Trojaner-Board - TR/Downloader.Gen2

Upsiii *rotwerd* da war dann wohl ein e zu viel :lach::lach:

Anweisung erfolgreich ausgeführt:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013

Ran by Enqel (administrator) on ENQEL-PC on 09-10-2013 00:01:14

Running from C:\Users\Enqel\Downloads

Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(Windows Net) C:\Users\Enqel\AppData\Roaming\Windows Net Data\net.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

(WebConnect) C:\Program Files (x86)\WebConnect\updateWebConnect.exe

(WebConnect) C:\Program Files (x86)\WebConnect\bin\utilWebConnect.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(IncrediMail, Ltd.) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-24] (CANON INC.)

HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)

HKCU\...\Run: [IncrediMail] - C:\Program Files (x86)\IncrediMail\bin\IncMail.exe [444840 2013-09-30] (IncrediMail, Ltd.)

HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

HKCU\...\Run: [AppleIEDAV] - C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe

HKCU\...\Run: [EA Core] - "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent

MountPoints2: {5ea53601-154f-11e3-8744-00241d0b681e} - E:\LaunchU3.exe -a

MountPoints2: {dfe9b47a-2f6b-11e3-9c58-00241d0b681e} - D:\Autorun.exe

MountPoints2: {e5e8a616-bf42-11e2-b11f-806e6f6e6963} - D:\CD_Start.exe

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [681032 2013-09-30] (Avira Operations GmbH & Co. KG)

AppInit_DLLs:         [0 ] ()

AppInit_DLLs-x32:     [0 ] ()

Startup: C:\Users\Enqel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk

ShortcutTarget: net.lnk -> C:\Users\Enqel\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=a1a753c0-2f19-6318-8cf8-1f2f64ace6b1&searchtype=ds&q={searchTerms}&installDate=07/10/2013

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF77D56F45353CE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=a1a753c0-2f19-6318-8cf8-1f2f64ace6b1&searchtype=ds&q={searchTerms}&installDate=07/10/2013

SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2414} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=135&systemid=414&v=n8822-91&apn_uid=3024493021854457&apn_dtid=BND414&o=APN10649&apn_ptnrs=AGA&q={searchTerms}

SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=a1a753c0-2f19-6318-8cf8-1f2f64ace6b1&searchtype=ds&q={searchTerms}&installDate=07/10/2013

SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=a1a753c0-2f19-6318-8cf8-1f2f64ace6b1&searchtype=ds&q={searchTerms}&installDate=07/10/2013

SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2414} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=135&systemid=414&v=n8822-91&apn_uid=3024493021854457&apn_dtid=BND414&o=APN10649&apn_ptnrs=AGA&q={searchTerms}

SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=a1a753c0-2f19-6318-8cf8-1f2f64ace6b1&searchtype=ds&q={searchTerms}&installDate=07/10/2013

SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=a1a753c0-2f19-6318-8cf8-1f2f64ace6b1&searchtype=ds&q={searchTerms}&installDate=07/10/2013

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus

SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.dalesearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=707900241D0B681E&affID=124844&tsp=5025

SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2414} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=135&systemid=414&v=n8822-91&apn_uid=3024493021854457&apn_dtid=BND414&o=APN10649&apn_ptnrs=AGA&q={searchTerms}

BHO: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -  No File

BHO-x32: WebConnect - {2316c625-b487-4410-a1a5-ff040b65245f} - C:\Program Files (x86)\WebConnect\WebConnectbho.dll (Web Connect)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -  No File

Toolbar: HKLM -  No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKLM-x32 -  No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File

Toolbar: HKCU -  No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

Chrome: 

=======

CHR Extension: (Google Docs) - C:\Users\Enqel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0

CHR Extension: (Google Drive) - C:\Users\Enqel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (YouTube) - C:\Users\Enqel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Enqel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Chrome In-App Payments service) - C:\Users\Enqel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0

CHR Extension: (Gmail) - C:\Users\Enqel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

CHR HKLM-x32\...\Chrome\Extension: [ieakfmpjhljbpbfpldjkddkjmmgjmgon] - C:\Program Files (x86)\WebConnect\ieakfmpjhljbpbfpldjkddkjmmgjmgon.crx

CHR HKLM-x32\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\Enqel\AppData\Local\Wajam\Chrome\wajam.crx

CHR HKLM-x32\...\Chrome\Extension: [kiplfnciaokpcennlkldkdaeaaomamof] - C:\Users\Enqel\AppData\Local\Torch\Plugins\TorchPlugin.crx

CHR HKLM-x32\...\Chrome\Extension: [pialekdjmfmckiccfkgbbgphficjdekh] - C:\Users\Enqel\AppData\Roaming\BabSolution\CR\dalesearch.crx

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440392 2013-09-30] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440392 2013-09-30] (Avira Operations GmbH & Co. KG)

S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-09-30] (Avira Operations GmbH & Co. KG)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()

R2 Update WebConnect; C:\Program Files (x86)\WebConnect\updateWebConnect.exe [65320 2013-10-04] (WebConnect)

R2 Util WebConnect; C:\Program Files (x86)\WebConnect\bin\utilWebConnect.exe [65320 2013-10-04] (WebConnect)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105856 2013-09-30] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-09-30] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-09-30] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [83160 2013-09-30] (Avira Operations GmbH & Co. KG)

R3 e1kexpress; C:\Windows\System32\DRIVERS\e1k60x64.sys [220672 2009-06-10] (Intel Corporation)

R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [x]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]

S3 tsusbhub; system32\drivers\tsusbhub.sys [x]

S3 VGPU; System32\drivers\rdvgkmd.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-10-09 00:01 - 2013-10-09 00:01 - 00000000 ____D C:\FRST

2013-10-08 23:59 - 2013-10-08 23:59 - 01954124 _____ (Farbar) C:\Users\Enqel\Downloads\FRST64.exe

2013-10-08 22:17 - 2013-10-08 22:17 - 00010350 _____ C:\Users\Enqel\Desktop\Ereignisse.txt

2013-10-08 19:38 - 2013-10-08 19:38 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Avira

2013-10-08 19:25 - 2013-10-08 19:25 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-10-08 19:25 - 2013-10-08 19:25 - 00000000 ____D C:\ProgramData\Avira

2013-10-08 19:25 - 2013-10-08 19:25 - 00000000 ____D C:\Program Files (x86)\Avira

2013-10-08 19:25 - 2013-09-30 11:01 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-10-08 19:25 - 2013-09-30 11:01 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-10-08 19:25 - 2013-09-30 11:01 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-10-08 19:25 - 2013-09-30 11:01 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-10-08 19:23 - 2013-10-08 19:24 - 122946048 _____ C:\Users\Enqel\Downloads\avira14_free_antivirus_de.exe

2013-10-08 19:19 - 2013-10-08 19:19 - 00564076 _____ C:\Users\Enqel\Downloads\RatingBuster-1.6.7.zip

2013-10-08 19:18 - 2013-10-08 19:18 - 00700981 _____ C:\Users\Enqel\Downloads\TitanPanel-5.1.24.50400.zip

2013-10-08 17:50 - 2013-10-09 00:01 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-10-08 17:50 - 2013-10-08 23:01 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-10-08 17:50 - 2013-10-08 22:56 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-10-08 17:50 - 2013-10-08 22:56 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-10-08 17:50 - 2013-10-08 17:50 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-10-07 21:06 - 2013-10-07 21:06 - 00000000 ____D C:\ProgramData\EA Core

2013-10-07 21:02 - 2013-10-07 21:03 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Origin

2013-10-07 21:01 - 2013-10-08 17:14 - 00000000 ____D C:\ProgramData\Origin

2013-10-07 21:00 - 2013-10-07 21:00 - 00000554 _____ C:\Windows\KB893803v2.log

2013-10-07 20:37 - 2013-10-07 21:01 - 00000000 ____D C:\ProgramData\Electronic Arts

2013-10-07 20:11 - 2013-10-07 20:11 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE

2013-10-07 20:10 - 2013-10-07 20:10 - 00000196 _____ C:\Windows\DirectX.log

2013-10-07 20:10 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll

2013-10-07 20:10 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll

2013-10-07 19:58 - 2013-10-08 17:13 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-10-07 19:54 - 2013-10-07 19:57 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\DAEMON Tools Lite

2013-10-07 19:54 - 2013-10-07 19:57 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite

2013-10-07 19:53 - 2013-10-07 19:54 - 13901152 _____ (Disc Soft Ltd) C:\Users\Enqel\Downloads\DTLite4471-0333.exe

2013-10-07 19:27 - 2013-10-07 19:27 - 00000000 ____D C:\Users\Enqel\Desktop\mi

2013-10-05 23:13 - 2013-10-05 23:13 - 00000000 ____D C:\ProgramData\Protexis

2013-10-05 16:27 - 2013-10-05 16:27 - 00000000 ____D C:\Users\Enqel\AppData\Local\Blizzard Entertainment

2013-10-05 13:18 - 2013-10-05 13:18 - 00003400 _____ C:\Windows\System32\Tasks\{936088AA-2254-48E5-8F31-3BFEBD3DC00A}

2013-10-05 13:16 - 2013-10-05 13:16 - 00003412 _____ C:\Windows\System32\Tasks\{DBDF3408-E571-4AAA-A8A0-F4B849415196}

2013-10-05 13:15 - 2013-10-07 22:06 - 00000000 ____D C:\Users\Enqel\Documents\Eigene PSP-Dateien

2013-10-05 13:06 - 2013-10-05 13:07 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Repplop

2013-10-04 21:18 - 2013-10-07 19:06 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-10-04 21:15 - 2013-10-08 12:51 - 00000000 ____D C:\Program Files (x86)\QuickTime

2013-10-04 19:02 - 2013-10-08 12:48 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Systweak

2013-10-04 19:02 - 2013-10-05 01:01 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\BabSolution

2013-10-04 19:01 - 2013-06-19 17:27 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe

2013-10-04 19:00 - 2013-10-04 19:00 - 00168760 _____ (Firseria  ) C:\Users\Enqel\Downloads\iTunes.exe

2013-10-04 17:58 - 2013-10-04 17:59 - 03682968 _____ (                                                            ) C:\Users\Enqel\Downloads\UsenetNLSetup[84316EC1-05EA-3A2F-0C2D146F89F3F202].exe

2013-10-04 17:58 - 2013-10-04 17:58 - 03682968 _____ (                                                            ) C:\Users\Enqel\Downloads\UsenetNLSetup[84313CFA-0913-4A3C-634901DCF9861D37].exe

2013-10-03 18:51 - 2013-10-03 18:54 - 00000000 ____D C:\ProgramData\Protexis64

2013-10-03 18:51 - 2013-10-03 18:51 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Corel

2013-10-03 18:47 - 2013-10-03 18:47 - 249069560 _____ (Acresso Software Inc.) C:\Users\Enqel\Downloads\PSPX6_TBYB30.exe

2013-10-03 15:34 - 2013-10-03 15:34 - 390585629 _____ C:\Windows\MEMORY.DMP

2013-10-03 15:34 - 2013-10-03 15:34 - 01262744 _____ C:\Windows\Minidump\100313-24882-01.dmp

2013-10-01 23:22 - 2013-10-01 23:22 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Downloaded Installations

2013-10-01 23:21 - 2013-10-01 23:21 - 01453920 _____ (Solid State Networks) C:\Users\Enqel\Downloads\nitro_pdf_pro_64_dlm.exe

2013-10-01 23:07 - 2013-10-01 23:08 - 39469712 _____ C:\Users\Enqel\Downloads\PdfEditor_64bit.exe

2013-10-01 22:51 - 2013-10-01 22:51 - 00000000 ____D C:\Users\Enqel\AppData\Local\PDF24

2013-10-01 22:49 - 2013-10-01 22:49 - 15911976 _____ (Geek Software GmbH                                          ) C:\Users\Enqel\Downloads\pdf24-creator-5.7.0.exe

2013-10-01 21:01 - 2013-10-01 21:01 - 00014200 _____ C:\Users\Enqel\Downloads\miscellaneous_geschirrspuler-nordrhein-westfalen_nordrhein-westfalen-nw.kml

2013-09-30 17:35 - 2013-09-30 17:35 - 00000000 ____D C:\ProgramData\Photo Notifier and Animation Creator

2013-09-30 17:35 - 2013-09-30 17:35 - 00000000 ____D C:\Program Files (x86)\Photo Notifier and Animation Creator

2013-09-30 17:34 - 2013-09-30 18:06 - 00000000 ____D C:\Users\Enqel\AppData\Local\IM

2013-09-30 17:34 - 2013-09-30 17:35 - 00000000 ____D C:\ProgramData\IM

2013-09-30 17:34 - 2013-09-30 17:34 - 00000000 ____D C:\ProgramData\IncrediMail

2013-09-30 17:34 - 2013-09-30 17:34 - 00000000 ____D C:\Program Files (x86)\IncrediMail

2013-09-29 18:09 - 2013-09-29 18:09 - 00000400 _____ C:\Windows\ODBC.INI

2013-09-29 18:06 - 2013-09-29 18:06 - 00000000 ____D C:\Windows\PCHEALTH

2013-09-26 20:54 - 2013-09-26 20:54 - 00000000 _____ C:\end

2013-09-25 23:23 - 2013-09-25 23:24 - 01269936 _____ C:\Windows\Minidump\092513-73648-01.dmp

2013-09-24 18:27 - 2013-10-08 17:27 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Apple Computer

2013-09-24 18:27 - 2013-10-04 21:48 - 00000000 ____D C:\Users\Enqel\AppData\Local\Apple Computer

2013-09-24 18:26 - 2013-09-24 18:26 - 00000000 ____D C:\ProgramData\Apple Computer

2013-09-24 18:11 - 2013-10-04 21:31 - 00000000 ____D C:\Users\Enqel\AppData\Local\Apple

2013-09-24 18:10 - 2013-09-24 18:11 - 00000000 ____D C:\ProgramData\Apple

2013-09-23 20:16 - 2013-09-23 20:16 - 01653360 _____ C:\Windows\Minidump\092313-18610-01.dmp

2013-09-23 14:26 - 2013-09-23 14:26 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\File Scout

2013-09-21 21:50 - 2013-09-21 21:50 - 01653808 _____ C:\Windows\Minidump\092113-32588-01.dmp

2013-09-21 02:19 - 2013-09-21 02:19 - 00000000 ____D C:\Users\Enqel\.appwork

2013-09-21 00:43 - 2013-10-04 14:32 - 00000000 ____D C:\Program Files (x86)\WebConnect

2013-09-21 00:43 - 2013-09-21 02:20 - 00000000 ____D C:\Users\Enqel\AppData\Local\JDownloader v2.0

2013-09-19 18:02 - 2013-09-29 20:34 - 00000000 ____D C:\Users\Enqel\AppData\Local\Canon Easy-PhotoPrint EX

2013-09-19 18:01 - 2013-09-19 18:01 - 00000000 ___HD C:\ProgramData\CanonIJEPPEX

2013-09-19 17:47 - 2013-09-19 17:47 - 00000000 ____D C:\Users\Enqel\AppData\Local\Wajam

2013-09-12 15:42 - 2013-09-12 15:42 - 00000000 ___HD C:\ProgramData\CanonIJSolutionMenu

2013-09-12 15:29 - 2013-09-12 15:29 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\CD-LabelPrint

2013-09-12 15:26 - 2013-10-03 20:52 - 00000000 ____D C:\ProgramData\CanonIJPLM

2013-09-12 15:26 - 2013-09-12 15:26 - 00000000 ___HD C:\ProgramData\CanonIJMyPrinter

2013-09-12 15:17 - 2013-09-12 15:17 - 00000000 ____D C:\Program Files\Canon

2013-09-12 15:14 - 2013-09-12 15:26 - 00000000 ____D C:\Program Files (x86)\Canon

2013-09-12 01:43 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-12 01:43 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-12 01:43 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-12 01:43 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-12 01:43 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-12 01:43 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-12 01:43 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-12 01:43 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-12 01:43 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-12 01:43 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-12 01:43 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-12 01:43 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-12 01:43 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-12 01:43 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-12 01:43 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-12 01:43 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-12 01:43 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-12 01:43 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-12 01:43 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-12 01:43 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-12 01:43 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-12 01:43 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-12 01:43 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-12 01:42 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-12 01:42 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-12 01:42 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-12 01:42 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-12 01:42 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-12 01:42 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-12 01:42 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-12 01:42 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-11 18:47 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-09-11 18:47 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-09-11 18:47 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-09-11 18:47 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2013-09-11 18:47 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-09-11 18:47 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2013-09-11 18:47 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-09-11 18:47 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2013-09-11 18:47 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-09-11 18:47 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-09-11 18:47 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-09-11 18:47 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-09-11 18:47 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-09-11 18:47 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-09-11 18:47 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-09-11 18:47 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-09-11 18:47 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-09-11 18:46 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-11 18:46 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-09-11 18:46 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-09-11 18:46 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-09-11 18:46 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-11 18:46 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-09-11 18:46 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-09-11 18:46 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-09-11 18:46 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
 

==================== One Month Modified Files and Folders =======
 

2013-10-09 00:01 - 2013-10-09 00:01 - 00000000 ____D C:\FRST

2013-10-09 00:01 - 2013-10-08 17:50 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-10-08 23:59 - 2013-10-08 23:59 - 01954124 _____ (Farbar) C:\Users\Enqel\Downloads\FRST64.exe

2013-10-08 23:20 - 2013-08-18 18:12 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-10-08 23:01 - 2013-10-08 17:50 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-10-08 22:56 - 2013-10-08 17:50 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-10-08 22:56 - 2013-10-08 17:50 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-10-08 22:17 - 2013-10-08 22:17 - 00010350 _____ C:\Users\Enqel\Desktop\Ereignisse.txt

2013-10-08 20:36 - 2013-05-18 00:45 - 01940497 _____ C:\Windows\WindowsUpdate.log

2013-10-08 20:21 - 2013-08-18 18:12 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-10-08 20:21 - 2013-08-18 18:12 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-10-08 20:21 - 2013-08-18 18:12 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-10-08 19:43 - 2009-07-14 06:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-10-08 19:43 - 2009-07-14 06:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-10-08 19:38 - 2013-10-08 19:38 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Avira

2013-10-08 19:31 - 2013-05-19 04:22 - 00043840 _____ C:\Windows\PFRO.log

2013-10-08 19:31 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-10-08 19:31 - 2009-07-14 06:51 - 00060607 _____ C:\Windows\setupact.log

2013-10-08 19:29 - 2013-09-05 00:23 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Ihilon

2013-10-08 19:25 - 2013-10-08 19:25 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-10-08 19:25 - 2013-10-08 19:25 - 00000000 ____D C:\ProgramData\Avira

2013-10-08 19:25 - 2013-10-08 19:25 - 00000000 ____D C:\Program Files (x86)\Avira

2013-10-08 19:24 - 2013-10-08 19:23 - 122946048 _____ C:\Users\Enqel\Downloads\avira14_free_antivirus_de.exe

2013-10-08 19:19 - 2013-10-08 19:19 - 00564076 _____ C:\Users\Enqel\Downloads\RatingBuster-1.6.7.zip

2013-10-08 19:18 - 2013-10-08 19:18 - 00700981 _____ C:\Users\Enqel\Downloads\TitanPanel-5.1.24.50400.zip

2013-10-08 18:52 - 2013-09-05 00:23 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\tor

2013-10-08 17:50 - 2013-10-08 17:50 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-10-08 17:50 - 2013-05-18 01:42 - 00000000 ____D C:\Users\Enqel\AppData\Local\Google

2013-10-08 17:50 - 2013-05-18 01:42 - 00000000 ____D C:\Program Files (x86)\Google

2013-10-08 17:50 - 2013-05-18 01:41 - 00000000 ____D C:\Users\Enqel\AppData\Local\Deployment

2013-10-08 17:45 - 2013-09-04 22:55 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\UseNeXT

2013-10-08 17:27 - 2013-09-24 18:27 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Apple Computer

2013-10-08 17:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF

2013-10-08 17:14 - 2013-10-07 21:01 - 00000000 ____D C:\ProgramData\Origin

2013-10-08 17:13 - 2013-10-07 19:58 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-10-08 12:51 - 2013-10-04 21:15 - 00000000 ____D C:\Program Files (x86)\QuickTime

2013-10-08 12:48 - 2013-10-04 19:02 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Systweak

2013-10-07 22:06 - 2013-10-05 13:15 - 00000000 ____D C:\Users\Enqel\Documents\Eigene PSP-Dateien

2013-10-07 21:06 - 2013-10-07 21:06 - 00000000 ____D C:\ProgramData\EA Core

2013-10-07 21:03 - 2013-10-07 21:02 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Origin

2013-10-07 21:01 - 2013-10-07 20:37 - 00000000 ____D C:\ProgramData\Electronic Arts

2013-10-07 21:00 - 2013-10-07 21:00 - 00000554 _____ C:\Windows\KB893803v2.log

2013-10-07 20:11 - 2013-10-07 20:11 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE

2013-10-07 20:10 - 2013-10-07 20:10 - 00000196 _____ C:\Windows\DirectX.log

2013-10-07 19:58 - 2009-07-14 19:58 - 00653928 _____ C:\Windows\system32\perfh007.dat

2013-10-07 19:58 - 2009-07-14 19:58 - 00129800 _____ C:\Windows\system32\perfc007.dat

2013-10-07 19:58 - 2009-07-14 07:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI

2013-10-07 19:57 - 2013-10-07 19:54 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\DAEMON Tools Lite

2013-10-07 19:57 - 2013-10-07 19:54 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite

2013-10-07 19:54 - 2013-10-07 19:53 - 13901152 _____ (Disc Soft Ltd) C:\Users\Enqel\Downloads\DTLite4471-0333.exe

2013-10-07 19:54 - 2013-08-31 04:43 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\OpenCandy

2013-10-07 19:27 - 2013-10-07 19:27 - 00000000 ____D C:\Users\Enqel\Desktop\mi

2013-10-07 19:16 - 2013-05-18 01:28 - 00000000 ____D C:\Windows.old.000

2013-10-07 19:07 - 2013-08-19 08:13 - 00000000 ____D C:\Program Files (x86)\MyPC Backup

2013-10-07 19:07 - 2013-05-18 01:10 - 00000000 ___RD C:\Users\Enqel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-10-07 19:06 - 2013-10-04 21:18 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-10-07 18:46 - 2013-09-01 19:19 - 00000000 ____D C:\Windows\system32\appmgmt

2013-10-05 23:13 - 2013-10-05 23:13 - 00000000 ____D C:\ProgramData\Protexis

2013-10-05 16:27 - 2013-10-05 16:27 - 00000000 ____D C:\Users\Enqel\AppData\Local\Blizzard Entertainment

2013-10-05 15:27 - 2013-05-18 13:17 - 00000000 ____D C:\Program Files (x86)\World of Warcraft

2013-10-05 13:18 - 2013-10-05 13:18 - 00003400 _____ C:\Windows\System32\Tasks\{936088AA-2254-48E5-8F31-3BFEBD3DC00A}

2013-10-05 13:16 - 2013-10-05 13:16 - 00003412 _____ C:\Windows\System32\Tasks\{DBDF3408-E571-4AAA-A8A0-F4B849415196}

2013-10-05 13:15 - 2013-08-06 21:34 - 00000000 ____D C:\Program Files (x86)\Jasc Software Inc

2013-10-05 13:07 - 2013-10-05 13:06 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Repplop

2013-10-05 01:01 - 2013-10-04 19:02 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\BabSolution

2013-10-04 21:48 - 2013-09-24 18:27 - 00000000 ____D C:\Users\Enqel\AppData\Local\Apple Computer

2013-10-04 21:43 - 2013-09-05 00:23 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Onytvi

2013-10-04 21:31 - 2013-09-24 18:11 - 00000000 ____D C:\Users\Enqel\AppData\Local\Apple

2013-10-04 19:00 - 2013-10-04 19:00 - 00168760 _____ (Firseria  ) C:\Users\Enqel\Downloads\iTunes.exe

2013-10-04 17:59 - 2013-10-04 17:58 - 03682968 _____ (                                                            ) C:\Users\Enqel\Downloads\UsenetNLSetup[84316EC1-05EA-3A2F-0C2D146F89F3F202].exe

2013-10-04 17:58 - 2013-10-04 17:58 - 03682968 _____ (                                                            ) C:\Users\Enqel\Downloads\UsenetNLSetup[84313CFA-0913-4A3C-634901DCF9861D37].exe

2013-10-04 14:32 - 2013-09-21 00:43 - 00000000 ____D C:\Program Files (x86)\WebConnect

2013-10-03 20:52 - 2013-09-12 15:26 - 00000000 ____D C:\ProgramData\CanonIJPLM

2013-10-03 18:54 - 2013-10-03 18:51 - 00000000 ____D C:\ProgramData\Protexis64

2013-10-03 18:51 - 2013-10-03 18:51 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Corel

2013-10-03 18:47 - 2013-10-03 18:47 - 249069560 _____ (Acresso Software Inc.) C:\Users\Enqel\Downloads\PSPX6_TBYB30.exe

2013-10-03 18:28 - 2013-08-31 04:05 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\DVDVideoSoft

2013-10-03 18:23 - 2013-09-02 14:04 - 00000056 __RSH C:\Windows\SysWOW64\C908648B09.sys

2013-10-03 18:23 - 2013-09-02 13:57 - 00000000 ____D C:\Users\Enqel\Documents\My PSP Files

2013-10-03 18:23 - 2013-08-06 21:34 - 00003558 ___SH C:\Windows\SysWOW64\KGyGaAvL.sys

2013-10-03 15:34 - 2013-10-03 15:34 - 390585629 _____ C:\Windows\MEMORY.DMP

2013-10-03 15:34 - 2013-10-03 15:34 - 01262744 _____ C:\Windows\Minidump\100313-24882-01.dmp

2013-10-03 15:34 - 2013-08-08 15:50 - 00000000 ____D C:\Windows\Minidump

2013-10-01 23:22 - 2013-10-01 23:22 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Downloaded Installations

2013-10-01 23:21 - 2013-10-01 23:21 - 01453920 _____ (Solid State Networks) C:\Users\Enqel\Downloads\nitro_pdf_pro_64_dlm.exe

2013-10-01 23:08 - 2013-10-01 23:07 - 39469712 _____ C:\Users\Enqel\Downloads\PdfEditor_64bit.exe

2013-10-01 22:51 - 2013-10-01 22:51 - 00000000 ____D C:\Users\Enqel\AppData\Local\PDF24

2013-10-01 22:49 - 2013-10-01 22:49 - 15911976 _____ (Geek Software GmbH                                          ) C:\Users\Enqel\Downloads\pdf24-creator-5.7.0.exe

2013-10-01 21:01 - 2013-10-01 21:01 - 00014200 _____ C:\Users\Enqel\Downloads\miscellaneous_geschirrspuler-nordrhein-westfalen_nordrhein-westfalen-nw.kml

2013-09-30 18:06 - 2013-09-30 17:34 - 00000000 ____D C:\Users\Enqel\AppData\Local\IM

2013-09-30 17:35 - 2013-09-30 17:35 - 00000000 ____D C:\ProgramData\Photo Notifier and Animation Creator

2013-09-30 17:35 - 2013-09-30 17:35 - 00000000 ____D C:\Program Files (x86)\Photo Notifier and Animation Creator

2013-09-30 17:35 - 2013-09-30 17:34 - 00000000 ____D C:\ProgramData\IM

2013-09-30 17:34 - 2013-09-30 17:34 - 00000000 ____D C:\ProgramData\IncrediMail

2013-09-30 17:34 - 2013-09-30 17:34 - 00000000 ____D C:\Program Files (x86)\IncrediMail

2013-09-30 14:34 - 2009-07-14 06:45 - 00376144 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-30 11:01 - 2013-10-08 19:25 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-09-30 11:01 - 2013-10-08 19:25 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-09-30 11:01 - 2013-10-08 19:25 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-09-30 11:01 - 2013-10-08 19:25 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-09-29 23:01 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp

2013-09-29 20:34 - 2013-09-19 18:02 - 00000000 ____D C:\Users\Enqel\AppData\Local\Canon Easy-PhotoPrint EX

2013-09-29 20:30 - 2013-05-18 01:41 - 00092608 _____ C:\Users\Enqel\AppData\Local\GDIPFONTCACHEV1.DAT

2013-09-29 18:09 - 2013-09-29 18:09 - 00000400 _____ C:\Windows\ODBC.INI

2013-09-29 18:08 - 2009-07-14 20:18 - 00000000 ____D C:\Windows\ShellNew

2013-09-29 18:08 - 2009-07-14 04:34 - 00000499 _____ C:\Windows\win.ini

2013-09-29 18:07 - 2013-08-30 13:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2013-09-29 18:06 - 2013-09-29 18:06 - 00000000 ____D C:\Windows\PCHEALTH

2013-09-29 18:05 - 2013-05-18 01:10 - 00000000 ____D C:\Users\Enqel\AppData\Local\VirtualStore

2013-09-29 18:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system

2013-09-26 20:54 - 2013-09-26 20:54 - 00000000 _____ C:\end

2013-09-25 23:24 - 2013-09-25 23:23 - 01269936 _____ C:\Windows\Minidump\092513-73648-01.dmp

2013-09-24 18:26 - 2013-09-24 18:26 - 00000000 ____D C:\ProgramData\Apple Computer

2013-09-24 18:11 - 2013-09-24 18:10 - 00000000 ____D C:\ProgramData\Apple

2013-09-23 20:16 - 2013-09-23 20:16 - 01653360 _____ C:\Windows\Minidump\092313-18610-01.dmp

2013-09-23 14:26 - 2013-09-23 14:26 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\File Scout

2013-09-21 21:50 - 2013-09-21 21:50 - 01653808 _____ C:\Windows\Minidump\092113-32588-01.dmp

2013-09-21 02:20 - 2013-09-21 00:43 - 00000000 ____D C:\Users\Enqel\AppData\Local\JDownloader v2.0

2013-09-21 02:19 - 2013-09-21 02:19 - 00000000 ____D C:\Users\Enqel\.appwork

2013-09-21 02:19 - 2013-05-18 01:08 - 00000000 ____D C:\Users\Enqel

2013-09-19 18:01 - 2013-09-19 18:01 - 00000000 ___HD C:\ProgramData\CanonIJEPPEX

2013-09-19 17:47 - 2013-09-19 17:47 - 00000000 ____D C:\Users\Enqel\AppData\Local\Wajam

2013-09-12 16:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-09-12 15:42 - 2013-09-12 15:42 - 00000000 ___HD C:\ProgramData\CanonIJSolutionMenu

2013-09-12 15:29 - 2013-09-12 15:29 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\CD-LabelPrint

2013-09-12 15:26 - 2013-09-12 15:26 - 00000000 ___HD C:\ProgramData\CanonIJMyPrinter

2013-09-12 15:26 - 2013-09-12 15:14 - 00000000 ____D C:\Program Files (x86)\Canon

2013-09-12 15:17 - 2013-09-12 15:17 - 00000000 ____D C:\Program Files\Canon

2013-09-12 14:39 - 2013-05-18 01:10 - 00000000 ___RD C:\Users\Enqel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
 

Some content of TEMP:

====================

C:\Users\Enqel\AppData\Local\Temp\appshat-distribution.exe

C:\Users\Enqel\AppData\Local\Temp\avgnt.exe

C:\Users\Enqel\AppData\Local\Temp\BackupSetup.exe

C:\Users\Enqel\AppData\Local\Temp\bi_cleaner.exe

C:\Users\Enqel\AppData\Local\Temp\EADF4BC.exe

C:\Users\Enqel\AppData\Local\Temp\Installer.exe

C:\Users\Enqel\AppData\Local\Temp\MoviesToolbarSetup_Somoto.exe

C:\Users\Enqel\AppData\Local\Temp\MSETUP4.EXE

C:\Users\Enqel\AppData\Local\Temp\nitro_pro8_x64.exe

C:\Users\Enqel\AppData\Local\Temp\OpenCL.dll

C:\Users\Enqel\AppData\Local\Temp\OptimizerPro.exe

C:\Users\Enqel\AppData\Local\Temp\pricepeep_130001_0101.exe

C:\Users\Enqel\AppData\Local\Temp\proxy_vole6444957357995825916.dll

C:\Users\Enqel\AppData\Local\Temp\RegClean.exe

C:\Users\Enqel\AppData\Local\Temp\setup_fsu_cid.exe

C:\Users\Enqel\AppData\Local\Temp\uninst1.exe

C:\Users\Enqel\AppData\Local\Temp\UninstallEADM.dll

C:\Users\Enqel\AppData\Local\Temp\UpdateCheckerSetup.exe

C:\Users\Enqel\AppData\Local\Temp\wajam_download.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-10-01 01:01
 

==================== End Of Log ============================

--- --- ---

--- --- ---FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013

Ran by Enqel at 2013-10-09 00:02:02

Running from C:\Users\Enqel\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)

Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)

Avira Free Antivirus (x32 Version: 14.0.0.383)

Canon Easy-WebPrint EX (x32 Version: 1.3.5.0)

Canon Inkjet Printer/Scanner/Fax Extended Survey Program (x32)

Canon iP4700 series Benutzerregistrierung (x32)

Canon iP4700 series Printer Driver

Canon Utilities Easy-PhotoPrint EX (x32)

Canon Utilities My Printer (x32)

Canon Utilities Solution Menu (x32)

CD-LabelPrint (x32)

Compatibility Pack for the 2007 Office system (x32 Version: 12.0.6514.5001)

Google Chrome (x32 Version: 30.0.1599.69)

Google Update Helper (x32 Version: 1.3.21.165)

IncrediMail (x32 Version: 6.6.0.5282)

IncrediMail 2.5 (x32 Version: 6.6.0.5282)

Jasc Paint Shop Pro 9 (x32 Version: 9.00.0000)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft Office Professional Edition 2003 (x32 Version: 11.0.6361.0)

Microsoft Office Word Viewer 2003 (x32 Version: 11.0.8173.0)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)

Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1)

Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1)

MSVC80_x64_v2 (Version: 1.0.3.0)

MSVC80_x86_v2 (x32 Version: 1.0.3.0)

MSVC90_x64 (Version: 1.0.1.2)

MSVC90_x86 (x32 Version: 1.0.1.2)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

Photo Notifier and Animation Creator (x32 Version: 1.0.0.1009)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)

WebConnect 3.0.0 (Version: 3.0.0)

Windows 7 USB/DVD Download Tool (x32 Version: 1.0.30)

Windows Movie Maker 2.0 (x32 Version: 2.0.0000)

Windows Utils (x32)

WinRAR 4.00 (64-Bit) (Version: 4.00.0)

World of Warcraft (x32 Version: 5.4.0.17399)
 

==================== Restore Points  =========================
 

08-10-2013 14:42:54 Installiert The Sims 3

08-10-2013 14:58:55 Installiert The Sims 3

08-10-2013 15:12:41 Entfernt The Sims 3
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {074958FD-6910-4DFF-9DEC-96C6114AAE24} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-08] (Adobe Systems Incorporated)

Task: {55DD7B09-FD1A-4B70-9FF1-06C7AC1C37F1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-08] (Google Inc.)

Task: {D79C796B-F62E-401F-B63B-893BF7B7BF12} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-08] (Google Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-10-08 19:25 - 2013-09-30 11:01 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll

2013-09-30 17:34 - 2013-09-30 17:34 - 00033128 _____ () C:\Program Files (x86)\IncrediMail\Bin\IMHttpComm.dll

2013-09-30 17:34 - 2013-09-30 17:34 - 00072104 _____ () C:\Program Files (x86)\IncrediMail\Bin\wlessfp1.dll

2013-09-30 17:34 - 2013-09-30 17:34 - 00272808 _____ () C:\Program Files (x86)\IncrediMail\Bin\ImLookExU.dll

2013-09-30 17:34 - 2013-09-30 17:34 - 00080296 _____ () C:\Program Files (x86)\IncrediMail\bin\ImAppRU.dll

2013-09-30 17:34 - 2013-09-30 17:34 - 00133544 _____ () C:\Program Files (x86)\IncrediMail\Bin\ImComUtlU.dll

2013-10-08 17:50 - 2013-10-03 08:02 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll

2013-10-08 17:50 - 2013-10-03 08:02 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll

2013-10-08 17:50 - 2013-10-03 08:03 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll

2013-10-08 17:50 - 2013-10-03 08:03 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll

2013-10-08 17:50 - 2013-10-03 08:02 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData\TEMP:373E1720
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 

Name: PCI-Kommunikationscontroller (einfach)

Description: PCI-Kommunikationscontroller (einfach)

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: Serieller PCI-Anschluss

Description: Serieller PCI-Anschluss

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: Paralleler PCI-Anschluss

Description: Paralleler PCI-Anschluss

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: Serieller PCI-Anschluss

Description: Serieller PCI-Anschluss

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (10/08/2013 00:51:03 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: MsiExec.exe, Version: 5.0.7601.17514, Zeitstempel: 0x4ce792c4

Name des fehlerhaften Moduls: QuickTime.qts_unloaded, Version: 0.0.0.0, Zeitstempel: 0x5180f322

Ausnahmecode: 0xc0000005

Fehleroffset: 0x687fcc49

ID des fehlerhaften Prozesses: 0x1104

Startzeit der fehlerhaften Anwendung: 0xMsiExec.exe0

Pfad der fehlerhaften Anwendung: MsiExec.exe1

Pfad des fehlerhaften Moduls: MsiExec.exe2

Berichtskennung: MsiExec.exe3
 

Error: (10/08/2013 04:53:50 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe, Version: 13.0.3000.132, Zeitstempel: 0x50b779bd

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb164a

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000004e4e4

ID des fehlerhaften Prozesses: 0x6a4

Startzeit der fehlerhaften Anwendung: 0xTuneUpUtilitiesService64.exe0

Pfad der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe1

Pfad des fehlerhaften Moduls: TuneUpUtilitiesService64.exe2

Berichtskennung: TuneUpUtilitiesService64.exe3
 

Error: (10/07/2013 09:48:45 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: TS3W.exe, Version: 0.2.0.188, Zeitstempel: 0x5109c1bd

Name des fehlerhaften Moduls: MSVCR80.dll, Version: 8.0.50727.6195, Zeitstempel: 0x4dcddbf3

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0001510c

ID des fehlerhaften Prozesses: 0xb60

Startzeit der fehlerhaften Anwendung: 0xTS3W.exe0

Pfad der fehlerhaften Anwendung: TS3W.exe1

Pfad des fehlerhaften Moduls: TS3W.exe2

Berichtskennung: TS3W.exe3
 

Error: (10/07/2013 09:47:22 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: TS3W.exe, Version: 0.2.0.188, Zeitstempel: 0x5109c1bd

Name des fehlerhaften Moduls: MSVCR80.dll, Version: 8.0.50727.6195, Zeitstempel: 0x4dcddbf3

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0001510c

ID des fehlerhaften Prozesses: 0x1938

Startzeit der fehlerhaften Anwendung: 0xTS3W.exe0

Pfad der fehlerhaften Anwendung: TS3W.exe1

Pfad des fehlerhaften Moduls: TS3W.exe2

Berichtskennung: TS3W.exe3
 

Error: (10/07/2013 09:46:40 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: TS3W.exe, Version: 0.2.0.188, Zeitstempel: 0x5109c1bd

Name des fehlerhaften Moduls: MSVCR80.dll, Version: 8.0.50727.6195, Zeitstempel: 0x4dcddbf3

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0001510c

ID des fehlerhaften Prozesses: 0x1a64

Startzeit der fehlerhaften Anwendung: 0xTS3W.exe0

Pfad der fehlerhaften Anwendung: TS3W.exe1

Pfad des fehlerhaften Moduls: TS3W.exe2

Berichtskennung: TS3W.exe3
 

Error: (10/07/2013 09:46:14 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: TS3W.exe, Version: 0.2.0.188, Zeitstempel: 0x5109c1bd

Name des fehlerhaften Moduls: MSVCR80.dll, Version: 8.0.50727.6195, Zeitstempel: 0x4dcddbf3

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0001510c

ID des fehlerhaften Prozesses: 0xfe4

Startzeit der fehlerhaften Anwendung: 0xTS3W.exe0

Pfad der fehlerhaften Anwendung: TS3W.exe1

Pfad des fehlerhaften Moduls: TS3W.exe2

Berichtskennung: TS3W.exe3
 

Error: (10/07/2013 09:00:59 PM) (Source: Windows Installer 3.1) (User: )

Description: WindowsFür diesen Befehl ist nicht genügend Speicher verfügbar.
 

Error: (10/07/2013 08:06:55 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".

Die abhängige Assemblierung "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (10/07/2013 08:06:54 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".

Die abhängige Assemblierung "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (10/07/2013 08:00:51 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".

Die abhängige Assemblierung "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 
 

System errors:

=============

Error: (10/08/2013 07:33:18 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Volumeschattenkopie" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (10/08/2013 07:33:18 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Volumeschattenkopie erreicht.
 

Error: (10/08/2013 07:33:18 PM) (Source: DCOM) (User: )

Description: 1053VSS{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}
 

Error: (10/08/2013 06:48:59 PM) (Source: BROWSER) (User: )

Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{2D3A601D-1D2A-4EEC-9EDC-25FD5F32816F}" zu oft fehl.

Der Sicherungssuchdienst wird beendet.
 

Error: (10/08/2013 06:32:31 PM) (Source: BROWSER) (User: )

Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{2D3A601D-1D2A-4EEC-9EDC-25FD5F32816F}" zu oft fehl.

Der Sicherungssuchdienst wird beendet.
 

Error: (10/07/2013 07:16:22 PM) (Source: volsnap) (User: )

Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 

Error: (10/07/2013 06:57:43 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Apple Mobile Device" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (10/07/2013 06:57:43 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Apple Mobile Device erreicht.
 

Error: (10/07/2013 06:37:45 PM) (Source: volsnap) (User: )

Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 

Error: (10/07/2013 06:18:55 PM) (Source: Service Control Manager) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

cdrom
 
 

Microsoft Office Sessions:

=========================

Error: (10/08/2013 00:51:03 PM) (Source: Application Error)(User: )

Description: MsiExec.exe5.0.7601.175144ce792c4QuickTime.qts_unloaded0.0.0.05180f322c0000005687fcc49110401cec41447a94de9C:\Windows\syswow64\MsiExec.exeQuickTime.qts8662052f-3007-11e3-9c43-00241d0b681e
 

Error: (10/08/2013 04:53:50 AM) (Source: Application Error)(User: )

Description: TuneUpUtilitiesService64.exe13.0.3000.13250b779bdntdll.dll6.1.7601.1822951fb164ac0000005000000000004e4e46a401cec3b81274677fC:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exeC:\Windows\SYSTEM32\ntdll.dlldbcf1ecf-2fc4-11e3-93af-00241d0b681e
 

Error: (10/07/2013 09:48:45 PM) (Source: Application Error)(User: )

Description: TS3W.exe0.2.0.1885109c1bdMSVCR80.dll8.0.50727.61954dcddbf3c00000050001510cb6001cec39638b280c0C:\Program Files (x86)\Electronic Arts\Die Sims 3\Game\Bin\TS3W.exeC:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\MSVCR80.dll79990920-2f89-11e3-9c58-00241d0b681e
 

Error: (10/07/2013 09:47:22 PM) (Source: Application Error)(User: )

Description: TS3W.exe0.2.0.1885109c1bdMSVCR80.dll8.0.50727.61954dcddbf3c00000050001510c193801cec39606e99b4cC:\Program Files (x86)\Electronic Arts\Die Sims 3\Game\Bin\TS3W.exeC:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\MSVCR80.dll47cb60eb-2f89-11e3-9c58-00241d0b681e
 

Error: (10/07/2013 09:46:40 PM) (Source: Application Error)(User: )

Description: TS3W.exe0.2.0.1885109c1bdMSVCR80.dll8.0.50727.61954dcddbf3c00000050001510c1a6401cec395ede924c1C:\Program Files (x86)\Electronic Arts\Die Sims 3\Game\Bin\TS3W.exeC:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\MSVCR80.dll2f01aa07-2f89-11e3-9c58-00241d0b681e
 

Error: (10/07/2013 09:46:14 PM) (Source: Application Error)(User: )

Description: TS3W.exe0.2.0.1885109c1bdMSVCR80.dll8.0.50727.61954dcddbf3c00000050001510cfe401cec395dc6d8cb5C:\Program Files (x86)\Electronic Arts\Die Sims 3\Game\Bin\TS3W.exeC:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\MSVCR80.dll1fae5139-2f89-11e3-9c58-00241d0b681e
 

Error: (10/07/2013 09:00:59 PM) (Source: Windows Installer 3.1)(User: )

Description: WindowsFür diesen Befehl ist nicht genügend Speicher verfügbar.
 

Error: (10/07/2013 08:06:55 PM) (Source: SideBySide)(User: )

Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_cbf21254470d8752\MFC80U.DLL
 

Error: (10/07/2013 08:06:54 PM) (Source: SideBySide)(User: )

Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_cbf21254470d8752\MFC80U.DLL
 

Error: (10/07/2013 08:00:51 PM) (Source: SideBySide)(User: )

Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_cbf21254470d8752\MFC80U.DLL
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 37%

Total physical RAM: 3551.11 MB

Available physical RAM: 2222.62 MB

Total Pagefile: 7100.4 MB

Available Pagefile: 5438.49 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:149.04 GB) (Free:46.87 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive e: (NEU) (CDROM) (Total:1.65 GB) (Free:0 GB) CDFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: DC48DC48)

Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---

Hallo aharonov,

Hab alles gemacht wie beschrieben, beim ausstellen vom Virenprogi hat er nicht gemeckert ;)

Das ist der Schritt 2:AdwCleaner Logfile:

Code:

# AdwCleaner v3.007 - Bericht erstellt am 09/10/2013 um 14:03:15

# Updated 09/10/2013 von Xplode

# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)

# Benutzername : Enqel - ENQEL-PC

# Gestartet von : C:\Users\Enqel\Downloads\adwcleaner.exe

# Option : Suchen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Datei Gefunden : C:\END

Datei Gefunden : C:\Users\Enqel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk

Datei Gefunden : C:\Windows\System32\roboot64.exe

Ordner Gefunden C:\Program Files (x86)\MyPC Backup

Ordner Gefunden C:\Program Files (x86)\MyPC Backup 

Ordner Gefunden C:\Program Files (x86)\WebConnect

Ordner Gefunden C:\ProgramData\Babylon

Ordner Gefunden C:\ProgramData\Browser Manager

Ordner Gefunden C:\SoftwareUpdater

Ordner Gefunden C:\Users\Enqel\AppData\Local\DownloadGuide

Ordner Gefunden C:\Users\Enqel\AppData\Local\lollipop

Ordner Gefunden C:\Users\Enqel\AppData\Local\Wajam

Ordner Gefunden C:\Users\Enqel\AppData\LocalLow\Delta

Ordner Gefunden C:\Users\Enqel\AppData\LocalLow\Minibar

Ordner Gefunden C:\Users\Enqel\AppData\Roaming\BabSolution

Ordner Gefunden C:\Users\Enqel\AppData\Roaming\Babylon

Ordner Gefunden C:\Users\Enqel\AppData\Roaming\dvdvideosoftiehelpers

Ordner Gefunden C:\Users\Enqel\AppData\Roaming\file scout

Ordner Gefunden C:\Users\Enqel\AppData\Roaming\OpenCandy

Ordner Gefunden C:\Users\Enqel\AppData\Roaming\Systweak

Ordner Gefunden C:\Users\Enqel\AppData\Roaming\Windows Net Data
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gefunden : HKCU\Software\5c6d9d0bc39eb46

Schlüssel Gefunden : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\lyricspal

Schlüssel Gefunden : HKCU\Software\BabSolution

Schlüssel Gefunden : HKCU\Software\BI

Schlüssel Gefunden : HKCU\Software\DataMngr

Schlüssel Gefunden : HKCU\Software\DataMngr_Toolbar

Schlüssel Gefunden : HKCU\Software\Delta

Schlüssel Gefunden : HKCU\Software\filescout

Schlüssel Gefunden : HKCU\Software\FoxyDeal

Schlüssel Gefunden : HKCU\Software\IM

Schlüssel Gefunden : HKCU\Software\Iminent

Schlüssel Gefunden : HKCU\Software\ImInstaller

Schlüssel Gefunden : HKCU\Software\InstallCore

Schlüssel Gefunden : HKCU\Software\lollipop

Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}

Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2316C625-B487-4410-A1A5-FF040B65245F}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2316C625-B487-4410-A1A5-FF040B65245F}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gefunden : HKCU\Software\smartbar

Schlüssel Gefunden : HKCU\Software\torch

Schlüssel Gefunden : [x64] HKCU\Software\BabSolution

Schlüssel Gefunden : [x64] HKCU\Software\BI

Schlüssel Gefunden : [x64] HKCU\Software\DataMngr

Schlüssel Gefunden : [x64] HKCU\Software\DataMngr_Toolbar

Schlüssel Gefunden : [x64] HKCU\Software\Delta

Schlüssel Gefunden : [x64] HKCU\Software\filescout

Schlüssel Gefunden : [x64] HKCU\Software\FoxyDeal

Schlüssel Gefunden : [x64] HKCU\Software\IM

Schlüssel Gefunden : [x64] HKCU\Software\Iminent

Schlüssel Gefunden : [x64] HKCU\Software\ImInstaller

Schlüssel Gefunden : [x64] HKCU\Software\InstallCore

Schlüssel Gefunden : [x64] HKCU\Software\lollipop

Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}

Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}

Schlüssel Gefunden : [x64] HKCU\Software\smartbar

Schlüssel Gefunden : [x64] HKCU\Software\torch

Schlüssel Gefunden : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gefunden : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}

Schlüssel Gefunden : HKLM\SOFTWARE\5c6d9d0bc39eb46

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\speedupmypc

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}

Schlüssel Gefunden : HKLM\Software\DataMngr

Schlüssel Gefunden : HKLM\Software\Delta

Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp

Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\kiplfnciaokpcennlkldkdaeaaomamof

Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\pialekdjmfmckiccfkgbbgphficjdekh

Schlüssel Gefunden : HKLM\Software\Iminent

Schlüssel Gefunden : HKLM\Software\ImInstaller

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP

Schlüssel Gefunden : HKLM\Software\systweak

Schlüssel Gefunden : HKLM\Software\torch

Schlüssel Gefunden : HKLM\Software\Uniblue\DriverScanner

Schlüssel Gefunden : HKLM\Software\WebConnect

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

Wert Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
 

***** [ Browser ] *****
 

-\\ Internet Explorer v10.0.9200.16686
 
 

-\\ Google Chrome v30.0.1599.69
 

[ Datei : C:\Users\Enqel\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [16329 octets] - [09/10/2013 14:03:15]
 

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [16390 octets] ##########

--- --- ---
AdwCleaner Logfile:

Code:

# AdwCleaner v3.007 - Bericht erstellt am 09/10/2013 um 14:06:12

# Updated 09/10/2013 von Xplode

# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)

# Benutzername : Enqel - ENQEL-PC

# Gestartet von : C:\Users\Enqel\Downloads\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\SoftwareUpdater

Ordner Gelöscht : C:\ProgramData\Babylon

Ordner Gelöscht : C:\ProgramData\Browser Manager

Ordner Gelöscht : C:\Program Files (x86)\MyPC Backup 

Ordner Gelöscht : C:\Program Files (x86)\WebConnect

Ordner Gelöscht : C:\Users\Enqel\AppData\Local\DownloadGuide

Ordner Gelöscht : C:\Users\Enqel\AppData\Local\lollipop

Ordner Gelöscht : C:\Users\Enqel\AppData\Local\Wajam

Ordner Gelöscht : C:\Users\Enqel\AppData\LocalLow\Delta

Ordner Gelöscht : C:\Users\Enqel\AppData\LocalLow\Minibar

Ordner Gelöscht : C:\Users\Enqel\AppData\Roaming\BabSolution

Ordner Gelöscht : C:\Users\Enqel\AppData\Roaming\Babylon

Ordner Gelöscht : C:\Users\Enqel\AppData\Roaming\dvdvideosoftiehelpers

Ordner Gelöscht : C:\Users\Enqel\AppData\Roaming\file scout

Ordner Gelöscht : C:\Users\Enqel\AppData\Roaming\OpenCandy

Ordner Gelöscht : C:\Users\Enqel\AppData\Roaming\Systweak

Ordner Gelöscht : C:\Users\Enqel\AppData\Roaming\Windows Net Data

Datei Gelöscht : C:\END

Datei Gelöscht : C:\Windows\System32\roboot64.exe

Datei Gelöscht : C:\Users\Enqel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\kiplfnciaokpcennlkldkdaeaaomamof

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\pialekdjmfmckiccfkgbbgphficjdekh

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS

Schlüssel Gelöscht : HKCU\Software\5c6d9d0bc39eb46

Schlüssel Gelöscht : HKLM\SOFTWARE\5c6d9d0bc39eb46

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2316C625-B487-4410-A1A5-FF040B65245F}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2316C625-B487-4410-A1A5-FF040B65245F}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}

Schlüssel Gelöscht : HKCU\Software\BabSolution

Schlüssel Gelöscht : HKCU\Software\BI

Schlüssel Gelöscht : HKCU\Software\DataMngr

[#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar

Schlüssel Gelöscht : HKCU\Software\Delta

Schlüssel Gelöscht : HKCU\Software\filescout

Schlüssel Gelöscht : HKCU\Software\FoxyDeal

Schlüssel Gelöscht : HKCU\Software\IM

Schlüssel Gelöscht : HKCU\Software\Iminent

Schlüssel Gelöscht : HKCU\Software\ImInstaller

Schlüssel Gelöscht : HKCU\Software\InstallCore

Schlüssel Gelöscht : HKCU\Software\lollipop

Schlüssel Gelöscht : HKCU\Software\smartbar

Schlüssel Gelöscht : HKCU\Software\torch

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\lyricspal

Schlüssel Gelöscht : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}

Schlüssel Gelöscht : HKLM\Software\DataMngr

Schlüssel Gelöscht : HKLM\Software\Delta

Schlüssel Gelöscht : HKLM\Software\Iminent

Schlüssel Gelöscht : HKLM\Software\ImInstaller

Schlüssel Gelöscht : HKLM\Software\systweak

Schlüssel Gelöscht : HKLM\Software\torch

Schlüssel Gelöscht : HKLM\Software\Uniblue\DriverScanner

Schlüssel Gelöscht : HKLM\Software\WebConnect

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
 

***** [ Browser ] *****
 

-\\ Internet Explorer v10.0.9200.16686
 
 

-\\ Google Chrome v30.0.1599.69
 

[ Datei : C:\Users\Enqel\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [16727 octets] - [09/10/2013 14:03:15]

AdwCleaner[S0].txt - [15277 octets] - [09/10/2013 14:06:12]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [15338 octets] ##########

--- --- ---

Schritt 3

Combofix Logfile:

Code:

ComboFix 13-10-08.01 - Enqel 09.10.2013  14:15:08.1.2 - x64

Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.3551.2233 [GMT 2:00]

ausgeführt von:: c:\users\Enqel\Downloads\ComboFix.exe

AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

C:\Documents

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-09-09 bis 2013-10-09  ))))))))))))))))))))))))))))))

.

.

2013-10-09 12:22 . 2013-10-09 12:22        --------        d-----w-        c:\users\Default\AppData\Local\temp

2013-10-09 11:59 . 2013-10-09 12:06        --------        d-----w-        C:\AdwCleaner

2013-10-08 22:01 . 2013-10-08 22:01        --------        d-----w-        C:\FRST

2013-10-08 17:38 . 2013-10-08 17:38        --------        d-----w-        c:\users\Enqel\AppData\Roaming\Avira

2013-10-08 17:25 . 2013-09-30 09:01        83160        ----a-w-        c:\windows\system32\drivers\avnetflt.sys

2013-10-08 17:25 . 2013-09-30 09:01        28600        ----a-w-        c:\windows\system32\drivers\avkmgr.sys

2013-10-08 17:25 . 2013-09-30 09:01        132600        ----a-w-        c:\windows\system32\drivers\avipbb.sys

2013-10-08 17:25 . 2013-09-30 09:01        105856        ----a-w-        c:\windows\system32\drivers\avgntflt.sys

2013-10-08 17:25 . 2013-10-08 17:25        --------        d-----w-        c:\programdata\Avira

2013-10-08 17:25 . 2013-10-08 17:25        --------        d-----w-        c:\program files (x86)\Avira

2013-10-08 15:26 . 2013-10-08 15:26        --------        d-----w-        c:\users\Enqel\AppData\Local\Diagnostics

2013-10-08 10:44 . 2013-09-05 05:32        9694160        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{BCBAEB35-CFBC-4354-AF9A-1743739F9C48}\mpengine.dll

2013-10-07 19:06 . 2013-10-07 19:06        --------        d-----w-        c:\programdata\EA Core

2013-10-07 19:02 . 2013-10-07 19:03        --------        d-----w-        c:\users\Enqel\AppData\Roaming\Origin

2013-10-07 19:01 . 2013-10-08 15:14        --------        d-----w-        c:\programdata\Origin

2013-10-07 18:37 . 2013-10-07 19:01        --------        d-----w-        c:\programdata\Electronic Arts

2013-10-07 18:11 . 2013-10-07 18:11        --------        d-----w-        c:\program files (x86)\Microsoft WSE

2013-10-07 18:10 . 2006-09-28 14:05        3977496        ----a-w-        c:\windows\system32\d3dx9_31.dll

2013-10-07 18:10 . 2006-09-28 14:05        2414360        ----a-w-        c:\windows\SysWow64\d3dx9_31.dll

2013-10-07 17:58 . 2013-10-08 15:13        --------        d--h--w-        c:\program files (x86)\InstallShield Installation Information

2013-10-07 17:54 . 2013-10-07 17:57        --------        d-----w-        c:\users\Enqel\AppData\Roaming\DAEMON Tools Lite

2013-10-07 17:54 . 2013-10-07 17:57        --------        d-----w-        c:\programdata\DAEMON Tools Lite

2013-10-05 21:13 . 2013-10-05 21:13        --------        d-----w-        c:\programdata\Protexis

2013-10-05 14:27 . 2013-10-05 14:27        --------        d-----w-        c:\users\Enqel\AppData\Local\Blizzard Entertainment

2013-10-05 11:15 . 2013-10-05 11:15        --------        d-----w-        c:\program files (x86)\Common Files\Jasc Software Inc

2013-10-05 11:06 . 2013-10-05 11:07        --------        d-----w-        c:\users\Enqel\AppData\Roaming\Repplop

2013-10-04 19:18 . 2013-10-07 17:06        --------        d-----w-        c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-10-04 19:15 . 2013-10-04 19:15        159744        ----a-w-        c:\program files\Internet Explorer\Plugins\npqtplugin5.dll

2013-10-04 19:15 . 2013-10-04 19:15        159744        ----a-w-        c:\program files\Internet Explorer\Plugins\npqtplugin4.dll

2013-10-04 19:15 . 2013-10-04 19:15        159744        ----a-w-        c:\program files\Internet Explorer\Plugins\npqtplugin3.dll

2013-10-04 19:15 . 2013-10-04 19:15        159744        ----a-w-        c:\program files\Internet Explorer\Plugins\npqtplugin2.dll

2013-10-04 19:15 . 2013-10-04 19:15        159744        ----a-w-        c:\program files\Internet Explorer\Plugins\npqtplugin.dll

2013-10-04 19:15 . 2013-10-08 10:51        --------        d-----w-        c:\program files (x86)\QuickTime

2013-10-03 16:51 . 2013-10-03 16:51        --------        d-----w-        c:\users\Enqel\AppData\Roaming\Corel

2013-10-01 21:22 . 2013-10-01 21:22        --------        d-----w-        c:\users\Enqel\AppData\Roaming\Downloaded Installations

2013-10-01 20:51 . 2013-10-01 20:51        --------        d-----w-        c:\users\Enqel\AppData\Local\PDF24

2013-09-30 15:35 . 2013-09-30 15:35        --------        d-----w-        c:\programdata\Photo Notifier and Animation Creator

2013-09-30 15:35 . 2013-09-30 15:35        --------        d-----w-        c:\program files (x86)\Photo Notifier and Animation Creator

2013-09-30 15:34 . 2013-09-30 16:06        --------        d-----w-        c:\users\Enqel\AppData\Local\IM

2013-09-30 15:34 . 2013-09-30 15:35        --------        d-----w-        c:\programdata\IM

2013-09-30 15:34 . 2013-09-30 15:34        --------        d-----w-        c:\programdata\IncrediMail

2013-09-30 15:34 . 2013-09-30 15:34        --------        d-----w-        c:\program files (x86)\IncrediMail

2013-09-29 16:06 . 2013-09-29 16:06        --------        d-----w-        c:\windows\PCHEALTH

2013-09-24 16:27 . 2013-10-04 19:48        --------        d-----w-        c:\users\Enqel\AppData\Local\Apple Computer

2013-09-24 16:27 . 2013-10-08 15:27        --------        d-----w-        c:\users\Enqel\AppData\Roaming\Apple Computer

2013-09-24 16:26 . 2013-09-24 16:26        --------        d-----w-        c:\programdata\Apple Computer

2013-09-24 16:11 . 2013-10-04 19:31        --------        d-----w-        c:\users\Enqel\AppData\Local\Apple

2013-09-24 16:10 . 2013-10-07 17:06        --------        d-----w-        c:\program files (x86)\Common Files\Apple

2013-09-24 16:10 . 2013-09-24 16:11        --------        d-----w-        c:\programdata\Apple

2013-09-21 00:19 . 2013-09-21 00:19        --------        d-----w-        c:\users\Enqel\.appwork

2013-09-20 22:43 . 2013-09-21 00:20        --------        d-----w-        c:\users\Enqel\AppData\Local\JDownloader v2.0

2013-09-19 16:02 . 2013-09-29 18:34        --------        d-----w-        c:\users\Enqel\AppData\Local\Canon Easy-PhotoPrint EX

2013-09-19 16:01 . 2013-09-19 16:01        --------        d--h--w-        c:\programdata\CanonIJEPPEX

2013-09-12 13:42 . 2013-09-12 13:42        --------        d--h--w-        c:\programdata\CanonIJSolutionMenu

2013-09-12 13:29 . 2013-09-12 13:29        --------        d-----w-        c:\users\Enqel\AppData\Roaming\CD-LabelPrint

2013-09-12 13:26 . 2013-09-12 13:26        --------        d--h--w-        c:\programdata\CanonIJMyPrinter

2013-09-12 13:26 . 2013-10-03 18:52        --------        d-----w-        c:\programdata\CanonIJPLM

2013-09-12 13:17 . 2013-09-12 13:17        --------        d-----w-        c:\program files\Canon

2013-09-12 13:14 . 2013-09-12 13:26        --------        d-----w-        c:\program files (x86)\Canon

2013-09-11 23:42 . 2013-08-10 05:22        2241024        ----a-w-        c:\windows\system32\wininet.dll

2013-09-11 23:42 . 2013-08-10 05:21        53248        ----a-w-        c:\windows\system32\jsproxy.dll

2013-09-11 23:42 . 2013-08-10 03:59        1767936        ----a-w-        c:\windows\SysWow64\wininet.dll

2013-09-11 23:42 . 2013-08-10 05:20        15404544        ----a-w-        c:\windows\system32\ieframe.dll

2013-09-11 23:42 . 2013-08-10 05:21        19246592        ----a-w-        c:\windows\system32\mshtml.dll

2013-09-11 16:46 . 2013-08-02 02:12        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-10-08 18:21 . 2013-08-18 16:12        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2013-10-08 18:21 . 2013-08-18 16:12        692616        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2013-09-04 22:16 . 2013-09-04 22:16        119808        ----a-r-        c:\users\Enqel\AppData\Roaming\Microsoft\Installer\{CCF298AF-9CE1-4B26-B251-486E98A34789}\icons.exe

2013-08-07 02:22 . 2013-05-17 23:00        278800        ------w-        c:\windows\system32\MpSigStub.exe

2013-08-02 01:48 . 2013-09-11 16:47        44032        ----a-w-        c:\windows\apppatch\acwow64.dll

2013-07-25 09:25 . 2013-08-14 14:21        1888768        ----a-w-        c:\windows\system32\WMVDECOD.DLL

2013-07-25 08:57 . 2013-08-14 14:21        1620992        ----a-w-        c:\windows\SysWow64\WMVDECOD.DLL

2013-07-19 01:58 . 2013-08-14 14:21        2048        ----a-w-        c:\windows\system32\tzres.dll

2013-07-19 01:41 . 2013-08-14 14:21        2048        ----a-w-        c:\windows\SysWow64\tzres.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IncrediMail"="c:\program files (x86)\IncrediMail\bin\IncMail.exe" [2013-09-30 444840]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-05-11 958576]

"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-09-30 681032]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]

"Userinit"="userinit.exe"

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux1"=wdmaud.drv

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]

R4 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]

S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]

S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]

S3 e1kexpress;Intel(R) PRO/1000 PCI-Express-Netzwerkverbindungstreiber K;c:\windows\system32\DRIVERS\e1k60x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1k60x64.sys [x]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2013-10-08 15:50        1185744        ----a-w-        c:\program files (x86)\Google\Chrome\Application\30.0.1599.69\Installer\chrmstp.exe

.

Inhalt des "geplante Tasks" Ordners

.

2013-10-09 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-18 18:21]

.

2013-10-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-10-08 15:50]

.

2013-10-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-10-08 15:50]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-03-24 2184520]

"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2009-03-18 767312]

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = https://www.google.de/

mLocal Page = c:\windows\SysWOW64\blank.htm

uSearchAssistant = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=a1a753c0-2f19-6318-8cf8-1f2f64ace6b1&searchtype=ds&q={searchTerms}&installDate=07/10/2013

IE: Nach Microsoft &Excel exportieren - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.2.1

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Toolbar-10 - (no file)

Wow6432Node-HKCU-Run-iCloudServices - c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

Wow6432Node-HKCU-Run-ApplePhotoStreams - c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

Wow6432Node-HKCU-Run-AppleIEDAV - c:\program files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe

Wow6432Node-HKCU-Run-EA Core - c:\program files (x86)\Electronic Arts\EADM\Core.exe

Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe

HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start

Toolbar-10 - (no file)

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2013-10-09  14:24:05

ComboFix-quarantined-files.txt  2013-10-09 12:24

.

Vor Suchlauf: 25 Verzeichnis(se), 51.699.216.384 Bytes frei

Nach Suchlauf: 32 Verzeichnis(se), 51.859.267.584 Bytes frei

.

- - End Of File - - 3D520FEC75ECE7E8C76383355B929B25

--- --- ---
A36C5E4F47E84449FF07ED3517B43A31

Schritt 4:
FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013

Ran by Enqel (administrator) on ENQEL-PC on 09-10-2013 14:25:40

Running from C:\Users\Enqel\Downloads

Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-24] (CANON INC.)

HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)

HKCU\...\Run: [IncrediMail] - C:\Program Files (x86)\IncrediMail\bin\IncMail.exe [444840 2013-09-30] (IncrediMail, Ltd.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [681032 2013-09-30] (Avira Operations GmbH & Co. KG)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF77D56F45353CE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKCU -  No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

Chrome: 

=======

CHR Extension: (Google Docs) - C:\Users\Enqel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0

CHR Extension: (Google Drive) - C:\Users\Enqel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (YouTube) - C:\Users\Enqel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Enqel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Chrome In-App Payments service) - C:\Users\Enqel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0

CHR Extension: (Gmail) - C:\Users\Enqel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440392 2013-09-30] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440392 2013-09-30] (Avira Operations GmbH & Co. KG)

S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-09-30] (Avira Operations GmbH & Co. KG)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105856 2013-09-30] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-09-30] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-09-30] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [83160 2013-09-30] (Avira Operations GmbH & Co. KG)

R3 e1kexpress; C:\Windows\System32\DRIVERS\e1k60x64.sys [220672 2009-06-10] (Intel Corporation)

R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

U3 catchme; \??\C:\ComboFix\catchme.sys [x]

S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [x]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]

S3 tsusbhub; system32\drivers\tsusbhub.sys [x]

S3 VGPU; System32\drivers\rdvgkmd.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-10-09 14:24 - 2013-10-09 14:24 - 00017922 _____ C:\ComboFix.txt

2013-10-09 14:13 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe

2013-10-09 14:13 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe

2013-10-09 14:13 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-10-09 14:13 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-10-09 14:13 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-10-09 14:13 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe

2013-10-09 14:13 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe

2013-10-09 14:13 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe

2013-10-09 14:12 - 2013-10-09 14:24 - 00000000 ____D C:\Qoobox

2013-10-09 14:11 - 2013-10-09 14:22 - 00000000 ____D C:\Windows\erdnt

2013-10-09 14:10 - 2013-10-09 14:10 - 05132072 ____R (Swearware) C:\Users\Enqel\Downloads\ComboFix.exe

2013-10-09 14:03 - 2013-10-09 14:03 - 01048960 _____ C:\Users\Enqel\Downloads\adwcleaner.exe

2013-10-09 13:59 - 2013-10-09 14:06 - 00000000 ____D C:\AdwCleaner

2013-10-09 00:02 - 2013-10-09 00:02 - 00018674 _____ C:\Users\Enqel\Downloads\Addition.txt

2013-10-09 00:01 - 2013-10-09 00:01 - 00000000 ____D C:\FRST

2013-10-08 23:59 - 2013-10-08 23:59 - 01954124 _____ (Farbar) C:\Users\Enqel\Downloads\FRST64.exe

2013-10-08 22:17 - 2013-10-08 22:17 - 00010350 _____ C:\Users\Enqel\Desktop\Ereignisse.txt

2013-10-08 19:38 - 2013-10-08 19:38 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Avira

2013-10-08 19:25 - 2013-10-08 19:25 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-10-08 19:25 - 2013-10-08 19:25 - 00000000 ____D C:\ProgramData\Avira

2013-10-08 19:25 - 2013-10-08 19:25 - 00000000 ____D C:\Program Files (x86)\Avira

2013-10-08 19:25 - 2013-09-30 11:01 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-10-08 19:25 - 2013-09-30 11:01 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-10-08 19:25 - 2013-09-30 11:01 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-10-08 19:25 - 2013-09-30 11:01 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-10-08 19:23 - 2013-10-08 19:24 - 122946048 _____ C:\Users\Enqel\Downloads\avira14_free_antivirus_de.exe

2013-10-08 19:19 - 2013-10-08 19:19 - 00564076 _____ C:\Users\Enqel\Downloads\RatingBuster-1.6.7.zip

2013-10-08 19:18 - 2013-10-08 19:18 - 00700981 _____ C:\Users\Enqel\Downloads\TitanPanel-5.1.24.50400.zip

2013-10-08 17:50 - 2013-10-09 14:07 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-10-08 17:50 - 2013-10-09 14:01 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-10-08 17:50 - 2013-10-08 22:56 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-10-08 17:50 - 2013-10-08 22:56 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-10-08 17:50 - 2013-10-08 17:50 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-10-07 21:06 - 2013-10-07 21:06 - 00000000 ____D C:\ProgramData\EA Core

2013-10-07 21:02 - 2013-10-07 21:03 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Origin

2013-10-07 21:01 - 2013-10-08 17:14 - 00000000 ____D C:\ProgramData\Origin

2013-10-07 21:00 - 2013-10-07 21:00 - 00000554 _____ C:\Windows\KB893803v2.log

2013-10-07 20:37 - 2013-10-07 21:01 - 00000000 ____D C:\ProgramData\Electronic Arts

2013-10-07 20:11 - 2013-10-07 20:11 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE

2013-10-07 20:10 - 2013-10-07 20:10 - 00000196 _____ C:\Windows\DirectX.log

2013-10-07 20:10 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll

2013-10-07 20:10 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll

2013-10-07 19:58 - 2013-10-08 17:13 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-10-07 19:54 - 2013-10-07 19:57 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\DAEMON Tools Lite

2013-10-07 19:54 - 2013-10-07 19:57 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite

2013-10-07 19:53 - 2013-10-07 19:54 - 13901152 _____ (Disc Soft Ltd) C:\Users\Enqel\Downloads\DTLite4471-0333.exe

2013-10-07 19:27 - 2013-10-07 19:27 - 00000000 ____D C:\Users\Enqel\Desktop\mi

2013-10-05 23:13 - 2013-10-05 23:13 - 00000000 ____D C:\ProgramData\Protexis

2013-10-05 16:27 - 2013-10-05 16:27 - 00000000 ____D C:\Users\Enqel\AppData\Local\Blizzard Entertainment

2013-10-05 13:18 - 2013-10-05 13:18 - 00003400 _____ C:\Windows\System32\Tasks\{936088AA-2254-48E5-8F31-3BFEBD3DC00A}

2013-10-05 13:16 - 2013-10-05 13:16 - 00003412 _____ C:\Windows\System32\Tasks\{DBDF3408-E571-4AAA-A8A0-F4B849415196}

2013-10-05 13:15 - 2013-10-07 22:06 - 00000000 ____D C:\Users\Enqel\Documents\Eigene PSP-Dateien

2013-10-05 13:06 - 2013-10-05 13:07 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Repplop

2013-10-04 21:18 - 2013-10-07 19:06 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-10-04 21:15 - 2013-10-08 12:51 - 00000000 ____D C:\Program Files (x86)\QuickTime

2013-10-04 19:00 - 2013-10-04 19:00 - 00168760 _____ (Firseria  ) C:\Users\Enqel\Downloads\iTunes.exe

2013-10-04 17:58 - 2013-10-04 17:59 - 03682968 _____ (                                                            ) C:\Users\Enqel\Downloads\UsenetNLSetup[84316EC1-05EA-3A2F-0C2D146F89F3F202].exe

2013-10-04 17:58 - 2013-10-04 17:58 - 03682968 _____ (                                                            ) C:\Users\Enqel\Downloads\UsenetNLSetup[84313CFA-0913-4A3C-634901DCF9861D37].exe

2013-10-03 18:51 - 2013-10-03 18:54 - 00000000 ____D C:\ProgramData\Protexis64

2013-10-03 18:51 - 2013-10-03 18:51 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Corel

2013-10-03 18:47 - 2013-10-03 18:47 - 249069560 _____ (Acresso Software Inc.) C:\Users\Enqel\Downloads\PSPX6_TBYB30.exe

2013-10-03 15:34 - 2013-10-03 15:34 - 390585629 _____ C:\Windows\MEMORY.DMP

2013-10-03 15:34 - 2013-10-03 15:34 - 01262744 _____ C:\Windows\Minidump\100313-24882-01.dmp

2013-10-01 23:22 - 2013-10-01 23:22 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Downloaded Installations

2013-10-01 23:21 - 2013-10-01 23:21 - 01453920 _____ (Solid State Networks) C:\Users\Enqel\Downloads\nitro_pdf_pro_64_dlm.exe

2013-10-01 23:07 - 2013-10-01 23:08 - 39469712 _____ C:\Users\Enqel\Downloads\PdfEditor_64bit.exe

2013-10-01 22:51 - 2013-10-01 22:51 - 00000000 ____D C:\Users\Enqel\AppData\Local\PDF24

2013-10-01 22:49 - 2013-10-01 22:49 - 15911976 _____ (Geek Software GmbH                                          ) C:\Users\Enqel\Downloads\pdf24-creator-5.7.0.exe

2013-10-01 21:01 - 2013-10-01 21:01 - 00014200 _____ C:\Users\Enqel\Downloads\miscellaneous_geschirrspuler-nordrhein-westfalen_nordrhein-westfalen-nw.kml

2013-09-30 17:35 - 2013-09-30 17:35 - 00000000 ____D C:\ProgramData\Photo Notifier and Animation Creator

2013-09-30 17:35 - 2013-09-30 17:35 - 00000000 ____D C:\Program Files (x86)\Photo Notifier and Animation Creator

2013-09-30 17:34 - 2013-09-30 18:06 - 00000000 ____D C:\Users\Enqel\AppData\Local\IM

2013-09-30 17:34 - 2013-09-30 17:35 - 00000000 ____D C:\ProgramData\IM

2013-09-30 17:34 - 2013-09-30 17:34 - 00000000 ____D C:\ProgramData\IncrediMail

2013-09-30 17:34 - 2013-09-30 17:34 - 00000000 ____D C:\Program Files (x86)\IncrediMail

2013-09-29 18:09 - 2013-09-29 18:09 - 00000400 _____ C:\Windows\ODBC.INI

2013-09-29 18:06 - 2013-09-29 18:06 - 00000000 ____D C:\Windows\PCHEALTH

2013-09-25 23:23 - 2013-09-25 23:24 - 01269936 _____ C:\Windows\Minidump\092513-73648-01.dmp

2013-09-24 18:27 - 2013-10-08 17:27 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Apple Computer

2013-09-24 18:27 - 2013-10-04 21:48 - 00000000 ____D C:\Users\Enqel\AppData\Local\Apple Computer

2013-09-24 18:26 - 2013-09-24 18:26 - 00000000 ____D C:\ProgramData\Apple Computer

2013-09-24 18:11 - 2013-10-04 21:31 - 00000000 ____D C:\Users\Enqel\AppData\Local\Apple

2013-09-24 18:10 - 2013-09-24 18:11 - 00000000 ____D C:\ProgramData\Apple

2013-09-23 20:16 - 2013-09-23 20:16 - 01653360 _____ C:\Windows\Minidump\092313-18610-01.dmp

2013-09-21 21:50 - 2013-09-21 21:50 - 01653808 _____ C:\Windows\Minidump\092113-32588-01.dmp

2013-09-21 02:19 - 2013-09-21 02:19 - 00000000 ____D C:\Users\Enqel\.appwork

2013-09-21 00:43 - 2013-09-21 02:20 - 00000000 ____D C:\Users\Enqel\AppData\Local\JDownloader v2.0

2013-09-19 18:02 - 2013-09-29 20:34 - 00000000 ____D C:\Users\Enqel\AppData\Local\Canon Easy-PhotoPrint EX

2013-09-19 18:01 - 2013-09-19 18:01 - 00000000 ___HD C:\ProgramData\CanonIJEPPEX

2013-09-12 15:42 - 2013-09-12 15:42 - 00000000 ___HD C:\ProgramData\CanonIJSolutionMenu

2013-09-12 15:29 - 2013-09-12 15:29 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\CD-LabelPrint

2013-09-12 15:26 - 2013-10-03 20:52 - 00000000 ____D C:\ProgramData\CanonIJPLM

2013-09-12 15:26 - 2013-09-12 15:26 - 00000000 ___HD C:\ProgramData\CanonIJMyPrinter

2013-09-12 15:17 - 2013-09-12 15:17 - 00000000 ____D C:\Program Files\Canon

2013-09-12 15:14 - 2013-09-12 15:26 - 00000000 ____D C:\Program Files (x86)\Canon

2013-09-12 01:43 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-12 01:43 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-12 01:43 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-12 01:43 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-12 01:43 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-12 01:43 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-12 01:43 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-12 01:43 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-12 01:43 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-12 01:43 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-12 01:43 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-12 01:43 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-12 01:43 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-12 01:43 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-12 01:43 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-12 01:43 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-12 01:43 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-12 01:43 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-12 01:43 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-12 01:43 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-12 01:43 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-12 01:43 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-12 01:43 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-12 01:42 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-12 01:42 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-12 01:42 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-12 01:42 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-12 01:42 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-12 01:42 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-12 01:42 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-12 01:42 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-11 18:47 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-09-11 18:47 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-09-11 18:47 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-09-11 18:47 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2013-09-11 18:47 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-09-11 18:47 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2013-09-11 18:47 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-09-11 18:47 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2013-09-11 18:47 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-09-11 18:47 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-09-11 18:47 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-09-11 18:47 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-09-11 18:47 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-09-11 18:47 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-09-11 18:47 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-11 18:47 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-09-11 18:47 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-09-11 18:47 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-09-11 18:46 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-11 18:46 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-09-11 18:46 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-09-11 18:46 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-09-11 18:46 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-11 18:46 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-11 18:46 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-09-11 18:46 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-09-11 18:46 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-09-11 18:46 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
 

==================== One Month Modified Files and Folders =======
 

2013-10-09 14:24 - 2013-10-09 14:24 - 00017922 _____ C:\ComboFix.txt

2013-10-09 14:24 - 2013-10-09 14:12 - 00000000 ____D C:\Qoobox

2013-10-09 14:24 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default

2013-10-09 14:22 - 2013-10-09 14:11 - 00000000 ____D C:\Windows\erdnt

2013-10-09 14:22 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini

2013-10-09 14:20 - 2013-08-18 18:12 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-10-09 14:15 - 2009-07-14 06:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-10-09 14:15 - 2009-07-14 06:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-10-09 14:12 - 2013-05-18 00:45 - 01973201 _____ C:\Windows\WindowsUpdate.log

2013-10-09 14:10 - 2013-10-09 14:10 - 05132072 ____R (Swearware) C:\Users\Enqel\Downloads\ComboFix.exe

2013-10-09 14:07 - 2013-10-08 17:50 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-10-09 14:07 - 2013-05-19 04:22 - 00044154 _____ C:\Windows\PFRO.log

2013-10-09 14:07 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-10-09 14:07 - 2009-07-14 06:51 - 00060719 _____ C:\Windows\setupact.log

2013-10-09 14:06 - 2013-10-09 13:59 - 00000000 ____D C:\AdwCleaner

2013-10-09 14:06 - 2013-05-18 01:10 - 00000000 ___RD C:\Users\Enqel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-10-09 14:03 - 2013-10-09 14:03 - 01048960 _____ C:\Users\Enqel\Downloads\adwcleaner.exe

2013-10-09 14:01 - 2013-10-08 17:50 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-10-09 00:02 - 2013-10-09 00:02 - 00018674 _____ C:\Users\Enqel\Downloads\Addition.txt

2013-10-09 00:01 - 2013-10-09 00:01 - 00000000 ____D C:\FRST

2013-10-08 23:59 - 2013-10-08 23:59 - 01954124 _____ (Farbar) C:\Users\Enqel\Downloads\FRST64.exe

2013-10-08 22:56 - 2013-10-08 17:50 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-10-08 22:56 - 2013-10-08 17:50 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-10-08 22:17 - 2013-10-08 22:17 - 00010350 _____ C:\Users\Enqel\Desktop\Ereignisse.txt

2013-10-08 20:21 - 2013-08-18 18:12 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-10-08 20:21 - 2013-08-18 18:12 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-10-08 20:21 - 2013-08-18 18:12 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-10-08 19:38 - 2013-10-08 19:38 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Avira

2013-10-08 19:29 - 2013-09-05 00:23 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Ihilon

2013-10-08 19:25 - 2013-10-08 19:25 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-10-08 19:25 - 2013-10-08 19:25 - 00000000 ____D C:\ProgramData\Avira

2013-10-08 19:25 - 2013-10-08 19:25 - 00000000 ____D C:\Program Files (x86)\Avira

2013-10-08 19:24 - 2013-10-08 19:23 - 122946048 _____ C:\Users\Enqel\Downloads\avira14_free_antivirus_de.exe

2013-10-08 19:19 - 2013-10-08 19:19 - 00564076 _____ C:\Users\Enqel\Downloads\RatingBuster-1.6.7.zip

2013-10-08 19:18 - 2013-10-08 19:18 - 00700981 _____ C:\Users\Enqel\Downloads\TitanPanel-5.1.24.50400.zip

2013-10-08 18:52 - 2013-09-05 00:23 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\tor

2013-10-08 17:50 - 2013-10-08 17:50 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-10-08 17:50 - 2013-05-18 01:42 - 00000000 ____D C:\Users\Enqel\AppData\Local\Google

2013-10-08 17:50 - 2013-05-18 01:42 - 00000000 ____D C:\Program Files (x86)\Google

2013-10-08 17:50 - 2013-05-18 01:41 - 00000000 ____D C:\Users\Enqel\AppData\Local\Deployment

2013-10-08 17:45 - 2013-09-04 22:55 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\UseNeXT

2013-10-08 17:27 - 2013-09-24 18:27 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Apple Computer

2013-10-08 17:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF

2013-10-08 17:14 - 2013-10-07 21:01 - 00000000 ____D C:\ProgramData\Origin

2013-10-08 17:13 - 2013-10-07 19:58 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-10-08 12:51 - 2013-10-04 21:15 - 00000000 ____D C:\Program Files (x86)\QuickTime

2013-10-07 22:06 - 2013-10-05 13:15 - 00000000 ____D C:\Users\Enqel\Documents\Eigene PSP-Dateien

2013-10-07 21:06 - 2013-10-07 21:06 - 00000000 ____D C:\ProgramData\EA Core

2013-10-07 21:03 - 2013-10-07 21:02 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Origin

2013-10-07 21:01 - 2013-10-07 20:37 - 00000000 ____D C:\ProgramData\Electronic Arts

2013-10-07 21:00 - 2013-10-07 21:00 - 00000554 _____ C:\Windows\KB893803v2.log

2013-10-07 20:11 - 2013-10-07 20:11 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE

2013-10-07 20:10 - 2013-10-07 20:10 - 00000196 _____ C:\Windows\DirectX.log

2013-10-07 19:58 - 2009-07-14 19:58 - 00653928 _____ C:\Windows\system32\perfh007.dat

2013-10-07 19:58 - 2009-07-14 19:58 - 00129800 _____ C:\Windows\system32\perfc007.dat

2013-10-07 19:58 - 2009-07-14 07:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI

2013-10-07 19:57 - 2013-10-07 19:54 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\DAEMON Tools Lite

2013-10-07 19:57 - 2013-10-07 19:54 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite

2013-10-07 19:54 - 2013-10-07 19:53 - 13901152 _____ (Disc Soft Ltd) C:\Users\Enqel\Downloads\DTLite4471-0333.exe

2013-10-07 19:27 - 2013-10-07 19:27 - 00000000 ____D C:\Users\Enqel\Desktop\mi

2013-10-07 19:16 - 2013-05-18 01:28 - 00000000 ____D C:\Windows.old.000

2013-10-07 19:06 - 2013-10-04 21:18 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-10-07 18:46 - 2013-09-01 19:19 - 00000000 ____D C:\Windows\system32\appmgmt

2013-10-05 23:13 - 2013-10-05 23:13 - 00000000 ____D C:\ProgramData\Protexis

2013-10-05 16:27 - 2013-10-05 16:27 - 00000000 ____D C:\Users\Enqel\AppData\Local\Blizzard Entertainment

2013-10-05 15:27 - 2013-05-18 13:17 - 00000000 ____D C:\Program Files (x86)\World of Warcraft

2013-10-05 13:18 - 2013-10-05 13:18 - 00003400 _____ C:\Windows\System32\Tasks\{936088AA-2254-48E5-8F31-3BFEBD3DC00A}

2013-10-05 13:16 - 2013-10-05 13:16 - 00003412 _____ C:\Windows\System32\Tasks\{DBDF3408-E571-4AAA-A8A0-F4B849415196}

2013-10-05 13:15 - 2013-08-06 21:34 - 00000000 ____D C:\Program Files (x86)\Jasc Software Inc

2013-10-05 13:07 - 2013-10-05 13:06 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Repplop

2013-10-04 21:48 - 2013-09-24 18:27 - 00000000 ____D C:\Users\Enqel\AppData\Local\Apple Computer

2013-10-04 21:43 - 2013-09-05 00:23 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Onytvi

2013-10-04 21:31 - 2013-09-24 18:11 - 00000000 ____D C:\Users\Enqel\AppData\Local\Apple

2013-10-04 19:00 - 2013-10-04 19:00 - 00168760 _____ (Firseria  ) C:\Users\Enqel\Downloads\iTunes.exe

2013-10-04 17:59 - 2013-10-04 17:58 - 03682968 _____ (                                                            ) C:\Users\Enqel\Downloads\UsenetNLSetup[84316EC1-05EA-3A2F-0C2D146F89F3F202].exe

2013-10-04 17:58 - 2013-10-04 17:58 - 03682968 _____ (                                                            ) C:\Users\Enqel\Downloads\UsenetNLSetup[84313CFA-0913-4A3C-634901DCF9861D37].exe

2013-10-03 20:52 - 2013-09-12 15:26 - 00000000 ____D C:\ProgramData\CanonIJPLM

2013-10-03 18:54 - 2013-10-03 18:51 - 00000000 ____D C:\ProgramData\Protexis64

2013-10-03 18:51 - 2013-10-03 18:51 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Corel

2013-10-03 18:47 - 2013-10-03 18:47 - 249069560 _____ (Acresso Software Inc.) C:\Users\Enqel\Downloads\PSPX6_TBYB30.exe

2013-10-03 18:28 - 2013-08-31 04:05 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\DVDVideoSoft

2013-10-03 18:23 - 2013-09-02 14:04 - 00000056 __RSH C:\Windows\SysWOW64\C908648B09.sys

2013-10-03 18:23 - 2013-09-02 13:57 - 00000000 ____D C:\Users\Enqel\Documents\My PSP Files

2013-10-03 18:23 - 2013-08-06 21:34 - 00003558 ___SH C:\Windows\SysWOW64\KGyGaAvL.sys

2013-10-03 15:34 - 2013-10-03 15:34 - 390585629 _____ C:\Windows\MEMORY.DMP

2013-10-03 15:34 - 2013-10-03 15:34 - 01262744 _____ C:\Windows\Minidump\100313-24882-01.dmp

2013-10-03 15:34 - 2013-08-08 15:50 - 00000000 ____D C:\Windows\Minidump

2013-10-01 23:22 - 2013-10-01 23:22 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\Downloaded Installations

2013-10-01 23:21 - 2013-10-01 23:21 - 01453920 _____ (Solid State Networks) C:\Users\Enqel\Downloads\nitro_pdf_pro_64_dlm.exe

2013-10-01 23:08 - 2013-10-01 23:07 - 39469712 _____ C:\Users\Enqel\Downloads\PdfEditor_64bit.exe

2013-10-01 22:51 - 2013-10-01 22:51 - 00000000 ____D C:\Users\Enqel\AppData\Local\PDF24

2013-10-01 22:49 - 2013-10-01 22:49 - 15911976 _____ (Geek Software GmbH                                          ) C:\Users\Enqel\Downloads\pdf24-creator-5.7.0.exe

2013-10-01 21:01 - 2013-10-01 21:01 - 00014200 _____ C:\Users\Enqel\Downloads\miscellaneous_geschirrspuler-nordrhein-westfalen_nordrhein-westfalen-nw.kml

2013-09-30 18:06 - 2013-09-30 17:34 - 00000000 ____D C:\Users\Enqel\AppData\Local\IM

2013-09-30 17:35 - 2013-09-30 17:35 - 00000000 ____D C:\ProgramData\Photo Notifier and Animation Creator

2013-09-30 17:35 - 2013-09-30 17:35 - 00000000 ____D C:\Program Files (x86)\Photo Notifier and Animation Creator

2013-09-30 17:35 - 2013-09-30 17:34 - 00000000 ____D C:\ProgramData\IM

2013-09-30 17:34 - 2013-09-30 17:34 - 00000000 ____D C:\ProgramData\IncrediMail

2013-09-30 17:34 - 2013-09-30 17:34 - 00000000 ____D C:\Program Files (x86)\IncrediMail

2013-09-30 14:34 - 2009-07-14 06:45 - 00376144 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-30 11:01 - 2013-10-08 19:25 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-09-30 11:01 - 2013-10-08 19:25 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-09-30 11:01 - 2013-10-08 19:25 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-09-30 11:01 - 2013-10-08 19:25 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-09-29 23:01 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp

2013-09-29 20:34 - 2013-09-19 18:02 - 00000000 ____D C:\Users\Enqel\AppData\Local\Canon Easy-PhotoPrint EX

2013-09-29 20:30 - 2013-05-18 01:41 - 00092608 _____ C:\Users\Enqel\AppData\Local\GDIPFONTCACHEV1.DAT

2013-09-29 18:09 - 2013-09-29 18:09 - 00000400 _____ C:\Windows\ODBC.INI

2013-09-29 18:08 - 2009-07-14 20:18 - 00000000 ____D C:\Windows\ShellNew

2013-09-29 18:08 - 2009-07-14 04:34 - 00000499 _____ C:\Windows\win.ini

2013-09-29 18:07 - 2013-08-30 13:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2013-09-29 18:06 - 2013-09-29 18:06 - 00000000 ____D C:\Windows\PCHEALTH

2013-09-29 18:05 - 2013-05-18 01:10 - 00000000 ____D C:\Users\Enqel\AppData\Local\VirtualStore

2013-09-29 18:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system

2013-09-25 23:24 - 2013-09-25 23:23 - 01269936 _____ C:\Windows\Minidump\092513-73648-01.dmp

2013-09-24 18:26 - 2013-09-24 18:26 - 00000000 ____D C:\ProgramData\Apple Computer

2013-09-24 18:11 - 2013-09-24 18:10 - 00000000 ____D C:\ProgramData\Apple

2013-09-23 20:16 - 2013-09-23 20:16 - 01653360 _____ C:\Windows\Minidump\092313-18610-01.dmp

2013-09-21 21:50 - 2013-09-21 21:50 - 01653808 _____ C:\Windows\Minidump\092113-32588-01.dmp

2013-09-21 02:20 - 2013-09-21 00:43 - 00000000 ____D C:\Users\Enqel\AppData\Local\JDownloader v2.0

2013-09-21 02:19 - 2013-09-21 02:19 - 00000000 ____D C:\Users\Enqel\.appwork

2013-09-21 02:19 - 2013-05-18 01:08 - 00000000 ____D C:\Users\Enqel

2013-09-19 18:01 - 2013-09-19 18:01 - 00000000 ___HD C:\ProgramData\CanonIJEPPEX

2013-09-12 16:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-09-12 15:42 - 2013-09-12 15:42 - 00000000 ___HD C:\ProgramData\CanonIJSolutionMenu

2013-09-12 15:29 - 2013-09-12 15:29 - 00000000 ____D C:\Users\Enqel\AppData\Roaming\CD-LabelPrint

2013-09-12 15:26 - 2013-09-12 15:26 - 00000000 ___HD C:\ProgramData\CanonIJMyPrinter

2013-09-12 15:26 - 2013-09-12 15:14 - 00000000 ____D C:\Program Files (x86)\Canon

2013-09-12 15:17 - 2013-09-12 15:17 - 00000000 ____D C:\Program Files\Canon

2013-09-12 14:39 - 2013-05-18 01:10 - 00000000 ___RD C:\Users\Enqel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
 

Some content of TEMP:

====================

C:\Users\Enqel\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-10-01 01:01
 

==================== End Of Log ============================

--- --- ---