Trojaner-Board - Malware ? Adware ? oder so

Code:

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe

(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe

(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe

(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

() C:\Windows\Microsoft\SystemUpdatekb70007\WindowsUpdater.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe

(Akamai Technologies, Inc.) C:\Users\Zahir\AppData\Local\Akamai\netsession_win.exe

(Akamai Technologies, Inc.) C:\Users\Zahir\AppData\Local\Akamai\netsession_win.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(The Privoxy team - www.privoxy.org) C:\Program Files (x86)\MSR\Privoxy\privoxy.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(Dropbox, Inc.) C:\Users\Zahir\AppData\Roaming\Dropbox\bin\Dropbox.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe

(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe

(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe

(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe

(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe

(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2723624 2011-03-28] (Synaptics Incorporated)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11860072 2011-06-09] (Realtek Semiconductor)

HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)

HKLM\...\Run: [OOTag] => C:\Program Files (x86)\Acer\OOBEOffer\ootag.exe [13856 2010-02-23] (Microsoft)

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2114376 2009-07-06] (CANON INC.)

HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [722256 2008-12-11] (CANON INC.)

HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [341360 2011-09-20] (Egis Technology Inc.)

HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296984 2012-01-05] (NTI Corporation)

HKLM-x32\...\Run: [OOTag] => C:\Program Files (x86)\Acer\OOBEOffer\OOTag.exe [13856 2010-02-23] (Microsoft)

HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-24] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [ArcadeMovieService] => C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-10-27] (CyberLink Corp.)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-12] (Geek Software GmbH)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)

HKLM-x32\...\Run: [fst_de_34] => [X]

HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}

HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}

HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}

HKU\S-1-5-21-3477308265-2496034449-71581967-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Zahir\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)

HKU\S-1-5-21-3477308265-2496034449-71581967-1000\...\Run: [KiesPDLR.exe] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run

HKU\S-1-5-21-3477308265-2496034449-71581967-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)

Startup: C:\Users\Zahir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Zahir\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 

==================== Internet (Whitelisted) ====================
 

ProxyEnable: Internet Explorer proxy is enabled.

ProxyServer: http=127.0.0.1:8118;https=127.0.0.1:8118

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File

Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Zahir\AppData\Roaming\Mozilla\Firefox\Profiles\fz6cdce5.default-1402230240433

FF NetworkProxy: "type", 1);user_pref("network.proxy.http", "127.0.0.1");user_pref("network.proxy.http_port", 8118);user_pref("network.proxy.ssl", "127.0.0.1");user_pref("network.proxy.ssl_port", 8118

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF HKLM-x32\...\Firefox\Extensions: [fiddlerhook@fiddler2.com] - C:\Program Files (x86)\Fiddler2\FiddlerHook

FF Extension: FiddlerHook - C:\Program Files (x86)\Fiddler2\FiddlerHook [2014-05-31]
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com/

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll ()

CHR Plugin: (McAfee SiteAdvisor) - C:\Users\Zahir\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.2.1341_1\McChPlg.dll No File

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility) - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File

CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File

CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File

CHR Plugin: (WildTangent Games App V2 Presence Detector) - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll No File

CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File

CHR Plugin: (McAfee SecurityCenter) - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL No File

CHR Extension: (Google Drive) - C:\Users\Zahir\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-31]

CHR Extension: (YouTube) - C:\Users\Zahir\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-31]

CHR Extension: (Google-Suche) - C:\Users\Zahir\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-31]

CHR Extension: (Google Wallet) - C:\Users\Zahir\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]

CHR Extension: (Google Mail) - C:\Users\Zahir\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-31]
 

==================== Services (Whitelisted) =================
 

R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)

R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation)

R2 SystemUpdatekb70007; C:\Windows\Microsoft\SystemUpdatekb70007\WindowsUpdater.exe [18944 2014-05-08] ()
 

==================== Drivers (Whitelisted) ====================
 

S3 PCDSRVC{A368CD8C-67126E3D-06020200}_0; \??\c:\users\admini~1\appdata\local\temp\saea.wd8i9m0\pcdrdiag\bin\pcdsrvc_x64.pkms [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-06-08 14:46 - 2014-06-08 14:49 - 00015694 _____ () C:\Users\Zahir\Downloads\FRST.txt

2014-06-08 14:46 - 2014-06-08 14:48 - 00000000 ____D () C:\FRST

2014-06-08 14:45 - 2014-06-08 14:45 - 02072576 _____ (Farbar) C:\Users\Zahir\Downloads\FRST64.exe

2014-06-08 14:20 - 2014-06-08 14:20 - 00000000 ____D () C:\Program Files (x86)\MSR

2014-06-08 14:10 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-06-08 14:00 - 2014-06-08 14:18 - 00000000 ____D () C:\AdwCleaner

2014-06-08 13:59 - 2014-06-08 13:59 - 01333465 _____ () C:\Users\Zahir\Downloads\adwcleaner_3.212.exe

2014-06-08 13:29 - 2014-06-08 13:30 - 00000000 ____D () C:\Program Files (x86)\Minecraft

2014-06-08 13:29 - 2014-06-08 13:29 - 00000000 ____D () C:\Users\Zahir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft

2014-06-08 13:27 - 2014-06-08 13:27 - 00333824 _____ () C:\Users\Zahir\Downloads\MinecraftInstaller__2490_il372.exe

2014-06-08 13:19 - 2014-06-08 14:14 - 00000000 ____D () C:\Users\Zahir\AppData\Roaming\.minecraft

2014-06-08 13:19 - 2014-06-08 13:19 - 00000000 ____D () C:\ProgramData\Sun

2014-06-08 13:19 - 2014-06-08 13:19 - 00000000 ____D () C:\ProgramData\Oracle

2014-06-08 13:18 - 2014-06-08 13:18 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-06-08 13:18 - 2014-06-08 13:18 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-06-08 13:18 - 2014-06-08 13:18 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-06-08 13:18 - 2014-06-08 13:18 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-06-08 13:18 - 2014-06-08 13:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-06-08 13:18 - 2014-06-08 13:18 - 00000000 ____D () C:\Program Files (x86)\Java

2014-06-08 13:16 - 2014-06-08 13:16 - 00918952 _____ (Oracle Corporation) C:\Users\Zahir\Downloads\jxpiinstall.exe

2014-06-07 08:45 - 2014-06-08 14:24 - 00000000 ____D () C:\Users\Zahir\Desktop\Alte Firefox-Daten

2014-06-06 21:55 - 2014-06-06 21:55 - 00577848 _____ () C:\Users\Zahir\Downloads\jvlsetup.exe

2014-06-01 16:32 - 2014-06-01 16:32 - 05450239 _____ () C:\Users\Zahir\Downloads\CustomClientEditedByOsvaldo3.0.rar

2014-06-01 01:30 - 2014-06-01 01:31 - 128543615 _____ () C:\Users\Zahir\Downloads\DHOOM-3 - Audio Jukebox - Aamir Khan - Abhishek Bachchan - Katrina Kaif - Uday Chopra.mp4

2014-05-31 17:44 - 2014-05-31 17:44 - 00003122 _____ () C:\Windows\System32\Tasks\{6C3DD6C2-D2BD-4CAC-86E7-1201F849C706}

2014-05-31 17:36 - 2014-05-31 17:36 - 00277888 _____ () C:\Users\Zahir\Downloads\Java.exe

2014-05-31 17:15 - 2014-05-31 17:15 - 00000000 ____D () C:\Users\Zahir\Documents\Fiddler2

2014-05-31 17:13 - 2014-05-31 17:13 - 00629512 _____ (Eric Lawrence) C:\Users\Zahir\Desktop\Fiddler2Setup_2_3_2_6.exe

2014-05-31 17:13 - 2014-05-31 17:13 - 00001892 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fiddler2.lnk

2014-05-31 17:11 - 2014-05-31 17:12 - 00357712 _____ (Softonic) C:\Users\Zahir\Downloads\SoftonicDownloader_fuer_fiddler.exe

2014-05-26 16:48 - 2014-05-26 16:49 - 00000000 ____D () C:\Users\Zahir\Desktop\2014_05_26

2014-05-18 07:23 - 2014-05-18 07:23 - 00000000 ____D () C:\Users\Zahir\Desktop\2014_05_18

2014-05-15 07:53 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-15 07:53 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-05-15 07:53 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-05-15 07:53 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-05-15 07:38 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-05-15 07:38 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-05-15 07:38 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll

2014-05-15 07:38 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-05-15 07:38 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2014-05-15 07:38 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2014-05-15 07:38 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2014-05-15 07:38 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-05-15 07:38 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-05-15 07:37 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-05-15 07:37 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2014-05-15 07:37 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2014-05-15 07:37 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2014-05-15 07:37 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2014-05-15 07:37 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2014-05-15 07:37 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-05-15 07:37 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-05-15 07:37 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-05-15 07:37 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-05-15 07:37 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-05-15 07:37 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-05-15 07:37 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-05-15 07:37 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll

2014-05-15 07:37 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll

2014-05-15 07:37 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll

2014-05-15 07:37 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll

2014-05-15 07:37 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll

2014-05-15 07:37 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll

2014-05-15 07:37 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-05-15 07:37 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll

2014-05-15 07:37 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-05-15 07:37 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-05-15 07:37 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-05-15 07:37 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll

2014-05-15 07:37 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll

2014-05-15 07:37 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll

2014-05-15 07:37 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll

2014-05-15 07:37 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll

2014-05-15 07:37 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll

2014-05-15 07:37 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-05-15 07:37 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-05-14 07:32 - 2014-06-08 14:21 - 00000000 ____D () C:\Users\Zahir\AppData\Roaming\DropboxMaster

2014-05-10 09:09 - 2014-05-10 09:09 - 00000000 ____D () C:\Users\Zahir\Desktop\2014_05_10

2014-05-09 21:55 - 2014-05-09 21:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
 

==================== One Month Modified Files and Folders =======
 

2014-06-08 14:49 - 2014-06-08 14:46 - 00015694 _____ () C:\Users\Zahir\Downloads\FRST.txt

2014-06-08 14:49 - 2013-08-23 19:53 - 00000000 ____D () C:\Users\Zahir\AppData\Local\Temp

2014-06-08 14:48 - 2014-06-08 14:46 - 00000000 ____D () C:\FRST

2014-06-08 14:45 - 2014-06-08 14:45 - 02072576 _____ (Farbar) C:\Users\Zahir\Downloads\FRST64.exe

2014-06-08 14:33 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-06-08 14:33 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-06-08 14:29 - 2013-08-20 14:22 - 01086120 _____ () C:\Windows\WindowsUpdate.log

2014-06-08 14:24 - 2014-06-07 08:45 - 00000000 ____D () C:\Users\Zahir\Desktop\Alte Firefox-Daten

2014-06-08 14:22 - 2013-11-10 22:50 - 00000000 ___RD () C:\Users\Zahir\Dropbox

2014-06-08 14:22 - 2013-11-10 22:38 - 00000000 ____D () C:\Users\Zahir\AppData\Roaming\Dropbox

2014-06-08 14:21 - 2014-05-14 07:32 - 00000000 ____D () C:\Users\Zahir\AppData\Roaming\DropboxMaster

2014-06-08 14:21 - 2013-08-23 19:54 - 00000000 ____D () C:\ProgramData\clear.fi

2014-06-08 14:20 - 2014-06-08 14:20 - 00000000 ____D () C:\Program Files (x86)\MSR

2014-06-08 14:20 - 2013-09-03 07:10 - 00042596 _____ () C:\Windows\setupact.log

2014-06-08 14:20 - 2013-08-30 19:08 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-06-08 14:20 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-06-08 14:19 - 2013-11-05 07:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-06-08 14:19 - 2013-09-26 14:34 - 00669218 _____ () C:\Windows\PFRO.log

2014-06-08 14:18 - 2014-06-08 14:00 - 00000000 ____D () C:\AdwCleaner

2014-06-08 14:14 - 2014-06-08 13:19 - 00000000 ____D () C:\Users\Zahir\AppData\Roaming\.minecraft

2014-06-08 14:13 - 2013-08-26 14:47 - 00000000 ____D () C:\Users\Zahir\AppData\Roaming\Skype

2014-06-08 14:12 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-06-08 14:08 - 2014-02-23 12:48 - 00000000 ____D () C:\Users\Zahir\AppData\Roaming\Samsung

2014-06-08 14:08 - 2014-02-23 12:48 - 00000000 ____D () C:\Users\Zahir\AppData\Local\Samsung

2014-06-08 14:08 - 2014-02-23 12:39 - 00000000 ____D () C:\Program Files (x86)\Samsung

2014-06-08 14:06 - 2014-02-23 12:39 - 00000000 ____D () C:\ProgramData\Samsung

2014-06-08 14:06 - 2012-05-08 15:23 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-06-08 13:59 - 2014-06-08 13:59 - 01333465 _____ () C:\Users\Zahir\Downloads\adwcleaner_3.212.exe

2014-06-08 13:30 - 2014-06-08 13:29 - 00000000 ____D () C:\Program Files (x86)\Minecraft

2014-06-08 13:29 - 2014-06-08 13:29 - 00000000 ____D () C:\Users\Zahir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft

2014-06-08 13:27 - 2014-06-08 13:27 - 00333824 _____ () C:\Users\Zahir\Downloads\MinecraftInstaller__2490_il372.exe

2014-06-08 13:20 - 2013-08-30 19:08 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-06-08 13:19 - 2014-06-08 13:19 - 00000000 ____D () C:\ProgramData\Sun

2014-06-08 13:19 - 2014-06-08 13:19 - 00000000 ____D () C:\ProgramData\Oracle

2014-06-08 13:18 - 2014-06-08 13:18 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-06-08 13:18 - 2014-06-08 13:18 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-06-08 13:18 - 2014-06-08 13:18 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-06-08 13:18 - 2014-06-08 13:18 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-06-08 13:18 - 2014-06-08 13:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-06-08 13:18 - 2014-06-08 13:18 - 00000000 ____D () C:\Program Files (x86)\Java

2014-06-08 13:16 - 2014-06-08 13:16 - 00918952 _____ (Oracle Corporation) C:\Users\Zahir\Downloads\jxpiinstall.exe

2014-06-07 19:48 - 2013-10-22 22:12 - 00000000 ____D () C:\Users\Zahir\AppData\Roaming\TS3Client

2014-06-06 21:55 - 2014-06-06 21:55 - 00577848 _____ () C:\Users\Zahir\Downloads\jvlsetup.exe

2014-06-05 13:20 - 2013-09-22 16:55 - 00000000 ____D () C:\Users\Zahir\Documents\Hina

2014-06-01 16:32 - 2014-06-01 16:32 - 05450239 _____ () C:\Users\Zahir\Downloads\CustomClientEditedByOsvaldo3.0.rar

2014-06-01 01:31 - 2014-06-01 01:30 - 128543615 _____ () C:\Users\Zahir\Downloads\DHOOM-3 - Audio Jukebox - Aamir Khan - Abhishek Bachchan - Katrina Kaif - Uday Chopra.mp4

2014-05-31 17:44 - 2014-05-31 17:44 - 00003122 _____ () C:\Windows\System32\Tasks\{6C3DD6C2-D2BD-4CAC-86E7-1201F849C706}

2014-05-31 17:43 - 2013-08-23 20:17 - 00001065 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2014-05-31 17:43 - 2013-08-23 19:54 - 00001329 _____ () C:\Users\Zahir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-05-31 17:36 - 2014-05-31 17:36 - 00277888 _____ () C:\Users\Zahir\Downloads\Java.exe

2014-05-31 17:15 - 2014-05-31 17:15 - 00000000 ____D () C:\Users\Zahir\Documents\Fiddler2

2014-05-31 17:13 - 2014-05-31 17:13 - 00629512 _____ (Eric Lawrence) C:\Users\Zahir\Desktop\Fiddler2Setup_2_3_2_6.exe

2014-05-31 17:13 - 2014-05-31 17:13 - 00001892 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fiddler2.lnk

2014-05-31 17:13 - 2013-09-26 08:25 - 00000000 ____D () C:\Program Files (x86)\Fiddler2

2014-05-31 17:12 - 2014-05-31 17:11 - 00357712 _____ (Softonic) C:\Users\Zahir\Downloads\SoftonicDownloader_fuer_fiddler.exe

2014-05-29 21:38 - 2013-10-18 14:33 - 02040320 ___SH () C:\Users\Zahir\Desktop\Thumbs.db

2014-05-29 11:18 - 2013-10-21 12:19 - 00000000 ____D () C:\Users\Zahir\AppData\Local\Windows Live

2014-05-28 14:36 - 2013-11-10 22:46 - 00001317 _____ () C:\Windows\wininit.ini

2014-05-28 14:36 - 2013-08-23 19:54 - 00000000 ___RD () C:\Users\Zahir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-05-28 14:35 - 2013-11-10 22:46 - 00000000 ____D () C:\Users\Zahir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-05-26 16:49 - 2014-05-26 16:48 - 00000000 ____D () C:\Users\Zahir\Desktop\2014_05_26

2014-05-26 06:30 - 2013-10-01 14:25 - 00000193 _____ () C:\Windows\WORDPAD.INI

2014-05-20 15:07 - 2013-08-31 12:51 - 00000000 ____D () C:\Users\Zahir\Documents\Privat Labiq

2014-05-19 09:14 - 2013-08-21 00:12 - 00699786 _____ () C:\Windows\system32\perfh007.dat

2014-05-19 09:14 - 2013-08-21 00:12 - 00149636 _____ () C:\Windows\system32\perfc007.dat

2014-05-19 09:14 - 2009-07-14 07:13 - 01620796 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-05-19 07:17 - 2013-08-23 19:54 - 00000000 ___RD () C:\Users\Zahir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-05-19 07:14 - 2014-05-08 07:32 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-19 06:29 - 2013-09-04 07:26 - 00000000 ____D () C:\Windows\system32\MRT

2014-05-19 06:25 - 2013-09-04 07:26 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-05-18 07:23 - 2014-05-18 07:23 - 00000000 ____D () C:\Users\Zahir\Desktop\2014_05_18

2014-05-16 15:55 - 2014-03-07 19:10 - 00000000 ____D () C:\Users\Zahir\Desktop\Mamas Müll

2014-05-15 09:46 - 2013-08-24 18:21 - 00000000 ____D () C:\Users\Zahir\AppData\Roaming\SoftGrid Client

2014-05-14 13:19 - 2013-11-05 07:57 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-05-14 13:19 - 2012-05-08 15:45 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-05-14 13:19 - 2012-05-08 15:45 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-05-14 08:36 - 2014-03-08 11:11 - 00000000 ____D () C:\Users\Zahir\Documents\PRIVATE ANGELEGENHEITEN !!

2014-05-10 19:38 - 2013-08-23 20:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-05-10 09:09 - 2014-05-10 09:09 - 00000000 ____D () C:\Users\Zahir\Desktop\2014_05_10

2014-05-09 21:55 - 2014-05-09 21:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-05-09 08:14 - 2014-05-15 07:53 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-09 08:11 - 2014-05-15 07:53 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
 

Some content of TEMP:

====================

C:\Users\Zahir\AppData\Local\Temp\avgnt.exe

C:\Users\Zahir\AppData\Local\Temp\daqeeecw.dll

C:\Users\Zahir\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpvxyprl.dll

C:\Users\Zahir\AppData\Local\Temp\pcspeedmaxsetup.exe

C:\Users\Zahir\AppData\Local\Temp\Quarantine.exe

C:\Users\Zahir\AppData\Local\Temp\SHSetup.exe

C:\Users\Zahir\AppData\Local\Temp\tu02b3ad.dll
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-05-15 10:43
 

==================== End Of Log ============================

Code:

==================== Security Center ========================
 

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.100 - NTI Corporation)

Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.1904 - CyberLink Corp.)

Acer Crystal Eye Webcam (x32 Version: 1.0.1904 - CyberLink Corp.) Hidden

Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3010 - Acer Incorporated)

Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3507 - Acer Incorporated)

Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)

Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3506 - Acer Incorporated)

Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0530.2011 - Acer Incorporated)

Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated)

Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)

Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)

Adobe Reader X (10.1.9) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.7.148 - Adobe Systems, Inc.)

Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc)

AMD APP SDK Runtime (Version: 2.4.650.9 - Advanced Micro Devices Inc.) Hidden

AMD Media Foundation Decoders (Version: 1.0.60524.2309 - ATI Technologies Inc.) Hidden

AMD VISION Engine Control Center (x32 Version: 2011.0524.2352.41027 - Ihr Firmenname) Hidden

Anne Frank Haus (HKLM-x32\...\InstallShield_{9D8BC926-BF6E-11D6-A4D6-0030847A41CE}) (Version: 1.00.0000 - Systhema)

Anne Frank Haus (x32 Version: 1.00.0000 - Systhema) Hidden

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.2.43 - Atheros Communications Inc.)

ATI Catalyst Install Manager (HKLM\...\{3605D89A-BD66-F5C5-779B-BE9110B41077}) (Version: 3.0.829.0 - ATI Technologies, Inc.)

Backup Manager V3 (x32 Version: 3.0.0.100 - NTI Corporation) Hidden

BitZipper 2013 (HKLM-x32\...\BitZipper_is1) (Version: 2013.13.4.16 - Bitberry Software)

Canon MP Navigator EX 2.1 (HKLM-x32\...\MP Navigator EX 2.1) (Version:  - )

Canon MX320 series Benutzerregistrierung (HKLM-x32\...\Canon MX320 series Benutzerregistrierung) (Version:  - )

Canon MX320 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX320_series) (Version:  - )

Canon Utilities Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )

Canon Utilities My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )

Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version:  - )

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden

Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0524.2352.41027 - ATI) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2011.0524.2352.41027 - ATI Technologies, Inc.) Hidden

Catalyst Control Center Localization All (x32 Version: 2011.0524.2352.41027 - ATI) Hidden

CCC Help Chinese Standard (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Chinese Traditional (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Czech (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Danish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Dutch (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help English (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Finnish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help French (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help German (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Greek (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Hungarian (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Italian (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Japanese (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Korean (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Norwegian (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Polish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Portuguese (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Russian (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Spanish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Swedish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Thai (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

CCC Help Turkish (x32 Version: 2011.0524.2351.41027 - ATI) Hidden

ccc-utility64 (Version: 2011.0524.2352.41027 - ATI) Hidden

clear.fi (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 1.0.2228.00 - CyberLink Corp.)

clear.fi (x32 Version: 1.0.1517_36458 - CyberLink Corp.) Hidden

clear.fi (x32 Version: 1.0.2228.00 - CyberLink Corp.) Hidden

clear.fi (x32 Version: 9.0.8228 - CyberLink Corp.) Hidden

clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)

Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Der Währungsrechner 2.1 (HKLM-x32\...\{3BB63799-E541-414A-8DCA-B89E6E9E3867}) (Version: 2.1 - biu software)

Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)

Evernote v. 4.5.2 (HKLM-x32\...\{F77EF646-19EB-11E1-9A9E-984BE15F174E}) (Version: 4.5.2.5866 - Evernote Corp.)

Fiddler2 (HKLM-x32\...\Fiddler2) (Version:  - )

Fotogaléria (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Fotogalerija (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Fotogalleri (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Fotogalleriet (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Fotoğraf Galerisi (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Fotótár (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Galeria de Fotografias (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Galeria de Fotos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Galería de fotos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Galeria fotogràfica (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Galeria fotografii (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Galerie de photos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Galerie foto (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Galerija fotografija (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

GeoGebra 4.4 (HKLM-x32\...\GeoGebra 4.4) (Version: 4.4.0.0 - International GeoGebra Institute)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)

Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)

Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle)

Java Auto Updater (x32 Version: 2.1.60.19 - Oracle, Inc.) Hidden

Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Kompass:Beruf 1.0 (HKLM-x32\...\{4CB04BC8-902A-4C32-A3E8-72092503A8D6}_is1) (Version:  - Sparkassen Schulservice - Sparkassen Verlag, Stuttgart)

Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.7 - Acer Inc.)

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.5128.5002 - Microsoft Corporation)

Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.0.4029.0217 - Microsoft Corporation)

Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837B34E3-7C30-493C-8F6A-2B0F04E2912C}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden

MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden

MyFreeCodec (HKCU\...\MyFreeCodec) (Version:  - )

MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden

MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden

MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.)

MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden

Need For Speed™ World (HKLM-x32\...\{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1) (Version: 1.0.0.659 - Electronic Arts)

newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)

newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden

Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)

NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9006 - NTI Corporation)

NTI Media Maker 9 (x32 Version: 9.0.2.9006 - NTI Corporation) Hidden

OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)

Opera Stable 19.0.1326.56 (HKLM-x32\...\Opera 19.0.1326.56) (Version: 19.0.1326.56 - Opera Software ASA)

Opera Stable 20.0.1387.82 (HKLM-x32\...\Opera 20.0.1387.82) (Version: 20.0.1387.82 - Opera Software ASA)

PDF24 Creator 6.2.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Poczta usługi Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Podstawowe programy Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Pošta Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Raccolta foto (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6392 - Realtek Semiconductor Corp.)

Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30127 - Realtek Semiconductor Corp.)

Setup version 1.5 (HKLM-x32\...\Setup_is1) (Version: 1.5 - )

Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)

Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

sv.net (HKLM-x32\...\sv.net) (Version: 14.0 - ITSG GmbH)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.17.5 - Synaptics Incorporated)

System Update kb70007 (x32 Version: 1.0.0 - MSR) Hidden

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)

TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)

Valokuvavalikoima (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Viber (HKCU\...\Viber) (Version: 3.0.0.134193 - Viber Media Inc)

Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated)

Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Mail (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Mail (x32 Version: 16.4.3508.0205 - společnost Microsoft Corporation) Hidden

Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden

Windows Live Messenger (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Messenger (x32 Version: 16.4.3508.0205 - společnost Microsoft Corporation) Hidden

Windows Live Messenger (x32 Version: 16.4.3508.0205 - Корпорация Майкрософт) Hidden

Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Temel Parçalar (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Writer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Writer Resources (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Live 程式集 (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Liven peruspaketti (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Windows Liven sähköposti (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Συλλογή φωτογραφιών (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Основные компоненты Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Почта Windows Live (x32 Version: 16.4.3508.0205 - Корпорация Майкрософт) Hidden

Фотоальбом (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Фотогалерия (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Фотографии (общедоступная версия) (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

גלריית התמונות (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

بريد Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

معرض الصور (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

影像中心 (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
 

==================== Restore Points  =========================
 

16-05-2014 10:32:24 Windows Update

19-05-2014 04:22:21 Windows Update

24-05-2014 15:00:08 Windows Update

25-05-2014 09:28:30 Windows Update

31-05-2014 03:53:40 Windows Update

31-05-2014 15:47:25 Windows Defender Checkpoint

03-06-2014 07:19:45 Windows Update

06-06-2014 08:33:15 Windows Update

08-06-2014 11:17:34 Installed Java 7 Update 60

08-06-2014 12:02:28 Removed Samsung Kies
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {0E87B6C2-AEA5-4CE2-9590-3608B98A3F4F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-30] (Google Inc.)

Task: {1852C45B-45F9-4AF8-8FF4-50D9F3CEEA35} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2011-03-29] (Egis Technology Inc.)

Task: {2DA1A312-D595-477C-B9E5-D2EA4B06FC76} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2011-03-29] (Egis Technology Inc.)

Task: {354B7AB4-F4FA-488A-98BE-6B997D8BEFFA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)

Task: {44E19E74-FBFA-4513-82C2-691E5985F0CA} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-10-28] (Acer Incorporated)

Task: {ACE45BFE-52CB-4743-B150-D3348BCA1AB8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-30] (Google Inc.)

Task: {CBB96DED-15D6-465E-9B76-585F4D25D1FE} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-10-28] (CyberLink Corp.)

Task: {E1FD1315-342F-4D19-A431-0B3365EBAAED} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2012-01-18] (Acer)

Task: {E20DA715-09BC-472E-99BA-B4133DFD5C08} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-07] (Acer Incorporated)

Task: {E6E650FE-DB6E-42BB-8CDA-F4B8F850D41C} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-10-28] (CyberLink)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-06-08 13:29 - 2014-05-08 11:45 - 00018944 _____ () C:\Windows\Microsoft\SystemUpdatekb70007\WindowsUpdater.exe

2011-03-22 10:17 - 2011-03-22 10:17 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll

2011-05-24 23:50 - 2011-05-24 23:50 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

2012-01-05 23:22 - 2012-01-05 23:22 - 00465344 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll

2012-01-05 23:22 - 2012-01-05 23:22 - 01081368 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll

2012-01-05 23:22 - 2012-01-05 23:22 - 00125464 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll

2014-06-08 13:29 - 2014-05-08 11:45 - 00061952 _____ () C:\Windows\Microsoft\SystemUpdatekb70007\InstallerLibrary.dll

2014-06-08 13:29 - 2014-05-08 11:45 - 00016896 _____ () C:\Windows\Microsoft\SystemUpdatekb70007\Installer.dll

2011-10-28 15:04 - 2011-10-28 15:04 - 00206216 _____ () C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll

2014-06-08 14:20 - 2014-06-08 14:20 - 00086528 _____ () C:\Program Files (x86)\MSR\Privoxy\mgwz.dll

2014-06-08 14:21 - 2014-06-08 14:21 - 00043008 _____ () c:\users\zahir\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpvxyprl.dll

2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Zahir\AppData\Roaming\Dropbox\bin\libcef.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== EXE Association (whitelisted) =============
 
 

==================== Disabled items from MSCONFIG ==============
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (06/08/2014 02:48:23 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm FRST64.exe, Version 6.6.2014.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: c2c
 

Startzeit: 01cf8317a41617c4
 

Endzeit: 84
 

Anwendungspfad: C:\Users\Zahir\Downloads\FRST64.exe
 

Berichts-ID: 25c7f456-ef0b-11e3-aa6c-e06995d59769
 

Error: (06/08/2014 02:20:51 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/08/2014 02:18:27 PM) (Source: ATIeRecord) (EventID: 16398) (User: )

Description: ATI EEU failed to post message to CCC
 

Error: (06/08/2014 02:18:27 PM) (Source: ATIeRecord) (EventID: 16398) (User: )

Description: ATI EEU failed to post message to CCC
 

Error: (06/08/2014 02:13:00 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/08/2014 02:10:50 PM) (Source: ATIeRecord) (EventID: 16398) (User: )

Description: ATI EEU failed to post message to CCC
 

Error: (06/08/2014 05:27:16 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/05/2014 04:58:23 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/05/2014 04:56:24 PM) (Source: ATIeRecord) (EventID: 16398) (User: )

Description: ATI EEU failed to post message to CCC
 

Error: (06/05/2014 04:56:18 PM) (Source: ATIeRecord) (EventID: 16398) (User: )

Description: ATI EEU failed to post message to CCC
 
 

System errors:

=============

Error: (06/08/2014 02:18:50 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (06/08/2014 02:11:24 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (06/08/2014 05:26:14 AM) (Source: EventLog) (EventID: 6008) (User: )

Description: Das System wurde zuvor am ‎08.‎06.‎2014 um 05:25:23 unerwartet heruntergefahren.
 

Error: (06/05/2014 04:56:25 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (06/04/2014 09:32:17 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (06/04/2014 08:54:31 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (06/04/2014 08:06:05 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (06/03/2014 11:50:50 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (06/01/2014 10:40:25 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (06/01/2014 03:14:24 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 
 

Microsoft Office Sessions:

=========================

Error: (06/08/2014 02:48:23 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: FRST64.exe6.6.2014.0c2c01cf8317a41617c484C:\Users\Zahir\Downloads\FRST64.exe25c7f456-ef0b-11e3-aa6c-e06995d59769
 

Error: (06/08/2014 02:20:51 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/08/2014 02:18:27 PM) (Source: ATIeRecord) (EventID: 16398) (User: )

Description: 
 

Error: (06/08/2014 02:18:27 PM) (Source: ATIeRecord) (EventID: 16398) (User: )

Description: 
 

Error: (06/08/2014 02:13:00 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/08/2014 02:10:50 PM) (Source: ATIeRecord) (EventID: 16398) (User: )

Description: 
 

Error: (06/08/2014 05:27:16 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/05/2014 04:58:23 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (06/05/2014 04:56:24 PM) (Source: ATIeRecord) (EventID: 16398) (User: )

Description: 
 

Error: (06/05/2014 04:56:18 PM) (Source: ATIeRecord) (EventID: 16398) (User: )

Description: 
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 20%

Total physical RAM: 7913.9 MB

Available physical RAM: 6255.8 MB

Total Pagefile: 15825.98 MB

Available Pagefile: 13977.46 MB

Total Virtual: 8192 MB

Available Virtual: 8191.87 MB
 

==================== Drives ================================
 

Drive c: (Acer) (Fixed) (Total:222.73 GB) (Free:155.1 GB) NTFS

Drive d: (DATA) (Fixed) (Total:223.4 GB) (Free:188.51 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 52B5F51F)

Partition 1: (Not Active) - (Size=20 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=223 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

das warn sie