FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-08-2013
Ran by Moritz (administrator) on 26-08-2013 20:46:46
Running from C:\Users\Moritz\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\CCDashServer.exe
() C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
() C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
() C:\Program Files\Plantronics\GameCom780\GameCom780.exe
(PC Drivers Headquarters) C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Huawei Technologies Co., Ltd.) C:\Users\Moritz\AppData\Roaming\Telekom Internet Manager\ouc.exe
(Akamai Technologies, Inc.) C:\Users\Moritz\AppData\Local\Akamai\netsession_win.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
(Akamai Technologies, Inc.) C:\Users\Moritz\AppData\Local\Akamai\netsession_win.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\HidFind.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apntex.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(CyberLink Corp.) C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe
(cyberlink) C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
() C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
(Aeria Games & Entertainment) C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel) C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe
() C:\Program Files (x86)\Dell Stage\Dell Stage\stage_secondary.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Dell Products, LP.) c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe
(McAfee, Inc.) C:\Program Files\McAfee.com\Agent\mcagent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(McAfee, Inc.) c:\PROGRA~2\mcafee\SITEAD~1\saui.exe
() C:\Users\Moritz\Downloads\FRST64.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Apoint] - C:\Program Files\DellTPad\Apoint.exe [626552 2012-04-09] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-02-14] (IDT, Inc.)
HKLM\...\Run: [QuickSet] - c:\Program Files\Dell\QuickSet\QuickSet.exe [4365984 2012-03-12] (Dell Inc.)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] ()
HKLM\...\Run: [IntelMyWiFiDashboard] - C:\Program Files\Intel\WiFi\bin\CCDashServer.exe [4966912 2012-03-30] (Intel® Corporation)
HKLM\...\Run: [BLEServicesCtrl] - C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [120592 2012-01-10] ()
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [11406608 2012-01-12] (Intel Corporation)
HKLM\...\Run: [DellStage] - C:\Program Files (x86)\Dell Stage\Dell Stage\start.umj [483424 2012-02-01] ()
HKLM\...\Run: [Stage Remote] - C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2022976 2011-06-28] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [GamecomSound] - C:\Program Files\Plantronics\GameCom780\GameCom780.exe [777448 2011-12-01] ()
HKCU\...\Run: [Driver Whiz] - C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [3527608 2012-11-12] (PC Drivers Headquarters)
HKCU\...\Run: [HW_OPENEYE_OUC_Telekom Internet Manager] - C:\Program Files (x86)\Telekom\InternetManager_H\UpdateDog\ouc.exe [116064 2010-12-28] (Huawei Technologies Co., Ltd.)
HKCU\...\Run: [Driver Detective] - C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [3527608 2012-11-12] (PC Drivers Headquarters)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Moritz\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [Speech Recognition] - C:\Windows\Speech\Common\sapisvr.exe [44544 2009-07-14] (Microsoft Corporation)
HKCU\...\Run: [Dxtory Update Checker 2.0] - C:\Program Files (x86)\Dxtory Software\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)
MountPoints2: {19fc124d-dfcf-11e1-abd9-806e6f6e6963} - E:\setup.exe
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [Dell Webcam Central] - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [577024 2012-03-07] (Creative Technology Ltd)
HKLM-x32\...\Run: [Dell DataSafe Online] - C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [1117528 2010-08-26] (Dell, Inc.)
HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2010-10-01] (CyberLink Corp.)
HKLM-x32\...\Run: [PDVD9LanguageShortcut] - C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe [50472 2010-09-18] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe [76872 2012-03-27] (cyberlink)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [37960 2013-05-10] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NeroLauncher] - C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe [66872 2012-03-11] ()
HKLM-x32\...\Run: [AccuWeatherWidget] - C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj [2835443 2012-02-01] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [DataCardMonitor] - C:\Program Files (x86)\Telekom\InternetManager_H\DataCardMonitor.exe [259424 2013-04-10] (Huawei Technologies Co., Ltd.)
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1532992 2013-03-13] (McAfee, Inc.)
HKLM-x32\...\Run: [Aeria Ignite] - C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2255184 2013-06-28] (LogMeIn Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
AppInit_DLLs: 0 [97280 2009-07-14] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
==================== Internet (Whitelisted) ====================
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ProxTube - {0AA2810A-F009-4BD7-A10A-32F140A1B9F3} - C:\Users\Moritz\AppData\LocalLow\ProxTube\IE\ProxTube.dll (Malte Goetz)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~1\mcafee\msc\MCSNIE~1.DLL (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Moritz\AppData\Roaming\Mozilla\Firefox\Profiles\h9173mwg.default
FF Homepage: hxxp://www.google.de/
FF NetworkProxy: "http", "www-proxy.t-online.de"
FF NetworkProxy: "http_port", 80
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @mcafee.com/MVT - C:\Program Files (x86)\McAfee\Supportability\MVT\NPMVTPlugin.dll (McAfee, Inc.)
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\Moritz\AppData\Roaming\Mozilla\Firefox\Profiles\h9173mwg.default\Extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com
FF Extension: info - C:\Users\Moritz\AppData\Roaming\Mozilla\Firefox\Profiles\h9173mwg.default\Extensions\info@maltegoetz.de.xpi
FF Extension: om - C:\Users\Moritz\AppData\Roaming\Mozilla\Firefox\Profiles\h9173mwg.default\Extensions\om@offermosquito.com.xpi
FF Extension: No Name - C:\Users\Moritz\AppData\Roaming\Mozilla\Firefox\Profiles\h9173mwg.default\Extensions\{99B98C2C-7274-45a3-A640-D9DF1A1C8460}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK
Chrome:
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
CHR Plugin: (McAfee Virtual Technician) - C:\Program Files (x86)\McAfee\Supportability\MVT\NPMVTPlugin.dll (McAfee, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (McAfee SecurityCenter) - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
CHR Extension: (Google Docs) - C:\Users\Moritz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Moritz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Moritz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (ProxTube) - C:\Users\Moritz\AppData\Local\Google\Chrome\User Data\Default\Extensions\chakodcglgpacmjpjfaoopegbglbollk\1.1.35_0
CHR Extension: (Google Search) - C:\Users\Moritz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (SiteAdvisor) - C:\Users\Moritz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.41.123.2_0
CHR Extension: (OfferMosquito) - C:\Users\Moritz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\0.5_0
CHR Extension: (Plus-HD-2.2) - C:\Users\Moritz\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.23.53_0
CHR Extension: (Google Wallet Service) - C:\Users\Moritz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.9_0
CHR Extension: (SeeSimilar) - C:\Users\Moritz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pggagllhehfjjfgnfnfkjedjlmbchamf\1.0.0.5_0
CHR Extension: (Gmail) - C:\Users\Moritz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [chakodcglgpacmjpjfaoopegbglbollk] - C:\Users\Moritz\AppData\LocalLow\ProxTube\CHROME\ProxTube.crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [pggagllhehfjjfgnfnfkjedjlmbchamf] - C:\Users\Moritz\AppData\Roaming\SeeSimilar\SeeSimilar.crx
==================== Services (Whitelisted) =================
S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe [242448 2012-03-27] (CyberLink)
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3128856 2012-02-28] (devolo AG)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [344928 2011-01-28] ()
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [193536 2012-03-28] (Intel Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [384048 2013-02-25] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241456 2013-02-19] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218760 2013-02-19] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-02-19] (McAfee, Inc.)
R2 MOBKbackup; C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe [231224 2010-04-13] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-03-29] ()
R2 Norton PC Checkup Application Launcher; C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe [132056 2012-07-17] (Symantec Corporation)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1228504 2013-07-03] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660184 2013-07-03] (Secunia)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-03-29] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-02-19] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
R3 irstrtdv; C:\Windows\System32\DRIVERS\irstrtdv.sys [26504 2012-03-28] (Intel Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179280 2013-02-19] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [309840 2013-02-19] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515968 2013-02-19] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771536 2013-02-19] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106552 2013-02-19] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340216 2013-02-19] (McAfee, Inc.)
R1 MOBKFilter; C:\Windows\System32\DRIVERS\MOBK.sys [66040 2010-04-13] (Mozy, Inc.)
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2012-01-31] (CACE Technologies)
R3 PlantronicsGC; C:\Windows\System32\drivers\PLTGC.sys [1327104 2011-11-05] (C-Media Electronics Inc)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-07-03] (Secunia)
R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.)
R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.)
U3 mfeavfk01; No ImagePath
S3 xhunter1; \??\C:\Windows\xhunter1.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-26 19:48 - 2013-08-26 19:48 - 00000000 ____D C:\Program Files (x86)\Dell Digital Delivery
2013-08-25 20:11 - 2013-08-25 20:11 - 01170448 _____ C:\Users\Moritz\Documents\Themen Welt.world
2013-08-25 12:31 - 2013-08-25 12:32 - 03076208 _____ (pepsoft.org) C:\Users\Moritz\worldpainter_64_1.5.5.exe
2013-08-24 21:17 - 2013-08-24 21:17 - 06445065 _____ (Craften Dev Team ) C:\Users\Moritz\Downloads\craftenterminal-beta(1).exe
2013-08-23 20:20 - 2013-08-23 20:20 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-08-23 20:20 - 2013-08-23 20:20 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-08-23 20:20 - 2013-08-23 20:20 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-08-23 20:20 - 2013-08-23 20:20 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-23 20:18 - 2013-08-23 20:18 - 00903080 _____ (Oracle Corporation) C:\Users\Moritz\Downloads\jxpiinstall.exe
2013-08-23 20:11 - 2013-08-23 20:11 - 00312232 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-08-23 20:11 - 2013-08-23 20:11 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-08-23 20:11 - 2013-08-23 20:11 - 00188840 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-08-23 20:11 - 2013-08-23 20:11 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-08-23 20:11 - 2013-08-23 20:11 - 00000000 ____D C:\Program Files\Java
2013-08-21 19:22 - 2013-08-21 19:22 - 00011688 _____ C:\Users\Moritz\Downloads\stereofunk.zip
2013-08-17 20:44 - 2013-08-17 20:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-16 08:20 - 2013-08-16 08:20 - 00000000 ____D C:\Users\Moritz\Desktop\Fantasia - Kopie - Kopie - Kopie (2)
2013-08-14 23:02 - 2013-08-14 23:02 - 00000000 ____D C:\Users\Public\Desktop\CC Support
2013-08-14 23:01 - 2013-08-14 23:01 - 04009167 _____ C:\Users\Moritz\Desktop\ServicesRepair.exe
2013-08-14 21:15 - 2013-08-14 21:15 - 00003160 _____ C:\Windows\System32\Tasks\SidebarExecute
2013-08-14 17:34 - 2013-08-14 17:34 - 00000207 _____ C:\Windows\tweaking.com-regbackup-MORITZ-PC-Microsoft-Windows-7-Home-Premium-(64-Bit).dat
2013-08-14 17:34 - 2013-08-14 17:34 - 00000000 ____D C:\RegBackup
2013-08-14 17:05 - 2013-08-14 21:13 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-08-14 17:04 - 2013-08-14 17:34 - 03263349 _____ C:\Users\Moritz\Downloads\tweaking.com_windows_repair_aio.zip
2013-08-14 16:05 - 2013-08-14 16:05 - 00357085 _____ (Farbar) C:\Users\Moritz\Downloads\FSS.exe
2013-08-14 16:05 - 2013-08-14 16:05 - 00002285 _____ C:\Users\Moritz\Downloads\FSS.txt
2013-08-14 09:57 - 2013-08-14 09:57 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-14 09:57 - 2013-08-14 09:57 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-14 09:57 - 2013-08-14 09:57 - 00000000 ____D C:\Program Files\iTunes
2013-08-14 09:57 - 2013-08-14 09:57 - 00000000 ____D C:\Program Files\iPod
2013-08-14 09:57 - 2013-08-14 09:57 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-14 09:43 - 2013-08-23 20:11 - 01093032 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-08-14 09:39 - 2013-08-14 09:42 - 33150376 _____ (Oracle Corporation) C:\Users\Moritz\Downloads\jre-7u25-windows-x64.exe
2013-08-14 09:31 - 2013-08-14 09:31 - 01069032 _____ (Solid State Networks) C:\Users\Moritz\Downloads\install_flashplayer11x32_ltr5x64d_awc_aih.exe
2013-08-14 09:22 - 2013-08-14 09:22 - 00001071 _____ C:\Users\Moritz\Desktop\Secunia PSI.lnk
2013-08-14 09:21 - 2013-08-14 09:21 - 03272136 _____ (Secunia) C:\Users\Moritz\Downloads\PSISetup711.exe
2013-08-14 09:21 - 2013-08-14 09:21 - 00000000 ____D C:\Users\Moritz\AppData\Local\Secunia PSI
2013-08-14 09:21 - 2013-08-14 09:21 - 00000000 ____D C:\Program Files (x86)\Secunia
2013-08-13 15:33 - 2013-08-13 15:33 - 00000000 ____D C:\FRST
2013-08-13 15:04 - 2013-08-13 15:04 - 00000243 _____ C:\Users\Moritz\Downloads\Search.txt
2013-08-13 13:15 - 2013-08-13 13:15 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2013-08-13 13:14 - 2013-08-13 13:14 - 03541664 _____ (Aeria Games & Entertainment) C:\Users\Moritz\Downloads\aeria_ignite_install(1).exe
2013-08-13 10:48 - 2013-08-13 10:48 - 00165376 _____ C:\Users\Moritz\Downloads\SystemLook_x64.exe
2013-08-13 10:39 - 2013-08-13 17:04 - 00043246 _____ C:\Users\Moritz\Downloads\SystemLook.txt
2013-08-13 09:45 - 2013-08-13 09:45 - 00000000 ____D C:\Windows\D4EFA08DA1924007987D71BFF23B2F8F.TMP
2013-08-12 17:27 - 2013-08-12 17:27 - 02347384 _____ (ESET) C:\Users\Moritz\Downloads\esetsmartinstaller_enu.exe
2013-08-12 17:08 - 2013-08-12 17:08 - 00002958 _____ C:\Users\Moritz\Documents\....txt
2013-08-12 16:58 - 2013-08-12 16:58 - 00000000 ____D C:\Users\Moritz\AppData\Roaming\Malwarebytes
2013-08-12 16:58 - 2013-08-12 16:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-12 16:57 - 2013-08-12 16:57 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Moritz\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-12 16:24 - 2013-08-12 16:25 - 00959697 _____ (Oleg N. Scherbakov) C:\Users\Moritz\Downloads\JRT (1).exe
2013-08-12 16:22 - 2013-08-12 16:22 - 00003122 _____ C:\Windows\System32\Tasks\{1EA7E4A0-B683-44E3-A658-ECE1ECBF2E94}
2013-08-12 16:22 - 2013-08-12 16:22 - 00000000 ____D C:\Windows\ERUNT
2013-08-12 16:20 - 2013-08-12 16:20 - 00959697 _____ (Oleg N. Scherbakov) C:\Users\Moritz\Downloads\JRT.exe
2013-08-12 16:13 - 2013-08-12 16:13 - 00051945 _____ C:\AdwCleaner[S1].txt
2013-08-11 22:10 - 2013-08-11 22:10 - 00000000 ____D C:\Users\Moritz\Desktop\Fantasia - Kopie - Kopie
2013-08-11 09:43 - 2013-08-11 09:43 - 00002214 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-08-11 09:37 - 2013-08-26 20:42 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-11 09:37 - 2013-08-26 19:46 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-11 09:37 - 2013-08-11 09:37 - 00785024 _____ (Google Inc.) C:\Users\Moritz\Downloads\googleupdatesetup.exe
2013-08-11 09:37 - 2013-08-11 09:37 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-08-11 09:37 - 2013-08-11 09:37 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-11 09:20 - 2013-08-11 09:21 - 03880313 _____ C:\Users\Moritz\Downloads\MithPack-TEMPFIX-162.zip
2013-08-11 09:19 - 2013-08-11 09:20 - 04016863 _____ C:\Users\Moritz\Downloads\SteamIslands.zip
2013-08-10 18:49 - 2013-08-10 18:49 - 00002030 _____ C:\Users\Public\Desktop\Aeria Ignite.lnk
2013-08-10 15:59 - 2013-08-24 21:38 - 00000000 ____D C:\Users\Moritz\AppData\Roaming\Craften Terminal
2013-08-10 15:54 - 2013-08-10 15:55 - 03784176 _____ (Craften Dev Team ) C:\Users\Moritz\Downloads\craftenterminal-beta.exe
2013-08-06 18:45 - 2013-08-13 10:20 - 00000000 ____D C:\Users\Moritz\Documents\German Truck Simulator
2013-08-06 18:44 - 2013-08-06 18:44 - 00001377 _____ C:\Users\UpdatusUser\Desktop\German Truck Simulator.lnk
2013-08-06 18:44 - 2013-08-06 18:44 - 00001377 _____ C:\Users\Moritz\Desktop\German Truck Simulator.lnk
2013-08-06 18:44 - 2013-08-06 18:44 - 00000000 ____D C:\Users\Moritz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\German Truck Simulator
2013-08-06 18:44 - 2013-08-06 18:44 - 00000000 ____D C:\Program Files (x86)\German Truck Simulator
2013-08-05 22:21 - 2013-08-05 22:21 - 00512406 _____ C:\Users\Moritz\Documents\Fantasia.world
2013-08-04 22:22 - 2013-08-05 12:38 - 01443026 _____ C:\Users\Moritz\Desktop\Fantasia.world
2013-08-04 22:22 - 2013-08-04 22:22 - 01439185 _____ C:\Users\Moritz\Desktop\Fantasia.1.world
2013-08-01 13:54 - 2013-08-25 20:14 - 00000000 ____D C:\Users\Moritz\AppData\Roaming\WorldPainter
2013-08-01 13:54 - 2013-08-01 13:54 - 00001869 _____ C:\Users\Moritz\Desktop\WorldPainter.lnk
2013-08-01 13:53 - 2013-08-25 12:32 - 00000000 ____D C:\Program Files\WorldPainter
2013-08-01 13:53 - 2013-08-01 13:53 - 03060336 _____ (pepsoft.org) C:\Users\Moritz\Downloads\worldpainter_64_1.5.0.exe
2013-07-31 20:57 - 2013-08-01 10:39 - 00000000 ____D C:\Users\Moritz\AppData\Local\Dxtory Software
2013-07-31 20:57 - 2013-07-31 20:57 - 00001184 _____ C:\Users\Moritz\Desktop\Dxtory.lnk
2013-07-31 20:57 - 2013-07-31 20:57 - 00000000 ____D C:\Program Files (x86)\Dxtory Software
2013-07-31 20:57 - 2013-02-15 22:44 - 08300544 _____ (Dxtory Software) C:\Windows\SysWOW64\DxtoryCodec.dll
2013-07-31 20:57 - 2013-02-15 22:44 - 08043008 _____ (Dxtory Software) C:\Windows\system32\DxtoryCodec.dll
2013-07-31 20:56 - 2013-07-31 20:56 - 04135551 _____ (Dxtory Software ) C:\Users\Moritz\Downloads\DxtorySetup2.0.122.exe
2013-07-28 21:47 - 2013-07-28 21:47 - 02995080 _____ C:\Users\Moritz\Downloads\Kanalbild0013.tif
2013-07-28 11:48 - 2013-07-28 11:48 - 03541664 _____ (Aeria Games & Entertainment) C:\Users\Moritz\Downloads\aeria_ignite_install.exe
2013-07-27 13:08 - 2013-07-27 13:09 - 01863508 _____ C:\sh4_service.log
2013-07-27 13:03 - 2010-08-05 18:01 - 00014680 _____ C:\Windows\system32\sh4native.exe
2013-07-27 10:42 - 2013-07-27 10:42 - 00000000 _____ C:\autoexec.bat
2013-07-27 10:36 - 2013-07-27 10:36 - 00292648 _____ C:\Windows\Minidump\072713-10842-01.dmp
2013-07-27 10:34 - 2013-07-27 10:42 - 00000000 ____D C:\Windows\8AE3CFB678B24F55A7BE618FCFF43A03.TMP
2013-07-27 09:08 - 2013-08-14 09:51 - 00001149 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-07-27 09:07 - 2013-07-27 09:07 - 00280368 _____ (Mozilla) C:\Users\Moritz\Downloads\Firefox Setup Stub 22.0 (1).exe
2013-07-27 09:06 - 2013-07-27 09:06 - 00280368 _____ (Mozilla) C:\Users\Moritz\Downloads\Firefox Setup Stub 22.0.exe
==================== One Month Modified Files and Folders =======
2013-08-26 20:46 - 2013-01-14 04:06 - 00000000 ____D C:\Users\Moritz\AppData\Roaming\Skype
2013-08-26 20:45 - 2013-08-26 20:45 - 01577068 _____ (Farbar) C:\Users\Moritz\Desktop\FRST64.exe
2013-08-26 20:43 - 2013-07-17 22:13 - 00000000 ____D C:\Users\Moritz\AppData\Roaming\.minecraft
2013-08-26 20:42 - 2013-08-11 09:37 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-26 20:00 - 2012-08-06 23:07 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-26 19:52 - 2010-11-21 08:50 - 00697322 _____ C:\Windows\system32\perfh007.dat
2013-08-26 19:52 - 2010-11-21 08:50 - 00148328 _____ C:\Windows\system32\perfc007.dat
2013-08-26 19:52 - 2009-07-14 07:13 - 01614036 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-26 19:51 - 2012-08-06 23:31 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2013-08-26 19:51 - 2009-07-14 06:45 - 00021072 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-26 19:51 - 2009-07-14 06:45 - 00021072 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-26 19:48 - 2013-08-26 19:48 - 00000000 ____D C:\Program Files (x86)\Dell Digital Delivery
2013-08-26 19:48 - 2012-08-06 23:06 - 01348437 _____ C:\Windows\WindowsUpdate.log
2013-08-26 19:46 - 2013-08-11 09:37 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-26 19:46 - 2013-07-22 19:18 - 00000000 ____D C:\Users\Moritz\AppData\Local\LogMeIn Hamachi
2013-08-26 19:46 - 2009-07-14 06:51 - 00085283 _____ C:\Windows\setupact.log
2013-08-26 19:45 - 2012-08-06 16:02 - 00000000 ____D C:\ProgramData\NVIDIA
2013-08-26 19:45 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-25 20:14 - 2013-08-01 13:54 - 00000000 ____D C:\Users\Moritz\AppData\Roaming\WorldPainter
2013-08-25 20:11 - 2013-08-25 20:11 - 01170448 _____ C:\Users\Moritz\Documents\Themen Welt.world
2013-08-25 12:32 - 2013-08-25 12:31 - 03076208 _____ (pepsoft.org) C:\Users\Moritz\worldpainter_64_1.5.5.exe
2013-08-25 12:32 - 2013-08-01 13:53 - 00000000 ____D C:\Program Files\WorldPainter
2013-08-25 12:31 - 2012-10-23 13:58 - 00000000 ____D C:\Users\Moritz
2013-08-24 21:38 - 2013-08-10 15:59 - 00000000 ____D C:\Users\Moritz\AppData\Roaming\Craften Terminal
2013-08-24 21:19 - 2013-07-15 19:33 - 00001105 _____ C:\Users\Public\Desktop\Craften Terminal.lnk
2013-08-24 21:19 - 2013-06-14 20:58 - 00000000 ____D C:\Program Files (x86)\Craften Terminal
2013-08-24 21:17 - 2013-08-24 21:17 - 06445065 _____ (Craften Dev Team ) C:\Users\Moritz\Downloads\craftenterminal-beta(1).exe
2013-08-24 13:30 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-23 20:20 - 2013-08-23 20:20 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-08-23 20:20 - 2013-08-23 20:20 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-08-23 20:20 - 2013-08-23 20:20 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-08-23 20:20 - 2013-08-23 20:20 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-23 20:20 - 2012-10-23 19:35 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-08-23 20:18 - 2013-08-23 20:18 - 00903080 _____ (Oracle Corporation) C:\Users\Moritz\Downloads\jxpiinstall.exe
2013-08-23 20:11 - 2013-08-23 20:11 - 00312232 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-08-23 20:11 - 2013-08-23 20:11 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-08-23 20:11 - 2013-08-23 20:11 - 00188840 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-08-23 20:11 - 2013-08-23 20:11 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-08-23 20:11 - 2013-08-23 20:11 - 00000000 ____D C:\Program Files\Java
2013-08-23 20:11 - 2013-08-14 09:43 - 01093032 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-08-23 20:11 - 2012-11-25 11:37 - 00972712 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-08-21 19:22 - 2013-08-21 19:22 - 00011688 _____ C:\Users\Moritz\Downloads\stereofunk.zip
2013-08-19 20:26 - 2013-01-22 21:40 - 00000000 ____D C:\Users\Moritz\AppData\Roaming\TS3Client
2013-08-18 19:04 - 2013-01-22 20:42 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-08-18 19:01 - 2013-04-15 19:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-17 20:44 - 2013-08-17 20:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-16 08:20 - 2013-08-16 08:20 - 00000000 ____D C:\Users\Moritz\Desktop\Fantasia - Kopie - Kopie - Kopie (2)
2013-08-14 23:02 - 2013-08-14 23:02 - 00000000 ____D C:\Users\Public\Desktop\CC Support
2013-08-14 23:01 - 2013-08-14 23:01 - 04009167 _____ C:\Users\Moritz\Desktop\ServicesRepair.exe
2013-08-14 21:19 - 2012-10-23 13:58 - 00059280 _____ C:\Users\Moritz\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-14 21:19 - 2010-11-21 09:00 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-08-14 21:18 - 2009-07-14 06:45 - 00275512 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-14 21:15 - 2013-08-14 21:15 - 00003160 _____ C:\Windows\System32\Tasks\SidebarExecute
2013-08-14 21:13 - 2013-08-14 17:05 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-08-14 21:12 - 2009-07-14 04:34 - 00000471 _____ C:\Windows\win.ini
2013-08-14 17:38 - 2009-07-14 01:46 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll
2013-08-14 17:34 - 2013-08-14 17:34 - 00000207 _____ C:\Windows\tweaking.com-regbackup-MORITZ-PC-Microsoft-Windows-7-Home-Premium-(64-Bit).dat
2013-08-14 17:34 - 2013-08-14 17:34 - 00000000 ____D C:\RegBackup
2013-08-14 17:34 - 2013-08-14 17:04 - 03263349 _____ C:\Users\Moritz\Downloads\tweaking.com_windows_repair_aio.zip
2013-08-14 17:15 - 2012-11-25 11:23 - 00002257 _____ C:\Users\Moritz\Desktop\Google Chrome.lnk
2013-08-14 17:15 - 2012-10-23 19:23 - 00000000 ____D C:\Users\Moritz\AppData\Local\Google
2013-08-14 16:05 - 2013-08-14 16:05 - 00357085 _____ (Farbar) C:\Users\Moritz\Downloads\FSS.exe
2013-08-14 16:05 - 2013-08-14 16:05 - 00002285 _____ C:\Users\Moritz\Downloads\FSS.txt
2013-08-14 09:57 - 2013-08-14 09:57 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-14 09:57 - 2013-08-14 09:57 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-14 09:57 - 2013-08-14 09:57 - 00000000 ____D C:\Program Files\iTunes
2013-08-14 09:57 - 2013-08-14 09:57 - 00000000 ____D C:\Program Files\iPod
2013-08-14 09:57 - 2013-08-14 09:57 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-14 09:52 - 2012-08-06 23:07 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-14 09:52 - 2012-08-06 23:07 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-14 09:52 - 2012-08-06 23:07 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-14 09:51 - 2013-07-27 09:08 - 00001149 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-14 09:42 - 2013-08-14 09:39 - 33150376 _____ (Oracle Corporation) C:\Users\Moritz\Downloads\jre-7u25-windows-x64.exe
2013-08-14 09:34 - 2012-10-23 14:05 - 00000000 ____D C:\Users\Moritz\AppData\Local\Adobe
2013-08-14 09:31 - 2013-08-14 09:31 - 01069032 _____ (Solid State Networks) C:\Users\Moritz\Downloads\install_flashplayer11x32_ltr5x64d_awc_aih.exe
2013-08-14 09:22 - 2013-08-14 09:22 - 00001071 _____ C:\Users\Moritz\Desktop\Secunia PSI.lnk
2013-08-14 09:21 - 2013-08-14 09:21 - 03272136 _____ (Secunia) C:\Users\Moritz\Downloads\PSISetup711.exe
2013-08-14 09:21 - 2013-08-14 09:21 - 00000000 ____D C:\Users\Moritz\AppData\Local\Secunia PSI
2013-08-14 09:21 - 2013-08-14 09:21 - 00000000 ____D C:\Program Files (x86)\Secunia
2013-08-13 17:04 - 2013-08-13 10:39 - 00043246 _____ C:\Users\Moritz\Downloads\SystemLook.txt
2013-08-13 15:33 - 2013-08-13 15:33 - 00000000 ____D C:\FRST
2013-08-13 15:04 - 2013-08-13 15:04 - 00000243 _____ C:\Users\Moritz\Downloads\Search.txt
2013-08-13 13:15 - 2013-08-13 13:15 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2013-08-13 13:14 - 2013-08-13 13:14 - 03541664 _____ (Aeria Games & Entertainment) C:\Users\Moritz\Downloads\aeria_ignite_install(1).exe
2013-08-13 10:48 - 2013-08-13 10:48 - 00165376 _____ C:\Users\Moritz\Downloads\SystemLook_x64.exe
2013-08-13 10:20 - 2013-08-06 18:45 - 00000000 ____D C:\Users\Moritz\Documents\German Truck Simulator
2013-08-13 09:45 - 2013-08-13 09:45 - 00000000 ____D C:\Windows\D4EFA08DA1924007987D71BFF23B2F8F.TMP
2013-08-12 23:02 - 2013-07-25 22:05 - 00000000 ____D C:\Program Files\MAXON
2013-08-12 22:59 - 2013-07-25 09:52 - 00000000 ____D C:\Fraps
2013-08-12 22:01 - 2013-02-10 20:14 - 00000532 _____ C:\Users\Moritz\Desktop\settings.xml
2013-08-12 17:27 - 2013-08-12 17:27 - 02347384 _____ (ESET) C:\Users\Moritz\Downloads\esetsmartinstaller_enu.exe
2013-08-12 17:09 - 2010-11-21 05:47 - 00055328 _____ C:\Windows\PFRO.log
2013-08-12 17:08 - 2013-08-12 17:08 - 00002958 _____ C:\Users\Moritz\Documents\....txt
2013-08-12 16:58 - 2013-08-12 16:58 - 00000000 ____D C:\Users\Moritz\AppData\Roaming\Malwarebytes
2013-08-12 16:58 - 2013-08-12 16:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-12 16:57 - 2013-08-12 16:57 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Moritz\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-12 16:30 - 2013-05-17 14:22 - 00000000 ____D C:\Users\Moritz\AppData\Roaming\Uniblue
2013-08-12 16:30 - 2013-05-17 14:22 - 00000000 ____D C:\Program Files (x86)\Uniblue
2013-08-12 16:25 - 2013-08-12 16:24 - 00959697 _____ (Oleg N. Scherbakov) C:\Users\Moritz\Downloads\JRT (1).exe
2013-08-12 16:22 - 2013-08-12 16:22 - 00003122 _____ C:\Windows\System32\Tasks\{1EA7E4A0-B683-44E3-A658-ECE1ECBF2E94}
2013-08-12 16:22 - 2013-08-12 16:22 - 00000000 ____D C:\Windows\ERUNT
2013-08-12 16:20 - 2013-08-12 16:20 - 00959697 _____ (Oleg N. Scherbakov) C:\Users\Moritz\Downloads\JRT.exe
2013-08-12 16:13 - 2013-08-12 16:13 - 00051945 _____ C:\AdwCleaner[S1].txt
2013-08-12 15:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-12 09:47 - 2009-07-14 04:34 - 62652416 _____ C:\Windows\system32\config\software.esg.bak
2013-08-12 09:47 - 2009-07-14 04:34 - 19136512 _____ C:\Windows\system32\config\system.esg.bak
2013-08-12 09:47 - 2009-07-14 04:34 - 01331200 _____ C:\Windows\system32\config\default.esg.bak
2013-08-12 09:47 - 2009-07-14 04:34 - 00057344 _____ C:\Windows\system32\config\sam.esg.bak
2013-08-11 22:10 - 2013-08-11 22:10 - 00000000 ____D C:\Users\Moritz\Desktop\Fantasia - Kopie - Kopie
2013-08-11 21:06 - 2009-07-14 04:34 - 23347200 _____ C:\Windows\system32\config\components.esg.bak
2013-08-11 19:55 - 2012-11-10 20:46 - 00000000 ____D C:\Users\Moritz\AppData\Local\Nero
2013-08-11 09:43 - 2013-08-11 09:43 - 00002214 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-08-11 09:37 - 2013-08-11 09:37 - 00785024 _____ (Google Inc.) C:\Users\Moritz\Downloads\googleupdatesetup.exe
2013-08-11 09:37 - 2013-08-11 09:37 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-08-11 09:37 - 2013-08-11 09:37 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-11 09:21 - 2013-08-11 09:20 - 03880313 _____ C:\Users\Moritz\Downloads\MithPack-TEMPFIX-162.zip
2013-08-11 09:20 - 2013-08-11 09:19 - 04016863 _____ C:\Users\Moritz\Downloads\SteamIslands.zip
2013-08-10 18:49 - 2013-08-10 18:49 - 00002030 _____ C:\Users\Public\Desktop\Aeria Ignite.lnk
2013-08-10 15:55 - 2013-08-10 15:54 - 03784176 _____ (Craften Dev Team ) C:\Users\Moritz\Downloads\craftenterminal-beta.exe
2013-08-06 18:44 - 2013-08-06 18:44 - 00001377 _____ C:\Users\UpdatusUser\Desktop\German Truck Simulator.lnk
2013-08-06 18:44 - 2013-08-06 18:44 - 00001377 _____ C:\Users\Moritz\Desktop\German Truck Simulator.lnk
2013-08-06 18:44 - 2013-08-06 18:44 - 00000000 ____D C:\Users\Moritz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\German Truck Simulator
2013-08-06 18:44 - 2013-08-06 18:44 - 00000000 ____D C:\Program Files (x86)\German Truck Simulator
2013-08-05 22:21 - 2013-08-05 22:21 - 00512406 _____ C:\Users\Moritz\Documents\Fantasia.world
2013-08-05 12:38 - 2013-08-04 22:22 - 01443026 _____ C:\Users\Moritz\Desktop\Fantasia.world
2013-08-04 22:22 - 2013-08-04 22:22 - 01439185 _____ C:\Users\Moritz\Desktop\Fantasia.1.world
2013-08-01 13:54 - 2013-08-01 13:54 - 00001869 _____ C:\Users\Moritz\Desktop\WorldPainter.lnk
2013-08-01 13:53 - 2013-08-01 13:53 - 03060336 _____ (pepsoft.org) C:\Users\Moritz\Downloads\worldpainter_64_1.5.0.exe
2013-08-01 10:39 - 2013-07-31 20:57 - 00000000 ____D C:\Users\Moritz\AppData\Local\Dxtory Software
2013-07-31 20:57 - 2013-07-31 20:57 - 00001184 _____ C:\Users\Moritz\Desktop\Dxtory.lnk
2013-07-31 20:57 - 2013-07-31 20:57 - 00000000 ____D C:\Program Files (x86)\Dxtory Software
2013-07-31 20:56 - 2013-07-31 20:56 - 04135551 _____ (Dxtory Software ) C:\Users\Moritz\Downloads\DxtorySetup2.0.122.exe
2013-07-31 09:49 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-07-30 10:34 - 2012-08-06 23:38 - 00000000 ____D C:\Users\Default\AppData\Local\SoftThinks
2013-07-30 10:34 - 2012-08-06 23:38 - 00000000 ____D C:\Users\Default User\AppData\Local\SoftThinks
2013-07-28 21:47 - 2013-07-28 21:47 - 02995080 _____ C:\Users\Moritz\Downloads\Kanalbild0013.tif
2013-07-28 11:48 - 2013-07-28 11:48 - 03541664 _____ (Aeria Games & Entertainment) C:\Users\Moritz\Downloads\aeria_ignite_install.exe
2013-07-27 13:09 - 2013-07-27 13:08 - 01863508 _____ C:\sh4_service.log
2013-07-27 13:08 - 2013-07-25 09:52 - 00000000 ____D C:\Users\Moritz\AppData\Roaming\Common
2013-07-27 10:46 - 2013-07-25 10:06 - 00003116 _____ C:\Windows\System32\Tasks\Advanced System Protector_startup
2013-07-27 10:42 - 2013-07-27 10:42 - 00000000 _____ C:\autoexec.bat
2013-07-27 10:42 - 2013-07-27 10:34 - 00000000 ____D C:\Windows\8AE3CFB678B24F55A7BE618FCFF43A03.TMP
2013-07-27 10:36 - 2013-07-27 10:36 - 00292648 _____ C:\Windows\Minidump\072713-10842-01.dmp
2013-07-27 10:36 - 2012-12-01 11:01 - 558294278 _____ C:\Windows\MEMORY.DMP
2013-07-27 10:36 - 2012-12-01 11:01 - 00000000 ____D C:\Windows\Minidump
2013-07-27 09:30 - 2013-07-25 22:04 - 00000000 ____D C:\Users\Moritz\AppData\Roaming\MAXON
2013-07-27 09:07 - 2013-07-27 09:07 - 00280368 _____ (Mozilla) C:\Users\Moritz\Downloads\Firefox Setup Stub 22.0 (1).exe
2013-07-27 09:06 - 2013-07-27 09:06 - 00280368 _____ (Mozilla) C:\Users\Moritz\Downloads\Firefox Setup Stub 22.0.exe
Files to move or delete:
====================
C:\Users\Moritz\worldpainter_64_1.5.5.exe
C:\Users\Moritz\AppData\Local\Temp\c9d4f6f9a38404700fcd30991219e2cd.dll
C:\Users\Moritz\AppData\Local\Temp\fhxfdye0.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\GoogleCrashHandler.exe
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\GoogleCrashHandler64.exe
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\GoogleUpdate.exe
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\GoogleUpdateBroker.exe
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\GoogleUpdateOnDemand.exe
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\GoogleUpdateSetup.exe
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdate.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_am.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_ar.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_bg.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_bn.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_ca.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_cs.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_da.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_de.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_el.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_en-GB.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_en.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_es-419.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_es.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_et.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_fa.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_fi.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_fil.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_fr.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_gu.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_hi.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_hr.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_hu.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_id.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_is.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_it.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_iw.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_ja.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_kn.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_ko.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_lt.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_lv.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_ml.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_mr.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_ms.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_nl.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_no.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_pl.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_pt-BR.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_pt-PT.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_ro.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_ru.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_sk.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_sl.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_sr.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_sv.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_sw.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_ta.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_te.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_th.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_tr.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_uk.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_ur.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_vi.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_zh-CN.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\goopdateres_zh-TW.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\npGoogleUpdate3.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\psmachine.dll
C:\Users\Moritz\AppData\Local\Temp\{E47C94E7-46B3-489B-81A7-219A95D14062}\psuser.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-27 11:24
==================== End Of Log ============================
--- --- ---
Addition: Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-08-2013
Ran by Moritz at 2013-08-26 20:47:28
Running from C:\Users\Moritz\Downloads
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Adobe AIR (x32 Version: 3.8.0.870)
Adobe Community Help (x32 Version: 3.2.1)
Adobe Community Help (x32 Version: 3.2.1.650)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Photoshop Elements 9 (x32 Version: 9.0)
Adobe Premiere Elements 9 (x32 Version: 9.0)
Adobe Reader X (10.1.7) MUI (x32 Version: 10.1.7)
Advanced Audio FX Engine (x32 Version: 1.12.05)
Aeria Ignite (x32 Version: 1.13.3296)
Akamai NetSession Interface (HKCU)
Alliance of Valiant Arms DE (x32)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95)
Bonjour (Version: 3.0.0.10)
Build-a-lot 2 (x32 Version: 2.2.0.95)
Cake Mania (x32 Version: 2.2.0.95)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
Craften Terminal Beta 3.4.4978.30355 (x32 Version: 3.4.4978.30355)
CyberLink PowerDVD 9.6 (x32 Version: 9.6.1.5127)
D3DX10 (x32 Version: 15.4.2368.0902)
DebugMode Wink (x32)
Dell DataSafe Local Backup - Support Software (x32 Version: 9.4.67)
Dell DataSafe Local Backup (x32 Version: 9.4.67)
Dell DataSafe Online (x32 Version: 2.1.19634)
Dell Digital Delivery (x32 Version: 2.7.1000.0)
Dell Edoc Viewer (Version: 1.0.0)
Dell Getting Started Guide (x32 Version: 1.00.0000)
Dell MusicStage (x32 Version: 1.6.225.0)
Dell PhotoStage (x32 Version: 1.5.0.130)
Dell Stage (x32 Version: 1.7.209.0)
Dell Stage Remote (x32 Version: 2.0.0.43)
Dell Support Center (Version: 3.1.5907.16)
Dell Touchpad (Version: 7.1209.101.217)
Dell VideoStage (x32 Version: 1.3.0.2513)
Dell Webcam Central (x32 Version: 2.01.15)
devolo dLAN Cockpit (x32 Version: 3.2.0.0)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95)
dLAN Cockpit (x32 Version: 3.2.28)
dLAN Cockpit (x32 Version: 3.23.12)
Dora's World Adventure (x32 Version: 2.2.0.95)
Driver Whiz (x32 Version: 8.1)
Dxtory version 2.0.122 (x32 Version: 2.0.122)
eBay (x32 Version: 1.4.0)
Elements 9 Organizer (x32 Version: 9.0)
Elements STI Installer (x32 Version: 1.0)
Escape Whisper Valley (TM) (x32 Version: 2.2.0.95)
Farm Frenzy (x32 Version: 2.2.0.95)
FATE (x32 Version: 2.2.0.95)
Final Drive Fury (x32 Version: 2.2.0.95)
Final Drive Nitro (x32 Version: 2.2.0.95)
German Truck Simulator 1.00 (x32 Version: 1.00)
Google Chrome (x32 Version: 29.0.1547.57)
Google Earth (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.21.153)
High-Definition Video Playback (x32 Version: 7.3.10000.0.0)
Iminent (x32 Version: 5.48.42.0)
Intel PROSet Wireless
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 8.0.1.1399)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.1.0.0096)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 2.0.0.0113)
Intel(R) Rapid Start Technology (x32 Version: 1.0.0.1024)
Intel(R) Rapid Storage Technology (x32 Version: 11.1.0.1006)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.4.220)
Intel® PROSet/Wireless WiFi-Software (Version: 15.01.1000.0927)
Intel® Trusted Connect Service Client (Version: 1.23.219.2)
iTunes (Version: 11.0.3.42)
Java 7 Update 25 (64-bit) (Version: 7.0.250)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Jewel Quest (x32 Version: 2.2.0.95)
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.95)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
ldPainter 1.5.5 (Version: 1.5.5)
LogMeIn Hamachi (x32 Version: 2.1.0.374)
Luxor (x32 Version: 2.2.0.95)
McAfee Internet Security (x32 Version: 11.6.511)
McAfee Online Backup (Version: 1.16.4.0)
McAfee Online Backup (x32)
McAfee Security Scan Plus (x32 Version: 3.0.318.3)
McAfee Virtual Technician (x32 Version: 7.1.0.2483)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
Namco All-Stars PAC-MAN (x32 Version: 2.2.0.95)
Nero 10 Movie ThemePack Basic (x32 Version: 10.2.10200.0.0)
Nero Control Center 10 (x32 Version: 10.6.12800.0.8)
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.2.10800)
Nero Core Components 10 (x32 Version: 2.0.20500.9.16)
Nero Update (x32 Version: 1.0.0018)
Norton PC Checkup (x32 Version: 3.0.2.122.0)
NVIDIA 3D Vision Controller-Treiber 295.73 (Version: 295.73)
NVIDIA 3D Vision Treiber 296.37 (Version: 296.37)
NVIDIA Grafiktreiber 296.37 (Version: 296.37)
NVIDIA HD-Audiotreiber 1.3.12.0 (Version: 1.3.12.0)
NVIDIA Install Application (Version: 2.1002.62.312)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.9637)
NVIDIA Systemsteuerung 296.37 (Version: 296.37)
NVIDIA Update 1.7.12 (Version: 1.7.12)
NVIDIA Update Components (Version: 1.7.12)
OKI Setup Utility for MC160n (x32 Version: 1.04.0000)
Penguins! (x32 Version: 2.2.0.95)
PiccShare (HKCU Version: 2.0)
Plantronics® GameCom 780 Software for Dolby® Headphone (x32 Version: 1.00.0001)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95)
Polar Bowler (x32 Version: 2.2.0.95)
Polar Golfer (x32 Version: 2.2.0.95)
Quickset64 (Version: 11.1.17)
Samantha Swift (x32 Version: 2.2.0.95)
Secunia PSI (3.0.0.7011) (x32 Version: 3.0.0.7011)
SeeSimilar (x32 Version: 1.0.0.5)
Shared C Run-time for x64 (Version: 10.0.0)
Skype™ 6.6 (x32 Version: 6.6.106)
SmartSound Quicktracks for Premiere Elements 9.0 (x32 Version: 3.12.3090)
SyncUP (x32 Version: 1.12.11500.11.105)
SyncUP (x32 Version: 10.2.16500)
TeamSpeak 3 Client (Version: 3.0.11.1)
TeamViewer 8 (x32 Version: 8.0.17396)
Telekom Internet Manager (x32 Version: 11.301.05.09.748)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (Version: 2.1.23.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update Installer for WildTangent Games App (x32)
Wedding Dash - Ready, Aim, Love! (x32 Version: 2.2.0.95)
WildTangent Games App (Dell Games) (x32 Version: 4.0.5.2)
WildTangent-Spiele (x32 Version: 1.0.2.5)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3508.1109)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3508.1109)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.20 (64-bit) (Version: 4.20.0)
Zinio Reader 4 (x32 Version: 4.2.4164)
Zuma Deluxe (x32 Version: 2.2.0.95)
==================== Restore Points =========================
13-08-2013 07:44:42 Removed RegHunter
13-08-2013 11:15:23 Installed Aeria Ignite
14-08-2013 07:24:50 Removed Java(TM) 6 Update 31 (64-bit)
14-08-2013 07:31:46 Installed Adobe Flash Player 11 ActiveX.
14-08-2013 07:34:26 Removed Java 7 Update 25
14-08-2013 07:42:41 Installed Java 7 Update 25 (64-bit)
14-08-2013 07:51:56 Installed Adobe Flash Player 11 Plugin.
14-08-2013 15:33:05 Tweaking.com - Windows Repair
14-08-2013 15:33:31 Tweaking.com - Windows Repair
14-08-2013 19:06:26 Tweaking.com - Windows Repair
18-08-2013 17:43:56 Windows-Sicherung
23-08-2013 18:05:15 Installed Java(TM) 6 Update 31 (64-bit)
23-08-2013 18:10:37 Removed Java 7 Update 25 (64-bit)
23-08-2013 18:11:30 Installed Java 7 Update 25 (64-bit)
23-08-2013 18:19:45 Installed Java 7 Update 25
25-08-2013 17:00:10 Windows-Sicherung
==================== Hosts content: ==========================
2009-07-14 04:34 - 2013-08-14 21:13 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {05596622-83A8-4AED-8E8B-820F505F8955} - System32\Tasks\Driver Whiz-RTMRules => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2012-11-12] (PC Drivers Headquarters)
Task: {0BA067D9-2648-4957-BE66-31DF45F70513} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-14] (Adobe Systems Incorporated)
Task: {1754FCEC-50D6-468E-B6A4-5DF65ACFCB1A} - System32\Tasks\Advanced System Protector_startup => C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe No File
Task: {21BFBF47-579C-4AF1-BE23-83E6DCF4A1A7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-11] (Google Inc.)
Task: {2AA0F9AA-A6E1-4234-85BD-F037FCD60A95} - System32\Tasks\Browser Manager => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation)
Task: {2ADE6BE8-2517-44DA-8E26-F013C9BE50A9} - \SpyHunter4Startup No Task File
Task: {393315DA-1416-40F8-8884-4D25ACE00326} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {3C1ADAEE-3336-4D7B-8945-3817359B0728} - System32\Tasks\{D7F095E5-D08C-417B-9138-F1B60BDF9961} => C:\Windows\System32\java.exe [2013-08-23] (Oracle Corporation)
Task: {3C8E8BD4-A20B-4B9C-9CDB-A180921F7ECE} - System32\Tasks\Driver Detective-RTMUpdater => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2012-11-12] (PC Drivers Headquarters)
Task: {575B21E8-5D72-4904-9B63-869063451D68} - System32\Tasks\PC Checkup 3 Weekly Scan => C:\Program Files (x86)\Norton PC Checkup 3.0\NLAppLauncher.exe [2012-07-17] (Symantec Corporation)
Task: {5B1328E1-7D1C-400F-9C1B-B84C60BD0A0B} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation)
Task: {6F71A867-EDE2-420C-BF6F-66A125C2A5D6} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-21] (Microsoft Corporation)
Task: {7206D9F8-864B-401F-8A64-7AA8F793EF91} - System32\Tasks\Driver Detective-RTMScan => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2012-11-12] (PC Drivers Headquarters)
Task: {72813D0F-418F-4F40-89A4-20202465C05A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-11] (Google Inc.)
Task: {72894989-0776-4934-9248-8858C46BDD68} - System32\Tasks\FTdownloader V4.0-updater => C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-updater.exe No File
Task: {79D46503-8463-4C79-96B7-EBB427D9F20E} - System32\Tasks\Driver Whiz-RTMUpdater => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2012-11-12] (PC Drivers Headquarters)
Task: {8BAF83FF-3F84-46FE-8843-5EFA7FDBC828} - \RegClean Pro_UPDATES No Task File
Task: {989A710A-94A7-46B5-82E5-9FBC59074891} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {A9D0CFE3-A9EE-4484-B9A3-F90B0347F3F7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {C01CE44C-B492-48A0-8760-6C6E60580C32} - System32\Tasks\FTdownloader V4.0-enabler => C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-enabler.exe No File
Task: {C4A8DE08-1CF5-4304-B5DD-BD37644AE3AF} - System32\Tasks\Intel® Rapid Start Technology Manager => C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe [2012-03-28] (Intel)
Task: {CC4C341A-4599-47AD-A80A-F78E65B0FEF3} - System32\Tasks\{FC955929-46CA-465E-877B-EBF3BD92097F} => C:\Windows\System32\java.exe [2013-08-23] (Oracle Corporation)
Task: {D04AF408-D8C0-4BDF-8B39-483FBEE79E5E} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe No File
Task: {D853F765-4BFF-4892-A80B-69E459C9CD44} - \RegClean Pro_DEFAULT No Task File
Task: {D8A24848-58E9-4F4D-B15C-F16419048B89} - System32\Tasks\Driver Detective-RTMRules => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2012-11-12] (PC Drivers Headquarters)
Task: {DA020825-C66D-4563-BB20-92C89E5BBEB6} - System32\Tasks\EPUpdater => C:\Users\Moritz\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe No File
Task: {E7B37535-FC07-4795-8257-AA6905D9042B} - System32\Tasks\FTdownloader V4.0-codedownloader => C:\Program Files (x86)\FTdownloader V4.0\FTdownloader V4.0-codedownloader.exe No File
Task: {EAB43E2C-12D2-4980-914D-AAF21EDCC554} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {EEA40B23-817A-4D58-9B8F-070BD95720CD} - System32\Tasks\Driver Whiz-RTMScan => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe [2012-11-12] (PC Drivers Headquarters)
Task: {FCC653CE-2C37-4F77-9049-7DE8FC923546} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {FEF0C41D-4023-4E3C-81A4-ADF3397083A9} - System32\Tasks\IntelBootstrapCCDashServer => C:\Program Files\Intel\WiFi\bin\CCDashServer.exe [2012-03-30] (Intel® Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Driver Whiz-RTMRules.job => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe
Task: C:\Windows\Tasks\Driver Whiz-RTMScan.job => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe
Task: C:\Windows\Tasks\Driver Whiz-RTMUpdater.job => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (08/26/2013 07:56:02 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: In den Microsoft Windows HTTP-Diensten ist ein interner Fehler aufgetreten.
Error: (08/26/2013 07:51:43 PM) (Source: DataSafe.exe) (User: )
Description: Recovery Environment incorrect, file 'Y:\dell\Image\Factory.wim' missing
Error: (08/26/2013 07:51:34 PM) (Source: DataSafe.exe) (User: )
Description: Recovery Environment incorrect, file 'Y:\dell\Image\Factory.wim' missing
Error: (08/26/2013 07:48:05 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {50c576d4-1336-4df0-82f2-1d2fbb71d330}
Error: (08/26/2013 07:45:58 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/25/2013 07:08:44 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: In den Microsoft Windows HTTP-Diensten ist ein interner Fehler aufgetreten.
Error: (08/25/2013 07:01:14 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {eaff0b94-471d-4d39-a1b5-96f3628aa0d1}
Error: (08/25/2013 06:58:34 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/25/2013 00:26:43 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: In den Microsoft Windows HTTP-Diensten ist ein interner Fehler aufgetreten.
Error: (08/25/2013 00:18:50 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {7bf915e2-e0e6-4a75-9071-979c8fb15315}
System errors:
=============
Error: (08/26/2013 07:48:12 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Dell Digital Delivery Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (08/26/2013 07:48:07 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde mit folgendem Fehler beendet:
%%-2147012892
Error: (08/26/2013 07:48:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (08/26/2013 07:48:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (08/26/2013 07:45:51 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Net.Tcp Listener Adapter" ist vom Dienst "Net.Tcp Port Sharing Service" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (08/26/2013 07:45:51 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Net.Pipe Listener Adapter" ist von folgendem Dienst abhängig: was. Dieser Dienst ist eventuell nicht installiert.
Error: (08/26/2013 07:45:51 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Net.Msmq Listener Adapter" ist von folgendem Dienst abhängig: msmq. Dieser Dienst ist eventuell nicht installiert.
Error: (08/25/2013 07:02:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde mit folgendem Fehler beendet:
%%-2147012892
Error: (08/25/2013 07:01:15 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (08/25/2013 07:01:15 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Microsoft Office Sessions:
=========================
Error: (08/26/2013 07:56:02 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: In den Microsoft Windows HTTP-Diensten ist ein interner Fehler aufgetreten.
Error: (08/26/2013 07:51:43 PM) (Source: DataSafe.exe)(User: )
Description: Recovery Environment incorrect, file 'Y:\dell\Image\Factory.wim' missing
Error: (08/26/2013 07:51:34 PM) (Source: DataSafe.exe)(User: )
Description: Recovery Environment incorrect, file 'Y:\dell\Image\Factory.wim' missing
Error: (08/26/2013 07:48:05 PM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {50c576d4-1336-4df0-82f2-1d2fbb71d330}
Error: (08/26/2013 07:45:58 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/25/2013 07:08:44 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: In den Microsoft Windows HTTP-Diensten ist ein interner Fehler aufgetreten.
Error: (08/25/2013 07:01:14 PM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {eaff0b94-471d-4d39-a1b5-96f3628aa0d1}
Error: (08/25/2013 06:58:34 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/25/2013 00:26:43 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: In den Microsoft Windows HTTP-Diensten ist ein interner Fehler aufgetreten.
Error: (08/25/2013 00:18:50 PM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {7bf915e2-e0e6-4a75-9071-979c8fb15315}
CodeIntegrity Errors:
===================================
Date: 2013-07-15 11:43:23.396
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\SET8CF4.tmp" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-15 11:43:23.395
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\SET8CF4.tmp" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 28%
Total physical RAM: 8131.37 MB
Available physical RAM: 5779.2 MB
Total Pagefile: 16260.92 MB
Available Pagefile: 12367.69 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:678.78 GB) (Free:596.11 GB) NTFS
Drive d: (DATAPART1) (Fixed) (Total:698.63 GB) (Free:491.65 GB) NTFS
Drive e: (Plantronics GameCom 780) (CDROM) (Total:0.04 GB) (Free:0 GB) UDF
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 699 GB) (Disk ID: 14A9202A)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=679 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: 14A92030)
Partition 1: (Not Active) - (Size=699 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 8 GB) (Disk ID: 14A920CB)
Partition 1: (Not Active) - (Size=8 GB) - (Type=84)
==================== End Of Log ============================
|
FRST 32-Bit | FRST 64-Bit
Farbar Service Scanner 