googledrivesync.exe

C:\Users\GODISG~1\AppData\Local\Temp\tmpc8wa1p\googledrivesync.exe
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-08-30 06:33
 

==================== End Of Log ============================

--- --- ---

Schritt 1

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2

Starte noch einmal FRST.

Ändere keine der Voreinstellungen und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

AdwCleaner Logfile:

Code:

# AdwCleaner v3.001 - Report created 30/08/2013 at 17:12:07

# Updated 24/08/2013 by Xplode

# Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)

# Username : GOD IS GOOD TO ME - GODISGOOD-PC

# Running from : C:\Users\GOD IS GOOD TO ME\Downloads\adwcleaner (1).exe

# Option : Clean
 

***** [ Services ] *****
 
 

***** [ Files / Folders ] *****
 

Folder Deleted : C:\ProgramData\Babylon

Folder Deleted : C:\ProgramData\boost_interprocess

Folder Deleted : C:\ProgramData\DriverCure

Folder Deleted : C:\ProgramData\InstallMate

Folder Deleted : C:\ProgramData\ParetoLogic

Folder Deleted : C:\ProgramData\Premium

Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Covus Freemium

Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ilivid

Folder Deleted : C:\Program Files\Complitly

Folder Deleted : C:\Program Files\Covus Freemium

Folder Deleted : C:\Program Files\Freemium

Folder Deleted : C:\Program Files\Ilivid

Folder Deleted : C:\Program Files\iMesh Applications

Folder Deleted : C:\Program Files\ParetoLogic

Folder Deleted : C:\Program Files\pdfforge Toolbar

Folder Deleted : C:\Program Files\SearchCore for Browsers

Folder Deleted : C:\Program Files\SoftwareUpdater

Folder Deleted : C:\Program Files\vShare

Folder Deleted : C:\Program Files\vShare.tv plugin

Folder Deleted : C:\Program Files\Windows iLivid Toolbar

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Local\Babylon

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Local\Ilivid Player

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Local\OpenCandy

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Local\PackageAware

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\LocalLow\pdfforge

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\LocalLow\Search Settings

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\LocalLow\Searchqutoolbar

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\LocalLow\vShare

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\LocalLow\wincoreimband

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Babylon

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Complitly

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Roaming\DriverCure

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Roaming\dvdvideosoftiehelpers

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Freemium

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Roaming\OpenCandy

Folder Deleted : C:\Users\Gast\AppData\LocalLow\pdfforge

Folder Deleted : C:\Users\Gast\AppData\LocalLow\vShare

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Searchqutoolbar

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\{99079A25-328F-4BD4-BE04-00955ACAA0A7}

Folder Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda

File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk

File Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\searchplugins\Askcom.xml

File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\Babylon.xml

File Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\searchplugins\Search_Results.xml

File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\Search_Results.xml

File Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\searchplugins\SearchResults.xml

File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\SearchResults.xml

File Deleted : C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\searchplugins\Startsear.xml

File Deleted : C:\Program Files\Mozilla Firefox\Plugins\npvsharetvplg.dll

File Deleted : C:\Windows\System32\Tasks\Software Updater Ui

File Deleted : C:\Windows\System32\Tasks\Software Updater
 

***** [ Shortcuts ] *****
 
 

***** [ Registry ] *****
 

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda

[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Software Updater Ui

[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4AE1ED92-E7E4-4DB1-91C2-1097CC499A77}

[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4AE1ED92-E7E4-4DB1-91C2-1097CC499A77}

[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Software Updater

[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6D239899-A6B4-44C4-812B-BDDCC29D9D61}

[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6D239899-A6B4-44C4-812B-BDDCC29D9D61}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings

Key Deleted : HKLM\SOFTWARE\Classes\AppID\Complitly.DLL

Key Deleted : HKLM\SOFTWARE\Classes\ilivid

Key Deleted : HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncher

Key Deleted : HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncher.1

Key Deleted : HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncherBHO

Key Deleted : HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncherBHO.1

Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap

Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\vsharechrome

Key Deleted : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard

Key Deleted : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1

Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO

Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1

Key Deleted : HKLM\SOFTWARE\Classes\vShare.IMedixProtocol

Key Deleted : HKLM\SOFTWARE\Classes\vShare.IMedixProtocol.1

Key Deleted : HKLM\SOFTWARE\Classes\vShare.PugiObj

Key Deleted : HKLM\SOFTWARE\Classes\vShare.PugiObj.1

Key Deleted : HKLM\SOFTWARE\Classes\vShare.ScriptHelpers

Key Deleted : HKLM\SOFTWARE\Classes\vShare.ScriptHelpers.1

Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchSettings]

Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Updater shortcut]

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{76C45B18-A29E-43EA-AAF8-AF55C2E1AE17}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{96EF404C-24C7-43D0-9096-4CCC8BB7CCAC}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97720195-206A-42AE-8E65-260B9BA5589F}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{986F7A5A-9676-47E1-8642-F41F8C3FCF82}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A1B48071-416D-474E-A13B-BE5456E7FC31}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B18788A4-92BD-440E-A4D1-380C36531119}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{20ED5AF7-D9C4-409E-9EB3-D2A44A77FB6D}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3E315C81-442B-431C-AEC8-ED189699EC24}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{79D60450-56C5-4A8C-9321-6D5BC2A81E5A}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{99C22A61-21BA-4F81-85FF-CDC9EB5DB10B}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{BB7256DD-EBA9-480B-8441-A00388C2BEC3}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{043C5167-00BB-4324-AF7E-62013FAEDACF}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{043C5167-00BB-4324-AF7E-62013FAEDACF}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B922D405-6D13-4A2B-AE89-08A030DA4402}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{043C5167-00BB-4324-AF7E-62013FAEDACF}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B922D405-6D13-4A2B-AE89-08A030DA4402}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B922D405-6D13-4A2B-AE89-08A030DA4402}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{043C5167-00BB-4324-AF7E-62013FAEDACF}]

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}]

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079A25-328F-4BD4-BE04-00955ACAA0A7}]

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{B922D405-6D13-4A2B-AE89-08A030DA4402}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{043C5167-00BB-4324-AF7E-62013FAEDACF}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]

Key Deleted : HKCU\Software\Complitly

Key Deleted : HKCU\Software\DataMngr

Key Deleted : HKCU\Software\ilivid

Key Deleted : HKCU\Software\Imesh

Key Deleted : HKCU\Software\Search Settings

Key Deleted : HKCU\Software\Softonic

Key Deleted : HKCU\Software\StartSearch

Key Deleted : HKCU\Software\vShare

Key Deleted : HKCU\Software\YahooPartnerToolbar

Key Deleted : HKCU\Software\AppDataLow\AskBarDis

Key Deleted : HKCU\Software\AppDataLow\Software\mediabarim

Key Deleted : HKCU\Software\AppDataLow\Software\pdfforge

Key Deleted : HKLM\Software\Babylon

Key Deleted : HKLM\Software\BabylonToolbar

Key Deleted : HKLM\Software\Covus Freemium GmbH

Key Deleted : HKLM\Software\ilivid

Key Deleted : HKLM\Software\pdfforge

Key Deleted : HKLM\Software\Search Settings

Key Deleted : HKLM\Software\SearchquMediabarTb

Key Deleted : HKLM\Software\SimplyGen

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8D15E1B2-D2B7-4A17-B44B-D2DDE5981406}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilivid

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Searchqu 406 MediaBar

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\vShare

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ilivid

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Searchqu 406 MediaBar

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\vShare
 

***** [ Browsers ] *****
 

-\\ Internet Explorer v9.0.8112.16502
 

Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
 

-\\ Mozilla Firefox v8.0.1 (en-GB)
 

[ File : C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\prefs.js ]
 

Line Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");

Line Deleted : user_pref("browser.search.defaultengine", "Ask.com");

Line Deleted : user_pref("browser.search.defaultenginename", "Ask.com");

Line Deleted : user_pref("browser.search.order.1", "Ask.com");

Line Deleted : user_pref("browser.search.selectedEngine", "Ask.com");

Line Deleted : user_pref("browser.startup.homepage", "hxxp://search.avira.com/?l=dis&o=APN10401&gct=hp&dc=EU&locale=de_GB");

Line Deleted : user_pref("extensions.BabylonToolbar_i.newTab", true);

Line Deleted : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?AF=119998&babsrc=NT_ss&mntrId=5cf4b111000000000000002100c18b06");

Line Deleted : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&appid=1083&systemid=1&sr=0&q=");
 

-\\ Google Chrome v
 

[ File : C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [19492 octets] - [30/08/2013 17:00:08]

AdwCleaner[S0].txt - [20004 octets] - [30/08/2013 17:12:07]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [20065 octets] ##########

--- --- ---

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-08-2013

Ran by GOD IS GOOD TO ME (administrator) on 30-08-2013 18:01:18

Running from C:\Users\GOD IS GOOD TO ME\Downloads

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe

(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\STacSV.exe

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe

(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\aestsrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Program Files\SMINST\BLService.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Vodafone) C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Google Inc.) C:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(CyberLink Corp.) C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe

(CyberLink Corp.) C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe

(CyberLink) C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe

( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe

(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(CyberLink Corp.) C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe

(Microsoft Corporation) C:\Windows\WindowsMobile\wmdSync.exe

() C:\Program Files\T-Mobile Mobile Broadband Manager\UIExec.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe

(shbox.de) C:\Program Files\FreePDF_XP\fpassist.exe

(Vodafone) C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe

(SEIKO EPSON CORPORATION) C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\AllShare\AllShareAgent.exe

(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe

(Microsoft Corporation) C:\Windows\ehome\ehtray.exe

(Octoshape ApS) C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe

(Nokia) C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe

(VoipStunt) C:\Program Files\VoipStunt.com\VoipStunt\voipstunt.exe

(Spotify Ltd) C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

(Google) C:\Program Files\Google\Drive\googledrivesync.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Spotify Ltd) C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify\spotify.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Dropbox, Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe

(Google) C:\Program Files\Google\Drive\googledrivesync.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe

(Microsoft Corporation) C:\Windows\system32\conime.exe

(Nokia) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

(Hewlett-Packard) c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\system32\wuauclt.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1721640 2010-05-27] (Synaptics Incorporated)

HKLM\...\Run: [DVDAgent] - C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe [1148200 2008-09-26] (CyberLink Corp.)

HKLM\...\Run: [TSMAgent] - C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe [1152296 2008-09-25] (CyberLink Corp.)

HKLM\...\Run: [CLMLServer for HP TouchSmart] - C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [189736 2008-09-25] (CyberLink)

HKLM\...\Run: [UCam_Menu] - C:\Program Files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [912688 2008-09-23] (Hewlett-Packard)

HKLM\...\Run: [UpdateLBPShortCut] - C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [UpdatePSTShortCut] - C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2008-09-26] (CyberLink Corp.)

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [QlbCtrl.exe] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [202032 2008-08-01] ( Hewlett-Packard Development Company, L.P.)

HKLM\...\Run: [UpdateP2GoShortCut] - C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [UpdatePDIRShortCut] - C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [HP Software Update] - C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)

HKLM\...\Run: [hpWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752 2008-04-15] (Hewlett-Packard Development Company, L.P.)

HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM\...\Run: [TVAgent] - C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe [206120 2009-04-22] (CyberLink Corp.)

HKLM\...\Run: [Windows Mobile-based device management] - C:\Windows\WindowsMobile\wmdSync.exe [215552 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [UIExec] - C:\Program Files\T-Mobile Mobile Broadband Manager\UIExec.exe [132608 2009-07-17] ()

HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [13826664 2009-10-03] (NVIDIA Corporation)

HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2011-06-08] (Adobe Systems Incorporated)

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-03-30] (Adobe Systems Incorporated)

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray.exe [450659 2008-10-26] (IDT, Inc.)

HKLM\...\Run: [FreePDF Assistant] - C:\Program Files\FreePDF_XP\fpassist.exe [385024 2009-09-05] (shbox.de)

HKLM\...\Run: [MobileBroadband] - C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe [272384 2010-08-18] (Vodafone)

HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-02] (Apple Inc.)

HKLM\...\Run: [FUFAXSTM] - C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe [847872 2009-12-03] (SEIKO EPSON CORPORATION)

HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM\...\Run: [HP Health Check Scheduler] - c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [75008 2008-10-09] (Hewlett-Packard)

HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [947152 2013-01-27] (Microsoft Corporation)

HKLM\...\Run: [AllShareAgent] - C:\Program Files\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-02] (Samsung Electronics Co., Ltd.)

HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-08-29] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)

HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2008-06-09] (Hewlett-Packard Company)

HKCU\...\Run: [HPAdvisor] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [972080 2008-09-30] (Hewlett-Packard)

HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)

HKCU\...\Run: [Google Update] - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Update\GoogleUpdate.exe [135664 2010-02-12] (Google Inc.)

HKCU\...\Run: [Octoshape Streaming Services] - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [70936 2009-01-08] (Octoshape ApS)

HKCU\...\Run: [PC Suite Tray] - C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [1483264 2010-12-21] (Nokia)

HKCU\...\Run: [Epson Stylus Office BX305(Netzwerk)] - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGJE.EXE /FU "C:\Windows\TEMP\E_SDB36.tmp" /EF "HKCU" [x]

HKCU\...\Run: [VoipStunt] - C:\Program Files\VoipStunt.com\VoipStunt\voipstunt.exe [19125208 2013-01-19] (VoipStunt)

HKCU\...\Run: [Spotify Web Helper] - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-12] (Spotify Ltd)

HKCU\...\Run: [GoogleDriveSync] - C:\Program Files\Google\Drive\googledrivesync.exe [20097696 2013-06-27] (Google)

HKCU\...\Run: [GoogleChromeAutoLaunch_684A0628291B916B27137DB7ACCD1842] - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe [829392 2013-08-24] (Google Inc.)

HKCU\...\Run: [Spotify] - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify\Spotify.exe [4640768 2013-07-12] (Spotify Ltd)

HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)

HKCU\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)

HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)

MountPoints2: {0e3a93c2-d472-11df-aa6e-00238b89b164} - F:\NokiaPCIA_Autorun.exe

MountPoints2: {1757adba-c2f8-11df-bc8b-00238b89b164} - F:\VersionControl.exe

MountPoints2: {21eab26b-9990-11e0-aa11-00238b89b164} - F:\AutoRun.exe

MountPoints2: {21eab27a-9990-11e0-aa11-00238b89b164} - F:\AutoRun.exe

MountPoints2: {21eab283-9990-11e0-aa11-00238b89b164} - F:\AutoRun.exe

MountPoints2: {2224482d-c3b5-11df-b7a5-00238b89b164} - F:\VersionControl.exe

MountPoints2: {2224482e-c3b5-11df-b7a5-00238b89b164} - F:\VersionControl.exe

MountPoints2: {22633822-1901-11e0-95a6-00238b89b164} - F:\AutoRun.exe

MountPoints2: {2263382e-1901-11e0-95a6-00238b89b164} - F:\AutoRun.exe

MountPoints2: {3153bcbc-af81-11e0-af70-00a0c6000000} - F:\setup_vmb_lite.exe /checkApplicationPresence

MountPoints2: {4cc8c487-c583-11df-bc65-00238b89b164} - F:\VersionControl.exe

MountPoints2: {53461e06-48bf-11e0-8755-00238b89b164} - F:\AutoRun.exe

MountPoints2: {53461e20-48bf-11e0-8755-00238b89b164} - F:\AutoRun.exe

MountPoints2: {54a9a2bb-49b8-11e0-b03b-00238b89b164} - F:\AutoRun.exe

MountPoints2: {54a9a2bd-49b8-11e0-b03b-00238b89b164} - F:\AutoRun.exe

MountPoints2: {54a9a2c6-49b8-11e0-b03b-00238b89b164} - F:\AutoRun.exe

MountPoints2: {54a9a2c8-49b8-11e0-b03b-00238b89b164} - F:\AutoRun.exe

MountPoints2: {60eb22f2-5198-11e0-9050-00238b89b164} - F:\AutoRun.exe

MountPoints2: {63c4776e-a284-11de-8517-00238b89b164} - F:\PMB_P.exe

MountPoints2: {94a0f6d8-2b1e-11e0-bc3a-00238b89b164} - F:\AutoRun.exe

MountPoints2: {94a0f72a-2b1e-11e0-bc3a-00238b89b164} - F:\AutoRun.exe

MountPoints2: {9f78ab0e-fcc8-11df-b0ea-00238b89b164} - F:\AutoRun.exe

MountPoints2: {a939c226-9998-11e0-a62c-00238b89b164} - F:\AutoRun.exe

MountPoints2: {a939c229-9998-11e0-a62c-00238b89b164} - F:\AutoRun.exe

MountPoints2: {aa1ebce6-53c2-11e0-8491-00238b89b164} - F:\AutoRun.exe

MountPoints2: {adf70519-19d8-11e0-9403-00238b89b164} - F:\AutoRun.exe

MountPoints2: {ef9f7784-1a97-11e0-b9e5-806e6f6e6963} - F:\AutoRun.exe

MountPoints2: {ef9f77e4-1a97-11e0-b9e5-00238b89b164} - F:\AutoRun.exe

HKU\Default\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-09-30] (Hewlett-Packard)

HKU\Default User\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-09-30] (Hewlett-Packard)

HKU\Gast\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-09-30] (Hewlett-Packard)

HKU\Gast\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-06-09] (Hewlett-Packard Company)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk

ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Netzwerk Server.lnk

ShortcutTarget: Netzwerk Server.lnk -> C:\Program Files\WIBUKEY\Server\WkSvMgr.exe (No File)

Startup: C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

BootExecute: 'autocheck autochk * '
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKLM - {08D5D282-8201-4369-AD91-B56E22BABFFA} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de

SearchScopes: HKLM - {2A38E76A-B220-4381-AC14-571525B7D559} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008

SearchScopes: HKLM - {C3678759-6DDB-46C8-9566-89C14A58AF9A} URL = hxxp://startsear.ch/?aff=1&q={searchTerms}

SearchScopes: HKLM - {EEFFE926-4B4C-43C6-84DA-7DCC17D5E867} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933

SearchScopes: HKCU - {08D5D282-8201-4369-AD91-B56E22BABFFA} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de

SearchScopes: HKCU - {2A38E76A-B220-4381-AC14-571525B7D559} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008

SearchScopes: HKCU - {6B9E672B-C9AC-4EA3-AB3F-78B53DFCF5D5} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=971163&p={searchTerms}

SearchScopes: HKCU - {C3678759-6DDB-46C8-9566-89C14A58AF9A} URL = hxxp://startsear.ch/?aff=1&q={searchTerms}

SearchScopes: HKCU - {D1333851-BD3C-4B40-B4A2-77DF85FE9843} URL = hxxp://www.google.de/search?q={searchTerms}

SearchScopes: HKCU - {DADCFD18-A006-49D6-9476-D85B58A13601} URL = hxxp://www.bing.com/search?q={searchTerms}&form=BIE9DF&pc=BIE9&src=IE-SearchBox

SearchScopes: HKCU - {EEFFE926-4B4C-43C6-84DA-7DCC17D5E867} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll (BitComet)

BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

DPF: {5D6F45B3-9043-443D-A792-115447494D24} MSN Games - Free Online Games

DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} MSN Games - Free Online Games

DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} hxxp://mobileapps.blackberry.com/devicesoftware/AxLoader.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

Tcpip\..\Interfaces\{3CAB5F6D-B28C-4107-9965-53F894B70FD8}: [NameServer]149.254.230.7 149.254.199.126
 

FireFox:

========

FF ProfilePath: C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()

FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)

FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @pages.tvunetworks.com/WebPlayer - C:\Program Files\TVUPlayer\npTVUAx.dll (TVU networks)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)

FF Plugin: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)

FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)

FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()

FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\answers.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml

FF Extension: No Name - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}

FF Extension: TVU Web Player - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\firefox@tvunetworks.com

FF Extension: No Name - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\staged

FF Extension: Microsoft .NET Framework Assistant - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}

FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

FF Extension: Default - C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF HKLM\...\Firefox\Extensions: [bkmrksync@nokia.com] C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\

FF Extension: PC Sync 2 Synchronisation Extension - C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\

FF HKCU\...\Firefox\Extensions: [{609305BF-D46B-47EE-BB92-D918DCE077F0}] C:\Users\GOD IS GOOD TO ME\AppData\Local\{609305BF-D46B-47EE-BB92-D918DCE077F0}\

FF Extension: XULRunner - C:\Users\GOD IS GOOD TO ME\AppData\Local\{609305BF-D46B-47EE-BB92-D918DCE077F0}\
 

Chrome: 

=======

CHR RestoreOnStartup: "hxxp://www.facebook.com/"

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\29.0.1547.62\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\29.0.1547.62\pdf.dll ()

CHR Plugin: (Shockwave Flash) - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\29.0.1547.62\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File

CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)

CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll No File

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll No File

CHR Plugin: (vShare.tv plug-in) - C:\Program Files\Mozilla Firefox\plugins\npvsharetvplg.dll No File

CHR Plugin: (Octoshape Streaming Services) - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\plugins\npoctoshape.dll (Octoshape ApS)

CHR Plugin: (Octoshape Streaming Services) - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

CHR Plugin: (DivX Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)

CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll No File

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File

CHR Plugin: (TVU Web Player for FireFox) - C:\Program Files\TVUPlayer\npTVUAx.dll (TVU networks)

CHR Plugin: (Veetle TV Player) - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)

CHR Plugin: (Veetle TV Core) - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)

CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File

CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

CHR Extension: (Google Drive) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak\1.0_0

CHR Extension: (Skype Click to Call) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0

CHR Extension: (DVDVideoSoft) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.2.3.3_0

CHR Extension: (Chrome In-App Payments service) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0

CHR HKLM\...\Chrome\Extension: [kpionmjnkbpcdpcflammlgllecmejgjj] - C:\Program Files\vShare.tv plugin\vshareplg.crx

CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

CHR StartMenuInternet: Google Chrome - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe
 

========================== Services (Whitelisted) =================
 

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\aestsrv.exe [77824 2008-06-27] (Andrea Electronics Corporation)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-08-29] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-08-29] (Avira Operations GmbH & Co. KG)

R2 EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION)

R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208 2008-10-09] (Hewlett-Packard)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [20456 2013-01-27] (Microsoft Corporation)

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295232 2013-01-27] (Microsoft Corporation)

R2 Recovery Service for Windows; C:\Program Files\SMINST\BLService.exe [365952 2008-10-06] ()

S4 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [241734 2008-06-30] ()

R2 SamsungAllShareV2.0; C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [25504 2012-03-02] (Samsung Electronics Co., Ltd.)

S3 SimpleSlideShowServer; C:\Program Files\Samsung\AllShare\AllShareSlideShowService.exe [27584 2012-03-02] (Samsung Electronics Co., Ltd.)

R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\STacSV.exe [237657 2008-10-26] (IDT, Inc.)

S4 TVCapSvc; C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe [296320 2009-04-22] ()

S4 TVSched; C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe [116104 2009-04-22] ()

S4 UI Assistant Service; C:\Program Files\T-Mobile Mobile Broadband Manager\AssistantServices.exe [241664 2009-07-17] ()

R2 VmbService; C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [8704 2010-08-18] (Vodafone)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-08-29] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-08-29] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-04-10] (Avira Operations GmbH & Co. KG)

R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [195296 2013-01-20] (Microsoft Corporation)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-03-02] (Avira GmbH)

R3 vodafone_K380x-z_dc_enum; C:\Windows\System32\DRIVERS\vodafone_K380x-z_dc_enum.sys [80000 2010-05-20] (Vodafone)

S3 ZTEusbnet; C:\Windows\System32\DRIVERS\ZTEusbnet.sys [114688 2010-08-11] (ZTE Corporation)

S3 ZTEusbvoice; C:\Windows\System32\DRIVERS\ZTEusbvoice.sys [105856 2010-08-11] (ZTE Incorporated)

R2 {55662437-DA8C-40c0-AADA-2C816A897A49}; C:\Program Files\Hewlett-Packard\Media\DVD\000.fcl [59376 2008-09-26] (Cyberlink Corp.)

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]

S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

S1 qfrkhehd; \??\C:\Windows\system32\drivers\qfrkhehd.sys [x]

S1 soxopydg; \??\C:\Windows\system32\drivers\soxopydg.sys [x]

S1 uvvvcaub; \??\C:\Windows\system32\drivers\uvvvcaub.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-08-30 16:52 - 2013-08-30 16:57 - 00994642 _____ C:\Users\GOD IS GOOD TO ME\Downloads\adwcleaner (1).exe

2013-08-30 16:34 - 2013-08-30 16:34 - 00994642 _____ C:\Users\GOD IS GOOD TO ME\Downloads\adwcleaner.exe

2013-08-30 07:01 - 2013-08-30 07:01 - 00030839 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Addition.txt

2013-08-30 06:59 - 2013-08-30 07:01 - 00030839 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Addition.txt

2013-08-30 06:56 - 2013-08-30 06:56 - 00000000 ____D C:\FRST

2013-08-30 06:53 - 2013-08-30 06:53 - 01072975 _____ (Farbar) C:\Users\GOD IS GOOD TO ME\Downloads\FRST.exe

2013-08-30 06:52 - 2013-08-30 06:52 - 01579080 _____ (Farbar) C:\Users\GOD IS GOOD TO ME\Downloads\FRST64.exe

2013-08-29 18:11 - 2013-08-29 18:11 - 94663095 _____ C:\Windows\system32\잿ľᴼª

2013-08-27 20:15 - 2013-08-02 05:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-08-27 18:50 - 2013-08-27 18:50 - 00220647 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Photo by mrdzifs.htm

2013-08-27 18:50 - 2013-08-27 18:50 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Photo by mrdzifs_files

2013-08-26 17:22 - 2013-08-26 17:23 - 00065804 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Academic words.xlsx

2013-08-19 19:05 - 2013-08-19 19:13 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Social Impact Analysis

2013-08-18 23:07 - 2013-08-18 23:07 - 00001624 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-08-18 23:04 - 2013-08-18 23:04 - 00000000 ____D C:\Program Files\iPod

2013-08-18 23:03 - 2013-08-18 23:07 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1

2013-08-16 13:26 - 2013-08-16 13:26 - 00213024 _____ C:\Windows\Minidump\Mini081613-01.dmp

2013-08-16 13:25 - 2013-08-16 13:25 - 276877329 _____ C:\Windows\MEMORY.DMP

2013-08-15 03:33 - 2013-08-15 03:41 - 00000000 ____D C:\Windows\system32\MRT

2013-08-15 03:09 - 2013-07-25 03:40 - 12334080 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-08-15 03:09 - 2013-07-25 03:32 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-08-15 03:09 - 2013-07-25 03:30 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-08-15 03:09 - 2013-07-25 03:26 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-08-15 03:09 - 2013-07-25 03:26 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-08-15 03:09 - 2013-07-25 03:25 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-08-15 03:09 - 2013-07-25 03:24 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-08-15 03:09 - 2013-07-25 03:24 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-08-15 03:09 - 2013-07-25 03:22 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-08-15 03:09 - 2013-07-25 03:22 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-08-15 03:09 - 2013-07-25 03:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-08-14 23:44 - 2013-07-17 20:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-08-14 23:44 - 2013-07-10 10:47 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2013-08-14 23:44 - 2013-07-09 13:10 - 01205168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-08-14 23:44 - 2013-07-08 05:55 - 03603904 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2013-08-14 23:44 - 2013-07-08 05:55 - 03551680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-08-14 23:44 - 2013-07-05 04:20 - 00914880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-08-14 23:44 - 2013-07-05 02:43 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys

2013-08-14 23:44 - 2013-06-15 14:22 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll

2013-08-14 23:44 - 2013-06-15 12:23 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2013-08-14 23:39 - 2013-07-08 05:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2013-08-14 23:39 - 2013-07-08 05:16 - 00992768 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-08-14 23:39 - 2013-07-08 05:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-08-14 23:39 - 2013-07-08 05:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-08-10 14:04 - 2013-08-10 14:08 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\House Project Ghana

2013-08-10 08:36 - 2013-08-10 08:36 - 00451072 _____ C:\Users\GOD IS GOOD TO ME\Downloads\excel-time-sheet-attendance.xls

2013-08-10 08:35 - 2013-08-10 08:35 - 00045171 _____ C:\Users\GOD IS GOOD TO ME\Downloads\TS102807582.dotx

2013-08-09 21:42 - 2013-08-09 21:46 - 00000000 ____D C:\Program Files\DVDVideoSoft

2013-08-09 21:42 - 2013-08-09 21:46 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft

2013-08-09 21:34 - 2013-08-09 21:35 - 27142232 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\GOD IS GOOD TO ME\Downloads\FreeYouTubeToMP3Converter (1).exe

2013-08-09 21:23 - 2013-08-09 21:25 - 77947798 _____ C:\Users\GOD IS GOOD TO ME\Downloads\NAVIIV X PASSION.zip

2013-08-09 19:56 - 2013-08-09 19:56 - 00014845 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Housing companies 2.xlsx

2013-08-09 19:55 - 2013-08-09 19:55 - 00015648 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Housing companies.xlsx

2013-08-06 22:28 - 2013-08-06 22:28 - 00022044 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Kitchen deep cleaning - PQQ scoring.xlsx

2013-08-05 17:39 - 2013-08-05 17:39 - 00037888 _____ C:\Users\GOD IS GOOD TO ME\Downloads\100422 Tenant Satisfaction.xls

2013-08-05 17:37 - 2013-08-05 17:38 - 00055296 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Third Sector funding 2011-12 - Appendix B.xls

2013-08-05 17:32 - 2013-08-05 17:32 - 00069120 _____ C:\Users\GOD IS GOOD TO ME\Downloads\2010-10 C2 2009.xls

2013-08-03 11:59 - 2013-08-03 12:00 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Beckys Dad

2013-08-03 09:05 - 2013-08-03 09:05 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Church FM
 

==================== One Month Modified Files and Folders =======
 

2013-08-30 17:57 - 2009-08-15 06:40 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\vlc

2013-08-30 17:49 - 2011-06-01 10:26 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Dropbox

2013-08-30 17:46 - 2010-11-02 10:37 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-08-30 17:40 - 2009-02-26 02:45 - 01942963 _____ C:\Windows\WindowsUpdate.log

2013-08-30 17:35 - 2012-01-25 09:12 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify

2013-08-30 17:32 - 2012-06-27 20:18 - 00000000 ___RD C:\Users\GOD IS GOOD TO ME\Google Drive

2013-08-30 17:32 - 2011-06-01 10:29 - 00000000 ___RD C:\Users\GOD IS GOOD TO ME\Dropbox

2013-08-30 17:29 - 2009-02-26 03:42 - 00065971 _____ C:\ProgramData\nvModes.001

2013-08-30 17:28 - 2010-11-02 10:37 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-08-30 17:28 - 2009-02-26 03:27 - 00065971 _____ C:\ProgramData\nvModes.dat

2013-08-30 17:27 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-08-30 17:27 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-08-30 17:27 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-08-30 17:26 - 2006-11-02 14:01 - 00032638 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-08-30 17:24 - 2013-08-30 16:59 - 00000000 ____D C:\AdwCleaner

2013-08-30 17:18 - 2010-02-12 14:25 - 00000956 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2198722660-397689999-1900526466-1000UA.job

2013-08-30 17:12 - 2012-04-11 21:43 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-08-30 16:57 - 2013-08-30 16:52 - 00994642 _____ C:\Users\GOD IS GOOD TO ME\Downloads\adwcleaner (1).exe

2013-08-30 16:34 - 2013-08-30 16:34 - 00994642 _____ C:\Users\GOD IS GOOD TO ME\Downloads\adwcleaner.exe

2013-08-30 07:01 - 2013-08-30 07:01 - 00030839 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Addition.txt

2013-08-30 07:01 - 2013-08-30 06:59 - 00030839 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Addition.txt

2013-08-30 06:56 - 2013-08-30 06:56 - 00000000 ____D C:\FRST

2013-08-30 06:53 - 2013-08-30 06:53 - 01072975 _____ (Farbar) C:\Users\GOD IS GOOD TO ME\Downloads\FRST.exe

2013-08-30 06:52 - 2013-08-30 06:52 - 01579080 _____ (Farbar) C:\Users\GOD IS GOOD TO ME\Downloads\FRST64.exe

2013-08-30 06:22 - 2013-03-26 09:40 - 00022660 _____ C:\Windows\PFRO.log

2013-08-29 21:18 - 2010-02-12 14:25 - 00000904 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2198722660-397689999-1900526466-1000Core.job

2013-08-29 18:11 - 2013-08-29 18:11 - 94663095 _____ C:\Windows\system32\잿ľᴼª

2013-08-29 17:29 - 2011-03-09 01:07 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\HCM Updater

2013-08-29 12:16 - 2009-04-09 18:37 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Skype

2013-08-29 12:15 - 2013-03-02 09:14 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-08-29 12:15 - 2013-03-02 09:14 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-08-27 18:50 - 2013-08-27 18:50 - 00220647 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Photo by mrdzifs.htm

2013-08-27 18:50 - 2013-08-27 18:50 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Photo by mrdzifs_files

2013-08-27 17:39 - 2009-05-03 02:20 - 00000052 _____ C:\Windows\system32\DOErrors.log

2013-08-27 03:17 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET

2013-08-27 03:07 - 2006-11-02 11:33 - 01478250 _____ C:\Windows\system32\PerfStringBackup.INI

2013-08-26 23:03 - 2012-01-25 09:13 - 00000000 ____D C:\Users\GODISG~1\AppData\Local\Spotify

2013-08-26 17:23 - 2013-08-26 17:22 - 00065804 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Academic words.xlsx

2013-08-26 13:58 - 2013-06-04 18:28 - 00000000 ____D C:\Users\GODISG~1\AppData\Local\48459218-93EB-4FF8-A57F-F866C4FA96FB.aplzod

2013-08-21 16:06 - 2012-04-11 21:43 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2013-08-21 16:06 - 2011-05-25 12:16 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2013-08-20 22:20 - 2011-07-17 22:08 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Personal Finance

2013-08-20 19:34 - 2009-07-26 09:07 - 00000000 ___RD C:\Program Files\Skype

2013-08-20 19:34 - 2009-04-09 18:36 - 00000000 ____D C:\ProgramData\Skype

2013-08-19 23:18 - 2011-09-27 20:49 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\TuneUpMedia

2013-08-19 19:13 - 2013-08-19 19:05 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Social Impact Analysis

2013-08-18 23:07 - 2013-08-18 23:07 - 00001624 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-08-18 23:07 - 2013-08-18 23:03 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1

2013-08-18 23:07 - 2011-07-19 21:50 - 00000000 ____D C:\Program Files\iTunes

2013-08-18 23:04 - 2013-08-18 23:04 - 00000000 ____D C:\Program Files\iPod

2013-08-18 23:04 - 2011-04-13 14:51 - 00000000 ____D C:\Program Files\Common Files\Apple

2013-08-16 13:26 - 2013-08-16 13:26 - 00213024 _____ C:\Windows\Minidump\Mini081613-01.dmp

2013-08-16 13:26 - 2009-04-11 22:35 - 00000000 ____D C:\Windows\Minidump

2013-08-16 13:25 - 2013-08-16 13:25 - 276877329 _____ C:\Windows\MEMORY.DMP

2013-08-15 09:13 - 2009-04-09 22:03 - 00000000 ____D C:\Users\GODISG~1\AppData\Local\Adobe

2013-08-15 04:36 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache

2013-08-15 03:59 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE

2013-08-15 03:41 - 2013-08-15 03:33 - 00000000 ____D C:\Windows\system32\MRT

2013-08-15 03:33 - 2006-11-02 11:24 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2013-08-15 03:28 - 2008-11-15 05:36 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-08-10 14:08 - 2013-08-10 14:04 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\House Project Ghana

2013-08-10 08:36 - 2013-08-10 08:36 - 00451072 _____ C:\Users\GOD IS GOOD TO ME\Downloads\excel-time-sheet-attendance.xls

2013-08-10 08:35 - 2013-08-10 08:35 - 00045171 _____ C:\Users\GOD IS GOOD TO ME\Downloads\TS102807582.dotx

2013-08-09 21:46 - 2013-08-09 21:42 - 00000000 ____D C:\Program Files\DVDVideoSoft

2013-08-09 21:46 - 2013-08-09 21:42 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft

2013-08-09 21:42 - 2013-02-15 18:36 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\DVDVideoSoft

2013-08-09 21:35 - 2013-08-09 21:34 - 27142232 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\GOD IS GOOD TO ME\Downloads\FreeYouTubeToMP3Converter (1).exe

2013-08-09 21:25 - 2013-08-09 21:23 - 77947798 _____ C:\Users\GOD IS GOOD TO ME\Downloads\NAVIIV X PASSION.zip

2013-08-09 19:56 - 2013-08-09 19:56 - 00014845 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Housing companies 2.xlsx

2013-08-09 19:55 - 2013-08-09 19:55 - 00015648 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Housing companies.xlsx

2013-08-08 05:48 - 2010-12-02 19:33 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Kylean

2013-08-06 22:28 - 2013-08-06 22:28 - 00022044 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Kitchen deep cleaning - PQQ scoring.xlsx

2013-08-05 17:39 - 2013-08-05 17:39 - 00037888 _____ C:\Users\GOD IS GOOD TO ME\Downloads\100422 Tenant Satisfaction.xls

2013-08-05 17:38 - 2013-08-05 17:37 - 00055296 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Third Sector funding 2011-12 - Appendix B.xls

2013-08-05 17:32 - 2013-08-05 17:32 - 00069120 _____ C:\Users\GOD IS GOOD TO ME\Downloads\2010-10 C2 2009.xls

2013-08-03 12:00 - 2013-08-03 11:59 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Beckys Dad

2013-08-03 12:00 - 2009-06-26 11:43 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\NPP

2013-08-03 09:05 - 2013-08-03 09:05 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Church FM

2013-08-02 05:09 - 2013-08-27 20:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
 

Files to move or delete:

====================

C:\ProgramData\nvModes.dat

C:\Users\Gast\AppData\Local\Temp\AskSLib.dll

C:\Users\Gast\AppData\Local\Temp\4F29.dir\InstallFlashPlayer.exe

C:\Users\GODISG~1\AppData\Local\Temp\htmlayout.dll

C:\Users\GODISG~1\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe

C:\Users\GODISG~1\AppData\Local\Temp\RegAsm.exe

C:\Users\GODISG~1\AppData\Local\Temp\SkypeSetup.exe

C:\Users\GODISG~1\AppData\Local\Temp\UpdaterCopy.exe

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\xcrashreport\XCrashReport.exe

C:\Users\GODISG~1\AppData\Local\Temp\tmpuvqt2t\googledrivesync.exe

C:\Users\GODISG~1\AppData\Local\Temp\tmpqqthhg\googledrivesync.exe

C:\Users\GODISG~1\AppData\Local\Temp\tmpijlksn\googledrivesync.exe

C:\Users\GODISG~1\AppData\Local\Temp\tmpc8wa1p\googledrivesync.exe
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-08-30 17:38
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Wie läuft der Rechner jetzt?

Hinweis: Mehrere AV-Hintergrundwächter

Mir ist aufgefallen, dass du mehr als ein Antivirus-Programm mit Hintergrundwächter laufen hast:

Avira Free Antivirus

Microsoft Security Essentials

Das ist gefährlich, da sich die verschiedenen Hintergrundwächter gegenseitig in die Quere kommen können und dadurch in ihrer Summe nicht mehr sondern weniger Schutz bieten. Ausserdem bremst das auch das System aus.

Entscheide dich für eines dieser Programme und deinstalliere die anderen über Start -> Systemsteuerung -> Programme und Funktionen (Vista & Win 7) bzw. Start -> Systemsteuerung -> Software (Win XP).

Schritt 1

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 2

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-08-2013

Ran by GOD IS GOOD TO ME (administrator) on 30-08-2013 18:01:18

Running from C:\Users\GOD IS GOOD TO ME\Downloads

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe

(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\STacSV.exe

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe

(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\aestsrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Program Files\SMINST\BLService.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Vodafone) C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Google Inc.) C:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(CyberLink Corp.) C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe

(CyberLink Corp.) C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe

(CyberLink) C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe

( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe

(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(CyberLink Corp.) C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe

(Microsoft Corporation) C:\Windows\WindowsMobile\wmdSync.exe

() C:\Program Files\T-Mobile Mobile Broadband Manager\UIExec.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe

(shbox.de) C:\Program Files\FreePDF_XP\fpassist.exe

(Vodafone) C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe

(SEIKO EPSON CORPORATION) C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\AllShare\AllShareAgent.exe

(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe

(Microsoft Corporation) C:\Windows\ehome\ehtray.exe

(Octoshape ApS) C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe

(Nokia) C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe

(VoipStunt) C:\Program Files\VoipStunt.com\VoipStunt\voipstunt.exe

(Spotify Ltd) C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

(Google) C:\Program Files\Google\Drive\googledrivesync.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Spotify Ltd) C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify\spotify.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Dropbox, Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe

(Google) C:\Program Files\Google\Drive\googledrivesync.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe

(Microsoft Corporation) C:\Windows\system32\conime.exe

(Nokia) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

(Hewlett-Packard) c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\system32\wuauclt.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Google Inc.) C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1721640 2010-05-27] (Synaptics Incorporated)

HKLM\...\Run: [DVDAgent] - C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe [1148200 2008-09-26] (CyberLink Corp.)

HKLM\...\Run: [TSMAgent] - C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe [1152296 2008-09-25] (CyberLink Corp.)

HKLM\...\Run: [CLMLServer for HP TouchSmart] - C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [189736 2008-09-25] (CyberLink)

HKLM\...\Run: [UCam_Menu] - C:\Program Files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [912688 2008-09-23] (Hewlett-Packard)

HKLM\...\Run: [UpdateLBPShortCut] - C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [UpdatePSTShortCut] - C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2008-09-26] (CyberLink Corp.)

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [QlbCtrl.exe] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [202032 2008-08-01] ( Hewlett-Packard Development Company, L.P.)

HKLM\...\Run: [UpdateP2GoShortCut] - C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [UpdatePDIRShortCut] - C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [HP Software Update] - C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)

HKLM\...\Run: [hpWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752 2008-04-15] (Hewlett-Packard Development Company, L.P.)

HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM\...\Run: [TVAgent] - C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe [206120 2009-04-22] (CyberLink Corp.)

HKLM\...\Run: [Windows Mobile-based device management] - C:\Windows\WindowsMobile\wmdSync.exe [215552 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [UIExec] - C:\Program Files\T-Mobile Mobile Broadband Manager\UIExec.exe [132608 2009-07-17] ()

HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [13826664 2009-10-03] (NVIDIA Corporation)

HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2011-06-08] (Adobe Systems Incorporated)

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-03-30] (Adobe Systems Incorporated)

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray.exe [450659 2008-10-26] (IDT, Inc.)

HKLM\...\Run: [FreePDF Assistant] - C:\Program Files\FreePDF_XP\fpassist.exe [385024 2009-09-05] (shbox.de)

HKLM\...\Run: [MobileBroadband] - C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe [272384 2010-08-18] (Vodafone)

HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-02] (Apple Inc.)

HKLM\...\Run: [FUFAXSTM] - C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe [847872 2009-12-03] (SEIKO EPSON CORPORATION)

HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM\...\Run: [HP Health Check Scheduler] - c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [75008 2008-10-09] (Hewlett-Packard)

HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [947152 2013-01-27] (Microsoft Corporation)

HKLM\...\Run: [AllShareAgent] - C:\Program Files\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-02] (Samsung Electronics Co., Ltd.)

HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-08-29] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)

HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2008-06-09] (Hewlett-Packard Company)

HKCU\...\Run: [HPAdvisor] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [972080 2008-09-30] (Hewlett-Packard)

HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)

HKCU\...\Run: [Google Update] - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Update\GoogleUpdate.exe [135664 2010-02-12] (Google Inc.)

HKCU\...\Run: [Octoshape Streaming Services] - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [70936 2009-01-08] (Octoshape ApS)

HKCU\...\Run: [PC Suite Tray] - C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [1483264 2010-12-21] (Nokia)

HKCU\...\Run: [Epson Stylus Office BX305(Netzwerk)] - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGJE.EXE /FU "C:\Windows\TEMP\E_SDB36.tmp" /EF "HKCU" [x]

HKCU\...\Run: [VoipStunt] - C:\Program Files\VoipStunt.com\VoipStunt\voipstunt.exe [19125208 2013-01-19] (VoipStunt)

HKCU\...\Run: [Spotify Web Helper] - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-12] (Spotify Ltd)

HKCU\...\Run: [GoogleDriveSync] - C:\Program Files\Google\Drive\googledrivesync.exe [20097696 2013-06-27] (Google)

HKCU\...\Run: [GoogleChromeAutoLaunch_684A0628291B916B27137DB7ACCD1842] - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe [829392 2013-08-24] (Google Inc.)

HKCU\...\Run: [Spotify] - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify\Spotify.exe [4640768 2013-07-12] (Spotify Ltd)

HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)

HKCU\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)

HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)

MountPoints2: {0e3a93c2-d472-11df-aa6e-00238b89b164} - F:\NokiaPCIA_Autorun.exe

MountPoints2: {1757adba-c2f8-11df-bc8b-00238b89b164} - F:\VersionControl.exe

MountPoints2: {21eab26b-9990-11e0-aa11-00238b89b164} - F:\AutoRun.exe

MountPoints2: {21eab27a-9990-11e0-aa11-00238b89b164} - F:\AutoRun.exe

MountPoints2: {21eab283-9990-11e0-aa11-00238b89b164} - F:\AutoRun.exe

MountPoints2: {2224482d-c3b5-11df-b7a5-00238b89b164} - F:\VersionControl.exe

MountPoints2: {2224482e-c3b5-11df-b7a5-00238b89b164} - F:\VersionControl.exe

MountPoints2: {22633822-1901-11e0-95a6-00238b89b164} - F:\AutoRun.exe

MountPoints2: {2263382e-1901-11e0-95a6-00238b89b164} - F:\AutoRun.exe

MountPoints2: {3153bcbc-af81-11e0-af70-00a0c6000000} - F:\setup_vmb_lite.exe /checkApplicationPresence

MountPoints2: {4cc8c487-c583-11df-bc65-00238b89b164} - F:\VersionControl.exe

MountPoints2: {53461e06-48bf-11e0-8755-00238b89b164} - F:\AutoRun.exe

MountPoints2: {53461e20-48bf-11e0-8755-00238b89b164} - F:\AutoRun.exe

MountPoints2: {54a9a2bb-49b8-11e0-b03b-00238b89b164} - F:\AutoRun.exe

MountPoints2: {54a9a2bd-49b8-11e0-b03b-00238b89b164} - F:\AutoRun.exe

MountPoints2: {54a9a2c6-49b8-11e0-b03b-00238b89b164} - F:\AutoRun.exe

MountPoints2: {54a9a2c8-49b8-11e0-b03b-00238b89b164} - F:\AutoRun.exe

MountPoints2: {60eb22f2-5198-11e0-9050-00238b89b164} - F:\AutoRun.exe

MountPoints2: {63c4776e-a284-11de-8517-00238b89b164} - F:\PMB_P.exe

MountPoints2: {94a0f6d8-2b1e-11e0-bc3a-00238b89b164} - F:\AutoRun.exe

MountPoints2: {94a0f72a-2b1e-11e0-bc3a-00238b89b164} - F:\AutoRun.exe

MountPoints2: {9f78ab0e-fcc8-11df-b0ea-00238b89b164} - F:\AutoRun.exe

MountPoints2: {a939c226-9998-11e0-a62c-00238b89b164} - F:\AutoRun.exe

MountPoints2: {a939c229-9998-11e0-a62c-00238b89b164} - F:\AutoRun.exe

MountPoints2: {aa1ebce6-53c2-11e0-8491-00238b89b164} - F:\AutoRun.exe

MountPoints2: {adf70519-19d8-11e0-9403-00238b89b164} - F:\AutoRun.exe

MountPoints2: {ef9f7784-1a97-11e0-b9e5-806e6f6e6963} - F:\AutoRun.exe

MountPoints2: {ef9f77e4-1a97-11e0-b9e5-00238b89b164} - F:\AutoRun.exe

HKU\Default\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-09-30] (Hewlett-Packard)

HKU\Default User\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-09-30] (Hewlett-Packard)

HKU\Gast\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-09-30] (Hewlett-Packard)

HKU\Gast\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-06-09] (Hewlett-Packard Company)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk

ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Netzwerk Server.lnk

ShortcutTarget: Netzwerk Server.lnk -> C:\Program Files\WIBUKEY\Server\WkSvMgr.exe (No File)

Startup: C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

BootExecute: 'autocheck autochk * '
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKLM - {08D5D282-8201-4369-AD91-B56E22BABFFA} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de

SearchScopes: HKLM - {2A38E76A-B220-4381-AC14-571525B7D559} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008

SearchScopes: HKLM - {C3678759-6DDB-46C8-9566-89C14A58AF9A} URL = hxxp://startsear.ch/?aff=1&q={searchTerms}

SearchScopes: HKLM - {EEFFE926-4B4C-43C6-84DA-7DCC17D5E867} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933

SearchScopes: HKCU - {08D5D282-8201-4369-AD91-B56E22BABFFA} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de

SearchScopes: HKCU - {2A38E76A-B220-4381-AC14-571525B7D559} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008

SearchScopes: HKCU - {6B9E672B-C9AC-4EA3-AB3F-78B53DFCF5D5} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=971163&p={searchTerms}

SearchScopes: HKCU - {C3678759-6DDB-46C8-9566-89C14A58AF9A} URL = hxxp://startsear.ch/?aff=1&q={searchTerms}

SearchScopes: HKCU - {D1333851-BD3C-4B40-B4A2-77DF85FE9843} URL = hxxp://www.google.de/search?q={searchTerms}

SearchScopes: HKCU - {DADCFD18-A006-49D6-9476-D85B58A13601} URL = hxxp://www.bing.com/search?q={searchTerms}&form=BIE9DF&pc=BIE9&src=IE-SearchBox

SearchScopes: HKCU - {EEFFE926-4B4C-43C6-84DA-7DCC17D5E867} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll (BitComet)

BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

DPF: {5D6F45B3-9043-443D-A792-115447494D24} MSN Games - Free Online Games

DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} MSN Games - Free Online Games

DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} hxxp://mobileapps.blackberry.com/devicesoftware/AxLoader.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

Tcpip\..\Interfaces\{3CAB5F6D-B28C-4107-9965-53F894B70FD8}: [NameServer]149.254.230.7 149.254.199.126
 

FireFox:

========

FF ProfilePath: C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()

FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)

FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @pages.tvunetworks.com/WebPlayer - C:\Program Files\TVUPlayer\npTVUAx.dll (TVU networks)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)

FF Plugin: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)

FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)

FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()

FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\answers.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml

FF Extension: No Name - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}

FF Extension: TVU Web Player - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\firefox@tvunetworks.com

FF Extension: No Name - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\staged

FF Extension: Microsoft .NET Framework Assistant - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\Firefox\Profiles\vztllt0p.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}

FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

FF Extension: Default - C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF HKLM\...\Firefox\Extensions: [bkmrksync@nokia.com] C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\

FF Extension: PC Sync 2 Synchronisation Extension - C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\

FF HKCU\...\Firefox\Extensions: [{609305BF-D46B-47EE-BB92-D918DCE077F0}] C:\Users\GOD IS GOOD TO ME\AppData\Local\{609305BF-D46B-47EE-BB92-D918DCE077F0}\

FF Extension: XULRunner - C:\Users\GOD IS GOOD TO ME\AppData\Local\{609305BF-D46B-47EE-BB92-D918DCE077F0}\
 

Chrome: 

=======

CHR RestoreOnStartup: "hxxp://www.facebook.com/"

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\29.0.1547.62\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\29.0.1547.62\pdf.dll ()

CHR Plugin: (Shockwave Flash) - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\29.0.1547.62\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File

CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)

CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll No File

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll No File

CHR Plugin: (vShare.tv plug-in) - C:\Program Files\Mozilla Firefox\plugins\npvsharetvplg.dll No File

CHR Plugin: (Octoshape Streaming Services) - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Mozilla\plugins\npoctoshape.dll (Octoshape ApS)

CHR Plugin: (Octoshape Streaming Services) - C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

CHR Plugin: (DivX Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)

CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll No File

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File

CHR Plugin: (TVU Web Player for FireFox) - C:\Program Files\TVUPlayer\npTVUAx.dll (TVU networks)

CHR Plugin: (Veetle TV Player) - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)

CHR Plugin: (Veetle TV Core) - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)

CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File

CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

CHR Extension: (Google Drive) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak\1.0_0

CHR Extension: (Skype Click to Call) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0

CHR Extension: (DVDVideoSoft) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.2.3.3_0

CHR Extension: (Chrome In-App Payments service) - C:\Users\GODISG~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0

CHR HKLM\...\Chrome\Extension: [kpionmjnkbpcdpcflammlgllecmejgjj] - C:\Program Files\vShare.tv plugin\vshareplg.crx

CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

CHR StartMenuInternet: Google Chrome - C:\Users\GOD IS GOOD TO ME\AppData\Local\Google\Chrome\Application\chrome.exe
 

========================== Services (Whitelisted) =================
 

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\aestsrv.exe [77824 2008-06-27] (Andrea Electronics Corporation)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-08-29] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-08-29] (Avira Operations GmbH & Co. KG)

R2 EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION)

R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208 2008-10-09] (Hewlett-Packard)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [20456 2013-01-27] (Microsoft Corporation)

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295232 2013-01-27] (Microsoft Corporation)

R2 Recovery Service for Windows; C:\Program Files\SMINST\BLService.exe [365952 2008-10-06] ()

S4 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [241734 2008-06-30] ()

R2 SamsungAllShareV2.0; C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [25504 2012-03-02] (Samsung Electronics Co., Ltd.)

S3 SimpleSlideShowServer; C:\Program Files\Samsung\AllShare\AllShareSlideShowService.exe [27584 2012-03-02] (Samsung Electronics Co., Ltd.)

R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\STacSV.exe [237657 2008-10-26] (IDT, Inc.)

S4 TVCapSvc; C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe [296320 2009-04-22] ()

S4 TVSched; C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe [116104 2009-04-22] ()

S4 UI Assistant Service; C:\Program Files\T-Mobile Mobile Broadband Manager\AssistantServices.exe [241664 2009-07-17] ()

R2 VmbService; C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [8704 2010-08-18] (Vodafone)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-08-29] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-08-29] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-04-10] (Avira Operations GmbH & Co. KG)

R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [195296 2013-01-20] (Microsoft Corporation)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-03-02] (Avira GmbH)

R3 vodafone_K380x-z_dc_enum; C:\Windows\System32\DRIVERS\vodafone_K380x-z_dc_enum.sys [80000 2010-05-20] (Vodafone)

S3 ZTEusbnet; C:\Windows\System32\DRIVERS\ZTEusbnet.sys [114688 2010-08-11] (ZTE Corporation)

S3 ZTEusbvoice; C:\Windows\System32\DRIVERS\ZTEusbvoice.sys [105856 2010-08-11] (ZTE Incorporated)

R2 {55662437-DA8C-40c0-AADA-2C816A897A49}; C:\Program Files\Hewlett-Packard\Media\DVD\000.fcl [59376 2008-09-26] (Cyberlink Corp.)

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]

S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

S1 qfrkhehd; \??\C:\Windows\system32\drivers\qfrkhehd.sys [x]

S1 soxopydg; \??\C:\Windows\system32\drivers\soxopydg.sys [x]

S1 uvvvcaub; \??\C:\Windows\system32\drivers\uvvvcaub.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-08-30 16:52 - 2013-08-30 16:57 - 00994642 _____ C:\Users\GOD IS GOOD TO ME\Downloads\adwcleaner (1).exe

2013-08-30 16:34 - 2013-08-30 16:34 - 00994642 _____ C:\Users\GOD IS GOOD TO ME\Downloads\adwcleaner.exe

2013-08-30 07:01 - 2013-08-30 07:01 - 00030839 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Addition.txt

2013-08-30 06:59 - 2013-08-30 07:01 - 00030839 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Addition.txt

2013-08-30 06:56 - 2013-08-30 06:56 - 00000000 ____D C:\FRST

2013-08-30 06:53 - 2013-08-30 06:53 - 01072975 _____ (Farbar) C:\Users\GOD IS GOOD TO ME\Downloads\FRST.exe

2013-08-30 06:52 - 2013-08-30 06:52 - 01579080 _____ (Farbar) C:\Users\GOD IS GOOD TO ME\Downloads\FRST64.exe

2013-08-29 18:11 - 2013-08-29 18:11 - 94663095 _____ C:\Windows\system32\잿ľᴼª

2013-08-27 20:15 - 2013-08-02 05:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-08-27 18:50 - 2013-08-27 18:50 - 00220647 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Photo by mrdzifs.htm

2013-08-27 18:50 - 2013-08-27 18:50 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Photo by mrdzifs_files

2013-08-26 17:22 - 2013-08-26 17:23 - 00065804 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Academic words.xlsx

2013-08-19 19:05 - 2013-08-19 19:13 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Social Impact Analysis

2013-08-18 23:07 - 2013-08-18 23:07 - 00001624 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-08-18 23:04 - 2013-08-18 23:04 - 00000000 ____D C:\Program Files\iPod

2013-08-18 23:03 - 2013-08-18 23:07 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1

2013-08-16 13:26 - 2013-08-16 13:26 - 00213024 _____ C:\Windows\Minidump\Mini081613-01.dmp

2013-08-16 13:25 - 2013-08-16 13:25 - 276877329 _____ C:\Windows\MEMORY.DMP

2013-08-15 03:33 - 2013-08-15 03:41 - 00000000 ____D C:\Windows\system32\MRT

2013-08-15 03:09 - 2013-07-25 03:40 - 12334080 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-08-15 03:09 - 2013-07-25 03:32 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-08-15 03:09 - 2013-07-25 03:30 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-08-15 03:09 - 2013-07-25 03:26 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-08-15 03:09 - 2013-07-25 03:26 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-08-15 03:09 - 2013-07-25 03:25 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-08-15 03:09 - 2013-07-25 03:24 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-08-15 03:09 - 2013-07-25 03:24 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-08-15 03:09 - 2013-07-25 03:23 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-08-15 03:09 - 2013-07-25 03:22 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-08-15 03:09 - 2013-07-25 03:22 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-08-15 03:09 - 2013-07-25 03:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-08-14 23:44 - 2013-07-17 20:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-08-14 23:44 - 2013-07-10 10:47 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2013-08-14 23:44 - 2013-07-09 13:10 - 01205168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-08-14 23:44 - 2013-07-08 05:55 - 03603904 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2013-08-14 23:44 - 2013-07-08 05:55 - 03551680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-08-14 23:44 - 2013-07-05 04:20 - 00914880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-08-14 23:44 - 2013-07-05 02:43 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys

2013-08-14 23:44 - 2013-06-15 14:22 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll

2013-08-14 23:44 - 2013-06-15 12:23 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2013-08-14 23:39 - 2013-07-08 05:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2013-08-14 23:39 - 2013-07-08 05:16 - 00992768 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-08-14 23:39 - 2013-07-08 05:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-08-14 23:39 - 2013-07-08 05:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-08-10 14:04 - 2013-08-10 14:08 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\House Project Ghana

2013-08-10 08:36 - 2013-08-10 08:36 - 00451072 _____ C:\Users\GOD IS GOOD TO ME\Downloads\excel-time-sheet-attendance.xls

2013-08-10 08:35 - 2013-08-10 08:35 - 00045171 _____ C:\Users\GOD IS GOOD TO ME\Downloads\TS102807582.dotx

2013-08-09 21:42 - 2013-08-09 21:46 - 00000000 ____D C:\Program Files\DVDVideoSoft

2013-08-09 21:42 - 2013-08-09 21:46 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft

2013-08-09 21:34 - 2013-08-09 21:35 - 27142232 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\GOD IS GOOD TO ME\Downloads\FreeYouTubeToMP3Converter (1).exe

2013-08-09 21:23 - 2013-08-09 21:25 - 77947798 _____ C:\Users\GOD IS GOOD TO ME\Downloads\NAVIIV X PASSION.zip

2013-08-09 19:56 - 2013-08-09 19:56 - 00014845 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Housing companies 2.xlsx

2013-08-09 19:55 - 2013-08-09 19:55 - 00015648 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Housing companies.xlsx

2013-08-06 22:28 - 2013-08-06 22:28 - 00022044 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Kitchen deep cleaning - PQQ scoring.xlsx

2013-08-05 17:39 - 2013-08-05 17:39 - 00037888 _____ C:\Users\GOD IS GOOD TO ME\Downloads\100422 Tenant Satisfaction.xls

2013-08-05 17:37 - 2013-08-05 17:38 - 00055296 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Third Sector funding 2011-12 - Appendix B.xls

2013-08-05 17:32 - 2013-08-05 17:32 - 00069120 _____ C:\Users\GOD IS GOOD TO ME\Downloads\2010-10 C2 2009.xls

2013-08-03 11:59 - 2013-08-03 12:00 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Beckys Dad

2013-08-03 09:05 - 2013-08-03 09:05 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Church FM
 

==================== One Month Modified Files and Folders =======
 

2013-08-30 17:57 - 2009-08-15 06:40 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\vlc

2013-08-30 17:49 - 2011-06-01 10:26 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Dropbox

2013-08-30 17:46 - 2010-11-02 10:37 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-08-30 17:40 - 2009-02-26 02:45 - 01942963 _____ C:\Windows\WindowsUpdate.log

2013-08-30 17:35 - 2012-01-25 09:12 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Spotify

2013-08-30 17:32 - 2012-06-27 20:18 - 00000000 ___RD C:\Users\GOD IS GOOD TO ME\Google Drive

2013-08-30 17:32 - 2011-06-01 10:29 - 00000000 ___RD C:\Users\GOD IS GOOD TO ME\Dropbox

2013-08-30 17:29 - 2009-02-26 03:42 - 00065971 _____ C:\ProgramData\nvModes.001

2013-08-30 17:28 - 2010-11-02 10:37 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-08-30 17:28 - 2009-02-26 03:27 - 00065971 _____ C:\ProgramData\nvModes.dat

2013-08-30 17:27 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-08-30 17:27 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-08-30 17:27 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-08-30 17:26 - 2006-11-02 14:01 - 00032638 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-08-30 17:24 - 2013-08-30 16:59 - 00000000 ____D C:\AdwCleaner

2013-08-30 17:18 - 2010-02-12 14:25 - 00000956 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2198722660-397689999-1900526466-1000UA.job

2013-08-30 17:12 - 2012-04-11 21:43 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-08-30 16:57 - 2013-08-30 16:52 - 00994642 _____ C:\Users\GOD IS GOOD TO ME\Downloads\adwcleaner (1).exe

2013-08-30 16:34 - 2013-08-30 16:34 - 00994642 _____ C:\Users\GOD IS GOOD TO ME\Downloads\adwcleaner.exe

2013-08-30 07:01 - 2013-08-30 07:01 - 00030839 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Addition.txt

2013-08-30 07:01 - 2013-08-30 06:59 - 00030839 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Addition.txt

2013-08-30 06:56 - 2013-08-30 06:56 - 00000000 ____D C:\FRST

2013-08-30 06:53 - 2013-08-30 06:53 - 01072975 _____ (Farbar) C:\Users\GOD IS GOOD TO ME\Downloads\FRST.exe

2013-08-30 06:52 - 2013-08-30 06:52 - 01579080 _____ (Farbar) C:\Users\GOD IS GOOD TO ME\Downloads\FRST64.exe

2013-08-30 06:22 - 2013-03-26 09:40 - 00022660 _____ C:\Windows\PFRO.log

2013-08-29 21:18 - 2010-02-12 14:25 - 00000904 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2198722660-397689999-1900526466-1000Core.job

2013-08-29 18:11 - 2013-08-29 18:11 - 94663095 _____ C:\Windows\system32\잿ľᴼª

2013-08-29 17:29 - 2011-03-09 01:07 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\HCM Updater

2013-08-29 12:16 - 2009-04-09 18:37 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\Skype

2013-08-29 12:15 - 2013-03-02 09:14 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-08-29 12:15 - 2013-03-02 09:14 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-08-27 18:50 - 2013-08-27 18:50 - 00220647 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Photo by mrdzifs.htm

2013-08-27 18:50 - 2013-08-27 18:50 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Photo by mrdzifs_files

2013-08-27 17:39 - 2009-05-03 02:20 - 00000052 _____ C:\Windows\system32\DOErrors.log

2013-08-27 03:17 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET

2013-08-27 03:07 - 2006-11-02 11:33 - 01478250 _____ C:\Windows\system32\PerfStringBackup.INI

2013-08-26 23:03 - 2012-01-25 09:13 - 00000000 ____D C:\Users\GODISG~1\AppData\Local\Spotify

2013-08-26 17:23 - 2013-08-26 17:22 - 00065804 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Academic words.xlsx

2013-08-26 13:58 - 2013-06-04 18:28 - 00000000 ____D C:\Users\GODISG~1\AppData\Local\48459218-93EB-4FF8-A57F-F866C4FA96FB.aplzod

2013-08-21 16:06 - 2012-04-11 21:43 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2013-08-21 16:06 - 2011-05-25 12:16 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2013-08-20 22:20 - 2011-07-17 22:08 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Personal Finance

2013-08-20 19:34 - 2009-07-26 09:07 - 00000000 ___RD C:\Program Files\Skype

2013-08-20 19:34 - 2009-04-09 18:36 - 00000000 ____D C:\ProgramData\Skype

2013-08-19 23:18 - 2011-09-27 20:49 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\TuneUpMedia

2013-08-19 19:13 - 2013-08-19 19:05 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Social Impact Analysis

2013-08-18 23:07 - 2013-08-18 23:07 - 00001624 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-08-18 23:07 - 2013-08-18 23:03 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1

2013-08-18 23:07 - 2011-07-19 21:50 - 00000000 ____D C:\Program Files\iTunes

2013-08-18 23:04 - 2013-08-18 23:04 - 00000000 ____D C:\Program Files\iPod

2013-08-18 23:04 - 2011-04-13 14:51 - 00000000 ____D C:\Program Files\Common Files\Apple

2013-08-16 13:26 - 2013-08-16 13:26 - 00213024 _____ C:\Windows\Minidump\Mini081613-01.dmp

2013-08-16 13:26 - 2009-04-11 22:35 - 00000000 ____D C:\Windows\Minidump

2013-08-16 13:25 - 2013-08-16 13:25 - 276877329 _____ C:\Windows\MEMORY.DMP

2013-08-15 09:13 - 2009-04-09 22:03 - 00000000 ____D C:\Users\GODISG~1\AppData\Local\Adobe

2013-08-15 04:36 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache

2013-08-15 03:59 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE

2013-08-15 03:41 - 2013-08-15 03:33 - 00000000 ____D C:\Windows\system32\MRT

2013-08-15 03:33 - 2006-11-02 11:24 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2013-08-15 03:28 - 2008-11-15 05:36 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-08-10 14:08 - 2013-08-10 14:04 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\House Project Ghana

2013-08-10 08:36 - 2013-08-10 08:36 - 00451072 _____ C:\Users\GOD IS GOOD TO ME\Downloads\excel-time-sheet-attendance.xls

2013-08-10 08:35 - 2013-08-10 08:35 - 00045171 _____ C:\Users\GOD IS GOOD TO ME\Downloads\TS102807582.dotx

2013-08-09 21:46 - 2013-08-09 21:42 - 00000000 ____D C:\Program Files\DVDVideoSoft

2013-08-09 21:46 - 2013-08-09 21:42 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft

2013-08-09 21:42 - 2013-02-15 18:36 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\AppData\Roaming\DVDVideoSoft

2013-08-09 21:35 - 2013-08-09 21:34 - 27142232 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\GOD IS GOOD TO ME\Downloads\FreeYouTubeToMP3Converter (1).exe

2013-08-09 21:25 - 2013-08-09 21:23 - 77947798 _____ C:\Users\GOD IS GOOD TO ME\Downloads\NAVIIV X PASSION.zip

2013-08-09 19:56 - 2013-08-09 19:56 - 00014845 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Housing companies 2.xlsx

2013-08-09 19:55 - 2013-08-09 19:55 - 00015648 _____ C:\Users\GOD IS GOOD TO ME\Desktop\Housing companies.xlsx

2013-08-08 05:48 - 2010-12-02 19:33 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Kylean

2013-08-06 22:28 - 2013-08-06 22:28 - 00022044 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Kitchen deep cleaning - PQQ scoring.xlsx

2013-08-05 17:39 - 2013-08-05 17:39 - 00037888 _____ C:\Users\GOD IS GOOD TO ME\Downloads\100422 Tenant Satisfaction.xls

2013-08-05 17:38 - 2013-08-05 17:37 - 00055296 _____ C:\Users\GOD IS GOOD TO ME\Downloads\Third Sector funding 2011-12 - Appendix B.xls

2013-08-05 17:32 - 2013-08-05 17:32 - 00069120 _____ C:\Users\GOD IS GOOD TO ME\Downloads\2010-10 C2 2009.xls

2013-08-03 12:00 - 2013-08-03 11:59 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Beckys Dad

2013-08-03 12:00 - 2009-06-26 11:43 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\NPP

2013-08-03 09:05 - 2013-08-03 09:05 - 00000000 ____D C:\Users\GOD IS GOOD TO ME\Desktop\Church FM

2013-08-02 05:09 - 2013-08-27 20:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
 

Files to move or delete:

====================

C:\ProgramData\nvModes.dat

C:\Users\Gast\AppData\Local\Temp\AskSLib.dll

C:\Users\Gast\AppData\Local\Temp\4F29.dir\InstallFlashPlayer.exe

C:\Users\GODISG~1\AppData\Local\Temp\htmlayout.dll

C:\Users\GODISG~1\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe

C:\Users\GODISG~1\AppData\Local\Temp\RegAsm.exe

C:\Users\GODISG~1\AppData\Local\Temp\SkypeSetup.exe

C:\Users\GODISG~1\AppData\Local\Temp\UpdaterCopy.exe

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI63122\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI53242\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI52762\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50602\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI50562\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49922\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI49202\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI41642\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI37602\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI34722\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI225762\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI16962\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15242\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\msvcp100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\msvcr100.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI15202\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12922\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI12402\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\kernel32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\mfc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\mfc90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\mfcm90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\mfcm90u.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\psapi.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\python27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\pythoncom27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\PyWinTypes27.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\shell32.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxbase294u_net_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxbase294u_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxmsw294u_adv_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxmsw294u_core_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxmsw294u_html_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\_MEI105162\wxmsw294u_webview_vc90.dll

C:\Users\GODISG~1\AppData\Local\Temp\xcrashreport\XCrashReport.exe

C:\Users\GODISG~1\AppData\Local\Temp\tmpuvqt2t\googledrivesync.exe

C:\Users\GODISG~1\AppData\Local\Temp\tmpqqthhg\googledrivesync.exe

C:\Users\GODISG~1\AppData\Local\Temp\tmpijlksn\googledrivesync.exe

C:\Users\GODISG~1\AppData\Local\Temp\tmpc8wa1p\googledrivesync.exe
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-08-30 17:38
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Malwarebytes Anti-Malware (Test) 1.75.0.1300
Malwarebytes : Free anti-malware download

Datenbank Version: v2013.08.30.07

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
GOD IS GOOD TO ME :: GODISGOOD-PC [Administrator]

Schutz: Aktiviert

30/08/2013 20:22:53
mbam-log-2013-08-30 (20-22-53).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 264583
Laufzeit: 20 Minute(n), 28 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 1
C:\sooi832.bin (Trojan.SpyEyes) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 6
C:\Users\GOD IS GOOD TO ME\Downloads\SoftonicDownloader_fuer_tubebox.exe (PUP.Optional.Softonic) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\GOD IS GOOD TO ME\Downloads\flvmplayer.exe (PUP.BundleInstaller.SOL) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\GOD IS GOOD TO ME\Downloads\FreeYouTubeToMP3Converter (1).exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\GOD IS GOOD TO ME\Downloads\TubeBox40_Setup.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\GOD IS GOOD TO ME\Downloads\video_downloader.exe (PUP.BundleInstaller.VG) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\GOD IS GOOD TO ME\AppData\Roaming\hotfix.exe (Trojan.Agent.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Ok, fehlt nur noch das Log von ESET (Schritt 2).

Hi,

ich hab schon länger keine Antwort mehr von dir erhalten. Brauchst du weiterhin noch Hilfe?

Wenn ich in den nächsten 24 Stunden nichts von dir höre, gehe ich davon aus, dass sich das Thema erledigt hat und lösche es aus meinen Abos.

Fehlende Rückmeldung
Dieses Thema wurde aus meinen Abos gelöscht. Somit bekomme ich keine Benachrichtigung mehr über neue Antworten.
Schreib mir eine PM, falls du das Thema doch wieder fortsetzen möchtest. Dann machen wir hier weiter.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass dein Rechner schon sauber ist.

Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.