Hallo erstmal.
Ich habe mal so einen Online Viren scan gemacht bei Quickscan und da kam raus das es wohl ein backdoor Trojaner ist oder so da ich mich leider nicht auskenne. Ich weiß lediglich das die wohl die schlimmeren sind.Ich hab ganz normal win7 home-premium und zurzeit habe ich kein AVM da ich erst ein anderes Installieren wollte auf Rat eines guten Freundes aber es nicht geklappt hat.

Hier die OTL logs:

OTL logfile created on: 23.07.2012 22:19:00 - Run 1
OTL by OldTimer - Version 3.2.54.0     Folder = C:\Users\Robin\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
5,86 Gb Total Physical Memory | 3,96 Gb Available Physical Memory | 67,64% Memory free
11,71 Gb Paging File | 9,38 Gb Available in Paging File | 80,09% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 119,70 Gb Total Space | 15,00 Gb Free Space | 12,53% Space Free | Partition Type: NTFS
Drive D: | 324,58 Gb Total Space | 253,84 Gb Free Space | 78,20% Space Free | Partition Type: NTFS
Drive F: | 232,88 Gb Total Space | 217,30 Gb Free Space | 93,31% Space Free | Partition Type: NTFS
Drive G: | 232,87 Gb Total Space | 232,54 Gb Free Space | 99,86% Space Free | Partition Type: NTFS
 
Computer Name: ROBIN-PC | User Name: Robin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.07.23 22:17:38 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Robin\Desktop\OTL.exe
PRC - [2012.07.03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) -- F:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012.07.03 13:46:44 | 000,462,920 | ---- | M] (Malwarebytes Corporation) -- F:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2012.04.04 07:53:50 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.02.05 00:54:08 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2011.04.18 19:25:10 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2011.02.24 00:47:28 | 003,054,136 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2010.10.08 00:05:14 | 000,170,624 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
PRC - [2010.09.24 02:53:16 | 001,601,536 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
PRC - [2010.08.18 00:55:42 | 005,732,992 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
PRC - [2010.06.09 19:55:54 | 001,080,448 | ---- | M] (asus) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe
PRC - [2010.01.21 08:22:03 | 000,909,824 | ---- | M] (Sonix Technology Co., Ltd.) -- C:\Windows\vsnp2uvc.exe
PRC - [2009.12.15 20:39:38 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
PRC - [2009.11.03 00:21:26 | 000,103,720 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
PRC - [2009.10.01 05:34:22 | 002,314,240 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2009.10.01 05:33:08 | 000,262,144 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2009.06.19 20:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
PRC - [2009.06.16 03:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
PRC - [2007.04.25 16:59:08 | 000,408,432 | ---- | M] (Hansenet) -- C:\Program Files (x86)\Alice\Signup\AliceCnn.exe
PRC - [2005.11.15 03:07:28 | 000,679,936 | ---- | M] (AVM Berlin) -- C:\Program Files (x86)\FRITZ!DSL\StCenter.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.06.14 07:18:04 | 014,340,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e717a230496832656b05b515eb9f3bc5\PresentationFramework.ni.dll
MOD - [2012.06.14 07:17:12 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll
MOD - [2012.06.14 07:16:55 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll
MOD - [2012.06.14 07:16:11 | 012,237,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\14a87218ea49639f38097e278b98a3da\PresentationCore.ni.dll
MOD - [2012.05.10 09:17:35 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\9b2f17fb61b7197f2a04108f5d1a1cc6\System.Management.ni.dll
MOD - [2012.05.10 08:59:05 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8e56489276063ededde74e597a121df3\PresentationFramework.Aero.ni.dll
MOD - [2012.05.10 08:57:11 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll
MOD - [2012.05.10 08:57:01 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll
MOD - [2012.05.10 08:56:55 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
MOD - [2012.05.10 08:56:53 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012.05.10 08:56:42 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2010.09.24 02:53:16 | 001,601,536 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
MOD - [2010.02.24 01:14:22 | 000,071,680 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\Brightness.dll
MOD - [2010.02.24 01:14:18 | 000,041,472 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\HelpFunc.dll
MOD - [2010.02.24 01:14:10 | 000,050,688 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\P4GControl.dll
MOD - [2010.02.24 01:12:22 | 000,186,880 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\Resolution.dll
MOD - [2010.02.24 01:11:46 | 000,076,288 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\Volume.dll
MOD - [2009.11.03 00:23:36 | 000,013,096 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
MOD - [2009.11.03 00:20:10 | 000,619,816 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
MOD - [2009.08.04 11:50:05 | 000,110,592 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationCore.resources\3.0.0.0_de_31bf3856ad364e35\PresentationCore.resources.dll
MOD - [2007.03.24 21:44:20 | 000,114,688 | ---- | M] () -- C:\Program Files (x86)\Alice\Signup\sys.plg
MOD - [2007.02.12 17:54:30 | 000,253,952 | ---- | M] () -- C:\Program Files (x86)\Alice\Signup\dslsetup.plg
MOD - [2005.10.04 17:28:40 | 000,081,920 | ---- | M] () -- C:\Program Files (x86)\Alice\Signup\htmlpars.plg
MOD - [2005.09.23 18:10:22 | 000,081,920 | ---- | M] () -- C:\Program Files (x86)\Alice\Signup\alice.plg
MOD - [2005.08.17 19:36:28 | 000,090,112 | ---- | M] () -- C:\Program Files (x86)\Alice\Signup\Support.plg
MOD - [2005.04.15 12:35:50 | 000,077,824 | ---- | M] () -- C:\Program Files (x86)\Alice\Signup\SueDsl.plg
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - File not found [Auto | Running] -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe -- (Amsp)
SRV:64bit: - [2012.06.25 18:21:10 | 001,566,024 | ---- | M] (Bitdefender) [Auto | Running] -- C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe -- (VSSERV)
SRV:64bit: - [2012.06.25 16:19:11 | 000,063,272 | ---- | M] (Bitdefender) [Auto | Running] -- C:\Program Files\Bitdefender\Bitdefender 2013\bdparentalservice.exe -- (BdDesktopParental)
SRV:64bit: - [2012.06.07 21:48:48 | 000,068,416 | ---- | M] (Bitdefender) [Auto | Running] -- C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe -- (UPDATESRV)
SRV:64bit: - [2012.05.02 15:39:30 | 000,168,864 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\WireHelpSvc.exe -- (WireHelpSvc)
SRV:64bit: - [2011.07.15 18:22:52 | 000,538,000 | ---- | M] (Protection Technology) [Auto | Stopped] -- C:\Windows\SysNative\appdrvrem01.exe -- (appdrvrem01) Application Driver Auto Removal Service (01)
SRV:64bit: - [2011.04.18 19:25:10 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2011.03.09 22:50:42 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2010.09.23 04:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2010.06.22 21:20:42 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
SRV:64bit: - [2009.08.07 00:17:46 | 000,118,672 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV:64bit: - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV - [2012.07.19 13:20:11 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.07.03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- F:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.07.03 13:19:28 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.06.30 21:33:19 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012.06.23 02:03:55 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.06.01 13:18:16 | 000,736,104 | ---- | M] (Tunngle.net GmbH) [On_Demand | Stopped] -- F:\Programme\Tunngle\TnglCtrl.exe -- (TunngleService)
SRV - [2012.04.04 07:53:50 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.02.05 00:54:08 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2011.06.12 12:15:00 | 031,125,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- D:\Programme\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2010.11.18 14:35:50 | 000,240,112 | ---- | M] (CyberLink) [Auto | Stopped] -- C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe -- (CLKMSVC10_9EC60124)
SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.02.19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009.12.15 20:39:38 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2009.10.01 05:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2009.10.01 05:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2009.06.16 03:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2005.11.21 10:48:06 | 000,315,392 | ---- | M] (AVM Berlin) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\AVM\de_serv.exe -- (de_serv)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012.07.03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2012.06.28 17:20:14 | 000,167,696 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmcomm.sys -- (tmcomm)
DRV:64bit: - [2012.06.28 17:20:14 | 000,105,744 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmtdi.sys -- (tmtdi)
DRV:64bit: - [2012.06.28 17:20:14 | 000,091,920 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmactmon.sys -- (tmactmon)
DRV:64bit: - [2012.06.28 17:20:14 | 000,070,928 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmevtmgr.sys -- (tmevtmgr)
DRV:64bit: - [2012.06.25 18:21:51 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2012.05.02 15:39:14 | 000,147,472 | ---- | M] (<Turtle Entertainment>) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\ESLWireACD.sys -- (ESLWireAC)
DRV:64bit: - [2012.04.24 15:28:33 | 000,329,800 | ---- | M] (BitDefender S.R.L.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\trufos.sys -- (trufos)
DRV:64bit: - [2012.04.11 17:03:18 | 000,138,232 | ---- | M] (BitDefender LLC) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\gzflt.sys -- (gzflt)
DRV:64bit: - [2012.03.20 20:22:46 | 000,691,896 | ---- | M] (BitDefender) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avc3.sys -- (avc3)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.02.17 16:45:56 | 000,545,064 | ---- | M] (BitDefender) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\avckf.sys -- (avckf)
DRV:64bit: - [2011.11.25 15:00:36 | 000,258,736 | ---- | M] (BitDefender) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\avchv.sys -- (avchv)
DRV:64bit: - [2011.11.17 17:38:33 | 000,079,952 | ---- | M] (BitDefender SRL) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bdsandbox.sys -- (BDSandBox)
DRV:64bit: - [2011.11.14 20:16:40 | 000,090,192 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys -- (BdfNdisf)
DRV:64bit: - [2011.11.14 20:16:37 | 000,103,504 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys -- (bdfwfpf)
DRV:64bit: - [2011.07.15 18:22:52 | 003,147,368 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\appdrv01.sys -- (appdrv01) Application Driver (01)
DRV:64bit: - [2011.04.18 19:18:01 | 000,287,064 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2011.04.18 19:17:59 | 000,600,920 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2011.04.18 19:16:23 | 000,053,592 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2011.04.18 19:13:24 | 000,031,064 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr.sys -- (aswRdr)
DRV:64bit: - [2011.04.18 19:13:13 | 000,064,344 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2011.04.18 19:13:01 | 000,022,360 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2011.04.18 12:11:38 | 000,025,528 | ---- | M] (Turtle Entertainment GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ESLvnic.sys -- (ESLvnic1)
DRV:64bit: - [2011.03.09 23:33:50 | 009,319,424 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2011.03.09 22:15:20 | 000,303,616 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 15:32:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 15:32:46 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.17 08:04:32 | 000,115,216 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2010.09.23 10:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2010.09.21 09:07:08 | 000,312,184 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ArcSec.sys -- (ArcSec)
DRV:64bit: - [2010.09.07 11:19:37 | 001,800,832 | ---- | M] (Sonix Technology Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV:64bit: - [2010.06.08 04:33:13 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010.03.04 11:53:01 | 000,075,816 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
DRV:64bit: - [2010.03.02 10:45:23 | 001,594,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2010.02.26 10:32:11 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
DRV:64bit: - [2009.09.17 22:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R)
DRV:64bit: - [2009.09.16 08:02:42 | 000,031,232 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901t.sys -- (tap0901t) TAP-Win32 Adapter V9 (Tunngle)
DRV:64bit: - [2009.08.07 00:17:34 | 000,013,784 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
DRV:64bit: - [2009.07.20 11:29:39 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 02:01:09 | 000,679,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xnacc.sys -- (xnacc)
DRV:64bit: - [2009.06.10 22:35:57 | 000,056,832 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SiSG664.sys -- (SiSGbeLH)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.13 19:07:20 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor)
DRV:64bit: - [2009.03.18 18:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2008.05.24 03:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2010.02.24 21:14:22 | 000,146,928 | ---- | M] (CyberLink Corp.) [2011/02/23 13:48:01] [Kernel | Auto | Running] -- C:\Program Files (x86)\Cyberlink\PowerDVD9\000.fcl -- ({B154377D-700F-42cc-9474-23858FBDF4BD})
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009.07.03 03:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
DRV - [2006.11.28 22:46:24 | 000,028,224 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\PDNMp50.sys -- (PDNMp50)
DRV - [2006.11.28 22:46:22 | 000,027,072 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\PDNSp50.sys -- (PDNSp50)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = hxxp://dts.search-results.com/sr?src=ieb&appid=150&systemid=406&sr=0&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
IE - HKLM\..\URLSearchHook:  - No CLSID value found
IE - HKLM\..\URLSearchHook: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - No CLSID value found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = hxxp://dts.search-results.com/sr?src=ieb&appid=150&systemid=406&sr=0&q={searchTerms}
IE - HKLM\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\..\URLSearchHook:  - No CLSID value found
IE - HKCU\..\URLSearchHook: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - No CLSID value found
IE - HKCU\..\URLSearchHook: {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - No CLSID value found
IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE - HKCU\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = hxxp://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
IE - HKCU\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = hxxp://dts.search-results.com/sr?src=ieb&appid=150&systemid=406&sr=0&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.defaultthis.engineName: "BittorrentBar_DE Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2849855&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"
FF - prefs.js..keyword.URL: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=2&q="
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_262.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll ()
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.102.0:  File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.110.0: C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.118.0: C:\Program Files (x86)\Battlelog Web Plugins\1.118.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: D:\PROGRA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\PROGRAM FILES\BITDEFENDER\BITDEFENDER 2013\BDTBEXT [2012.06.26 02:39:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\PROGRA~1\AVASTS~1\Avast\WebRep\FF [2011.04.26 19:12:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files\Trend Micro\AMSP\module\20004\FxExt\firefoxextension\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{38783831-6098-4faa-A9C9-1EE1E343F4D2}: C:\Program Files\Trend Micro\AMSP\Module\20002\7.0.1081\7.0.1081\firefoxextension
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.07.19 13:20:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext [2012.06.26 02:39:19 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.07.19 13:20:11 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2012.06.25 20:08:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Robin\AppData\Roaming\mozilla\Extensions
[2012.06.28 17:18:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Robin\AppData\Roaming\mozilla\Firefox\Profiles\buihq48b.default\extensions
[2012.06.28 17:18:00 | 000,000,000 | ---D | M] (Bitdefender QuickScan) -- C:\Users\Robin\AppData\Roaming\mozilla\Firefox\Profiles\buihq48b.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2012.05.31 20:22:08 | 000,000,935 | ---- | M] () -- C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\buihq48b.default\searchplugins\conduit.xml
[2012.07.19 22:53:37 | 000,000,950 | ---- | M] () -- C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\buihq48b.default\searchplugins\icqplugin-1.xml
[2011.07.10 11:14:56 | 000,000,950 | ---- | M] () -- C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\buihq48b.default\searchplugins\icqplugin-2.xml
[2011.09.03 12:27:41 | 000,000,950 | ---- | M] () -- C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\buihq48b.default\searchplugins\icqplugin-3.xml
[2011.09.08 10:47:51 | 000,000,950 | ---- | M] () -- C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\buihq48b.default\searchplugins\icqplugin-4.xml
[2011.09.30 22:28:47 | 000,000,950 | ---- | M] () -- C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\buihq48b.default\searchplugins\icqplugin-5.xml
[2011.10.15 15:43:42 | 000,000,950 | ---- | M] () -- C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\buihq48b.default\searchplugins\icqplugin-6.xml
[2011.11.08 21:20:40 | 000,000,950 | ---- | M] () -- C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\buihq48b.default\searchplugins\icqplugin-7.xml
[2012.01.08 23:58:31 | 000,000,950 | ---- | M] () -- C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\buihq48b.default\searchplugins\icqplugin-8.xml
[2011.06.23 13:31:53 | 000,000,950 | ---- | M] () -- C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\buihq48b.default\searchplugins\icqplugin.xml
[2012.02.09 16:52:48 | 000,002,519 | ---- | M] () -- C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\buihq48b.default\searchplugins\Search_Results.xml
[2012.06.25 20:59:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2011.06.02 10:02:23 | 000,000,000 | ---D | M] (Anti-Banner) -- C:\Program Files (x86)\mozilla firefox\extensions\KavAntiBanner@kaspersky.ru_bak
[2011.06.02 10:02:23 | 000,000,000 | ---D | M] (Modul zur Link-Untersuchung) -- C:\Program Files (x86)\mozilla firefox\extensions\linkfilter@kaspersky.ru_bak
[2012.07.19 13:20:11 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.09.30 22:03:14 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.09.30 22:03:14 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.09.30 22:03:14 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.01.08 21:41:52 | 000,002,048 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrch.xml
[2011.09.30 22:03:14 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.02.09 16:52:48 | 000,002,519 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml
[2011.09.30 22:03:14 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.09.30 22:03:14 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider:  ()
CHR - default_search_provider: search_url = 
CHR - default_search_provider: suggest_url = 
CHR - homepage: hxxp://search.conduit.com/?ctid=CT2849855&SearchSource=48
CHR - Extension: No name found = C:\Users\Robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1091_0\
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1313\6.8.1066\TmIEPlg.dll File not found
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\PROGRA~1\AVASTS~1\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
O2:64bit: - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.0.1081\7.0.1081\TmBpIe64.dll File not found
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Programme\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Programme\Office14\URLREDIR.DLL (Microsoft Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\PROGRA~1\AVASTS~1\Avast\aswWebRepIE64.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {5E5AB302-7F65-44CD-8211-C1D4CAACCEA3} - No CLSID value found.
O4:64bit: - HKLM..\Run: [Bdagent] C:\Program Files\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender)
O4:64bit: - HKLM..\Run: [snp2uvc] C:\Windows\vsnp2uvc.exe (Sonix Technology Co., Ltd.)
O4:64bit: - HKLM..\Run: [Trend Micro Client Framework] C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] F:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ()
O4 - Startup: C:\Users\Robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Startcenter.lnk = C:\Program Files (x86)\FRITZ!DSL\StCenter.exe (AVM Berlin)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Robin\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\Robin\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - Reg Error: Value error. File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll (Bitdefender)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll (Bitdefender)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll (Bitdefender)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll (Bitdefender)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll (Bitdefender)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll (Bitdefender)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll (Bitdefender)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll (Bitdefender)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll (Bitdefender)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll (Bitdefender)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000021 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll (Bitdefender)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider32\BdProvider.dll (Bitdefender)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider32\BdProvider.dll (Bitdefender)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider32\BdProvider.dll (Bitdefender)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider32\BdProvider.dll (Bitdefender)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider32\BdProvider.dll (Bitdefender)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider32\BdProvider.dll (Bitdefender)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider32\BdProvider.dll (Bitdefender)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider32\BdProvider.dll (Bitdefender)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider32\BdProvider.dll (Bitdefender)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider32\BdProvider.dll (Bitdefender)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider32\BdProvider.dll (Bitdefender)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: fritz.box ([]* in Local intranet)
O15 - HKCU\..Trusted Ranges: Range1 ([*] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.4.1)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.4.1)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{558E810C-5816-4B03-A00A-1956320FB285}: NameServer = 213.191.92.86 62.109.123.7
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{576F0BE0-7902-4DC5-B420-9A3357AC9DA1}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7F6DBEB8-4446-4B72-8306-6CF306492A2F}: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.0.1081\7.0.1081\TmBpIe64.dll File not found
O18:64bit: - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1313\6.8.1066\TmIEPlg.dll File not found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.0.1081\7.0.1081\TmBpIe32.dll File not found
O18 - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1313\6.8.1066\TmIEPlg32.dll File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Programme\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{071bcb3d-702d-11e0-80b7-bcaec5d44118}\Shell - "" = AutoRun
O33 - MountPoints2\{071bcb3d-702d-11e0-80b7-bcaec5d44118}\Shell\AutoRun\command - "" = J:\pushinst.exe
O33 - MountPoints2\{2d24a052-53eb-11e1-94ca-00ff01000001}\Shell - "" = AutoRun
O33 - MountPoints2\{2d24a052-53eb-11e1-94ca-00ff01000001}\Shell\AutoRun\command - "" = H:\SETUP.EXE
O33 - MountPoints2\{2d24a052-53eb-11e1-94ca-00ff01000001}\Shell\configure\command - "" = H:\SETUP.EXE
O33 - MountPoints2\{2d24a052-53eb-11e1-94ca-00ff01000001}\Shell\install\command - "" = H:\SETUP.EXE
O33 - MountPoints2\{b3bec542-beb4-11e1-a286-bcaec5d44118}\Shell - "" = AutoRun
O33 - MountPoints2\{b3bec542-beb4-11e1-a286-bcaec5d44118}\Shell\AutoRun\command - "" = H:\Install.exe
O33 - MountPoints2\{fceb71a4-7014-11e0-9cc4-bcaec5d44118}\Shell - "" = AutoRun
O33 - MountPoints2\{fceb71a4-7014-11e0-9cc4-bcaec5d44118}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.07.23 22:17:35 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Robin\Desktop\OTL.exe
[2012.07.23 19:12:43 | 000,076,944 | ---- | C] (BitDefender) -- C:\Windows\SysNative\drivers\bdvedisk.sys
[2012.07.23 18:13:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2013
[2012.07.23 18:13:09 | 000,000,000 | ---D | C] -- C:\ProgramData\BDLogging
[2012.07.23 18:13:01 | 000,090,192 | ---- | C] (BitDefender LLC) -- C:\Windows\SysNative\drivers\BdfNdisf6.sys
[2012.07.23 18:13:01 | 000,079,952 | ---- | C] (BitDefender SRL) -- C:\Windows\SysNative\drivers\bdsandbox.sys
[2012.07.23 18:12:57 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\Malwarebytes
[2012.07.23 18:12:52 | 000,691,896 | ---- | C] (BitDefender) -- C:\Windows\SysNative\drivers\avc3.sys
[2012.07.23 18:12:52 | 000,545,064 | ---- | C] (BitDefender) -- C:\Windows\SysNative\drivers\avckf.sys
[2012.07.23 18:12:52 | 000,258,736 | ---- | C] (BitDefender) -- C:\Windows\SysNative\drivers\avchv.sys
[2012.07.23 18:12:44 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\Bitdefender
[2012.07.23 18:12:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.07.23 18:12:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.07.23 18:12:37 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.07.23 18:12:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender
[2012.07.23 17:59:28 | 000,138,232 | ---- | C] (BitDefender LLC) -- C:\Windows\SysNative\drivers\gzflt.sys
[2012.07.23 17:59:27 | 000,329,800 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\SysNative\drivers\trufos.sys
[2012.07.23 17:59:27 | 000,000,000 | ---D | C] -- C:\Program Files\Bitdefender
[2012.07.23 17:59:03 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Bitdefender
[2012.07.23 17:47:00 | 000,000,000 | ---D | C] -- C:\Users\Robin\Documents\MSDCSC
[2012.07.20 16:00:29 | 000,000,000 | ---D | C] -- C:\Users\Robin\Desktop\4.3.4
[2012.07.07 00:59:14 | 000,000,000 | ---D | C] -- C:\Program Files\Oracle
[2012.07.07 00:41:40 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2012.07.01 15:31:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
[2012.06.29 18:53:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 12
[2012.06.29 18:25:08 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Local\Origin
[2012.06.29 18:25:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
[2012.06.29 17:32:47 | 000,000,000 | ---D | C] -- C:\Users\Robin\Documents\FIFA 12
[2012.06.29 16:54:41 | 000,801,752 | ---- | C] (sqlite.org) -- C:\Windows\SysWow64\mozsqlite3.dll
[2012.06.29 16:54:30 | 000,028,160 | ---- | C] (Netscape Communications Corporation) -- C:\Windows\SysWow64\plc4.dll
[2012.06.29 16:54:17 | 000,163,840 | ---- | C] (Netscape Communications Corporation) -- C:\Windows\SysWow64\nspr4.dll
[2012.06.29 16:47:23 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\dll-files.com
[2012.06.29 16:47:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dll-Files.com Fixer
[2012.06.29 16:47:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dll-Files.com Fixer
[2012.06.29 16:31:15 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx
[2012.06.29 16:25:41 | 000,000,000 | ---D | C] -- C:\directx
[2012.06.29 15:53:57 | 023,058,432 | ---- | C] (Electronic Arts) -- C:\Users\Robin\AppData\Roaming\fifa.exe
[2012.06.29 15:45:40 | 000,000,000 | ---D | C] -- C:\Users\Robin\Documents\Tunngle
[2012.06.29 15:45:40 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\Tunngle
[2012.06.29 15:45:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Tunngle
[2012.06.29 15:45:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tunngle
[2012.06.29 15:45:35 | 000,031,232 | ---- | C] (Tunngle.net) -- C:\Windows\SysNative\drivers\tap0901t.sys
[2012.06.29 15:45:35 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Tunngle
[2012.06.28 17:30:47 | 000,105,744 | ---- | C] (Trend Micro Inc.) -- C:\Windows\SysNative\drivers\tmtdi.sys
[2012.06.28 17:30:46 | 000,167,696 | ---- | C] (Trend Micro Inc.) -- C:\Windows\SysNative\drivers\tmcomm.sys
[2012.06.28 17:30:46 | 000,091,920 | ---- | C] (Trend Micro Inc.) -- C:\Windows\SysNative\drivers\tmactmon.sys
[2012.06.28 17:30:46 | 000,070,928 | ---- | C] (Trend Micro Inc.) -- C:\Windows\SysNative\drivers\tmevtmgr.sys
[2012.06.28 17:27:16 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2012.06.27 13:33:24 | 088,972,952 | ---- | C] (Trend Micro Inc.) -- C:\Users\Public\Desktop\Trend_Micro.exe
[2012.06.26 04:21:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2012.06.25 23:23:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Trend Micro
[2012.06.25 23:08:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VS Revo Group
[2012.06.25 22:55:33 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012.06.25 22:46:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro
[2012.06.25 22:38:13 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2012.06.25 22:33:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP
[2012.06.25 22:33:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
[2012.06.25 22:32:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies
[2012.06.25 22:31:43 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2012.06.25 22:31:15 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2012.06.25 22:30:24 | 000,120,320 | ---- | C] (AMD) -- C:\Windows\SysNative\atitmm64.dll
[2012.06.25 22:30:24 | 000,058,880 | ---- | C] (AMD) -- C:\Windows\SysNative\coinst.dll
[2012.06.25 22:30:23 | 000,480,256 | ---- | C] (AMD) -- C:\Windows\SysNative\atieclxx.exe
[2012.06.25 22:30:23 | 000,203,776 | ---- | C] (AMD) -- C:\Windows\SysNative\atiesrxx.exe
[2012.06.25 22:30:23 | 000,016,384 | ---- | C] (AMD) -- C:\Windows\SysNative\atimuixx.dll
[2012.06.25 22:30:10 | 000,000,000 | ---D | C] -- C:\Users\Robin\Desktop\Neuer Ordner
[2012.06.25 21:48:47 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\Google
[2012.06.25 21:39:23 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2012.06.25 21:39:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2012.06.25 21:11:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RegCleaner
[2012.06.25 19:46:28 | 000,000,000 | ---D | C] -- C:\AMD
[2012.06.25 19:17:16 | 000,098,304 | ---- | C] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt.dll
[2012.06.25 18:52:37 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
[2012.06.25 18:52:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
[2012.06.25 18:52:37 | 000,000,000 | ---D | C] -- C:\Users\Robin\Documents\GTA San Andreas User Files
[2012.06.25 18:24:15 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\TuneUp Software
[2012.06.25 18:24:04 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2012.06.25 18:24:00 | 000,000,000 | -HSD | C] -- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2012.06.25 18:24:00 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012.06.25 18:23:14 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\OpenCandy
[2012.06.25 18:21:51 | 000,283,200 | ---- | C] (DT Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2012.06.25 16:03:32 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Local\CRE
[2012.06.25 16:00:18 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\BitTorrent
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
[1 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\*.tmp files -> C:\ProgramData\Microsoft\Windows\Start Menu\Programs\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.07.23 22:19:52 | 000,018,832 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.07.23 22:19:52 | 000,018,832 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.07.23 22:17:38 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Robin\Desktop\OTL.exe
[2012.07.23 22:15:02 | 000,000,000 | ---- | M] () -- C:\Users\Robin\defogger_reenable
[2012.07.23 22:11:31 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
[2012.07.23 22:11:17 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.07.23 22:11:16 | 000,000,266 | ---- | M] () -- C:\Windows\tasks\AutoKMS.job
[2012.07.23 22:10:19 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.07.23 22:10:16 | 420,900,863 | -HS- | M] () -- C:\hiberfil.sys
[2012.07.23 22:03:01 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.07.23 21:36:01 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.07.23 19:12:43 | 000,076,944 | ---- | M] (BitDefender) -- C:\Windows\SysNative\drivers\bdvedisk.sys
[2012.07.23 18:40:48 | 000,000,385 | ---- | M] () -- C:\Windows\SysNative\user_gensett.xml
[2012.07.23 18:40:10 | 000,001,458 | ---- | M] () -- C:\Windows\SysNative\ServiceFilter.ini
[2012.07.23 18:39:52 | 000,002,590 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini
[2012.07.23 18:29:43 | 000,000,397 | ---- | M] () -- C:\Windows\SysNative\checkdnsid.xml
[2012.07.23 18:16:21 | 000,152,917 | ---- | M] () -- C:\ProgramData\1343059155.4100.bin
[2012.07.23 18:16:21 | 000,112,547 | ---- | M] () -- C:\ProgramData\1343059155.5368.bin
[2012.07.23 18:16:21 | 000,103,303 | ---- | M] () -- C:\ProgramData\1343059155.244.bin
[2012.07.23 18:16:21 | 000,031,544 | ---- | M] () -- C:\ProgramData\1343059155.6096.bin
[2012.07.23 18:13:53 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01
[2012.07.23 18:13:53 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr
[2012.07.23 18:13:53 | 000,000,707 | -H-- | M] () -- C:\bdr-cf01
[2012.07.23 18:13:25 | 000,002,247 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Safepay.lnk
[2012.07.23 18:13:25 | 000,002,128 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk
[2012.07.23 18:13:24 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_avchv_01009.Wdf
[2012.07.23 18:12:47 | 000,009,888 | ---- | M] () -- C:\ProgramData\1343059155.1308.bin
[2012.07.23 18:12:35 | 000,001,700 | ---- | M] () -- C:\ProgramData\1343059155.9180.bin
[2012.07.23 18:00:47 | 000,001,089 | ---- | M] () -- C:\ProgramData\1343059155.564.bin
[2012.07.23 18:00:41 | 000,001,090 | ---- | M] () -- C:\ProgramData\1343059155.5388.bin
[2012.07.23 17:59:35 | 000,013,106 | ---- | M] () -- C:\ProgramData\1343059155.5508.bin
[2012.07.23 17:59:35 | 000,007,516 | ---- | M] () -- C:\ProgramData\1343059155.1396.bin
[2012.07.23 17:59:35 | 000,002,266 | ---- | M] () -- C:\ProgramData\1343059155.5852.bin
[2012.07.21 16:49:12 | 000,000,292 | ---- | M] () -- C:\Windows\tasks\DLL-files.com Fixer_UPDATES.job
[2012.07.21 03:16:23 | 000,001,088 | ---- | M] () -- C:\Users\Public\Desktop\World of Warcraft.lnk
[2012.07.18 16:51:51 | 000,000,276 | ---- | M] () -- C:\Windows\tasks\DLL-files.com Fixer_MONTHLY.job
[2012.07.12 14:44:18 | 004,875,800 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.07.03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.06.29 18:53:02 | 000,000,719 | ---- | M] () -- C:\Users\Public\Desktop\FIFA 12.lnk
[2012.06.29 18:25:00 | 000,000,648 | ---- | M] () -- C:\Users\Public\Desktop\Origin.lnk
[2012.06.29 16:54:43 | 000,801,752 | ---- | M] (sqlite.org) -- C:\Windows\SysWow64\mozsqlite3.dll
[2012.06.29 16:54:31 | 000,028,160 | ---- | M] (Netscape Communications Corporation) -- C:\Windows\SysWow64\plc4.dll
[2012.06.29 16:54:18 | 000,163,840 | ---- | M] (Netscape Communications Corporation) -- C:\Windows\SysWow64\nspr4.dll
[2012.06.29 16:47:16 | 000,002,034 | ---- | M] () -- C:\Users\Robin\Desktop\DLL-Files.com FIXER.lnk
[2012.06.29 16:13:36 | 000,026,169 | ---- | M] () -- C:\Users\Robin\Desktop\mozglue.zip
[2012.06.28 17:30:44 | 001,641,654 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.06.28 17:30:44 | 000,708,390 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.06.28 17:30:44 | 000,663,668 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.06.28 17:30:44 | 000,151,994 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.06.28 17:30:44 | 000,124,940 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.06.28 17:28:40 | 000,000,056 | ---- | M] () -- C:\Windows\SysNative\SupportTool.exe.bat
[2012.06.28 17:20:14 | 000,167,696 | ---- | M] (Trend Micro Inc.) -- C:\Windows\SysNative\drivers\tmcomm.sys
[2012.06.28 17:20:14 | 000,105,744 | ---- | M] (Trend Micro Inc.) -- C:\Windows\SysNative\drivers\tmtdi.sys
[2012.06.28 17:20:14 | 000,091,920 | ---- | M] (Trend Micro Inc.) -- C:\Windows\SysNative\drivers\tmactmon.sys
[2012.06.28 17:20:14 | 000,070,928 | ---- | M] (Trend Micro Inc.) -- C:\Windows\SysNative\drivers\tmevtmgr.sys
[2012.06.28 17:00:17 | 000,887,611 | ---- | M] () -- C:\Users\Robin\AppData\Local\census.cache
[2012.06.28 16:59:18 | 000,110,255 | ---- | M] () -- C:\Users\Robin\AppData\Local\ars.cache
[2012.06.27 18:29:47 | 000,000,879 | ---- | M] () -- C:\Users\Robin\Desktop\Manager12 - Verknüpfung.lnk
[2012.06.27 13:35:23 | 088,972,952 | ---- | M] (Trend Micro Inc.) -- C:\Users\Public\Desktop\Trend_Micro.exe
[2012.06.26 04:21:29 | 000,002,021 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2012.06.25 22:55:35 | 000,000,824 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012.06.25 21:31:16 | 000,551,404 | ---- | M] () -- C:\Users\Robin\Documents\cc_20120625_213036.reg
[2012.06.25 19:17:16 | 000,098,304 | ---- | M] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt.dll
[2012.06.25 18:21:51 | 000,283,200 | ---- | M] (DT Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2012.06.25 16:03:34 | 000,073,728 | ---- | M] () -- C:\Users\Robin\AppData\Roaming\chrtmp
[2012.06.24 23:50:09 | 000,038,164 | ---- | M] () -- C:\Users\Robin\Documents\1340522156384.jpg
[2012.06.24 19:44:16 | 000,250,676 | ---- | M] () -- C:\Users\Robin\Documents\WoWScrnShot_062412_194209.jpg
[2012.06.24 00:47:23 | 000,220,147 | ---- | M] () -- C:\Users\Robin\Documents\WoWScrnShot_062412_004614.jpg
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.07.23 22:15:02 | 000,000,000 | ---- | C] () -- C:\Users\Robin\defogger_reenable
[2012.07.23 18:40:48 | 000,000,385 | ---- | C] () -- C:\Windows\SysNative\user_gensett.xml
[2012.07.23 18:28:21 | 000,000,397 | ---- | C] () -- C:\Windows\SysNative\checkdnsid.xml
[2012.07.23 18:13:53 | 000,000,707 | -H-- | C] () -- C:\bdr-cf01
[2012.07.23 18:13:25 | 000,002,247 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Safepay.lnk
[2012.07.23 18:13:25 | 000,002,128 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk
[2012.07.23 18:13:24 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_avchv_01009.Wdf
[2012.07.23 18:12:35 | 002,510,608 | -H-- | C] () -- C:\bdr-bz01
[2012.07.23 18:12:35 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr
[2012.07.23 18:12:34 | 037,065,073 | -H-- | C] () -- C:\bdr-im01.gz
[2012.07.23 18:12:34 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01
[2012.07.23 18:12:34 | 000,001,700 | ---- | C] () -- C:\ProgramData\1343059155.9180.bin
[2012.07.23 17:59:28 | 000,152,917 | ---- | C] () -- C:\ProgramData\1343059155.4100.bin
[2012.07.23 17:59:28 | 000,007,516 | ---- | C] () -- C:\ProgramData\1343059155.1396.bin
[2012.07.23 17:59:27 | 000,013,106 | ---- | C] () -- C:\ProgramData\1343059155.5508.bin
[2012.07.23 17:59:27 | 000,009,888 | ---- | C] () -- C:\ProgramData\1343059155.1308.bin
[2012.07.23 17:59:27 | 000,002,266 | ---- | C] () -- C:\ProgramData\1343059155.5852.bin
[2012.07.23 17:59:27 | 000,001,090 | ---- | C] () -- C:\ProgramData\1343059155.5388.bin
[2012.07.23 17:59:27 | 000,001,089 | ---- | C] () -- C:\ProgramData\1343059155.564.bin
[2012.07.23 17:59:18 | 000,112,547 | ---- | C] () -- C:\ProgramData\1343059155.5368.bin
[2012.07.23 17:59:17 | 000,031,544 | ---- | C] () -- C:\ProgramData\1343059155.6096.bin
[2012.07.23 17:59:15 | 000,103,303 | ---- | C] () -- C:\ProgramData\1343059155.244.bin
[2012.06.29 18:53:02 | 000,000,719 | ---- | C] () -- C:\Users\Public\Desktop\FIFA 12.lnk
[2012.06.29 18:25:00 | 000,000,648 | ---- | C] () -- C:\Users\Public\Desktop\Origin.lnk
[2012.06.29 16:47:28 | 000,000,292 | ---- | C] () -- C:\Windows\tasks\DLL-files.com Fixer_UPDATES.job
[2012.06.29 16:47:28 | 000,000,276 | ---- | C] () -- C:\Windows\tasks\DLL-files.com Fixer_MONTHLY.job
[2012.06.29 16:47:16 | 000,002,034 | ---- | C] () -- C:\Users\Robin\Desktop\DLL-Files.com FIXER.lnk
[2012.06.29 16:13:34 | 000,026,169 | ---- | C] () -- C:\Users\Robin\Desktop\mozglue.zip
[2012.06.29 15:54:11 | 000,073,728 | ---- | C] () -- C:\Users\Robin\AppData\Roaming\chrtmp
[2012.06.28 17:00:17 | 000,887,611 | ---- | C] () -- C:\Users\Robin\AppData\Local\census.cache
[2012.06.28 16:59:18 | 000,110,255 | ---- | C] () -- C:\Users\Robin\AppData\Local\ars.cache
[2012.06.27 18:29:47 | 000,000,879 | ---- | C] () -- C:\Users\Robin\Desktop\Manager12 - Verknüpfung.lnk
[2012.06.26 04:21:29 | 000,002,021 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2012.06.26 04:21:28 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2012.06.25 23:25:08 | 000,000,056 | ---- | C] () -- C:\Windows\SysNative\SupportTool.exe.bat
[2012.06.25 22:55:35 | 000,000,824 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012.06.25 22:30:24 | 000,916,704 | ---- | C] () -- C:\Windows\SysWow64\atiumdva.cap
[2012.06.25 22:30:24 | 000,916,704 | ---- | C] () -- C:\Windows\SysNative\atiumd6a.cap
[2012.06.25 22:30:24 | 000,003,949 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2012.06.25 22:30:24 | 000,003,949 | ---- | C] () -- C:\Windows\SysNative\atipblag.dat
[2012.06.25 22:30:23 | 000,233,012 | ---- | C] () -- C:\Windows\SysNative\atiicdxx.dat
[2012.06.25 22:30:23 | 000,030,831 | ---- | C] () -- C:\Windows\atiogl.xml
[2012.06.25 22:30:22 | 000,150,464 | ---- | C] () -- C:\Windows\SysNative\atiapfxx.blb
[2012.06.25 21:30:39 | 000,551,404 | ---- | C] () -- C:\Users\Robin\Documents\cc_20120625_213036.reg
[2012.06.24 23:50:01 | 000,038,164 | ---- | C] () -- C:\Users\Robin\Documents\1340522156384.jpg
[2012.06.24 19:43:20 | 000,250,676 | ---- | C] () -- C:\Users\Robin\Documents\WoWScrnShot_062412_194209.jpg
[2012.06.24 00:47:07 | 000,220,147 | ---- | C] () -- C:\Users\Robin\Documents\WoWScrnShot_062412_004614.jpg
[2012.06.11 21:07:33 | 000,126,355 | ---- | C] () -- C:\Users\Robin\DSC01279.JPG
[2012.06.11 21:07:33 | 000,124,557 | ---- | C] () -- C:\Users\Robin\DSC01269.JPG
[2012.06.11 21:07:33 | 000,119,286 | ---- | C] () -- C:\Users\Robin\DSC01268.JPG
[2012.06.11 21:07:33 | 000,116,572 | ---- | C] () -- C:\Users\Robin\DSC01270.JPG
[2012.06.11 21:07:33 | 000,111,558 | ---- | C] () -- C:\Users\Robin\DSC01272.JPG
[2012.06.11 21:07:33 | 000,110,088 | ---- | C] () -- C:\Users\Robin\DSC01274.JPG
[2012.06.11 21:07:33 | 000,107,481 | ---- | C] () -- C:\Users\Robin\DSC01284.JPG
[2012.06.11 21:07:33 | 000,104,327 | ---- | C] () -- C:\Users\Robin\DSC01275.JPG
[2012.06.11 21:07:33 | 000,098,192 | ---- | C] () -- C:\Users\Robin\DSC01276.JPG
[2012.06.11 21:07:33 | 000,093,271 | ---- | C] () -- C:\Users\Robin\DSC01280.JPG
[2012.06.11 21:07:33 | 000,090,218 | ---- | C] () -- C:\Users\Robin\DSC01281.JPG
[2012.06.11 21:07:33 | 000,089,676 | ---- | C] () -- C:\Users\Robin\DSC01273.JPG
[2012.06.11 21:07:33 | 000,087,151 | ---- | C] () -- C:\Users\Robin\DSC01271.JPG
[2012.05.30 18:27:04 | 000,260,411 | ---- | C] () -- C:\Users\Robin\WoWScrnShot_051212_171144.jpg
[2012.05.30 18:27:04 | 000,260,335 | ---- | C] () -- C:\Users\Robin\WoWScrnShot_051212_171204.jpg
[2012.04.22 20:14:07 | 002,867,196 | ---- | C] () -- C:\Users\Robin\DSCI1215.JPG
[2012.04.22 20:14:07 | 002,181,830 | ---- | C] () -- C:\Users\Robin\DSCI1213.JPG
[2012.04.22 20:14:07 | 001,613,078 | ---- | C] () -- C:\Users\Robin\DSCI1211.JPG
[2012.03.09 23:20:01 | 000,000,000 | ---- | C] () -- C:\Windows\War3Unin.dat
[2012.01.31 00:17:24 | 001,641,654 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.12.05 22:21:12 | 000,085,594 | ---- | C] () -- C:\Users\Robin\priest.jpg
[2011.12.05 22:21:12 | 000,033,644 | ---- | C] () -- C:\Users\Robin\priest2.jpg
[2011.11.21 17:23:16 | 001,232,684 | ---- | C] () -- C:\Users\Robin\kiddy flame.wav
[2011.11.13 00:16:08 | 039,578,924 | ---- | C] () -- C:\Users\Robin\Charâ.wav
[2011.11.01 18:01:14 | 000,283,304 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.11.01 18:01:06 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011.10.19 22:54:54 | 102,650,924 | ---- | C] () -- C:\Users\Robin\ts3_recording_11_10_19_22_54_50.wav
[2011.10.18 00:25:02 | 000,546,805 | ---- | C] () -- C:\Users\Robin\P290509_23.54_[02].jpg
[2011.10.18 00:25:02 | 000,407,586 | ---- | C] () -- C:\Users\Robin\P290509_23.55_[01].jpg
[2011.10.18 00:25:02 | 000,395,690 | ---- | C] () -- C:\Users\Robin\P290509_23.53_[04].jpg
[2011.10.18 00:25:02 | 000,366,764 | ---- | C] () -- C:\Users\Robin\P290509_23.53_[03].jpg
[2011.10.18 00:25:02 | 000,366,626 | ---- | C] () -- C:\Users\Robin\P290509_23.54_[01].jpg
[2011.10.18 00:25:02 | 000,339,425 | ---- | C] () -- C:\Users\Robin\P130509_18.02_[01].jpg
[2011.10.18 00:25:02 | 000,286,301 | ---- | C] () -- C:\Users\Robin\P130509_18.03_[01].jpg
[2011.10.02 12:01:19 | 000,000,000 | ---- | C] () -- C:\Users\Robin\AppData\Local\{59B442DA-BD86-48CD-A19B-E8908CAD0D76}
[2011.07.13 15:12:37 | 000,168,864 | ---- | C] () -- C:\Program Files\Common Files\WireHelpSvc.exe
[2011.06.02 08:46:06 | 000,000,000 | ---- | C] () -- C:\Users\Robin\AppData\Local\{9BFB3900-4D30-435F-895B-D844F8AF953F}
[2011.06.01 06:59:41 | 000,000,000 | ---- | C] () -- C:\Users\Robin\AppData\Local\{4937A56C-C8D2-409D-9CE4-E02DA48CB569}
[2011.06.01 06:30:22 | 000,192,022 | ---- | C] () -- C:\Users\Robin\CD-Key.JPG
[2011.05.19 09:24:32 | 000,000,000 | ---- | C] () -- C:\Users\Robin\AppData\Local\{F7816221-3EA1-4A5D-8770-72EBD4350DF4}
[2011.04.26 21:58:27 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2011.03.09 22:59:14 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll
[2011.02.24 00:39:29 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011.02.24 00:13:59 | 000,131,472 | ---- | C] () -- C:\ProgramData\FullRemove.exe
[2005.04.08 04:16:43 | 000,113,331 | -H-- | C] () -- C:\Users\Robin\AppData\Roaming\Robinlog.dat
 
========== LOP Check ==========
 
[2012.06.23 14:31:43 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\.minecraft
[2012.01.21 22:57:20 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\Armagetron
[2012.06.25 20:43:51 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\Asus WebStorage
[2012.07.23 18:12:44 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\Bitdefender
[2012.07.09 03:39:43 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\BitTorrent
[2011.09.18 11:01:38 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\Canneverbe Limited
[2011.07.20 12:34:46 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2012.06.29 15:34:32 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\DAEMON Tools Lite
[2012.06.29 16:47:23 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\dll-files.com
[2011.08.08 19:49:40 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\DVDVideoSoft
[2011.08.08 19:49:14 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\DVDVideoSoftIEHelpers
[2011.06.01 16:03:22 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\go
[2012.05.20 20:24:01 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\HLSW
[2012.03.12 00:43:51 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\ICQ
[2011.08.08 19:34:21 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\Jens Lorek
[2012.03.10 01:39:22 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\LolClient
[2011.05.03 11:09:49 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\Nuance
[2012.06.25 18:23:17 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\OpenCandy
[2012.01.15 22:19:02 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\OpenOffice.org
[2011.11.01 17:09:07 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\Origin
[2012.04.03 18:57:53 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\Pro Cycling Manager 2008
[2011.07.19 15:33:15 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\Publish Providers
[2012.07.23 18:47:49 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\QuickScan
[2012.06.25 20:35:09 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\SoftGrid Client
[2011.07.19 16:07:23 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\Sony
[2012.01.15 01:27:56 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\SplitMediaLabs
[2012.07.23 22:18:14 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\Spotify
[2012.07.08 02:19:42 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\TeamViewer
[2012.01.31 00:17:54 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\TP
[2012.07.21 06:50:52 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\TS3Client
[2011.07.19 15:34:20 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\TubeBox
[2012.06.25 18:24:15 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\TuneUp Software
[2012.06.29 15:48:12 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\Tunngle
[2011.04.30 13:17:06 | 000,000,000 | ---D | M] -- C:\Users\Robin\AppData\Roaming\Zeon
[2012.07.23 22:11:16 | 000,000,266 | ---- | M] () -- C:\Windows\Tasks\AutoKMS.job
[2012.07.18 16:51:51 | 000,000,276 | ---- | M] () -- C:\Windows\Tasks\DLL-files.com Fixer_MONTHLY.job
[2012.07.21 16:49:12 | 000,000,292 | ---- | M] () -- C:\Windows\Tasks\DLL-files.com Fixer_UPDATES.job
[2012.05.01 12:11:58 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 

< End of report >
         

und dann noch Malwarebytes Anti-Malware logs:

 Malwarebytes Anti-Malware  (Test) 1.62.0.1300
www.malwarebytes.org

Datenbank Version: v2012.07.23.09

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Robin :: ROBIN-PC [Administrator]

Schutz: Aktiviert

23.07.2012 19:01:04
mbam-log-2012-07-23 (19-01-04).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|F:\|G:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 457749
Laufzeit: 2 Stunde(n), 3 Minute(n), 10 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 2
C:\Users\Robin\Desktop\unwichtig\Keygen.exe (RiskWare.Tool.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Robin\Desktop\unwichtig\SonyVegasPro Patch.exe (RiskWare.Tool.HCK) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

hoffe könnt mir helfen

C:\Users\Robin\Desktop\unwichtig\Keygen.exe (RiskWare.Tool.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Robin\Desktop\unwichtig\SonyVegasPro Patch.exe (RiskWare.Tool.HCK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
         

Siehe auch => http://www.trojaner-board.de/95393-c...-software.html

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support ohne jegliche Diskussion beenden.

Cracks/Keygens sind zu 99,9% gefährliche Schädlinge, mit denen man nicht spaßen sollte. Ausserdem sind diese illegal und wir unterstützen die Verwendung von geklauter Software nicht. Somit beschränkt sich der Support auf Anleitung zur kompletten Neuinstallation!!

Dass illegale Cracks und Keygens im Wesentlichen dazu dienen, Malware zu verbreiten ist kein Geheimnis und muss jedem klar sein!


In Zukunft Finger weg von: Softonic, Registry-Bereinigern und illegalem Zeugs Cracks/Keygens/Serials