Trojaner-Board
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   PC mit nation zoom infiziert - adw-cleaner läuft nicht (https://www.trojaner-board.de/147969-pc-nation-zoom-infiziert-adw-cleaner-laeuft.html)

cosinus 15.01.2014 12:19
Meine Hinweise überlesen und Anleitung auch nicht richtig gelesen? :D

Du solltest lt. Anleitung eh als erstes den Dienst ausknippsen und dann erwähnte ich ausdrücklich nichts weiter zu machen, also Finger von regedit

monty2000 15.01.2014 12:30
Ich komme einfach nicht damit klar, den Dienst abzuschalten. Ich weiß einfach nicht, wo ich services.msc eingeben soll. Hilfe.

Jetzt habe ich in das Suchfeld Defender eingegeben und die Meldung lautet: Defender ist deaktiviert.

cosinus 15.01.2014 12:35
Das kommt durch die seltendämiche Voreinstellung von Windows 7, den Befehl "Ausführen" nicht mehr anzuzeigen :headbang:

Drücke Win-Taste+R, dann kommt "ausführen"

monty2000 15.01.2014 12:57
Damit bin ich jetzt klar gekommen. Windows Defender wird gelistet und ich kann das Programm nur starten, also ist der Defender definitiv ausgeschaltet. Das Programm malware bytes anti-rootkit habe ich herunter geladen und ein update gemacht, es wurden auch Daten nachgezogen. Jetzt nach dem Scan sagt das Programm scan finished no malware found. Die Funktion clean up kann ich folglich auch nicht ausführen.

cosinus 15.01.2014 13:16
Dienst-Starttyp auf deaktiviert bitte setzen
Und das Log von MBAM/MBAR immer posten, egal ob Fund oder kein Fund

monty2000 15.01.2014 14:09
Der Dienst-Starttyp ist auf deaktiviert, war vorher noch manuell gesetzt. Malwarebytes anti-root kits habe ich keine log datei, gibt es auch keinen Reiter, wo diese hinterlegt sein könnte. Die log-Datei von Malwarebytes anti-malware sind so aus:

Code:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.15.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16750
Thomas :: THOMAS-PC [Administrator]

15.01.2014 13:38:06
mbam-log-2014-01-15 (13-38-06).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 742
Laufzeit: 14 Sekunde(n) [Abgebrochen]

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
Lasse gerade nochmal mit malwarebytes den Rechner scann - nicht malwarebytes anti-root kit, jetzt sind schon 8 infizierte Objekte gefunden, vorher waren das immer 0

Der Scan läuft noch. Den Inhalt der Log-Datei post ich dann, ich muss erst mal für drei oder vier Stunden weg vom PC. Schon mal für die Hilfe vielen Dank bis dahin.

So, fertig, es wurden 59 infizierte Objekte gefunden, die Log Datei:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.15.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16750
Thomas :: THOMAS-PC [Administrator]

15.01.2014 13:41:33
MBAM-log-2014-01-15 (14-08-10).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 319385
Laufzeit: 26 Minute(n), 5 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 1
C:\Users\Thomas\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt.

Infizierte Registrierungsschlüssel: 17
HKCR\CLSID\{11111111-1111-1111-1111-110411771118} (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
HKCR\TypeLib\{44444444-4444-4444-4444-440444774418} (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
HKCR\Interface\{55555555-5555-5555-5555-550455775518} (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
HKCR\CrossriderApp0047718.BHO.1 (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411771118} (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411771118} (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Digital Sites (PUP.Optional.Updater) -> Keine Aktion durchgeführt.
HKCR\CrossriderApp0047718.BHO (PUP.Optional.CrossRider.A) -> Keine Aktion durchgeführt.
HKCR\CrossriderApp0047718.Sandbox (PUP.Optional.CrossRider.A) -> Keine Aktion durchgeführt.
HKCR\CrossriderApp0047718.Sandbox.1 (PUP.Optional.CrossRider.A) -> Keine Aktion durchgeführt.
HKCU\Software\AppDataLow\Software\Crossrider (PUP.Optional.CrossRider.A) -> Keine Aktion durchgeführt.
HKCU\Software\Conduit\ValueApps (PUP.Optional.ValueApps.A) -> Keine Aktion durchgeführt.
HKCU\Software\InstallCore\1I1T1Q1S (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt.
HKCU\Software\InstalledBrowserExtensions\Plus HD (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Plus-HD-5.0 (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-5.0 (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 2
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|NextLive (PUP.Optional.NextLive.A) -> Daten: C:\Windows\SysWOW64\rundll32.exe "C:\Users\Thomas\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l -> Keine Aktion durchgeführt.
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0H1L1J1L1S1R1N -> Keine Aktion durchgeführt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 4
C:\Users\Thomas\AppData\Roaming\DigitalSites\UpdateProc (PUP.Optional.Updater) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0 (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Users\Thomas\AppData\Roaming\newnext.me (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt.
C:\Users\Thomas\AppData\Roaming\newnext.me\cache (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt.

Infizierte Dateien: 35
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-bho.dll (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\$Recycle.Bin\S-1-5-21-2289885442-4140198015-1878333020-1000\$RB7DG7S.exe (PUP.Optional.JumpyApps.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-bg.exe (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-bho64.dll (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-buttonutil.exe (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-buttonutil64.exe (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-chromeinstaller.exe (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-codedownloader.exe (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-enabler.exe (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-firefoxinstaller.exe (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-updater.exe (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\utils.exe (PUP.Optional.PlusHD.A.A) -> Keine Aktion durchgeführt.
C:\Users\Thomas\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe (PUP.Optional.JumpyApps.A) -> Keine Aktion durchgeführt.
C:\Users\Thomas\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe (PUP.Optional.Updater) -> Keine Aktion durchgeführt.
C:\Users\Thomas\AppData\Roaming\DigitalSites\UpdateProc\config.dat (PUP.Optional.Updater) -> Keine Aktion durchgeführt.
C:\Users\Thomas\AppData\Roaming\DigitalSites\UpdateProc\prod.dat (PUP.Optional.Updater) -> Keine Aktion durchgeführt.
C:\Users\Thomas\AppData\Roaming\DigitalSites\UpdateProc\STTL.DAT (PUP.Optional.Updater) -> Keine Aktion durchgeführt.
C:\Users\Thomas\AppData\Roaming\DigitalSites\UpdateProc\TTL.DAT (PUP.Optional.Updater) -> Keine Aktion durchgeführt.
C:\Windows\Tasks\Plus-HD-5.0-chromeinstaller.job (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Windows\Tasks\Plus-HD-5.0-codedownloader.job (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Windows\Tasks\Plus-HD-5.0-enabler.job (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Windows\Tasks\Plus-HD-5.0-firefoxinstaller.job (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Windows\Tasks\Plus-HD-5.0-updater.job (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Users\Thomas\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\47718.crx (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\47718.xpi (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\background.html (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\Installer.log (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-buttonutil.dll (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-buttonutil64.dll (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-helper.exe (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0.ico (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Plus-HD-5.0\Uninstall.exe (PUP.Optional.PlusHD.A) -> Keine Aktion durchgeführt.
C:\Users\Thomas\AppData\Roaming\newnext.me\nengine.cookie (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt.
C:\Users\Thomas\AppData\Roaming\newnext.me\cache\spark.bin (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt.

(Ende)

cosinus 15.01.2014 14:17
Zitat:
Malwarebytes anti-root kits habe ich keine log datei, gibt es auch keinen Reiter,
MBAR Anleitung auch nicht richtig gelesen? :(

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

monty2000 15.01.2014 16:50
Jo, hast Recht - hier der Inhalt
Code:
Malwarebytes Anti-Rootkit BETA 1.07.0.1008
www.malwarebytes.org

Database version: v2014.01.15.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16750
Thomas :: THOMAS-PC [administrator]

15.01.2014 13:31:50
mbar-log-2014-01-15 (13-31-50).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 217100
Time elapsed: 4 minute(s), 30 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus 16.01.2014 00:15
Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


monty2000 17.01.2014 16:08
Keine Veränderungen mehr im Windows Explorer und bei firefox mehr fesstellbar.


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-01-2014 02
Ran by Thomas (administrator) on THOMAS-PC on 17-01-2014 16:06:24
Running from C:\Users\Thomas\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(ASCOMP Software GmbH) C:\Program Files (x86)\ASCOMP Software\BackUp Maker\bkmaker.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Nico Mak Computing) C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Program Files (x86)\Audials\Audials 10\AudialsNotifier.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18643560 2013-03-01] (Skype Technologies S.A.)
HKCU\...\Run: [AudialsNotifier] - C:\Program Files (x86)\Audials\Audials 10\AudialsNotifier.exe [529160 2013-10-07] ()
HKCU\...\Run: [AVG-Secure-Search-Update_1213b] - C:\Users\Thomas\AppData\Roaming\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe /PROMPT /mid=ffe8eb71ad1647d28e0a6da73dbd88ea-e9180a3c514b514e5221273bfcc873366752bc60 /CMPID=1213b
MountPoints2: {c922d141-7ae0-11e3-94d7-806e6f6e6963} - E:\tools\shelexec.exe ..\html\index.htm

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - c:\program files (x86)\internet explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298&q={searchTerms}
SearchScopes: HKLM - {8E270047-CE1C-4E28-8B53-EFC3F5C0F197} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE9TR&src=IE9TR&pc=MASBJS
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=5c43be52-fdf1-f595-93c1-9074396a2577&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=11/01/2014&type=hp1000
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {8E270047-CE1C-4E28-8B53-EFC3F5C0F197} URL =
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO: Plus-HD-5.0 - {11111111-1111-1111-1111-110411771118} - C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-bho64.dll No File
BHO: Yahoo Community Smartbar (by Linkury)Engine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Inbox Toolbar - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - C:\Program Files (x86)\Inbox Toolbar\Inbox64.dll No File
BHO: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - Yahoo Community Smartbar (by Linkury) - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - &Inbox Toolbar - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - C:\Program Files (x86)\Inbox Toolbar\Inbox64.dll No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - C:\PROGRA~2\INBOXT~1\Inbox64.dll No File
Handler-x32: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - C:\PROGRA~2\INBOXT~1\Inbox.dll No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default
FF user.js: detected! => C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Plus-HD-5.0 - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\Extensions\8c6c8c15-21d7-4f62-8a57-202aee8f7fb3@6567ba21-e435-4eb0-838d-8395b2265c30.com [2014-01-15]
FF Extension: The weDownload Manager - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\Extensions\b1ac2ff7-8e51-4bb6-8bf8-87f1d567919a@4bb97481-aead-4c2e-a62b-e25e264651bb.com [2014-01-11]
FF Extension: Inbox Toolbar - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\Extensions\inboxcomtoolbar@inbox.com [2014-01-11]
FF Extension: Yahoo Community Smartbar - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\Extensions\{5c43be52-fdf1-f595-93c1-9074396a2577} [2014-01-11]
FF Extension: Value Apps - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\Extensions\{94cd2cc3-083f-49ba-a218-4cda4b4829fd} [2014-01-14]
FF Extension: MySearchDial NewTab - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} [2014-01-11]
FF HKLM-x32\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

==================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)

==================== Drivers (Whitelisted) ====================

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-10-07] (Audials AG)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 DIRECTIO; \??\UNC\srv1c027.wds8.intern\reminst\Test\BitPro64\DirectIo.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-17 16:06 - 2014-01-17 16:06 - 00000000 ____D C:\Users\Thomas\Downloads\FRST-OlderVersion
2014-01-15 12:34 - 2014-01-15 20:04 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-15 12:33 - 2014-01-15 13:36 - 00000000 ____D C:\Users\Thomas\Desktop\mbar
2014-01-15 12:33 - 2014-01-15 13:29 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-15 12:31 - 2014-01-15 12:32 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Thomas\Downloads\mbar-1.07.0.1008.exe
2014-01-15 11:49 - 2014-01-15 11:49 - 00000085 _____ C:\Windows\wininit.ini
2014-01-15 10:55 - 2014-01-15 10:55 - 00107166 _____ C:\Scan FRST - malwarebytes 20150115 - 10-20 Uhr.txt
2014-01-15 10:50 - 2014-01-15 10:50 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
2014-01-15 10:49 - 2014-01-17 15:56 - 00000296 _____ C:\Windows\Tasks\Digital Sites.job
2014-01-15 10:49 - 2014-01-17 15:49 - 00000292 _____ C:\Windows\Tasks\FoxTab.job
2014-01-15 10:49 - 2014-01-15 20:04 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DigitalSites
2014-01-15 10:49 - 2014-01-15 10:56 - 00003240 _____ C:\Windows\System32\Tasks\Digital Sites
2014-01-15 10:49 - 2014-01-15 10:49 - 00003236 _____ C:\Windows\System32\Tasks\FoxTab
2014-01-15 10:49 - 2014-01-15 10:49 - 00000005 _____ C:\Users\Thomas\AppData\Roaming\WBPU-TTL.DAT
2014-01-15 10:47 - 2014-01-15 10:47 - 00000000 ____D C:\Program Files (x86)\7-Zip
2014-01-15 10:46 - 2014-01-15 10:46 - 01110476 _____ C:\Users\Thomas\Downloads\7z920.exe
2014-01-15 10:32 - 2014-01-15 10:38 - 00023995 _____ C:\Users\Thomas\Downloads\Addition.txt
2014-01-15 10:31 - 2014-01-17 16:06 - 00012339 _____ C:\Users\Thomas\Downloads\FRST.txt
2014-01-15 10:31 - 2014-01-17 16:06 - 00000000 ____D C:\FRST
2014-01-15 10:30 - 2014-01-17 16:06 - 02075648 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe
2014-01-15 08:39 - 2014-01-15 08:39 - 01236282 _____ C:\Users\Thomas\Downloads\AdwCleaner.exe
2014-01-15 02:30 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 02:30 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 02:30 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 02:30 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 02:30 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 02:30 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 02:30 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 02:30 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 02:30 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 17:49 - 2014-01-14 17:49 - 01236282 _____ C:\Users\Thomas\Downloads\adwcleaner_3.017.exe
2014-01-14 17:48 - 2014-01-14 17:48 - 00001158 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-14 17:48 - 2014-01-14 17:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-14 13:39 - 2014-01-15 09:05 - 00000000 ____D C:\AdwCleaner
2014-01-14 13:01 - 2014-01-14 13:01 - 00003696 _____ C:\Windows\System32\Tasks\WinZip Malware Protector
2014-01-14 12:37 - 2014-01-16 11:12 - 00003116 _____ C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-01-14 12:37 - 2014-01-14 13:32 - 00000000 ____D C:\Program Files (x86)\WinZip Malware Protector
2014-01-14 12:37 - 2014-01-14 12:37 - 00001200 _____ C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-01-14 12:37 - 2014-01-14 12:37 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Nico Mak Computing
2014-01-14 12:37 - 2014-01-14 12:37 - 00000000 ____D C:\ProgramData\Nico Mak Computing
2014-01-14 12:37 - 2013-03-15 17:10 - 00020480 _____ C:\Windows\system32\wsusnative64.exe
2014-01-14 12:22 - 2014-01-15 11:50 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-01-14 12:22 - 2014-01-15 11:49 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-14 12:22 - 2014-01-14 12:22 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2014-01-14 10:43 - 2014-01-14 10:43 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Malwarebytes
2014-01-14 10:42 - 2014-01-14 10:42 - 00001120 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-14 10:42 - 2014-01-14 10:42 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-14 10:42 - 2014-01-14 10:42 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-14 10:42 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-14 08:42 - 2014-01-14 09:16 - 00000000 ____D C:\Users\Thomas\AppData\Local\CrashDumps
2014-01-14 08:26 - 2014-01-14 09:43 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2014-01-14 05:44 - 2014-01-15 20:08 - 00000000 ____D C:\Users\Thomas\AppData\Local\Mobogenie
2014-01-14 05:44 - 2014-01-15 11:07 - 00000000 ____D C:\Users\Thomas\AppData\Local\cache
2014-01-14 05:44 - 2014-01-15 10:50 - 00000000 ____D C:\Users\Thomas\AppData\Local\genienext
2014-01-14 05:44 - 2014-01-14 05:44 - 00000000 ____D C:\Users\Thomas\Documents\Mobogenie
2014-01-14 05:44 - 2014-01-14 05:44 - 00000000 ____D C:\Users\Thomas\.android
2014-01-14 05:44 - 2014-01-14 05:44 - 00000000 _____ C:\Users\Thomas\daemonprocess.txt
2014-01-14 05:43 - 2014-01-14 11:13 - 00000000 ____D C:\Users\Thomas\AppData\Local\Conduit
2014-01-14 05:43 - 2014-01-14 11:13 - 00000000 ____D C:\Program Files\Conduit
2014-01-14 05:43 - 2014-01-14 10:26 - 00000000 ____D C:\ProgramData\WPM
2014-01-14 05:43 - 2014-01-14 09:42 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-14 05:43 - 2014-01-14 05:43 - 00000000 _____ C:\END
2014-01-14 05:42 - 2014-01-14 09:42 - 00000000 ____D C:\Users\Thomas\AppData\Local\Lollipop
2014-01-12 15:21 - 2014-01-12 15:21 - 00000000 ____D C:\Windows\System32\Tasks\Games
2014-01-12 12:22 - 2014-01-12 12:22 - 00000954 _____ C:\Users\Public\Desktop\Audials 10.lnk
2014-01-12 12:22 - 2014-01-12 12:22 - 00000000 ____D C:\Users\Thomas\AppData\Local\CrashRpt
2014-01-12 12:21 - 2014-01-12 12:21 - 00000000 ____D C:\ProgramData\RapidSolution
2014-01-12 12:21 - 2014-01-12 12:21 - 00000000 ____D C:\Program Files (x86)\Audials
2014-01-12 12:19 - 2014-01-12 12:19 - 00000000 ____D C:\Users\Thomas\AppData\Local\RapidSolution
2014-01-12 12:17 - 2014-01-12 12:17 - 01552920 _____ (RapidSolution Software AG) C:\Users\Thomas\Downloads\ComputerBildOnline_Audials_Radiotracker10_SE_10.1.6202.200_webinstaller.exe
2014-01-12 11:17 - 2014-01-12 11:17 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\OpenOffice
2014-01-12 11:14 - 2014-01-12 11:14 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-01-12 11:14 - 2014-01-12 11:14 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2014-01-12 11:02 - 2014-01-12 11:03 - 00000000 ____D C:\Users\Thomas\Desktop\OpenOffice 4.0.1 (de) Installation Files
2014-01-12 10:56 - 2014-01-12 11:02 - 163606685 _____ C:\Users\Thomas\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-12 10:50 - 2014-01-12 19:43 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Windows Live Writer
2014-01-12 10:50 - 2014-01-12 10:50 - 00000000 ____D C:\Users\Thomas\AppData\Local\Windows Live Writer
2014-01-12 10:48 - 2014-01-16 11:14 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Skype
2014-01-12 10:48 - 2014-01-12 10:48 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-12 10:48 - 2014-01-12 10:48 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-12 10:48 - 2014-01-12 10:48 - 00000000 ____D C:\ProgramData\Skype
2014-01-12 10:46 - 2014-01-12 10:46 - 00000000 ____D C:\Users\Thomas\Tracing
2014-01-12 10:42 - 2014-01-12 10:42 - 00000000 ____D C:\Windows\de
2014-01-12 10:41 - 2014-01-12 10:41 - 00000000 ____D C:\Windows\it
2014-01-12 10:41 - 2014-01-12 10:41 - 00000000 ____D C:\Windows\fr
2014-01-12 10:41 - 2014-01-12 10:41 - 00000000 ____D C:\Windows\es
2014-01-12 10:41 - 2014-01-12 10:41 - 00000000 ____D C:\Windows\en
2014-01-12 10:37 - 2014-01-12 10:37 - 00000000 ___RD C:\Users\Thomas\SkyDrive
2014-01-12 10:36 - 2014-01-12 10:50 - 00000000 ____D C:\Users\Thomas\AppData\Local\Windows Live
2014-01-12 10:23 - 2014-01-12 10:28 - 142602520 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\wlsetup-all.exe
2014-01-12 09:59 - 2014-01-12 09:59 - 00003438 _____ C:\Windows\System32\Tasks\BackUp_Maker-Thomas
2014-01-12 09:59 - 2014-01-12 09:59 - 00002161 _____ C:\Users\Public\Desktop\BackUp Maker.lnk
2014-01-12 09:59 - 2014-01-12 09:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\ASCOMP Software
2014-01-12 09:59 - 2014-01-12 09:59 - 00000000 ____D C:\Program Files (x86)\ASCOMP Software
2014-01-12 09:58 - 2014-01-12 09:58 - 06902616 _____ (ASCOMP Software GmbH                                        ) C:\Users\Thomas\Downloads\bkmaker.exe
2014-01-12 01:54 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-01-12 01:54 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-01-12 01:54 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-01-12 01:54 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-01-12 01:52 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-01-12 01:37 - 2014-01-12 01:53 - 00016477 _____ C:\Windows\IE11_main.log
2014-01-12 01:22 - 2014-01-12 01:22 - 19271168 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 14356992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 13761536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-01-12 01:22 - 2014-01-12 01:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-12 01:22 - 2014-01-12 01:22 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-12 01:22 - 2014-01-12 01:22 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-01-12 01:22 - 2014-01-12 01:22 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-01-12 01:22 - 2014-01-12 01:22 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-12 01:22 - 2014-01-12 01:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-12 01:22 - 2014-01-12 01:22 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-01-12 01:22 - 2014-01-12 01:22 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-12 01:22 - 2014-01-12 01:22 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-01-12 01:22 - 2014-01-12 01:22 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-01-12 01:20 - 2014-01-12 01:32 - 00014476 _____ C:\Windows\IE10_main.log
2014-01-12 01:19 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2014-01-12 00:36 - 2014-01-15 20:26 - 00000000 ____D C:\Users\Thomas\AppData\Local\Microsoft Games
2014-01-12 00:29 - 2014-01-12 00:29 - 00002168 _____ C:\Users\Public\Desktop\Moorhuhn Remake starten.lnk
2014-01-12 00:23 - 2014-01-12 00:24 - 08862099 _____ (InstallShield Software Corporation) C:\Users\Thomas\Downloads\Setup_MHRemake.exe
2014-01-12 00:16 - 2014-01-12 00:24 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-12 00:16 - 2014-01-12 00:24 - 00000000 ____D C:\Program Files (x86)\phenomedia
2014-01-12 00:16 - 2014-01-12 00:16 - 00002302 _____ C:\Users\Public\Desktop\Moorhuhn Kart 3 Demo spielen.lnk
2014-01-12 00:13 - 2014-01-12 00:13 - 01444352 _____ C:\Users\Thomas\Downloads\7z922-x64.msi
2014-01-12 00:09 - 2014-01-12 00:14 - 62027866 _____ C:\Users\Thomas\Downloads\Setup_Moorhuhn_Kart3-Demo.zip
2014-01-11 23:47 - 2014-01-11 23:47 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-01-11 23:47 - 2014-01-11 23:47 - 00000000 ____D C:\ProgramData\TuneUp Software
2014-01-11 23:30 - 2014-01-14 05:43 - 00002319 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-01-11 23:29 - 2014-01-11 23:29 - 00001543 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-01-11 23:29 - 2014-01-11 23:29 - 00001250 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-01-11 23:29 - 2014-01-11 23:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DVDVideoSoft
2014-01-11 23:29 - 2014-01-11 23:29 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2014-01-11 23:27 - 2014-01-11 23:28 - 34008992 _____ (DVDVideoSoft Ltd.                                          ) C:\Users\Thomas\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-11 23:23 - 2014-01-11 23:23 - 00002026 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-11 23:23 - 2014-01-11 23:23 - 00000000 ____D C:\ProgramData\Adobe
2014-01-11 23:23 - 2014-01-11 23:23 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-11 23:19 - 2014-01-11 23:19 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Ashampoo
2014-01-11 23:18 - 2014-01-11 23:18 - 00001314 _____ C:\Users\Public\Desktop\Ashampoo Burning Studio FREE.lnk
2014-01-11 23:18 - 2014-01-11 23:18 - 00000000 ____D C:\Users\Thomas\AppData\Local\ashampoo
2014-01-11 23:18 - 2014-01-11 23:18 - 00000000 ____D C:\ProgramData\Ashampoo
2014-01-11 23:18 - 2014-01-11 23:18 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2014-01-11 23:16 - 2014-01-11 23:18 - 29337984 _____ (Ashampoo GmbH & Co. KG                                      ) C:\Users\Thomas\Downloads\ashampoo_burning_studio_free_1.12.0_14566.exe
2014-01-11 23:15 - 2014-01-11 23:26 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\vlc
2014-01-11 23:14 - 2014-01-11 23:14 - 00000878 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-11 23:14 - 2014-01-11 23:14 - 00000000 ____D C:\Program Files\VideoLAN
2014-01-11 23:12 - 2014-01-11 23:13 - 23884615 _____ C:\Users\Thomas\Downloads\vlc-2.1.2-win64.exe
2014-01-11 23:01 - 2014-01-11 23:47 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\TuneUp Software
2014-01-11 23:01 - 2014-01-11 23:01 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute
2014-01-11 23:01 - 2014-01-11 23:01 - 00000988 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-11 23:01 - 2014-01-11 23:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\AVG2014
2014-01-11 23:00 - 2014-01-11 23:01 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-11 23:00 - 2014-01-11 23:00 - 00000000 ___HD C:\$AVG
2014-01-11 23:00 - 2014-01-11 23:00 - 00000000 ____D C:\Program Files (x86)\AVG
2014-01-11 22:59 - 2014-01-17 09:53 - 00000000 ____D C:\ProgramData\MFAData
2014-01-11 22:59 - 2014-01-12 00:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\Avg2014
2014-01-11 22:59 - 2014-01-11 22:59 - 00000000 ____D C:\Users\Thomas\AppData\Local\MFAData
2014-01-11 22:48 - 2014-01-11 22:59 - 137189352 _____ (AVG Technologies) C:\Users\Thomas\Downloads\avg_free_x86_all_2014_4259a6848.exe
2014-01-11 22:48 - 2014-01-11 22:58 - 149157408 _____ (AVG Technologies) C:\Users\Thomas\Downloads\avg_free_x64_all_2014_4259a6848.exe
2014-01-11 22:22 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-01-11 22:22 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-01-11 22:22 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-01-11 22:22 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-01-11 22:22 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-01-11 22:22 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-01-11 22:22 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-01-11 22:22 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-01-11 22:22 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-01-11 22:22 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-01-11 22:22 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-01-11 22:22 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-01-11 22:22 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-01-11 22:22 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-01-11 22:22 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-01-11 22:22 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-01-11 22:22 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-01-11 22:22 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-01-11 22:22 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-01-11 22:22 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-01-11 22:22 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-01-11 22:22 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-01-11 22:22 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-01-11 22:22 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-01-11 22:22 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-01-11 22:22 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-01-11 22:22 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-01-11 22:22 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-01-11 22:22 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-01-11 22:22 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-01-11 22:22 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-01-11 22:22 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-01-11 22:22 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-01-11 22:22 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-01-11 22:22 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-01-11 22:22 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-01-11 22:22 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-01-11 22:22 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-01-11 22:22 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-01-11 22:22 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-01-11 22:22 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-01-11 22:22 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-01-11 22:22 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-01-11 22:22 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-01-11 22:22 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-01-11 22:22 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-01-11 22:22 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-01-11 22:22 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-01-11 22:22 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-01-11 22:22 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-01-11 22:22 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-01-11 22:22 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-01-11 22:22 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-01-11 22:22 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-01-11 22:22 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-01-11 22:22 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-01-11 22:22 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-01-11 22:22 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-01-11 22:22 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-01-11 22:22 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-01-11 22:22 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-01-11 22:22 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-01-11 22:22 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-01-11 22:22 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-01-11 22:22 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-01-11 22:22 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-01-11 22:22 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-01-11 22:22 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-01-11 22:22 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-01-11 22:22 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-01-11 22:22 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-01-11 22:22 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-01-11 22:22 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-01-11 22:22 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-01-11 22:22 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-01-11 22:22 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-01-11 22:22 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-01-11 22:22 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-01-11 22:22 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-01-11 22:22 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-01-11 22:22 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-01-11 22:22 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-01-11 22:22 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-01-11 22:22 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-01-11 22:22 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-01-11 22:22 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-01-11 22:22 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-01-11 22:22 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-01-11 22:22 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-01-11 22:22 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-01-11 22:22 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-01-11 22:22 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-01-11 22:21 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-01-11 22:11 - 2014-01-15 10:49 - 00000166 _____ C:\Users\Thomas\AppData\Roaming\WB.CFG
2014-01-11 21:59 - 2014-01-13 03:18 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\BOM
2014-01-11 21:59 - 2014-01-11 22:00 - 00000000 ____D C:\Program Files (x86)\Biet-O-Matic
2014-01-11 21:59 - 2014-01-11 21:59 - 00001036 _____ C:\Users\Public\Desktop\Biet-O-Matic.lnk
2014-01-11 21:59 - 2003-01-07 02:22 - 00015873 _____ C:\Windows\SysWOW64\Inetde.dll
2014-01-11 21:59 - 2000-12-05 23:00 - 00109248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mswinsck.ocx
2014-01-11 21:59 - 2000-10-01 23:00 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vb6de.dll
2014-01-11 21:59 - 2000-05-22 15:58 - 00115920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.ocx
2014-01-11 21:59 - 2000-05-21 23:00 - 01066176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscomctl.ocx
2014-01-11 21:59 - 2000-04-03 19:06 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winskde.dll
2014-01-11 21:59 - 2000-04-03 19:05 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstdfmt.dll
2014-01-11 21:59 - 1999-07-14 13:07 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stdftde.dll
2014-01-11 21:59 - 1998-07-05 23:00 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscmcde.dll
2014-01-11 21:59 - 1998-07-05 23:00 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Tabctde.dll
2014-01-11 21:59 - 1998-06-23 23:00 - 00209192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Tabctl32.ocx
2014-01-11 21:57 - 2014-01-11 21:58 - 04653537 _____ C:\Users\Thomas\Downloads\BOM21412_setup.exe
2014-01-11 21:54 - 2014-01-11 21:54 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Macromedia
2014-01-11 21:54 - 2014-01-11 21:54 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Adobe
2014-01-11 21:54 - 2014-01-11 21:54 - 00000000 ____D C:\Users\Thomas\AppData\Local\Macromedia
2014-01-11 21:28 - 2014-01-11 21:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-11 21:28 - 2014-01-11 21:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-11 21:28 - 2014-01-11 21:28 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2014-01-11 21:28 - 2014-01-11 21:28 - 00000000 ____D C:\Windows\system32\Macromed
2014-01-11 21:24 - 2014-01-11 23:25 - 00000000 ____D C:\Users\Thomas\AppData\Local\Adobe
2014-01-11 21:12 - 2014-01-11 21:12 - 00508240 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\ie6setupOe{1}.exe
2014-01-11 21:07 - 2014-01-11 21:07 - 00508240 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\ie6setupOe.exe
2014-01-11 21:07 - 2014-01-11 21:07 - 00000877 _____ C:\Windows\Active Setup Log.BAK
2014-01-11 21:06 - 2014-01-12 12:24 - 00064024 _____ C:\Users\Thomas\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-11 20:50 - 2014-01-14 17:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-11 20:50 - 2014-01-11 20:50 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Mozilla
2014-01-11 20:50 - 2014-01-11 20:50 - 00000000 ____D C:\Users\Thomas\AppData\Local\Mozilla
2014-01-11 20:50 - 2014-01-11 20:50 - 00000000 ____D C:\ProgramData\Mozilla
2014-01-11 20:42 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-01-11 20:42 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-01-11 20:42 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-01-11 20:42 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-01-11 20:42 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-01-11 20:42 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-01-11 20:42 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-01-11 20:42 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-01-11 20:42 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-01-11 18:05 - 2014-01-14 09:43 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-11 18:05 - 2014-01-14 05:44 - 00000000 ____D C:\Users\Thomas
2014-01-11 18:05 - 2014-01-14 05:43 - 00001652 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-11 18:05 - 2014-01-12 10:37 - 00002192 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-01-11 18:05 - 2014-01-11 18:05 - 00000020 ___SH C:\Users\Thomas\ntuser.ini
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\Startmenü
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\Eigene Dateien
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\Documents\Eigene Musik
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\Documents\Eigene Bilder
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Vorlagen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Netzwerkumgebung
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Lokale Einstellungen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Druckumgebung
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\AppData\Local\Verlauf
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\AppData\Local\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Vorlagen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Startmenü
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Programme
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Vorlagen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Startmenü
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Favoriten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Dokumente
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Dokumente und Einstellungen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 ____D C:\Users\Thomas\AppData\Local\VirtualStore
2014-01-11 18:05 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-11 18:05 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-01-11 18:00 - 2014-01-16 13:00 - 01545682 _____ C:\Windows\WindowsUpdate.log
2014-01-07 17:46 - 2014-01-07 18:32 - 00000388 _____ C:\Windows\SysWOW64\gpu-temperature.xml
2014-01-07 17:44 - 2014-01-07 18:32 - 00001777 _____ C:\Windows\SysWOW64\FurMark_0001.log
2014-01-07 17:42 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-01-07 17:42 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-01-07 17:42 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-01-07 17:42 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-01-07 17:42 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-01-07 17:42 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-01-07 17:42 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-01-07 17:42 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-01-07 17:42 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-01-07 17:42 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-01-07 17:42 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-01-07 17:42 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-01-07 17:42 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-01-07 17:42 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-01-07 17:42 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-01-07 17:42 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-01-07 17:42 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-01-07 17:42 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-01-07 17:42 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-01-07 17:42 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-01-07 17:42 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-01-07 17:42 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-01-07 17:42 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-01-07 17:42 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-01-07 17:42 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-01-07 17:42 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-01-07 17:42 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-01-07 17:42 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-01-07 17:42 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-01-07 17:42 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-01-07 17:42 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-01-07 17:42 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-01-07 17:42 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-01-07 17:42 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-01-07 17:42 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-01-07 17:42 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-01-07 17:42 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-01-07 17:42 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-01-07 17:42 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-01-07 17:42 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-01-07 17:42 - 2007-07-20 00:54 - 00021352 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_2.dll
2014-01-07 17:42 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-01-07 17:42 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-01-07 17:42 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-01-07 17:42 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-01-07 17:42 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-01-07 17:42 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-01-07 17:42 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-01-07 17:42 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-01-07 17:42 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-01-07 17:42 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-01-07 17:42 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-01-07 17:42 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-01-07 17:42 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-01-07 17:42 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-01-07 17:42 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-01-07 17:42 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-01-07 17:42 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-01-07 17:42 - 2006-09-28 16:03 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-01-07 17:42 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-01-07 17:42 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-01-07 17:42 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-01-07 17:42 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-01-07 17:42 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-01-07 17:42 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-01-07 17:41 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-01-07 17:41 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-01-07 17:41 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-01-07 17:41 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-01-07 17:41 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-01-07 17:41 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-01-07 17:41 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-01-07 17:41 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-01-07 17:41 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-01-07 17:41 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-01-07 17:41 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-01-07 17:41 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-01-07 17:41 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-01-07 17:41 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-01-07 17:41 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-01-07 17:41 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-01-07 17:41 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-01-07 17:41 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll

==================== One Month Modified Files and Folders =======

2014-01-17 16:06 - 2014-01-17 16:06 - 00000000 ____D C:\Users\Thomas\Downloads\FRST-OlderVersion
2014-01-17 16:06 - 2014-01-15 10:31 - 00012339 _____ C:\Users\Thomas\Downloads\FRST.txt
2014-01-17 16:06 - 2014-01-15 10:31 - 00000000 ____D C:\FRST
2014-01-17 16:06 - 2014-01-15 10:30 - 02075648 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe
2014-01-17 15:56 - 2014-01-15 10:49 - 00000296 _____ C:\Windows\Tasks\Digital Sites.job
2014-01-17 15:49 - 2014-01-15 10:49 - 00000292 _____ C:\Windows\Tasks\FoxTab.job
2014-01-17 15:21 - 2014-01-11 18:00 - 01545682 _____ C:\Windows\WindowsUpdate.log
2014-01-17 09:53 - 2014-01-11 22:59 - 00000000 ____D C:\ProgramData\MFAData
2014-01-16 11:19 - 2009-07-14 05:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-16 11:19 - 2009-07-14 05:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-16 11:14 - 2014-01-12 10:48 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Skype
2014-01-16 11:12 - 2014-01-14 12:37 - 00003116 _____ C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-01-16 11:12 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-16 11:12 - 2009-07-14 05:51 - 00050427 _____ C:\Windows\setupact.log
2014-01-15 20:26 - 2014-01-12 00:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\Microsoft Games
2014-01-15 20:08 - 2014-01-14 05:44 - 00000000 ____D C:\Users\Thomas\AppData\Local\Mobogenie
2014-01-15 20:05 - 2010-11-21 04:47 - 00637716 _____ C:\Windows\PFRO.log
2014-01-15 20:04 - 2014-01-15 12:34 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-15 20:04 - 2014-01-15 10:49 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DigitalSites
2014-01-15 14:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2014-01-15 13:36 - 2014-01-15 12:33 - 00000000 ____D C:\Users\Thomas\Desktop\mbar
2014-01-15 13:29 - 2014-01-15 12:33 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-15 12:32 - 2014-01-15 12:31 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Thomas\Downloads\mbar-1.07.0.1008.exe
2014-01-15 11:54 - 2013-11-13 09:32 - 00000000 ____D C:\ProgramData\Norton
2014-01-15 11:50 - 2014-01-14 12:22 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-01-15 11:49 - 2014-01-15 11:49 - 00000085 _____ C:\Windows\wininit.ini
2014-01-15 11:49 - 2014-01-14 12:22 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-15 11:07 - 2014-01-14 05:44 - 00000000 ____D C:\Users\Thomas\AppData\Local\cache
2014-01-15 10:56 - 2014-01-15 10:49 - 00003240 _____ C:\Windows\System32\Tasks\Digital Sites
2014-01-15 10:55 - 2014-01-15 10:55 - 00107166 _____ C:\Scan FRST - malwarebytes 20150115 - 10-20 Uhr.txt
2014-01-15 10:50 - 2014-01-15 10:50 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
2014-01-15 10:50 - 2014-01-14 05:44 - 00000000 ____D C:\Users\Thomas\AppData\Local\genienext
2014-01-15 10:49 - 2014-01-15 10:49 - 00003236 _____ C:\Windows\System32\Tasks\FoxTab
2014-01-15 10:49 - 2014-01-15 10:49 - 00000005 _____ C:\Users\Thomas\AppData\Roaming\WBPU-TTL.DAT
2014-01-15 10:49 - 2014-01-11 22:11 - 00000166 _____ C:\Users\Thomas\AppData\Roaming\WB.CFG
2014-01-15 10:47 - 2014-01-15 10:47 - 00000000 ____D C:\Program Files (x86)\7-Zip
2014-01-15 10:46 - 2014-01-15 10:46 - 01110476 _____ C:\Users\Thomas\Downloads\7z920.exe
2014-01-15 10:38 - 2014-01-15 10:32 - 00023995 _____ C:\Users\Thomas\Downloads\Addition.txt
2014-01-15 09:05 - 2014-01-14 13:39 - 00000000 ____D C:\AdwCleaner
2014-01-15 08:39 - 2014-01-15 08:39 - 01236282 _____ C:\Users\Thomas\Downloads\AdwCleaner.exe
2014-01-15 08:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2014-01-15 03:16 - 2009-07-14 05:45 - 00294712 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-14 17:49 - 2014-01-14 17:49 - 01236282 _____ C:\Users\Thomas\Downloads\adwcleaner_3.017.exe
2014-01-14 17:48 - 2014-01-14 17:48 - 00001158 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-14 17:48 - 2014-01-14 17:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-14 17:48 - 2014-01-11 20:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-14 13:32 - 2014-01-14 12:37 - 00000000 ____D C:\Program Files (x86)\WinZip Malware Protector
2014-01-14 13:13 - 2011-04-12 08:43 - 00698688 _____ C:\Windows\system32\perfh007.dat
2014-01-14 13:13 - 2011-04-12 08:43 - 00148828 _____ C:\Windows\system32\perfc007.dat
2014-01-14 13:13 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-14 13:01 - 2014-01-14 13:01 - 00003696 _____ C:\Windows\System32\Tasks\WinZip Malware Protector
2014-01-14 12:37 - 2014-01-14 12:37 - 00001200 _____ C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-01-14 12:37 - 2014-01-14 12:37 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Nico Mak Computing
2014-01-14 12:37 - 2014-01-14 12:37 - 00000000 ____D C:\ProgramData\Nico Mak Computing
2014-01-14 12:22 - 2014-01-14 12:22 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2014-01-14 11:13 - 2014-01-14 05:43 - 00000000 ____D C:\Users\Thomas\AppData\Local\Conduit
2014-01-14 11:13 - 2014-01-14 05:43 - 00000000 ____D C:\Program Files\Conduit
2014-01-14 10:43 - 2014-01-14 10:43 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Malwarebytes
2014-01-14 10:42 - 2014-01-14 10:42 - 00001120 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-14 10:42 - 2014-01-14 10:42 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-14 10:42 - 2014-01-14 10:42 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-14 10:26 - 2014-01-14 05:43 - 00000000 ____D C:\ProgramData\WPM
2014-01-14 09:43 - 2014-01-14 08:26 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2014-01-14 09:43 - 2014-01-11 18:05 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-14 09:42 - 2014-01-14 05:43 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-14 09:42 - 2014-01-14 05:42 - 00000000 ____D C:\Users\Thomas\AppData\Local\Lollipop
2014-01-14 09:16 - 2014-01-14 08:42 - 00000000 ____D C:\Users\Thomas\AppData\Local\CrashDumps
2014-01-14 05:44 - 2014-01-14 05:44 - 00000000 ____D C:\Users\Thomas\Documents\Mobogenie
2014-01-14 05:44 - 2014-01-14 05:44 - 00000000 ____D C:\Users\Thomas\.android
2014-01-14 05:44 - 2014-01-14 05:44 - 00000000 _____ C:\Users\Thomas\daemonprocess.txt
2014-01-14 05:44 - 2014-01-11 18:05 - 00000000 ____D C:\Users\Thomas
2014-01-14 05:43 - 2014-01-14 05:43 - 00000000 _____ C:\END
2014-01-14 05:43 - 2014-01-11 23:30 - 00002319 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-01-14 05:43 - 2014-01-11 18:05 - 00001652 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-13 03:20 - 2011-04-12 08:55 - 00000000 ____D C:\Program Files\Windows Journal
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\SysWOW64\winrm
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\SysWOW64\WCN
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\SysWOW64\sysprep
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\system32\winrm
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\system32\WCN
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\system32\slmgr
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2014-01-13 03:20 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2014-01-13 03:20 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2014-01-13 03:20 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender
2014-01-13 03:20 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2014-01-13 03:20 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2014-01-13 03:20 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Setup
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\MUI
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\com
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sysprep
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Setup
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\oobe
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\MUI
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\migwiz
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Dism
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\com
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\servicing
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System
2014-01-13 03:18 - 2014-01-11 21:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\BOM
2014-01-12 19:43 - 2014-01-12 10:50 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Windows Live Writer
2014-01-12 15:21 - 2014-01-12 15:21 - 00000000 ____D C:\Windows\System32\Tasks\Games
2014-01-12 13:07 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2014-01-12 12:24 - 2014-01-11 21:06 - 00064024 _____ C:\Users\Thomas\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-12 12:22 - 2014-01-12 12:22 - 00000954 _____ C:\Users\Public\Desktop\Audials 10.lnk
2014-01-12 12:22 - 2014-01-12 12:22 - 00000000 ____D C:\Users\Thomas\AppData\Local\CrashRpt
2014-01-12 12:21 - 2014-01-12 12:21 - 00000000 ____D C:\ProgramData\RapidSolution
2014-01-12 12:21 - 2014-01-12 12:21 - 00000000 ____D C:\Program Files (x86)\Audials
2014-01-12 12:19 - 2014-01-12 12:19 - 00000000 ____D C:\Users\Thomas\AppData\Local\RapidSolution
2014-01-12 12:17 - 2014-01-12 12:17 - 01552920 _____ (RapidSolution Software AG) C:\Users\Thomas\Downloads\ComputerBildOnline_Audials_Radiotracker10_SE_10.1.6202.200_webinstaller.exe
2014-01-12 11:17 - 2014-01-12 11:17 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\OpenOffice
2014-01-12 11:14 - 2014-01-12 11:14 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-01-12 11:14 - 2014-01-12 11:14 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2014-01-12 11:03 - 2014-01-12 11:02 - 00000000 ____D C:\Users\Thomas\Desktop\OpenOffice 4.0.1 (de) Installation Files
2014-01-12 11:03 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2014-01-12 11:02 - 2014-01-12 10:56 - 163606685 _____ C:\Users\Thomas\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-12 10:50 - 2014-01-12 10:50 - 00000000 ____D C:\Users\Thomas\AppData\Local\Windows Live Writer
2014-01-12 10:50 - 2014-01-12 10:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\Windows Live
2014-01-12 10:48 - 2014-01-12 10:48 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-12 10:48 - 2014-01-12 10:48 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-12 10:48 - 2014-01-12 10:48 - 00000000 ____D C:\ProgramData\Skype
2014-01-12 10:48 - 2013-11-13 09:30 - 00000000 ____D C:\Program Files (x86)\Windows Live
2014-01-12 10:46 - 2014-01-12 10:46 - 00000000 ____D C:\Users\Thomas\Tracing
2014-01-12 10:42 - 2014-01-12 10:42 - 00000000 ____D C:\Windows\de
2014-01-12 10:41 - 2014-01-12 10:41 - 00000000 ____D C:\Windows\it
2014-01-12 10:41 - 2014-01-12 10:41 - 00000000 ____D C:\Windows\fr
2014-01-12 10:41 - 2014-01-12 10:41 - 00000000 ____D C:\Windows\es
2014-01-12 10:41 - 2014-01-12 10:41 - 00000000 ____D C:\Windows\en
2014-01-12 10:40 - 2013-11-13 09:30 - 00000000 ____D C:\Program Files\Windows Live
2014-01-12 10:38 - 2013-11-13 09:28 - 00006491 _____ C:\Windows\DirectX.log
2014-01-12 10:37 - 2014-01-12 10:37 - 00000000 ___RD C:\Users\Thomas\SkyDrive
2014-01-12 10:37 - 2014-01-11 18:05 - 00002192 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-01-12 10:28 - 2014-01-12 10:23 - 142602520 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\wlsetup-all.exe
2014-01-12 09:59 - 2014-01-12 09:59 - 00003438 _____ C:\Windows\System32\Tasks\BackUp_Maker-Thomas
2014-01-12 09:59 - 2014-01-12 09:59 - 00002161 _____ C:\Users\Public\Desktop\BackUp Maker.lnk
2014-01-12 09:59 - 2014-01-12 09:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\ASCOMP Software
2014-01-12 09:59 - 2014-01-12 09:59 - 00000000 ____D C:\Program Files (x86)\ASCOMP Software
2014-01-12 09:58 - 2014-01-12 09:58 - 06902616 _____ (ASCOMP Software GmbH                                        ) C:\Users\Thomas\Downloads\bkmaker.exe
2014-01-12 01:56 - 2013-11-13 09:21 - 04188794 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-12 01:53 - 2014-01-12 01:37 - 00016477 _____ C:\Windows\IE11_main.log
2014-01-12 01:32 - 2014-01-12 01:20 - 00014476 _____ C:\Windows\IE10_main.log
2014-01-12 01:22 - 2014-01-12 01:22 - 19271168 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 14356992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 13761536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-01-12 01:22 - 2014-01-12 01:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-12 01:22 - 2014-01-12 01:22 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-12 01:22 - 2014-01-12 01:22 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-01-12 01:22 - 2014-01-12 01:22 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-01-12 01:22 - 2014-01-12 01:22 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-12 01:22 - 2014-01-12 01:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-12 01:22 - 2014-01-12 01:22 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-01-12 01:22 - 2014-01-12 01:22 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-12 01:22 - 2014-01-12 01:22 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-01-12 01:22 - 2014-01-12 01:22 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-01-12 00:36 - 2014-01-11 22:59 - 00000000 ____D C:\Users\Thomas\AppData\Local\Avg2014
2014-01-12 00:29 - 2014-01-12 00:29 - 00002168 _____ C:\Users\Public\Desktop\Moorhuhn Remake starten.lnk
2014-01-12 00:24 - 2014-01-12 00:23 - 08862099 _____ (InstallShield Software Corporation) C:\Users\Thomas\Downloads\Setup_MHRemake.exe
2014-01-12 00:24 - 2014-01-12 00:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-12 00:24 - 2014-01-12 00:16 - 00000000 ____D C:\Program Files (x86)\phenomedia
2014-01-12 00:16 - 2014-01-12 00:16 - 00002302 _____ C:\Users\Public\Desktop\Moorhuhn Kart 3 Demo spielen.lnk
2014-01-12 00:14 - 2014-01-12 00:09 - 62027866 _____ C:\Users\Thomas\Downloads\Setup_Moorhuhn_Kart3-Demo.zip
2014-01-12 00:13 - 2014-01-12 00:13 - 01444352 _____ C:\Users\Thomas\Downloads\7z922-x64.msi
2014-01-11 23:47 - 2014-01-11 23:47 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-01-11 23:47 - 2014-01-11 23:47 - 00000000 ____D C:\ProgramData\TuneUp Software
2014-01-11 23:47 - 2014-01-11 23:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\TuneUp Software
2014-01-11 23:30 - 2011-04-12 08:54 - 00000000 ___RD C:\Users\Public\Recorded TV
2014-01-11 23:29 - 2014-01-11 23:29 - 00001543 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-01-11 23:29 - 2014-01-11 23:29 - 00001250 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-01-11 23:29 - 2014-01-11 23:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DVDVideoSoft
2014-01-11 23:29 - 2014-01-11 23:29 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2014-01-11 23:28 - 2014-01-11 23:27 - 34008992 _____ (DVDVideoSoft Ltd.                                          ) C:\Users\Thomas\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-11 23:26 - 2014-01-11 23:15 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\vlc
2014-01-11 23:25 - 2014-01-11 21:24 - 00000000 ____D C:\Users\Thomas\AppData\Local\Adobe
2014-01-11 23:23 - 2014-01-11 23:23 - 00002026 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-11 23:23 - 2014-01-11 23:23 - 00000000 ____D C:\ProgramData\Adobe
2014-01-11 23:23 - 2014-01-11 23:23 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-11 23:19 - 2014-01-11 23:19 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Ashampoo
2014-01-11 23:18 - 2014-01-11 23:18 - 00001314 _____ C:\Users\Public\Desktop\Ashampoo Burning Studio FREE.lnk
2014-01-11 23:18 - 2014-01-11 23:18 - 00000000 ____D C:\Users\Thomas\AppData\Local\ashampoo
2014-01-11 23:18 - 2014-01-11 23:18 - 00000000 ____D C:\ProgramData\Ashampoo
2014-01-11 23:18 - 2014-01-11 23:18 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2014-01-11 23:18 - 2014-01-11 23:16 - 29337984 _____ (Ashampoo GmbH & Co. KG                                      ) C:\Users\Thomas\Downloads\ashampoo_burning_studio_free_1.12.0_14566.exe
2014-01-11 23:14 - 2014-01-11 23:14 - 00000878 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-11 23:14 - 2014-01-11 23:14 - 00000000 ____D C:\Program Files\VideoLAN
2014-01-11 23:13 - 2014-01-11 23:12 - 23884615 _____ C:\Users\Thomas\Downloads\vlc-2.1.2-win64.exe
2014-01-11 23:01 - 2014-01-11 23:01 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute
2014-01-11 23:01 - 2014-01-11 23:01 - 00000988 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-11 23:01 - 2014-01-11 23:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\AVG2014
2014-01-11 23:01 - 2014-01-11 23:00 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-11 23:00 - 2014-01-11 23:00 - 00000000 ___HD C:\$AVG
2014-01-11 23:00 - 2014-01-11 23:00 - 00000000 ____D C:\Program Files (x86)\AVG
2014-01-11 22:59 - 2014-01-11 22:59 - 00000000 ____D C:\Users\Thomas\AppData\Local\MFAData
2014-01-11 22:59 - 2014-01-11 22:48 - 137189352 _____ (AVG Technologies) C:\Users\Thomas\Downloads\avg_free_x86_all_2014_4259a6848.exe
2014-01-11 22:58 - 2014-01-11 22:48 - 149157408 _____ (AVG Technologies) C:\Users\Thomas\Downloads\avg_free_x64_all_2014_4259a6848.exe
2014-01-11 22:00 - 2014-01-11 21:59 - 00000000 ____D C:\Program Files (x86)\Biet-O-Matic
2014-01-11 21:59 - 2014-01-11 21:59 - 00001036 _____ C:\Users\Public\Desktop\Biet-O-Matic.lnk
2014-01-11 21:58 - 2014-01-11 21:57 - 04653537 _____ C:\Users\Thomas\Downloads\BOM21412_setup.exe
2014-01-11 21:54 - 2014-01-11 21:54 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Macromedia
2014-01-11 21:54 - 2014-01-11 21:54 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Adobe
2014-01-11 21:54 - 2014-01-11 21:54 - 00000000 ____D C:\Users\Thomas\AppData\Local\Macromedia
2014-01-11 21:28 - 2014-01-11 21:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-11 21:28 - 2014-01-11 21:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-11 21:28 - 2014-01-11 21:28 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2014-01-11 21:28 - 2014-01-11 21:28 - 00000000 ____D C:\Windows\system32\Macromed
2014-01-11 21:12 - 2014-01-11 21:12 - 00508240 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\ie6setupOe{1}.exe
2014-01-11 21:07 - 2014-01-11 21:07 - 00508240 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\ie6setupOe.exe
2014-01-11 21:07 - 2014-01-11 21:07 - 00000877 _____ C:\Windows\Active Setup Log.BAK
2014-01-11 21:06 - 2009-06-26 19:14 - 00000000 ____D C:\Users\Thomas\Documents\NAVIGON
2014-01-11 21:06 - 2009-01-28 20:20 - 00000000 ____D C:\Users\Thomas\Documents\Nokia Sicherung
2014-01-11 20:50 - 2014-01-11 20:50 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Mozilla
2014-01-11 20:50 - 2014-01-11 20:50 - 00000000 ____D C:\Users\Thomas\AppData\Local\Mozilla
2014-01-11 20:50 - 2014-01-11 20:50 - 00000000 ____D C:\ProgramData\Mozilla
2014-01-11 20:48 - 2010-10-07 08:44 - 00000000 ___RD C:\Users\Thomas\Documents\Eigene Dateien
2014-01-11 20:44 - 2011-08-07 14:13 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Startmenü
2014-01-11 20:44 - 2009-01-24 17:53 - 00000000 ____D C:\Users\Thomas\Documents\Büro
2014-01-11 20:44 - 2009-01-24 14:13 - 00000000 ___RD C:\Users\Thomas\Favoriten
2014-01-11 20:41 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\restore
2014-01-11 20:40 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2014-01-11 18:05 - 2014-01-11 18:05 - 00000020 ___SH C:\Users\Thomas\ntuser.ini
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\Startmenü
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\Eigene Dateien
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\Documents\Eigene Musik
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\Documents\Eigene Bilder
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Vorlagen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Netzwerkumgebung
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Lokale Einstellungen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Druckumgebung
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\AppData\Local\Verlauf
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\AppData\Local\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Vorlagen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Startmenü
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Programme
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Vorlagen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Startmenü
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Favoriten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Dokumente
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Dokumente und Einstellungen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 ____D C:\Users\Thomas\AppData\Local\VirtualStore
2014-01-11 18:05 - 2013-11-13 09:12 - 00000000 ____D C:\Windows\Panther
2014-01-11 18:05 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2014-01-11 18:05 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Windows NT
2014-01-11 17:54 - 2013-11-13 09:18 - 00008246 _____ C:\Windows\TSSysprep.log
2014-01-11 17:54 - 2009-07-14 05:46 - 00005838 _____ C:\Windows\DtcInstall.log
2014-01-07 18:32 - 2014-01-07 17:46 - 00000388 _____ C:\Windows\SysWOW64\gpu-temperature.xml
2014-01-07 18:32 - 2014-01-07 17:44 - 00001777 _____ C:\Windows\SysWOW64\FurMark_0001.log

Some content of TEMP:
====================
C:\Users\Thomas\AppData\Local\Temp\44189uninstall.exe
C:\Users\Thomas\AppData\Local\Temp\Quarantine.exe
C:\Users\Thomas\AppData\Local\Temp\Sqlite3.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-12 19:05

==================== End Of Log ============================
--- --- ---

cosinus 18.01.2014 03:50
Kannst du bitte auch die Logs von den anderen Tools posten?

monty2000 19.01.2014 19:42
So, der adw-cleaner funktioniert jetzt auch, ich scanne das alles mal durch - der rechner läuft momentan im netz auch sehr langsam.

Code:
# AdwCleaner v3.017 - Bericht erstellt am 19/01/2014 um 18:20:45
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Thomas - THOMAS-PC
# Gestartet von : C:\Users\Thomas\Downloads\AdwCleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\user.js
Datei Gefunden : C:\Windows\System32\Tasks\FoxTab
Datei Gefunden : C:\Windows\Tasks\FoxTab.job
Ordner Gefunden : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\Extensions\{94CD2CC3-083F-49BA-A218-4CDA4B4829FD}
Ordner Gefunden : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\Extensions\{AD9A41D2-9A49-4FA6-A79E-71A0785364C8}
Ordner Gefunden : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\Extensions\inboxcomtoolbar@inbox.com
Ordner Gefunden C:\Program Files (x86)\MyPC Backup
Ordner Gefunden C:\Program Files\Conduit
Ordner Gefunden C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar
Ordner Gefunden C:\ProgramData\WPM
Ordner Gefunden C:\Users\Thomas\AppData\Local\Conduit
Ordner Gefunden C:\Users\Thomas\AppData\Local\genienext
Ordner Gefunden C:\Users\Thomas\AppData\Local\lollipop
Ordner Gefunden C:\Users\Thomas\AppData\Local\Mobogenie
Ordner Gefunden C:\Users\Thomas\AppData\LocalLow\Inbox Toolbar
Ordner Gefunden C:\Users\Thomas\AppData\LocalLow\Smartbar
Ordner Gefunden C:\Users\Thomas\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
Ordner Gefunden C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\Inbox Toolbar
Ordner Gefunden C:\Users\Thomas\Documents\Mobogenie

***** [ Verknüpfungen ] *****

Verknüpfung Gefunden : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar\Einstellungen.lnk ( /showurl hxxp://toolbar.inbox.com/settings/settings.aspx?lng=de )
Verknüpfung Gefunden : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar\Hilfe.lnk ( /showurl hxxp://toolbar.inbox.com/faq.aspx )
Verknüpfung Gefunden : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar\Inbox.com.lnk ( /showurl hxxp://www.inbox.com/homepage.aspx?tbid=80814&iwk=289&lng=de )
Verknüpfung Gefunden : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk ( hxxp://www.nationzoom.com/?type=sc&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298 )
Verknüpfung Gefunden : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk ( hxxp://www.nationzoom.com/?type=sc&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298 )
Verknüpfung Gefunden : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk ( hxxp://www.nationzoom.com/?type=sc&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298 )
Verknüpfung Gefunden : C:\Users\Thomas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk ( hxxp://www.nationzoom.com/?type=sc&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298 )

***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\AVG Secure Search
Schlüssel Gefunden : HKCU\Software\Classes\Applications\lollipop.exe
Schlüssel Gefunden : HKCU\Software\Conduit
Schlüssel Gefunden : HKCU\Software\dsiteproducts
Schlüssel Gefunden : HKCU\Software\installedbrowserextensions
Schlüssel Gefunden : HKCU\Software\lollipop
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zip Opener Packages
Schlüssel Gefunden : HKCU\Software\WEDLMNGR
Schlüssel Gefunden : [x64] HKCU\Software\AVG Secure Search
Schlüssel Gefunden : [x64] HKCU\Software\Conduit
Schlüssel Gefunden : [x64] HKCU\Software\dsiteproducts
Schlüssel Gefunden : [x64] HKCU\Software\installedbrowserextensions
Schlüssel Gefunden : [x64] HKCU\Software\lollipop
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : [x64] HKCU\Software\WEDLMNGR
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422772218}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422902274}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{37540F19-DD4C-478B-B2DF-C19281BCAF27}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{612AD33D-9824-4E87-8396-92374E91C4BB}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Inbox.AppServer
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Inbox.IBX404
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466776618}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466906674}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\inbox
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612AD33D-9824-4E87-8396-92374E91C4BB}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OpenIt Open It!
Schlüssel Gefunden : HKLM\Software\SupTab
Schlüssel Gefunden : HKLM\Software\supWPM
Schlüssel Gefunden : HKLM\Software\Uniblue
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{042DA63B-0933-403D-9395-B49307691690}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422772218}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{37540F19-DD4C-478B-B2DF-C19281BCAF27}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{28C3737A-32D1-492D-B76B-8D75EBBFB887}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466776618}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466906674}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{CE057E0D-2D7E-4DFF-A890-07BA69B8C762}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\DomaIQ
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612AD33D-9824-4E87-8396-92374E91C4BB}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Wert Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16750

Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=5c43be52-fdf1-f595-93c1-9074396a2577&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=11/01/2014&type=hp1000
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=5c43be52-fdf1-f595-93c1-9074396a2577&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=11/01/2014&type=hp1000
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://www.nationzoom.com/web/?type=ds&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298&q={searchTerms}
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.nationzoom.com/?type=hp&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.nationzoom.com/?type=hp&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.nationzoom.com/web/?type=ds&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298&q={searchTerms}

-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\prefs.js ]

Zeile gefunden : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_channels.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gefunden : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_channels.value", "%7B%22app0%22%3A%22app0%22%2C%22app49074%22%3A%22app49[...]
Zeile gefunden : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_css.expiration", "Mon Jan 20 2014 15:46:36 GMT+0100");
Zeile gefunden : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_css.value", "%22.%25CSSClass%25%20%7B%5Cn%5Ctdisplay%3Anone%3B%5Cn%7D%5C[...]
Zeile gefunden : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_geolocation.expiration", "Sat Jan 25 2014 21:13:54 GMT+0100");
Zeile gefunden : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_geolocation.value", "%22DE%22");
Zeile gefunden : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_metadata.expiration", "Mon Jan 20 2014 11:14:41 GMT+0100");
Zeile gefunden : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_metadata.value", "%7B%22appId%22%3A49074%2C%22appName%22%3A%22The%20weDo[...]
Zeile gefunden : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.description", "Enhance your search results with direct download links and information for apps and[...]
Zeile gefunden : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.internaldb.Resources_meta.value", "%7B%22extension.css%22%3A%7B%22id%22%3A479259%2C%22ver%22%3A1%2[...]
Zeile gefunden : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.internaldb.Resources_resource_479259.value", "%22.crossrider-nofity-34345-body-theme-white-black%2[...]
Zeile gefunden : user_pref("extensions.crossrider.bic", "14382effc9635404e54380d89661f33d");
Zeile gefunden : user_pref("extensions.mysearchdial.aflt", "sft32def");
Zeile gefunden : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
Zeile gefunden : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1Qzu0B0C0E0EyB0ByDzyyCtCtCzy0EyB0D0BtN0D0Tzu0SyByEtBtN1L2XzutBtFtBtFtCtAtFtCtAtAzztN1L1Czu1B1O2ZtAtB1Q1P1O");
Zeile gefunden : user_pref("extensions.mysearchdial.cr", "1693723452");
Zeile gefunden : user_pref("extensions.mysearchdial.dfltLng", "");
Zeile gefunden : user_pref("extensions.mysearchdial.dfltSrch", true);
Zeile gefunden : user_pref("extensions.mysearchdial.dnsErr", true);
Zeile gefunden : user_pref("extensions.mysearchdial.excTlbr", false);
Zeile gefunden : user_pref("extensions.mysearchdial.hmpg", true);
Zeile gefunden : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=sft32def&cd=2XzuyEtN2Y1L1Qzu0B0C0E0EyB0ByDzyyCtCtCzy0EyB0D0BtN0D0Tzu0SyByEtBtN1L2XzutBtFtBtFtCtAtFtCtAtAzztN1L1Czu1B1[...]
Zeile gefunden : user_pref("extensions.mysearchdial.id", "BCEE7B596119E7DB");
Zeile gefunden : user_pref("extensions.mysearchdial.instlDay", "16081");
Zeile gefunden : user_pref("extensions.mysearchdial.instlRef", "");
Zeile gefunden : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=sft32def&cd=2XzuyEtN2Y1L1Qzu0B0C0E0EyB0ByDzyyCtCtCzy0EyB0D0BtN0D0Tzu0SyByEtBtN1L2XzutBtFtBtFtCtAtFtCtAtAzztN1L1Czu1[...]
Zeile gefunden : user_pref("extensions.mysearchdial.prdct", "mysearchdial");
Zeile gefunden : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
Zeile gefunden : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
Zeile gefunden : user_pref("extensions.mysearchdial.tlbrId", "base");
Zeile gefunden : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=sft32def&cd=2XzuyEtN2Y1L1Qzu0B0C0E0EyB0ByDzyyCtCtCzy0EyB0D0BtN0D0Tzu0SyByEtBtN1L2XzutBtFtBtFtCtAtFtCtAtAzztN1L1Cz[...]
Zeile gefunden : user_pref("extensions.mysearchdial.vrsn", "1.8.21.0");
Zeile gefunden : user_pref("extensions.mysearchdial.vrsni", "1.8.21.0");
Zeile gefunden : user_pref("extensions.mysearchdial_i.hmpg", true);
Zeile gefunden : user_pref("extensions.mysearchdial_i.newTab", false);
Zeile gefunden : user_pref("extensions.mysearchdial_i.smplGrp", "none");
Zeile gefunden : user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.021:11:55");

*************************

AdwCleaner[R0].txt - [33330 octets] - [14/01/2014 13:39:51]
AdwCleaner[R10].txt - [33271 octets] - [15/01/2014 08:45:56]
AdwCleaner[R11].txt - [33265 octets] - [15/01/2014 08:54:59]
AdwCleaner[R12].txt - [33265 octets] - [15/01/2014 09:05:42]
AdwCleaner[R13].txt - [16794 octets] - [19/01/2014 18:20:45]
AdwCleaner[R1].txt - [33334 octets] - [14/01/2014 14:03:25]
AdwCleaner[R2].txt - [33330 octets] - [14/01/2014 14:06:41]
AdwCleaner[R3].txt - [33324 octets] - [14/01/2014 14:08:37]
AdwCleaner[R4].txt - [33324 octets] - [14/01/2014 17:24:26]
AdwCleaner[R5].txt - [33271 octets] - [14/01/2014 17:50:02]
AdwCleaner[R6].txt - [33271 octets] - [14/01/2014 17:54:45]
AdwCleaner[R7].txt - [34071 octets] - [14/01/2014 18:06:57]
AdwCleaner[R8].txt - [33265 octets] - [15/01/2014 08:39:59]
AdwCleaner[R9].txt - [33265 octets] - [15/01/2014 08:44:56]

########## EOF - C:\AdwCleaner\AdwCleaner[R13].txt - [17405 octets] ##########
die log von antimalware-bytes:

Code:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.15.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16750
Thomas :: THOMAS-PC [Administrator]

19.01.2014 18:32:09
mbam-log-2014-01-19 (18-32-09).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 314339
Laufzeit: 27 Minute(n), 58 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 2
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (PUP.Optional.Qone8) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\Conduit\ValueApps (PUP.Optional.ValueApps.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
die log-datei von adw-cleaner nach dem Neustart

Code:
# AdwCleaner v3.017 - Bericht erstellt am 19/01/2014 um 19:08:50
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Thomas - THOMAS-PC
# Gestartet von : C:\Users\Thomas\Downloads\AdwCleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\WPM
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar
Ordner Gelöscht : C:\Program Files (x86)\MyPC Backup
Ordner Gelöscht : C:\Program Files\Conduit
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\genienext
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\lollipop
Ordner Gelöscht : C:\Users\Thomas\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\Thomas\AppData\LocalLow\Inbox Toolbar
Ordner Gelöscht : C:\Users\Thomas\AppData\LocalLow\Smartbar
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
Ordner Gelöscht : C:\Users\Thomas\Documents\Mobogenie
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\Inbox Toolbar
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\Extensions\{94CD2CC3-083F-49BA-A218-4CDA4B4829FD}
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\Extensions\{AD9A41D2-9A49-4FA6-A79E-71A0785364C8}
Ordner Gelöscht : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\Extensions\inboxcomtoolbar@inbox.com
Datei Gelöscht : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\user.js
Datei Gelöscht : C:\Windows\Tasks\FoxTab.job
Datei Gelöscht : C:\Windows\System32\Tasks\FoxTab

***** [ Verknüpfungen ] *****
hier die log-datei von Junkware-Removal Tool

Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Home Premium x64
Ran by Thomas on 19.01.2014 at 19:33:22,95
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113}



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\dsiteproducts
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\caphyon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\inbox.appserver
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\inbox.ibx404
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\protocols\handler\inbox
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\speedupmypc
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\openit open it!
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220422772218}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220422902274}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660466776618}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660466906674}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220422772218}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220422902274}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660466776618}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660466906674}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660466776618}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660466906674}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110411771118}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110411901174}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\UpdateTask_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\UpdateTask_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660466776618}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660466906674}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\UpdateTask_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\UpdateTask_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted: [Folder] C:\Users\Thomas\AppData\Roaming\mozilla\firefox\profiles\p8gebnyy.default\extensions\8c6c8c15-21d7-4f62-8a57-202aee8f7fb3@6567ba21-e435-4eb0-838d-8395b2265c30.com
Successfully deleted: [Folder] C:\Users\Thomas\AppData\Roaming\mozilla\firefox\profiles\p8gebnyy.default\extensions\b1ac2ff7-8e51-4bb6-8bf8-87f1d567919a@4bb97481-aead-4c2e-a62b-e25e264651bb.com
Successfully deleted the following from C:\Users\Thomas\AppData\Roaming\mozilla\firefox\profiles\p8gebnyy.default\prefs.js

user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_channels.expiration", "Fri Feb 01 2030 00:00:00
user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_channels.value", "%7B%22app0%22%3A%22app0%22%2C
user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_css.expiration", "Mon Jan 20 2014 15:46:36 GMT+
user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_css.value", "%22.%25CSSClass%25%20%7B%5Cn%5Ctdi
user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_geolocation.expiration", "Sat Jan 25 2014 21:13
user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_geolocation.value", "%22DE%22");
user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_metadata.expiration", "Mon Jan 20 2014 11:14:41
user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_metadata.value", "%7B%22appId%22%3A49074%2C%22a
user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.description", "Enhance your search results with direct download links and
user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.internaldb.Resources_meta.value", "%7B%22extension.css%22%3A%7B%22id%22%3
user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.internaldb.Resources_resource_479259.value", "%22.crossrider-nofity-34345
user_pref("extensions.crossrider.bic", "14382effc9635404e54380d89661f33d");
user_pref("extensions.mysearchdial.aflt", "sft32def");
user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1Qzu0B0C0E0EyB0ByDzyyCtCtCzy0EyB0D0BtN0D0Tzu0SyByEtBtN1L2XzutBtFtBtFtCtAtFtCtAtAzztN1L1Czu1B1O2ZtAtB1Q1P1O");
user_pref("extensions.mysearchdial.cr", "1693723452");
user_pref("extensions.mysearchdial.dfltLng", "");
user_pref("extensions.mysearchdial.dfltSrch", true);
user_pref("extensions.mysearchdial.dnsErr", true);
user_pref("extensions.mysearchdial.excTlbr", false);
user_pref("extensions.mysearchdial.hmpg", true);
user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=sft32def&cd=2XzuyEtN2Y1L1Qzu0B0C0E0EyB0ByDzyyCtCtCzy0EyB0D0BtN0D0Tzu0SyByEtBtN1L2XzutBtFtBtF
user_pref("extensions.mysearchdial.id", "BCEE7B596119E7DB");
user_pref("extensions.mysearchdial.instlDay", "16081");
user_pref("extensions.mysearchdial.instlRef", "");
user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=sft32def&cd=2XzuyEtN2Y1L1Qzu0B0C0E0EyB0ByDzyyCtCtCzy0EyB0D0BtN0D0Tzu0SyByEtBtN1L2XzutBtFtB
user_pref("extensions.mysearchdial.prdct", "mysearchdial");
user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
user_pref("extensions.mysearchdial.tlbrId", "base");
user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=sft32def&cd=2XzuyEtN2Y1L1Qzu0B0C0E0EyB0ByDzyyCtCtCzy0EyB0D0BtN0D0Tzu0SyByEtBtN1L2XzutBtF
user_pref("extensions.mysearchdial.vrsn", "1.8.21.0");
user_pref("extensions.mysearchdial.vrsni", "1.8.21.0");
user_pref("extensions.mysearchdial_i.hmpg", true);
user_pref("extensions.mysearchdial_i.newTab", false);
user_pref("extensions.mysearchdial_i.smplGrp", "none");
user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.021:11:55");
Emptied folder: C:\Users\Thomas\AppData\Roaming\mozilla\firefox\profiles\p8gebnyy.default\minidumps [12 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19.01.2014 at 19:39:20,02
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

monty2000 20.01.2014 06:59
und jetzt das akutelle Log von FRST

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-01-2014 04
Ran by Thomas (administrator) on THOMAS-PC on 19-01-2014 19:48:16
Running from C:\Users\Thomas\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(ASCOMP Software GmbH) C:\Program Files (x86)\ASCOMP Software\BackUp Maker\bkmaker.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Nico Mak Computing) C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\Audials\Audials 10\AudialsNotifier.exe
(Spotify Ltd) C:\Users\Thomas\AppData\Roaming\Spotify\spotify.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Thomas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18643560 2013-03-01] (Skype Technologies S.A.)
HKCU\...\Run: [AudialsNotifier] - C:\Program Files (x86)\Audials\Audials 10\AudialsNotifier.exe [529160 2013-10-07] ()
HKCU\...\Run: [AVG-Secure-Search-Update_1213b] - C:\Users\Thomas\AppData\Roaming\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe /PROMPT /mid=ffe8eb71ad1647d28e0a6da73dbd88ea-e9180a3c514b514e5221273bfcc873366752bc60 /CMPID=1213b
HKCU\...\Run: [Spotify] - C:\Users\Thomas\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-18] (Spotify Ltd)
MountPoints2: {c922d141-7ae0-11e3-94d7-806e6f6e6963} - E:\tools\shelexec.exe ..\html\index.htm

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - c:\program files (x86)\internet explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298&q={searchTerms}
SearchScopes: HKLM - {8E270047-CE1C-4E28-8B53-EFC3F5C0F197} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE9TR&src=IE9TR&pc=MASBJS
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {8E270047-CE1C-4E28-8B53-EFC3F5C0F197} URL =
BHO: Plus-HD-5.0 - {11111111-1111-1111-1111-110411771118} - C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-bho64.dll No File
BHO: Yahoo Community Smartbar (by Linkury)Engine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Inbox Toolbar - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - C:\Program Files (x86)\Inbox Toolbar\Inbox64.dll No File
BHO: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - Yahoo Community Smartbar (by Linkury) - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - &Inbox Toolbar - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - C:\Program Files (x86)\Inbox Toolbar\Inbox64.dll No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Yahoo Community Smartbar - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\Extensions\{5c43be52-fdf1-f595-93c1-9074396a2577} [2014-01-11]
FF HKLM-x32\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

==================== Services (Whitelisted) =================

S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)

==================== Drivers (Whitelisted) ====================

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-10-07] (Audials AG)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 DIRECTIO; \??\UNC\srv1c027.wds8.intern\reminst\Test\BitPro64\DirectIo.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-19 19:47 - 2014-01-19 19:48 - 02076672 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe
2014-01-19 19:39 - 2014-01-19 19:39 - 00008618 _____ C:\Users\Thomas\Desktop\JRT.txt
2014-01-19 19:33 - 2014-01-19 19:33 - 00000000 ____D C:\Windows\ERUNT
2014-01-19 19:32 - 2014-01-19 19:32 - 01037068 _____ (Thisisu) C:\Users\Thomas\Downloads\JRT.exe
2014-01-18 20:03 - 2014-01-19 19:21 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-18 20:03 - 2014-01-18 20:03 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-18 20:01 - 2014-01-18 20:02 - 01071000 _____ (Solid State Networks) C:\Users\Thomas\Downloads\install_flashplayer12x32_mssd_aaa_aih.exe
2014-01-18 15:19 - 2014-01-18 15:19 - 00068280 _____ C:\Users\Thomas\Downloads\worf_incomimgmessage.wav
2014-01-18 15:12 - 2014-01-18 15:12 - 00029460 _____ C:\Users\Thomas\Downloads\welcomenet_homer.wav
2014-01-18 15:08 - 2014-01-18 15:08 - 00028364 _____ C:\Users\Thomas\Downloads\vader.wav
2014-01-18 09:22 - 2014-01-19 02:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\Spotify
2014-01-18 09:22 - 2014-01-18 09:22 - 00001819 _____ C:\Users\Thomas\Desktop\Spotify.lnk
2014-01-18 09:22 - 2014-01-18 09:22 - 00001805 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-01-18 09:20 - 2014-01-19 19:21 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Spotify
2014-01-18 09:20 - 2014-01-18 09:20 - 00127080 _____ (Spotify Ltd) C:\Users\Thomas\Downloads\SpotifySetup.exe
2014-01-17 16:06 - 2014-01-19 18:40 - 00000000 ____D C:\Users\Thomas\Downloads\FRST-OlderVersion
2014-01-15 12:34 - 2014-01-15 20:04 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-15 12:33 - 2014-01-15 13:36 - 00000000 ____D C:\Users\Thomas\Desktop\mbar
2014-01-15 12:33 - 2014-01-15 13:29 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-15 12:31 - 2014-01-15 12:32 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Thomas\Downloads\mbar-1.07.0.1008.exe
2014-01-15 11:49 - 2014-01-15 11:49 - 00000085 _____ C:\Windows\wininit.ini
2014-01-15 10:55 - 2014-01-15 10:55 - 00107166 _____ C:\Scan FRST - malwarebytes 20150115 - 10-20 Uhr.txt
2014-01-15 10:49 - 2014-01-19 18:56 - 00000296 _____ C:\Windows\Tasks\Digital Sites.job
2014-01-15 10:49 - 2014-01-15 20:04 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DigitalSites
2014-01-15 10:49 - 2014-01-15 10:56 - 00003240 _____ C:\Windows\System32\Tasks\Digital Sites
2014-01-15 10:49 - 2014-01-15 10:49 - 00000005 _____ C:\Users\Thomas\AppData\Roaming\WBPU-TTL.DAT
2014-01-15 10:47 - 2014-01-15 10:47 - 00000000 ____D C:\Program Files (x86)\7-Zip
2014-01-15 10:46 - 2014-01-15 10:46 - 01110476 _____ C:\Users\Thomas\Downloads\7z920.exe
2014-01-15 10:32 - 2014-01-15 10:38 - 00023995 _____ C:\Users\Thomas\Downloads\Addition.txt
2014-01-15 10:31 - 2014-01-19 19:48 - 00010915 _____ C:\Users\Thomas\Downloads\FRST.txt
2014-01-15 10:31 - 2014-01-17 16:06 - 00000000 ____D C:\FRST
2014-01-15 08:39 - 2014-01-15 08:39 - 01236282 _____ C:\Users\Thomas\Downloads\AdwCleaner.exe
2014-01-15 02:30 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 02:30 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 02:30 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 02:30 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 02:30 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 02:30 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 02:30 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 02:30 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 02:30 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 17:49 - 2014-01-14 17:49 - 01236282 _____ C:\Users\Thomas\Downloads\adwcleaner_3.017.exe
2014-01-14 17:48 - 2014-01-14 17:48 - 00001158 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-14 17:48 - 2014-01-14 17:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-14 13:39 - 2014-01-19 19:08 - 00000000 ____D C:\AdwCleaner
2014-01-14 13:01 - 2014-01-14 13:01 - 00003696 _____ C:\Windows\System32\Tasks\WinZip Malware Protector
2014-01-14 12:37 - 2014-01-19 19:17 - 00003116 _____ C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-01-14 12:37 - 2014-01-14 13:32 - 00000000 ____D C:\Program Files (x86)\WinZip Malware Protector
2014-01-14 12:37 - 2014-01-14 12:37 - 00001200 _____ C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-01-14 12:37 - 2014-01-14 12:37 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Nico Mak Computing
2014-01-14 12:37 - 2014-01-14 12:37 - 00000000 ____D C:\ProgramData\Nico Mak Computing
2014-01-14 12:37 - 2013-03-15 17:10 - 00020480 _____ C:\Windows\system32\wsusnative64.exe
2014-01-14 12:22 - 2014-01-15 11:50 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-01-14 12:22 - 2014-01-15 11:49 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-14 12:22 - 2014-01-14 12:22 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2014-01-14 10:43 - 2014-01-14 10:43 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Malwarebytes
2014-01-14 10:42 - 2014-01-14 10:42 - 00001120 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-14 10:42 - 2014-01-14 10:42 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-14 10:42 - 2014-01-14 10:42 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-14 10:42 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-14 08:42 - 2014-01-14 09:16 - 00000000 ____D C:\Users\Thomas\AppData\Local\CrashDumps
2014-01-14 05:44 - 2014-01-15 11:07 - 00000000 ____D C:\Users\Thomas\AppData\Local\cache
2014-01-14 05:44 - 2014-01-14 05:44 - 00000000 ____D C:\Users\Thomas\.android
2014-01-14 05:44 - 2014-01-14 05:44 - 00000000 _____ C:\Users\Thomas\daemonprocess.txt
2014-01-14 05:43 - 2014-01-14 09:42 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-12 15:21 - 2014-01-12 15:21 - 00000000 ____D C:\Windows\System32\Tasks\Games
2014-01-12 12:22 - 2014-01-12 12:22 - 00000954 _____ C:\Users\Public\Desktop\Audials 10.lnk
2014-01-12 12:22 - 2014-01-12 12:22 - 00000000 ____D C:\Users\Thomas\AppData\Local\CrashRpt
2014-01-12 12:21 - 2014-01-12 12:21 - 00000000 ____D C:\ProgramData\RapidSolution
2014-01-12 12:21 - 2014-01-12 12:21 - 00000000 ____D C:\Program Files (x86)\Audials
2014-01-12 12:19 - 2014-01-12 12:19 - 00000000 ____D C:\Users\Thomas\AppData\Local\RapidSolution
2014-01-12 12:17 - 2014-01-12 12:17 - 01552920 _____ (RapidSolution Software AG) C:\Users\Thomas\Downloads\ComputerBildOnline_Audials_Radiotracker10_SE_10.1.6202.200_webinstaller.exe
2014-01-12 11:17 - 2014-01-12 11:17 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\OpenOffice
2014-01-12 11:14 - 2014-01-12 11:14 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-01-12 11:14 - 2014-01-12 11:14 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2014-01-12 11:02 - 2014-01-12 11:03 - 00000000 ____D C:\Users\Thomas\Desktop\OpenOffice 4.0.1 (de) Installation Files
2014-01-12 10:56 - 2014-01-12 11:02 - 163606685 _____ C:\Users\Thomas\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-12 10:50 - 2014-01-12 19:43 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Windows Live Writer
2014-01-12 10:50 - 2014-01-12 10:50 - 00000000 ____D C:\Users\Thomas\AppData\Local\Windows Live Writer
2014-01-12 10:48 - 2014-01-19 19:16 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Skype
2014-01-12 10:48 - 2014-01-12 10:48 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-12 10:48 - 2014-01-12 10:48 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-12 10:48 - 2014-01-12 10:48 - 00000000 ____D C:\ProgramData\Skype
2014-01-12 10:46 - 2014-01-12 10:46 - 00000000 ____D C:\Users\Thomas\Tracing
2014-01-12 10:42 - 2014-01-12 10:42 - 00000000 ____D C:\Windows\de
2014-01-12 10:41 - 2014-01-12 10:41 - 00000000 ____D C:\Windows\it
2014-01-12 10:41 - 2014-01-12 10:41 - 00000000 ____D C:\Windows\fr
2014-01-12 10:41 - 2014-01-12 10:41 - 00000000 ____D C:\Windows\es
2014-01-12 10:41 - 2014-01-12 10:41 - 00000000 ____D C:\Windows\en
2014-01-12 10:37 - 2014-01-12 10:37 - 00000000 ___RD C:\Users\Thomas\SkyDrive
2014-01-12 10:36 - 2014-01-19 11:16 - 00000000 ____D C:\Users\Thomas\AppData\Local\Windows Live
2014-01-12 10:23 - 2014-01-12 10:28 - 142602520 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\wlsetup-all.exe
2014-01-12 09:59 - 2014-01-12 09:59 - 00003438 _____ C:\Windows\System32\Tasks\BackUp_Maker-Thomas
2014-01-12 09:59 - 2014-01-12 09:59 - 00002161 _____ C:\Users\Public\Desktop\BackUp Maker.lnk
2014-01-12 09:59 - 2014-01-12 09:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\ASCOMP Software
2014-01-12 09:59 - 2014-01-12 09:59 - 00000000 ____D C:\Program Files (x86)\ASCOMP Software
2014-01-12 09:58 - 2014-01-12 09:58 - 06902616 _____ (ASCOMP Software GmbH                                        ) C:\Users\Thomas\Downloads\bkmaker.exe
2014-01-12 01:54 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-01-12 01:54 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-01-12 01:54 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-01-12 01:54 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-01-12 01:52 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-01-12 01:37 - 2014-01-12 01:53 - 00016477 _____ C:\Windows\IE11_main.log
2014-01-12 01:22 - 2014-01-12 01:22 - 19271168 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 14356992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 13761536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-01-12 01:22 - 2014-01-12 01:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-12 01:22 - 2014-01-12 01:22 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-12 01:22 - 2014-01-12 01:22 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-01-12 01:22 - 2014-01-12 01:22 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-01-12 01:22 - 2014-01-12 01:22 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-12 01:22 - 2014-01-12 01:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-12 01:22 - 2014-01-12 01:22 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-01-12 01:22 - 2014-01-12 01:22 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-12 01:22 - 2014-01-12 01:22 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-01-12 01:22 - 2014-01-12 01:22 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-01-12 01:20 - 2014-01-12 01:32 - 00014476 _____ C:\Windows\IE10_main.log
2014-01-12 01:19 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2014-01-12 00:36 - 2014-01-15 20:26 - 00000000 ____D C:\Users\Thomas\AppData\Local\Microsoft Games
2014-01-12 00:29 - 2014-01-12 00:29 - 00002168 _____ C:\Users\Public\Desktop\Moorhuhn Remake starten.lnk
2014-01-12 00:23 - 2014-01-12 00:24 - 08862099 _____ (InstallShield Software Corporation) C:\Users\Thomas\Downloads\Setup_MHRemake.exe
2014-01-12 00:16 - 2014-01-12 00:24 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-12 00:16 - 2014-01-12 00:24 - 00000000 ____D C:\Program Files (x86)\phenomedia
2014-01-12 00:16 - 2014-01-12 00:16 - 00002302 _____ C:\Users\Public\Desktop\Moorhuhn Kart 3 Demo spielen.lnk
2014-01-12 00:13 - 2014-01-12 00:13 - 01444352 _____ C:\Users\Thomas\Downloads\7z922-x64.msi
2014-01-12 00:09 - 2014-01-12 00:14 - 62027866 _____ C:\Users\Thomas\Downloads\Setup_Moorhuhn_Kart3-Demo.zip
2014-01-11 23:47 - 2014-01-11 23:47 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-01-11 23:47 - 2014-01-11 23:47 - 00000000 ____D C:\ProgramData\TuneUp Software
2014-01-11 23:30 - 2014-01-14 05:43 - 00002319 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-01-11 23:29 - 2014-01-11 23:29 - 00001543 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-01-11 23:29 - 2014-01-11 23:29 - 00001250 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-01-11 23:29 - 2014-01-11 23:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DVDVideoSoft
2014-01-11 23:29 - 2014-01-11 23:29 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2014-01-11 23:27 - 2014-01-11 23:28 - 34008992 _____ (DVDVideoSoft Ltd.                                          ) C:\Users\Thomas\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-11 23:23 - 2014-01-11 23:23 - 00002026 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-11 23:23 - 2014-01-11 23:23 - 00000000 ____D C:\ProgramData\Adobe
2014-01-11 23:23 - 2014-01-11 23:23 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-11 23:19 - 2014-01-11 23:19 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Ashampoo
2014-01-11 23:18 - 2014-01-11 23:18 - 00001314 _____ C:\Users\Public\Desktop\Ashampoo Burning Studio FREE.lnk
2014-01-11 23:18 - 2014-01-11 23:18 - 00000000 ____D C:\Users\Thomas\AppData\Local\ashampoo
2014-01-11 23:18 - 2014-01-11 23:18 - 00000000 ____D C:\ProgramData\Ashampoo
2014-01-11 23:18 - 2014-01-11 23:18 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2014-01-11 23:16 - 2014-01-11 23:18 - 29337984 _____ (Ashampoo GmbH & Co. KG                                      ) C:\Users\Thomas\Downloads\ashampoo_burning_studio_free_1.12.0_14566.exe
2014-01-11 23:15 - 2014-01-11 23:26 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\vlc
2014-01-11 23:14 - 2014-01-11 23:14 - 00000878 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-11 23:14 - 2014-01-11 23:14 - 00000000 ____D C:\Program Files\VideoLAN
2014-01-11 23:12 - 2014-01-11 23:13 - 23884615 _____ C:\Users\Thomas\Downloads\vlc-2.1.2-win64.exe
2014-01-11 23:01 - 2014-01-11 23:47 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\TuneUp Software
2014-01-11 23:01 - 2014-01-11 23:01 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute
2014-01-11 23:01 - 2014-01-11 23:01 - 00000988 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-11 23:01 - 2014-01-11 23:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\AVG2014
2014-01-11 23:00 - 2014-01-11 23:01 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-11 23:00 - 2014-01-11 23:00 - 00000000 ___HD C:\$AVG
2014-01-11 23:00 - 2014-01-11 23:00 - 00000000 ____D C:\Program Files (x86)\AVG
2014-01-11 22:59 - 2014-01-19 17:47 - 00000000 ____D C:\ProgramData\MFAData
2014-01-11 22:59 - 2014-01-12 00:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\Avg2014
2014-01-11 22:59 - 2014-01-11 22:59 - 00000000 ____D C:\Users\Thomas\AppData\Local\MFAData
2014-01-11 22:48 - 2014-01-11 22:59 - 137189352 _____ (AVG Technologies) C:\Users\Thomas\Downloads\avg_free_x86_all_2014_4259a6848.exe
2014-01-11 22:48 - 2014-01-11 22:58 - 149157408 _____ (AVG Technologies) C:\Users\Thomas\Downloads\avg_free_x64_all_2014_4259a6848.exe
2014-01-11 22:22 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-01-11 22:22 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-01-11 22:22 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-01-11 22:22 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-01-11 22:22 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-01-11 22:22 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-01-11 22:22 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-01-11 22:22 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-01-11 22:22 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-01-11 22:22 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-01-11 22:22 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-01-11 22:22 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-01-11 22:22 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-01-11 22:22 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-01-11 22:22 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-01-11 22:22 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-01-11 22:22 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-01-11 22:22 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-01-11 22:22 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-01-11 22:22 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-01-11 22:22 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-01-11 22:22 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-01-11 22:22 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-01-11 22:22 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-01-11 22:22 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-01-11 22:22 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-01-11 22:22 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-01-11 22:22 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-01-11 22:22 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-01-11 22:22 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-01-11 22:22 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-01-11 22:22 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-01-11 22:22 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-01-11 22:22 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-01-11 22:22 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-01-11 22:22 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-01-11 22:22 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-01-11 22:22 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-01-11 22:22 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-01-11 22:22 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-01-11 22:22 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-01-11 22:22 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-01-11 22:22 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-01-11 22:22 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-01-11 22:22 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-01-11 22:22 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-01-11 22:22 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-01-11 22:22 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-01-11 22:22 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-01-11 22:22 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-01-11 22:22 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-01-11 22:22 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-01-11 22:22 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-01-11 22:22 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-01-11 22:22 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-01-11 22:22 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-01-11 22:22 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-01-11 22:22 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-01-11 22:22 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-01-11 22:22 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-01-11 22:22 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-01-11 22:22 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-01-11 22:22 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-01-11 22:22 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-01-11 22:22 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-01-11 22:22 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-01-11 22:22 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-01-11 22:22 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-01-11 22:22 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-01-11 22:22 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-01-11 22:22 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-01-11 22:22 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-01-11 22:22 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-01-11 22:22 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-01-11 22:22 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-01-11 22:22 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-01-11 22:22 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-01-11 22:22 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-01-11 22:22 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-01-11 22:22 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-01-11 22:22 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-01-11 22:22 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-01-11 22:22 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-01-11 22:22 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-01-11 22:22 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-01-11 22:22 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-01-11 22:22 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-01-11 22:22 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-01-11 22:22 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-01-11 22:22 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-01-11 22:22 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-01-11 22:22 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-01-11 22:21 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-01-11 22:11 - 2014-01-15 10:49 - 00000166 _____ C:\Users\Thomas\AppData\Roaming\WB.CFG
2014-01-11 21:59 - 2014-01-19 18:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\BOM
2014-01-11 21:59 - 2014-01-11 22:00 - 00000000 ____D C:\Program Files (x86)\Biet-O-Matic
2014-01-11 21:59 - 2014-01-11 21:59 - 00001036 _____ C:\Users\Public\Desktop\Biet-O-Matic.lnk
2014-01-11 21:59 - 2003-01-07 02:22 - 00015873 _____ C:\Windows\SysWOW64\Inetde.dll
2014-01-11 21:59 - 2000-12-05 23:00 - 00109248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mswinsck.ocx
2014-01-11 21:59 - 2000-10-01 23:00 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vb6de.dll
2014-01-11 21:59 - 2000-05-22 15:58 - 00115920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.ocx
2014-01-11 21:59 - 2000-05-21 23:00 - 01066176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscomctl.ocx
2014-01-11 21:59 - 2000-04-03 19:06 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winskde.dll
2014-01-11 21:59 - 2000-04-03 19:05 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstdfmt.dll
2014-01-11 21:59 - 1999-07-14 13:07 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stdftde.dll
2014-01-11 21:59 - 1998-07-05 23:00 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscmcde.dll
2014-01-11 21:59 - 1998-07-05 23:00 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Tabctde.dll
2014-01-11 21:59 - 1998-06-23 23:00 - 00209192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Tabctl32.ocx
2014-01-11 21:57 - 2014-01-11 21:58 - 04653537 _____ C:\Users\Thomas\Downloads\BOM21412_setup.exe
2014-01-11 21:54 - 2014-01-11 21:54 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Macromedia
2014-01-11 21:54 - 2014-01-11 21:54 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Adobe
2014-01-11 21:54 - 2014-01-11 21:54 - 00000000 ____D C:\Users\Thomas\AppData\Local\Macromedia
2014-01-11 21:28 - 2014-01-18 20:03 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-11 21:28 - 2014-01-18 20:03 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-11 21:28 - 2014-01-11 21:28 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2014-01-11 21:28 - 2014-01-11 21:28 - 00000000 ____D C:\Windows\system32\Macromed
2014-01-11 21:24 - 2014-01-18 20:03 - 00000000 ____D C:\Users\Thomas\AppData\Local\Adobe
2014-01-11 21:12 - 2014-01-11 21:12 - 00508240 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\ie6setupOe{1}.exe
2014-01-11 21:07 - 2014-01-11 21:07 - 00508240 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\ie6setupOe.exe
2014-01-11 21:07 - 2014-01-11 21:07 - 00000877 _____ C:\Windows\Active Setup Log.BAK
2014-01-11 21:06 - 2014-01-12 12:24 - 00064024 _____ C:\Users\Thomas\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-11 20:50 - 2014-01-14 17:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-11 20:50 - 2014-01-11 20:50 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Mozilla
2014-01-11 20:50 - 2014-01-11 20:50 - 00000000 ____D C:\Users\Thomas\AppData\Local\Mozilla
2014-01-11 20:50 - 2014-01-11 20:50 - 00000000 ____D C:\ProgramData\Mozilla
2014-01-11 20:42 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-01-11 20:42 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-01-11 20:42 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-01-11 20:42 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-01-11 20:42 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-01-11 20:42 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-01-11 20:42 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-01-11 20:42 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-01-11 20:42 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-01-11 18:05 - 2014-01-14 09:43 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-11 18:05 - 2014-01-14 05:44 - 00000000 ____D C:\Users\Thomas
2014-01-11 18:05 - 2014-01-14 05:43 - 00001652 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-11 18:05 - 2014-01-12 10:37 - 00002192 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-01-11 18:05 - 2014-01-11 18:05 - 00000020 ___SH C:\Users\Thomas\ntuser.ini
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\Startmenü
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\Eigene Dateien
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\Documents\Eigene Musik
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\Documents\Eigene Bilder
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Vorlagen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Netzwerkumgebung
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Lokale Einstellungen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Druckumgebung
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\AppData\Local\Verlauf
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\AppData\Local\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Vorlagen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Startmenü
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Programme
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Vorlagen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Startmenü
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Favoriten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Dokumente
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Dokumente und Einstellungen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 ____D C:\Users\Thomas\AppData\Local\VirtualStore
2014-01-11 18:05 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-11 18:05 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-01-11 18:00 - 2014-01-19 19:10 - 01698416 _____ C:\Windows\WindowsUpdate.log
2014-01-07 17:46 - 2014-01-07 18:32 - 00000388 _____ C:\Windows\SysWOW64\gpu-temperature.xml
2014-01-07 17:44 - 2014-01-07 18:32 - 00001777 _____ C:\Windows\SysWOW64\FurMark_0001.log
2014-01-07 17:42 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-01-07 17:42 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-01-07 17:42 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-01-07 17:42 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-01-07 17:42 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-01-07 17:42 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-01-07 17:42 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-01-07 17:42 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-01-07 17:42 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-01-07 17:42 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-01-07 17:42 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-01-07 17:42 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-01-07 17:42 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-01-07 17:42 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-01-07 17:42 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-01-07 17:42 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-01-07 17:42 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-01-07 17:42 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-01-07 17:42 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-01-07 17:42 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-01-07 17:42 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-01-07 17:42 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-01-07 17:42 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-01-07 17:42 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-01-07 17:42 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-01-07 17:42 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-01-07 17:42 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-01-07 17:42 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-01-07 17:42 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-01-07 17:42 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-01-07 17:42 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-01-07 17:42 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-01-07 17:42 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-01-07 17:42 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-01-07 17:42 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-01-07 17:42 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-01-07 17:42 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-01-07 17:42 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-01-07 17:42 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-01-07 17:42 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-01-07 17:42 - 2007-07-20 00:54 - 00021352 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_2.dll
2014-01-07 17:42 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-01-07 17:42 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-01-07 17:42 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-01-07 17:42 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-01-07 17:42 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-01-07 17:42 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-01-07 17:42 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-01-07 17:42 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-01-07 17:42 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-01-07 17:42 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-01-07 17:42 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-01-07 17:42 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-01-07 17:42 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-01-07 17:42 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-01-07 17:42 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-01-07 17:42 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-01-07 17:42 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-01-07 17:42 - 2006-09-28 16:03 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-01-07 17:42 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-01-07 17:42 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-01-07 17:42 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-01-07 17:42 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-01-07 17:42 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-01-07 17:42 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-01-07 17:41 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-01-07 17:41 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-01-07 17:41 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-01-07 17:41 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-01-07 17:41 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-01-07 17:41 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-01-07 17:41 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-01-07 17:41 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-01-07 17:41 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-01-07 17:41 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-01-07 17:41 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-01-07 17:41 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-01-07 17:41 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-01-07 17:41 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-01-07 17:41 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-01-07 17:41 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-01-07 17:41 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-01-07 17:41 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll

==================== One Month Modified Files and Folders =======

2014-01-19 19:48 - 2014-01-19 19:47 - 02076672 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe
2014-01-19 19:48 - 2014-01-15 10:31 - 00010915 _____ C:\Users\Thomas\Downloads\FRST.txt
2014-01-19 19:39 - 2014-01-19 19:39 - 00008618 _____ C:\Users\Thomas\Desktop\JRT.txt
2014-01-19 19:33 - 2014-01-19 19:33 - 00000000 ____D C:\Windows\ERUNT
2014-01-19 19:32 - 2014-01-19 19:32 - 01037068 _____ (Thisisu) C:\Users\Thomas\Downloads\JRT.exe
2014-01-19 19:23 - 2009-07-14 05:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-19 19:23 - 2009-07-14 05:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-19 19:21 - 2014-01-18 20:03 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-19 19:21 - 2014-01-18 09:20 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Spotify
2014-01-19 19:19 - 2014-01-11 18:00 - 01698416 _____ C:\Windows\WindowsUpdate.log
2014-01-19 19:17 - 2014-01-14 12:37 - 00003116 _____ C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-01-19 19:16 - 2014-01-12 10:48 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Skype
2014-01-19 19:16 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-19 19:16 - 2009-07-14 05:51 - 00050483 _____ C:\Windows\setupact.log
2014-01-19 19:08 - 2014-01-14 13:39 - 00000000 ____D C:\AdwCleaner
2014-01-19 18:59 - 2014-01-11 21:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\BOM
2014-01-19 18:56 - 2014-01-15 10:49 - 00000296 _____ C:\Windows\Tasks\Digital Sites.job
2014-01-19 18:40 - 2014-01-17 16:06 - 00000000 ____D C:\Users\Thomas\Downloads\FRST-OlderVersion
2014-01-19 17:47 - 2014-01-11 22:59 - 00000000 ____D C:\ProgramData\MFAData
2014-01-19 11:16 - 2014-01-12 10:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\Windows Live
2014-01-19 02:36 - 2014-01-18 09:22 - 00000000 ____D C:\Users\Thomas\AppData\Local\Spotify
2014-01-18 20:03 - 2014-01-18 20:03 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-18 20:03 - 2014-01-11 21:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-18 20:03 - 2014-01-11 21:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-18 20:03 - 2014-01-11 21:24 - 00000000 ____D C:\Users\Thomas\AppData\Local\Adobe
2014-01-18 20:02 - 2014-01-18 20:01 - 01071000 _____ (Solid State Networks) C:\Users\Thomas\Downloads\install_flashplayer12x32_mssd_aaa_aih.exe
2014-01-18 15:19 - 2014-01-18 15:19 - 00068280 _____ C:\Users\Thomas\Downloads\worf_incomimgmessage.wav
2014-01-18 15:12 - 2014-01-18 15:12 - 00029460 _____ C:\Users\Thomas\Downloads\welcomenet_homer.wav
2014-01-18 15:08 - 2014-01-18 15:08 - 00028364 _____ C:\Users\Thomas\Downloads\vader.wav
2014-01-18 09:22 - 2014-01-18 09:22 - 00001819 _____ C:\Users\Thomas\Desktop\Spotify.lnk
2014-01-18 09:22 - 2014-01-18 09:22 - 00001805 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-01-18 09:20 - 2014-01-18 09:20 - 00127080 _____ (Spotify Ltd) C:\Users\Thomas\Downloads\SpotifySetup.exe
2014-01-17 16:06 - 2014-01-15 10:31 - 00000000 ____D C:\FRST
2014-01-15 20:26 - 2014-01-12 00:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\Microsoft Games
2014-01-15 20:05 - 2010-11-21 04:47 - 00637716 _____ C:\Windows\PFRO.log
2014-01-15 20:04 - 2014-01-15 12:34 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-15 20:04 - 2014-01-15 10:49 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DigitalSites
2014-01-15 14:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2014-01-15 13:36 - 2014-01-15 12:33 - 00000000 ____D C:\Users\Thomas\Desktop\mbar
2014-01-15 13:29 - 2014-01-15 12:33 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-15 12:32 - 2014-01-15 12:31 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Thomas\Downloads\mbar-1.07.0.1008.exe
2014-01-15 11:54 - 2013-11-13 09:32 - 00000000 ____D C:\ProgramData\Norton
2014-01-15 11:50 - 2014-01-14 12:22 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-01-15 11:49 - 2014-01-15 11:49 - 00000085 _____ C:\Windows\wininit.ini
2014-01-15 11:49 - 2014-01-14 12:22 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-15 11:07 - 2014-01-14 05:44 - 00000000 ____D C:\Users\Thomas\AppData\Local\cache
2014-01-15 10:56 - 2014-01-15 10:49 - 00003240 _____ C:\Windows\System32\Tasks\Digital Sites
2014-01-15 10:55 - 2014-01-15 10:55 - 00107166 _____ C:\Scan FRST - malwarebytes 20150115 - 10-20 Uhr.txt
2014-01-15 10:49 - 2014-01-15 10:49 - 00000005 _____ C:\Users\Thomas\AppData\Roaming\WBPU-TTL.DAT
2014-01-15 10:49 - 2014-01-11 22:11 - 00000166 _____ C:\Users\Thomas\AppData\Roaming\WB.CFG
2014-01-15 10:47 - 2014-01-15 10:47 - 00000000 ____D C:\Program Files (x86)\7-Zip
2014-01-15 10:46 - 2014-01-15 10:46 - 01110476 _____ C:\Users\Thomas\Downloads\7z920.exe
2014-01-15 10:38 - 2014-01-15 10:32 - 00023995 _____ C:\Users\Thomas\Downloads\Addition.txt
2014-01-15 08:39 - 2014-01-15 08:39 - 01236282 _____ C:\Users\Thomas\Downloads\AdwCleaner.exe
2014-01-15 08:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2014-01-15 03:16 - 2009-07-14 05:45 - 00294712 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-14 17:49 - 2014-01-14 17:49 - 01236282 _____ C:\Users\Thomas\Downloads\adwcleaner_3.017.exe
2014-01-14 17:48 - 2014-01-14 17:48 - 00001158 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-14 17:48 - 2014-01-14 17:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-14 17:48 - 2014-01-11 20:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-14 13:32 - 2014-01-14 12:37 - 00000000 ____D C:\Program Files (x86)\WinZip Malware Protector
2014-01-14 13:13 - 2011-04-12 08:43 - 00698688 _____ C:\Windows\system32\perfh007.dat
2014-01-14 13:13 - 2011-04-12 08:43 - 00148828 _____ C:\Windows\system32\perfc007.dat
2014-01-14 13:13 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-14 13:01 - 2014-01-14 13:01 - 00003696 _____ C:\Windows\System32\Tasks\WinZip Malware Protector
2014-01-14 12:37 - 2014-01-14 12:37 - 00001200 _____ C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-01-14 12:37 - 2014-01-14 12:37 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Nico Mak Computing
2014-01-14 12:37 - 2014-01-14 12:37 - 00000000 ____D C:\ProgramData\Nico Mak Computing
2014-01-14 12:22 - 2014-01-14 12:22 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2014-01-14 10:43 - 2014-01-14 10:43 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Malwarebytes
2014-01-14 10:42 - 2014-01-14 10:42 - 00001120 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-14 10:42 - 2014-01-14 10:42 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-14 10:42 - 2014-01-14 10:42 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-14 09:43 - 2014-01-11 18:05 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-14 09:42 - 2014-01-14 05:43 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-14 09:16 - 2014-01-14 08:42 - 00000000 ____D C:\Users\Thomas\AppData\Local\CrashDumps
2014-01-14 05:44 - 2014-01-14 05:44 - 00000000 ____D C:\Users\Thomas\.android
2014-01-14 05:44 - 2014-01-14 05:44 - 00000000 _____ C:\Users\Thomas\daemonprocess.txt
2014-01-14 05:44 - 2014-01-11 18:05 - 00000000 ____D C:\Users\Thomas
2014-01-14 05:43 - 2014-01-11 23:30 - 00002319 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-01-14 05:43 - 2014-01-11 18:05 - 00001652 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-13 03:20 - 2011-04-12 08:55 - 00000000 ____D C:\Program Files\Windows Journal
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\SysWOW64\winrm
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\SysWOW64\WCN
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\SysWOW64\sysprep
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\system32\winrm
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\system32\WCN
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\system32\slmgr
2014-01-13 03:20 - 2011-04-12 08:43 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2014-01-13 03:20 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2014-01-13 03:20 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2014-01-13 03:20 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender
2014-01-13 03:20 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2014-01-13 03:20 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2014-01-13 03:20 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Setup
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\MUI
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\com
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sysprep
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Setup
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\oobe
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\MUI
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\migwiz
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Dism
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\com
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\servicing
2014-01-13 03:20 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System
2014-01-12 19:43 - 2014-01-12 10:50 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Windows Live Writer
2014-01-12 15:21 - 2014-01-12 15:21 - 00000000 ____D C:\Windows\System32\Tasks\Games
2014-01-12 13:07 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2014-01-12 12:24 - 2014-01-11 21:06 - 00064024 _____ C:\Users\Thomas\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-12 12:22 - 2014-01-12 12:22 - 00000954 _____ C:\Users\Public\Desktop\Audials 10.lnk
2014-01-12 12:22 - 2014-01-12 12:22 - 00000000 ____D C:\Users\Thomas\AppData\Local\CrashRpt
2014-01-12 12:21 - 2014-01-12 12:21 - 00000000 ____D C:\ProgramData\RapidSolution
2014-01-12 12:21 - 2014-01-12 12:21 - 00000000 ____D C:\Program Files (x86)\Audials
2014-01-12 12:19 - 2014-01-12 12:19 - 00000000 ____D C:\Users\Thomas\AppData\Local\RapidSolution
2014-01-12 12:17 - 2014-01-12 12:17 - 01552920 _____ (RapidSolution Software AG) C:\Users\Thomas\Downloads\ComputerBildOnline_Audials_Radiotracker10_SE_10.1.6202.200_webinstaller.exe
2014-01-12 11:17 - 2014-01-12 11:17 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\OpenOffice
2014-01-12 11:14 - 2014-01-12 11:14 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-01-12 11:14 - 2014-01-12 11:14 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2014-01-12 11:03 - 2014-01-12 11:02 - 00000000 ____D C:\Users\Thomas\Desktop\OpenOffice 4.0.1 (de) Installation Files
2014-01-12 11:03 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2014-01-12 11:02 - 2014-01-12 10:56 - 163606685 _____ C:\Users\Thomas\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-12 10:50 - 2014-01-12 10:50 - 00000000 ____D C:\Users\Thomas\AppData\Local\Windows Live Writer
2014-01-12 10:48 - 2014-01-12 10:48 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-12 10:48 - 2014-01-12 10:48 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-12 10:48 - 2014-01-12 10:48 - 00000000 ____D C:\ProgramData\Skype
2014-01-12 10:48 - 2013-11-13 09:30 - 00000000 ____D C:\Program Files (x86)\Windows Live
2014-01-12 10:46 - 2014-01-12 10:46 - 00000000 ____D C:\Users\Thomas\Tracing
2014-01-12 10:42 - 2014-01-12 10:42 - 00000000 ____D C:\Windows\de
2014-01-12 10:41 - 2014-01-12 10:41 - 00000000 ____D C:\Windows\it
2014-01-12 10:41 - 2014-01-12 10:41 - 00000000 ____D C:\Windows\fr
2014-01-12 10:41 - 2014-01-12 10:41 - 00000000 ____D C:\Windows\es
2014-01-12 10:41 - 2014-01-12 10:41 - 00000000 ____D C:\Windows\en
2014-01-12 10:40 - 2013-11-13 09:30 - 00000000 ____D C:\Program Files\Windows Live
2014-01-12 10:38 - 2013-11-13 09:28 - 00006491 _____ C:\Windows\DirectX.log
2014-01-12 10:37 - 2014-01-12 10:37 - 00000000 ___RD C:\Users\Thomas\SkyDrive
2014-01-12 10:37 - 2014-01-11 18:05 - 00002192 _____ C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-01-12 10:28 - 2014-01-12 10:23 - 142602520 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\wlsetup-all.exe
2014-01-12 09:59 - 2014-01-12 09:59 - 00003438 _____ C:\Windows\System32\Tasks\BackUp_Maker-Thomas
2014-01-12 09:59 - 2014-01-12 09:59 - 00002161 _____ C:\Users\Public\Desktop\BackUp Maker.lnk
2014-01-12 09:59 - 2014-01-12 09:59 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\ASCOMP Software
2014-01-12 09:59 - 2014-01-12 09:59 - 00000000 ____D C:\Program Files (x86)\ASCOMP Software
2014-01-12 09:58 - 2014-01-12 09:58 - 06902616 _____ (ASCOMP Software GmbH                                        ) C:\Users\Thomas\Downloads\bkmaker.exe
2014-01-12 01:56 - 2013-11-13 09:21 - 04188794 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-12 01:53 - 2014-01-12 01:37 - 00016477 _____ C:\Windows\IE11_main.log
2014-01-12 01:32 - 2014-01-12 01:20 - 00014476 _____ C:\Windows\IE10_main.log
2014-01-12 01:22 - 2014-01-12 01:22 - 19271168 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 14356992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 13761536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-01-12 01:22 - 2014-01-12 01:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-12 01:22 - 2014-01-12 01:22 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-12 01:22 - 2014-01-12 01:22 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-01-12 01:22 - 2014-01-12 01:22 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-01-12 01:22 - 2014-01-12 01:22 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-12 01:22 - 2014-01-12 01:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-12 01:22 - 2014-01-12 01:22 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-01-12 01:22 - 2014-01-12 01:22 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-12 01:22 - 2014-01-12 01:22 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-01-12 01:22 - 2014-01-12 01:22 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-01-12 01:22 - 2014-01-12 01:22 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-12 01:22 - 2014-01-12 01:22 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-01-12 00:36 - 2014-01-11 22:59 - 00000000 ____D C:\Users\Thomas\AppData\Local\Avg2014
2014-01-12 00:29 - 2014-01-12 00:29 - 00002168 _____ C:\Users\Public\Desktop\Moorhuhn Remake starten.lnk
2014-01-12 00:24 - 2014-01-12 00:23 - 08862099 _____ (InstallShield Software Corporation) C:\Users\Thomas\Downloads\Setup_MHRemake.exe
2014-01-12 00:24 - 2014-01-12 00:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-12 00:24 - 2014-01-12 00:16 - 00000000 ____D C:\Program Files (x86)\phenomedia
2014-01-12 00:16 - 2014-01-12 00:16 - 00002302 _____ C:\Users\Public\Desktop\Moorhuhn Kart 3 Demo spielen.lnk
2014-01-12 00:14 - 2014-01-12 00:09 - 62027866 _____ C:\Users\Thomas\Downloads\Setup_Moorhuhn_Kart3-Demo.zip
2014-01-12 00:13 - 2014-01-12 00:13 - 01444352 _____ C:\Users\Thomas\Downloads\7z922-x64.msi
2014-01-11 23:47 - 2014-01-11 23:47 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-01-11 23:47 - 2014-01-11 23:47 - 00000000 ____D C:\ProgramData\TuneUp Software
2014-01-11 23:47 - 2014-01-11 23:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\TuneUp Software
2014-01-11 23:30 - 2011-04-12 08:54 - 00000000 ___RD C:\Users\Public\Recorded TV
2014-01-11 23:29 - 2014-01-11 23:29 - 00001543 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-01-11 23:29 - 2014-01-11 23:29 - 00001250 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-01-11 23:29 - 2014-01-11 23:29 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DVDVideoSoft
2014-01-11 23:29 - 2014-01-11 23:29 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2014-01-11 23:28 - 2014-01-11 23:27 - 34008992 _____ (DVDVideoSoft Ltd.                                          ) C:\Users\Thomas\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-11 23:26 - 2014-01-11 23:15 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\vlc
2014-01-11 23:23 - 2014-01-11 23:23 - 00002026 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-11 23:23 - 2014-01-11 23:23 - 00000000 ____D C:\ProgramData\Adobe
2014-01-11 23:23 - 2014-01-11 23:23 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-11 23:19 - 2014-01-11 23:19 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Ashampoo
2014-01-11 23:18 - 2014-01-11 23:18 - 00001314 _____ C:\Users\Public\Desktop\Ashampoo Burning Studio FREE.lnk
2014-01-11 23:18 - 2014-01-11 23:18 - 00000000 ____D C:\Users\Thomas\AppData\Local\ashampoo
2014-01-11 23:18 - 2014-01-11 23:18 - 00000000 ____D C:\ProgramData\Ashampoo
2014-01-11 23:18 - 2014-01-11 23:18 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2014-01-11 23:18 - 2014-01-11 23:16 - 29337984 _____ (Ashampoo GmbH & Co. KG                                      ) C:\Users\Thomas\Downloads\ashampoo_burning_studio_free_1.12.0_14566.exe
2014-01-11 23:14 - 2014-01-11 23:14 - 00000878 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-11 23:14 - 2014-01-11 23:14 - 00000000 ____D C:\Program Files\VideoLAN
2014-01-11 23:13 - 2014-01-11 23:12 - 23884615 _____ C:\Users\Thomas\Downloads\vlc-2.1.2-win64.exe
2014-01-11 23:01 - 2014-01-11 23:01 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute
2014-01-11 23:01 - 2014-01-11 23:01 - 00000988 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-11 23:01 - 2014-01-11 23:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\AVG2014
2014-01-11 23:01 - 2014-01-11 23:00 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-11 23:00 - 2014-01-11 23:00 - 00000000 ___HD C:\$AVG
2014-01-11 23:00 - 2014-01-11 23:00 - 00000000 ____D C:\Program Files (x86)\AVG
2014-01-11 22:59 - 2014-01-11 22:59 - 00000000 ____D C:\Users\Thomas\AppData\Local\MFAData
2014-01-11 22:59 - 2014-01-11 22:48 - 137189352 _____ (AVG Technologies) C:\Users\Thomas\Downloads\avg_free_x86_all_2014_4259a6848.exe
2014-01-11 22:58 - 2014-01-11 22:48 - 149157408 _____ (AVG Technologies) C:\Users\Thomas\Downloads\avg_free_x64_all_2014_4259a6848.exe
2014-01-11 22:00 - 2014-01-11 21:59 - 00000000 ____D C:\Program Files (x86)\Biet-O-Matic
2014-01-11 21:59 - 2014-01-11 21:59 - 00001036 _____ C:\Users\Public\Desktop\Biet-O-Matic.lnk
2014-01-11 21:58 - 2014-01-11 21:57 - 04653537 _____ C:\Users\Thomas\Downloads\BOM21412_setup.exe
2014-01-11 21:54 - 2014-01-11 21:54 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Macromedia
2014-01-11 21:54 - 2014-01-11 21:54 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Adobe
2014-01-11 21:54 - 2014-01-11 21:54 - 00000000 ____D C:\Users\Thomas\AppData\Local\Macromedia
2014-01-11 21:28 - 2014-01-11 21:28 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2014-01-11 21:28 - 2014-01-11 21:28 - 00000000 ____D C:\Windows\system32\Macromed
2014-01-11 21:12 - 2014-01-11 21:12 - 00508240 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\ie6setupOe{1}.exe
2014-01-11 21:07 - 2014-01-11 21:07 - 00508240 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\ie6setupOe.exe
2014-01-11 21:07 - 2014-01-11 21:07 - 00000877 _____ C:\Windows\Active Setup Log.BAK
2014-01-11 21:06 - 2009-06-26 19:14 - 00000000 ____D C:\Users\Thomas\Documents\NAVIGON
2014-01-11 21:06 - 2009-01-28 20:20 - 00000000 ____D C:\Users\Thomas\Documents\Nokia Sicherung
2014-01-11 20:50 - 2014-01-11 20:50 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Mozilla
2014-01-11 20:50 - 2014-01-11 20:50 - 00000000 ____D C:\Users\Thomas\AppData\Local\Mozilla
2014-01-11 20:50 - 2014-01-11 20:50 - 00000000 ____D C:\ProgramData\Mozilla
2014-01-11 20:48 - 2010-10-07 08:44 - 00000000 ___RD C:\Users\Thomas\Documents\Eigene Dateien
2014-01-11 20:44 - 2011-08-07 14:13 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Startmenü
2014-01-11 20:44 - 2009-01-24 17:53 - 00000000 ____D C:\Users\Thomas\Documents\Büro
2014-01-11 20:44 - 2009-01-24 14:13 - 00000000 ___RD C:\Users\Thomas\Favoriten
2014-01-11 20:41 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\restore
2014-01-11 20:40 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2014-01-11 18:05 - 2014-01-11 18:05 - 00000020 ___SH C:\Users\Thomas\ntuser.ini
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\Startmenü
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\Eigene Dateien
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\Documents\Eigene Musik
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\Documents\Eigene Bilder
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 RSHDL C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Vorlagen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Netzwerkumgebung
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Lokale Einstellungen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Druckumgebung
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\AppData\Local\Verlauf
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\AppData\Local\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Thomas\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Vorlagen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Startmenü
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Programme
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Vorlagen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Startmenü
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Favoriten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Dokumente
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 _SHDL C:\Dokumente und Einstellungen
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 ___RD C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-11 18:05 - 2014-01-11 18:05 - 00000000 ____D C:\Users\Thomas\AppData\Local\VirtualStore
2014-01-11 18:05 - 2013-11-13 09:12 - 00000000 ____D C:\Windows\Panther
2014-01-11 18:05 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2014-01-11 18:05 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Windows NT
2014-01-11 17:54 - 2013-11-13 09:18 - 00008246 _____ C:\Windows\TSSysprep.log
2014-01-11 17:54 - 2009-07-14 05:46 - 00005838 _____ C:\Windows\DtcInstall.log
2014-01-07 18:32 - 2014-01-07 17:46 - 00000388 _____ C:\Windows\SysWOW64\gpu-temperature.xml
2014-01-07 18:32 - 2014-01-07 17:44 - 00001777 _____ C:\Windows\SysWOW64\FurMark_0001.log

Some content of TEMP:
====================
C:\Users\Thomas\AppData\Local\Temp\44189uninstall.exe
C:\Users\Thomas\AppData\Local\Temp\Quarantine.exe
C:\Users\Thomas\AppData\Local\Temp\Sqlite3.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-19 09:12

==================== End Of Log ============================
--- --- ---

--- --- ---


Und jetzt noch mal die log - datei vom adw-cleaner
Code:
# AdwCleaner v3.017 - Bericht erstellt am 20/01/2014 um 06:50:31
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Thomas - THOMAS-PC
# Gestartet von : C:\Users\Thomas\Downloads\adwcleaner_3.017.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****

Verknüpfung Gefunden : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk ( hxxp://www.nationzoom.com/?type=sc&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298 )
Verknüpfung Gefunden : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk ( hxxp://www.nationzoom.com/?type=sc&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298 )
Verknüpfung Gefunden : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk ( hxxp://www.nationzoom.com/?type=sc&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298 )
Verknüpfung Gefunden : C:\Users\Thomas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk ( hxxp://www.nationzoom.com/?type=sc&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298 )

***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\AVG Secure Search
Schlüssel Gefunden : HKCU\Software\Classes\Applications\lollipop.exe
Schlüssel Gefunden : HKCU\Software\lollipop
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zip Opener Packages
Schlüssel Gefunden : HKCU\Software\WEDLMNGR
Schlüssel Gefunden : [x64] HKCU\Software\AVG Secure Search
Schlüssel Gefunden : [x64] HKCU\Software\lollipop
Schlüssel Gefunden : [x64] HKCU\Software\WEDLMNGR
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{37540F19-DD4C-478B-B2DF-C19281BCAF27}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{612AD33D-9824-4E87-8396-92374E91C4BB}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612AD33D-9824-4E87-8396-92374E91C4BB}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gefunden : HKLM\Software\SupTab
Schlüssel Gefunden : HKLM\Software\supWPM
Schlüssel Gefunden : HKLM\Software\Uniblue
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{042DA63B-0933-403D-9395-B49307691690}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{37540F19-DD4C-478B-B2DF-C19281BCAF27}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{28C3737A-32D1-492D-B76B-8D75EBBFB887}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{CE057E0D-2D7E-4DFF-A890-07BA69B8C762}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\DomaIQ
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612AD33D-9824-4E87-8396-92374E91C4BB}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Wert Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16750

Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=5c43be52-fdf1-f595-93c1-9074396a2577&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=11/01/2014&type=hp1000
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=5c43be52-fdf1-f595-93c1-9074396a2577&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=11/01/2014&type=hp1000
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://www.nationzoom.com/web/?type=ds&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298&q={searchTerms}
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.nationzoom.com/?type=hp&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.nationzoom.com/?type=hp&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.nationzoom.com/web/?type=ds&ts=1389674585&from=amt&uid=WDCXWD10EZRX-00L4HB0_WD-WMC4J011529815298&q={searchTerms}

-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [33330 octets] - [14/01/2014 13:39:51]
AdwCleaner[R10].txt - [33271 octets] - [15/01/2014 08:45:56]
AdwCleaner[R11].txt - [33265 octets] - [15/01/2014 08:54:59]
AdwCleaner[R12].txt - [33265 octets] - [15/01/2014 09:05:42]
AdwCleaner[R13].txt - [17635 octets] - [19/01/2014 18:20:45]
AdwCleaner[R14].txt - [8046 octets] - [20/01/2014 06:50:31]
AdwCleaner[R1].txt - [33334 octets] - [14/01/2014 14:03:25]
AdwCleaner[R2].txt - [33330 octets] - [14/01/2014 14:06:41]
AdwCleaner[R3].txt - [33324 octets] - [14/01/2014 14:08:37]
AdwCleaner[R4].txt - [33324 octets] - [14/01/2014 17:24:26]
AdwCleaner[R5].txt - [33271 octets] - [14/01/2014 17:50:02]
AdwCleaner[R6].txt - [33271 octets] - [14/01/2014 17:54:45]
AdwCleaner[R7].txt - [34071 octets] - [14/01/2014 18:06:57]
AdwCleaner[R8].txt - [33265 octets] - [15/01/2014 08:39:59]
AdwCleaner[R9].txt - [33265 octets] - [15/01/2014 08:44:56]
AdwCleaner[S0].txt - [1820 octets] - [19/01/2014 19:08:50]

########## EOF - C:\AdwCleaner\AdwCleaner[R14].txt - [8716 octets] ##########

cosinus 20.01.2014 09:13
Wieso hat der adwCleaner einen Tag später nochmal so viel gefunden....und die Funde bitte auch entfernen

monty2000 20.01.2014 09:31
Die Löschaktion habe ich jetzt durchgeführt, so sieht die log-Datei aus. Soll ich nochmal den adw-cleaner laufen lasssen?
Code:
# AdwCleaner v3.017 - Bericht erstellt am 20/01/2014 um 09:22:35
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Thomas - THOMAS-PC
# Gestartet von : C:\Users\Thomas\Downloads\adwcleaner_3.017.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
Verknüpfung Desinfiziert : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Verknüpfung Desinfiziert : C:\Users\Thomas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Classes\Applications\lollipop.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{37540F19-DD4C-478B-B2DF-C19281BCAF27}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{612AD33D-9824-4E87-8396-92374E91C4BB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612AD33D-9824-4E87-8396-92374E91C4BB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{042DA63B-0933-403D-9395-B49307691690}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{37540F19-DD4C-478B-B2DF-C19281BCAF27}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{28C3737A-32D1-492D-B76B-8D75EBBFB887}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{CE057E0D-2D7E-4DFF-A890-07BA69B8C762}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612AD33D-9824-4E87-8396-92374E91C4BB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Schlüssel Gelöscht : HKCU\Software\AVG Secure Search
Schlüssel Gelöscht : HKCU\Software\lollipop
Schlüssel Gelöscht : HKCU\Software\WEDLMNGR
Schlüssel Gelöscht : HKLM\Software\SupTab
Schlüssel Gelöscht : HKLM\Software\supWPM
Schlüssel Gelöscht : HKLM\Software\Uniblue
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zip Opener Packages
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DomaIQ

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16750

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\p8gebnyy.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [33330 octets] - [14/01/2014 13:39:51]
AdwCleaner[R10].txt - [33271 octets] - [15/01/2014 08:45:56]
AdwCleaner[R11].txt - [33265 octets] - [15/01/2014 08:54:59]
AdwCleaner[R12].txt - [33265 octets] - [15/01/2014 09:05:42]
AdwCleaner[R13].txt - [17635 octets] - [19/01/2014 18:20:45]
AdwCleaner[R14].txt - [8917 octets] - [20/01/2014 06:50:31]
AdwCleaner[R1].txt - [33334 octets] - [14/01/2014 14:03:25]
AdwCleaner[R2].txt - [33330 octets] - [14/01/2014 14:06:41]
AdwCleaner[R3].txt - [33324 octets] - [14/01/2014 14:08:37]
AdwCleaner[R4].txt - [33324 octets] - [14/01/2014 17:24:26]
AdwCleaner[R5].txt - [33271 octets] - [14/01/2014 17:50:02]
AdwCleaner[R6].txt - [33271 octets] - [14/01/2014 17:54:45]
AdwCleaner[R7].txt - [34071 octets] - [14/01/2014 18:06:57]
AdwCleaner[R8].txt - [33265 octets] - [15/01/2014 08:39:59]
AdwCleaner[R9].txt - [33265 octets] - [15/01/2014 08:44:56]
AdwCleaner[S0].txt - [1820 octets] - [19/01/2014 19:08:50]
AdwCleaner[S1].txt - [7363 octets] - [20/01/2014 09:22:35]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [7423 octets] ##########


Alle Zeitangaben in WEZ +1. Es ist jetzt 05:52 Uhr.
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131